pourriez vous verifier mon pcRésolu/Fermé

Question

Bonjour, 
pourriez vous me dire ce que je dois faire pour que vous puissiez verifier mon pc 
je crois avoir quelques saletes car j'ai netoyer mon disque dur mais ce n'est pas terrible 
d'avance merci 


Configuration: Windows XP / Internet Explorer 7.0

gen-hackman · Answer

salut tu devrais mettre ton windows à jour pour commencer

latchatchapaty · Answer

et je fais comment merci

latchatchapaty · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:05:23, on 13/04/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17055)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\Fichiers communs\Symantec Shared\DJSNETCN.exe
C:\WINDOWS\system32\FsUsbExService.Exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\msrle3232.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus
avapsvc.exe
C:\WINDOWS\system32
etui032.exe
C:\WINDOWS\system32\A.tmp
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\printhook.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Belgacom\bin\sprtsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\faultrepwow.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Belgacom\bin\sprtcmd.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\kbd101wow.exe
C:\WINDOWSegwizcwow.exe
C:\WINDOWS\faultrepwow.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ArcCon.ac
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://skynet.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Messenger Plus Live Belgium Toolbar - {d1a1c8f1-e3d9-48df-802f-20201061ef61} - C:\Program Files\Messenger_Plus_Live_Belgium\prxtbMes0.dll
R3 - URLSearchHook: (no name) - {05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} - (no file)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
O2 - BHO: (no name) - {00A4AEE3-781E-4B18-80F1-7C0C62B16235} - C:\WINDOWS\system32\atl32.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Norton Internet Security - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll
O2 - BHO: Messenger Plus Live Belgium - {d1a1c8f1-e3d9-48df-802f-20201061ef61} - C:\Program Files\Messenger_Plus_Live_Belgium\prxtbMes0.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Messenger Plus Live Belgium Toolbar - {d1a1c8f1-e3d9-48df-802f-20201061ef61} - C:\Program Files\Messenger_Plus_Live_Belgium\prxtbMes0.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
O3 - Toolbar: (no name) - {05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} - (no file)
O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Belgacom] "C:\Program Files\Belgacom\bin\sprtcmd.exe" /P Belgacom
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [BabylonToolbar] "C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe" /md I
O4 - HKLM\..\Run: [kbd101wow.exe] C:\WINDOWS\kbd101wow.exe
O4 - HKLM\..\Run: [regwizcwow.exe] C:\WINDOWSegwizcwow.exe
O4 - HKLM\..\Run: [faultrepwow.exe] C:\WINDOWS\faultrepwow.exe
O4 - HKLM\..\RunServices: [DJSNetCN] C:\Program Files\Fichiers communs\Symantec Shared\DJSNETCN.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza\RazaWebHook32.dll/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net/...
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/...
O16 - DPF: {32C3FEAE-0877-4767-8C20-62A5829A0945} (FBootloaderAX) - http://static.ak.facebook.com/fbplugin/win32/axfbootloader.cab?1271605607984
O16 - DPF: {34DC6011-88B5-4EA9-BA7A-DC7B4F4437FE} (JordanUploader Class) - http://ips.poi.de/ips-opdata/layout/fnac/objects/jordan.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.casimages.com/iu/ImageUploader5.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scanner/sources/fr/scan8/oscan8.cab
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www.virustraq.com/img/scan_virus/webscan.cab
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://cid-dcf989d2c078dc99.spaces.live.com/PhotoUpload/MsnPUpld.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx2.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab
O20 - AppInit_DLLs: C:\WINDOWS\system32\msidntld32.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Norton Internet Security\comHost.exe
O23 - Service: Symantec Licensing Detect Internet Connection (DJSNETCN) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\DJSNETCN.exe
O23 - Service: FsUsbExService - Teruten - C:\WINDOWS\system32\FsUsbExService.Exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Affichage des messages  (Messenger32) - Unknown owner - C:\WINDOWS\system32\msrle3232.exe
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus
avapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Sony Ericsson OMSI download service (OMSI download service) - Unknown owner - C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SupportSoft Sprocket Service (belgacom) (sprtsvc_belgacom) - SupportSoft, Inc. - C:\Program Files\Belgacom\bin\sprtsvc.exe
O23 - Service: SupportSoft RemoteAssist - SupportSoft, Inc. - C:\Program Files\Fichiers communs\Supportsoft\bin\ssrc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

gen-hackman · Answer

desinstalle spybot il est pourri
desinstalle tout ce qui contient le mot "toolbar"

fais :

demarrer/executer/tous les programmes/windows update et prends et installe tout ce qu'ils te donneront

ensuite tu as l'air infecté par le trojan tracur , verifions :

Télécharge ici :OTL

&#9654 enregistre le sur ton Bureau.

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...." 

sur OTL.exe pour le lancer.

&#9654 => Configuration

&#9654Clic sur Analyse.

A la fin du scan, le Bloc-Notes va s'ouvrir avec le rapport (OTL.txt).

Ce fichier est sur ton Bureau (en général C:\Documents and settings\le_nom_de_ta_session\OTL.txt)

&#9654&#9654&#9654 NE LE POSTE PAS SUR LE FORUM (il est trop long)

Pour me le transmettre clique sur ce lien : http://www.cijoint.fr/

&#9654 Clique sur Parcourir et cherche le fichier ci-dessus.

&#9654 Clique sur Ouvrir.

&#9654 Clique sur "Cliquez ici pour déposer le fichier".

juste au niveau du bouton , en fin de chargement du fichier , Un lien de cette forme apparaitra :

http://www.cijoint.fr/cjlink.php?file=cjge368/cijSKAP5fU.txt

&#9654 Copie ce lien dans ta réponse.

&#9654&#9654 Tu feras la meme chose avec le "Extra.txt" qui logiquement sera aussi sur ton bureau.

latchatchapaty · Answer

en ce qui concerne le spybot je l'avais deja retire mais il reste dedans car aux icones cachees il y est et je ne sais pas comment le retire 


pour le toolbar il y en a 1 utorrentbar-fr toolbar dans ajout et supprimer les programmes et je n'arrive pas a l'enlever il me dit pas de fichier trouvé

http://www.cijoint.fr/cjlink.php?file=cj201104/cijPoJXWpO.txt

http://www.cijoint.fr/cjlink.php?file=cj201104/cijLAt0fK6.txt

voila j'espere avoir bien fait

gen-hackman · Answer

desactive tes protections puis enregistre ceci sur ton bureau

Pre_Scan

si l'outil detecte un proxy et que tu n'en as pas installé clique sur "supprimer le proxy"

une fois telechargé lance-le , laisse faire le scan puis colle le contenu de " rapport.txt" qui apparaitra à son terme , sur le bureau.

si l'outil semble ne pas avoir fonctionné clique plusieurs fois très rapidement dessus

latchatchapaty · Answer

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Pre_Scan 1.0.0.28 ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

               ¤ XP | Vista | Seven - 32/64 ¤

Mis à jour le 13/04/2011 | 12.40 par g3n-h@ckm@n
Utilisateur : latchatchapaty (Administrateurs)
Ordinateur : LAFAMILLE

Système d'exploitation : Microsoft Windows XP (32 bits)
Architecture OS : X86
Internet Explorer : 7.0.5730.13
Mozilla Firefox : 

Scan : 20:57:27 | 13/04/2011

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

[HKLM\..\..\Winlogon] | Shell -> Aucune modification : Explorer.exe -> Explorer.exe
[HKLM\..\..\Winlogon] | AutoRestartShell -> Modification apportée : 0 -> 1
[HKLM\..\..\Winlogon] | userinit -> Modification apportée : C:\WINDOWS\system32\userinit.exe -> C:\WINDOWS\system32\userinit.exe,
[HKLM\..\..\Winlogon] | PowerDownAfterShutdown -> Modification apportée : 0 -> 1

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Associations ¤¤¤¤¤¤¤¤¤¤¤¤¤¤

[.exe] : exefile
[exefile | command] : "%1" %*
[.com] : comfile
[comfile | command] : "%1" %*
[.scr] : scrfile
[scrfile | command] : "%1" /S
[.bat] : batfile
[batfile | command] : "%1" %*
[.cmd] : cmdfile
[cmdfile | command] : "%1" %*
[.pif] : piffile
[piffile | command] : "%1" %*

¤

[IE | Command] | @ -> Modification apportée : C:\Program Files\Internet Explorer\iexplore.exe -> "C:\Program Files\Internet Explorer\iexplore.exe"
[Applications | IE | Command] | @ -> Aucune modification : "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 -> "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1

¤

[NoChangingWallPaper] | @ -> Aucune modification : 0 -> 0

¤


¤¤¤¤¤¤¤¤¤¤ Services ¤¤¤¤¤¤¤¤¤¤

[Ndisuio] | Start -> Aucune modification : 3 -> 3
[lmhosts] | Start -> Aucune modification : 2 -> 2 : Service Actif
[LanmanWorkstation] | Start -> Aucune modification : 2 -> 2 : Service Actif
[LanmanServer] | Start -> Aucune modification : 2 -> 2 : Service Actif
[ERSvc] | Start -> Aucune modification : 2 -> 2 : Service Actif
[Bits] | Start -> Aucune modification : 2 -> 2 : Service Actif
[CryptSvc] | Start -> Aucune modification : 2 -> 2 : Service Actif
[EapHost] | Start -> Modification apportée : 3 -> 2 : Service Redemarré
[SharedAccess] | Start -> Aucune modification : 2 -> 2 : Service Actif
[wuauserv] | Start -> Aucune modification : 2 -> 2 : Service Actif
[wscsvc] | Start -> Aucune modification : 2 -> 2 : Service Actif
[wzcsvc] | Start -> Aucune modification : 2 -> 2 : Service Actif

¤¤¤¤¤¤¤¤¤¤ Internet Explorer ¤¤¤¤¤¤¤¤¤¤

[HKCU | Main] | Start Page -> Modification apportée : https://www.proximus.be/pickx -> https://www.proximus.be/pickx
[HKCU | Main] | Local Page -> Modification apportée :  -> C:\WINDOWS\system32\blank.htm
[HKCU | Main] | Search Page -> Modification apportée :  -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

[HKLM | Main] | Start Page -> Modification apportée : http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home -> http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
[HKLM | Main] | Local Page -> Modification apportée : %SystemRoot%\system32\blank.htm -> C:\WINDOWS\system32\blank.htm
[HKLM | Main] | Default_Search_URL -> Modification apportée : http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
[HKLM | Main] | Default_Page_URL -> Modification apportée : https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF -> https://www.msn.com/fr-fr/?ocid=iehp
[HKLM | Main] | Search Page -> Modification apportée : http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processus ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

C:\WINDOWS\explorer.exe -> Processus stoppé 
C:\WINDOWS\faultrepwow.exe -> Processus stoppé 
C:\WINDOWS\kbd101wow.exe -> Processus stoppé 
C:\WINDOWS\regwizcwow.exe -> Processus stoppé 
\WINDOWS\faultrepwow.exe -> Processus stoppé 

¤¤¤¤¤¤¤¤¤¤ Clés supprimées et Fichier mis en quarantaine ¤¤¤¤¤¤¤¤¤¤

Clé supprimée : [HKLM\..\..\Run] | faultrepwow.exe -> C:\WINDOWS\faultrepwow.exe
Mis en quarantaine : C:\WINDOWS\faultrepwow.exe
Clé supprimée : [HKLM\..\..\Run] | kbd101wow.exe -> C:\WINDOWS\kbd101wow.exe
Mis en quarantaine : C:\WINDOWS\kbd101wow.exe
Clé supprimée : [HKLM\..\..\Run] | regwizcwow.exe -> C:\WINDOWS\regwizcwow.exe
Mis en quarantaine : C:\WINDOWS\regwizcwow.exe

¤¤¤¤¤¤¤¤¤¤ IFEO ¤¤¤¤¤¤¤¤¤¤


¤¤¤¤¤¤¤¤¤¤ Mountpoints2 ¤¤¤¤¤¤¤¤¤¤

Supprimé : [HKCU\..\..\Mountpoints2\E] -> command : E:\LaunchU3.exe -a
Supprimé : [HKCU\..\..\Mountpoints2\{f74c3612-525f-11de-9025-00138f19d007}] -> command : explorer.exe .


¤¤¤¤¤¤¤¤¤¤ MBR ¤¤¤¤¤¤¤¤¤¤

MBRCheck, version 1.2.3

(c) 2010, AD



Command-line:			-za C:\MBR\MBR.bin 

Windows Version:		Windows XP Home Edition

Windows Information:		Service Pack 3 (build 2600)

Logical Drives Mask:		0x0000000d



Analysis of file "C:\MBR\MBR.bin":

Windows XP MBR code detected





Done!
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

Fin : 20:58:24

¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤

gen-hackman · Answer

bien


&#9654 Télécharge ici : Ad-remover sur ton bureau : 


&#9654 Déconnecte toi et ferme toutes applications en cours ! 

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...." 

&#9654 sur "Ad-R.exe" pour lancer l'installation et laisse les paramètres d'installation par défaut . 

&#9654 clique le raccourci Ad-remover qui est sur ton bureau pour lancer l'outil .
 
&#9654 Au menu principal choisis "option Nettoyer" et tape sur [entrée] .

&#9654 Laisse travailler l'outil et ne touche à rien ... 

&#9654 Poste le rapport qui apparait à la fin , sur le forum ...

( Le rapport est sauvegardé aussi sous C:\Ad-report.log ) 
( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

latchatchapaty · Answer

======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Lancé à 21:19:01 le 13/04/2011, Mode normal

Microsoft Windows XP Édition familiale Service Pack 3 (X86) 
latchatchapaty@LAFAMILLE ( ) 
 
============== RECHERCHE ==============



Clé trouvée: HKLM\Software\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Clé trouvée: HKLM\Software\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8}
Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}


============== SCAN ADDITIONNEL ==============

-- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\FireFox\Profiles\yl5km6iz.default --
Extensions\ffxtlbr@babylon.com (Babylon)
Extensions\staged-xpis (?)
Extensions\{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} (uTorrentBar_FR Community Toolbar)
Extensions\{28bfdd4b-7045-4520-b01a-651e0aee5ac8} (XUL Cache)
Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} (?)
Extensions\{997b6590-90b7-4757-99cc-613caff5fa7d} (XUL Cache)
Extensions\{b36fa08a-43e3-4c14-9cf3-cbca82c6d2f7} (XUL Cache)
Extensions\{c490dc17-6b81-4e9f-956e-476885c1b158} (XUL Cache)
Extensions\{de14998f-0a60-4467-bfe8-fde74bdbd3b5} (XUL Cache)
Searchplugins\LiveSearch.xml (    hxxp://search.live.com/results.aspx)
Prefs.js - browser.search.defaultenginename, Google
Prefs.js - browser.search.defaulturl, hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
Prefs.js - browser.startup.homepage_override.mstone, rv:1.8.1
Prefs.js - keyword.URL, hxxp://search.live.com/results.aspx?mkt=be-FR&FORM=MICJV1&q=
Prefs.js - browser.startup.homepage, hxxp://www.plusnetwork.com
Prefs.js - keyword.URL, hxxp://search.live.com/results.aspx?mkt=be-FR&FORM=MICJV1&q=

-- C:\Documents and Settings\client\Application Data\Mozilla\FireFox\Profiles\vzdm94av.default --
Extensions\{28bfdd4b-7045-4520-b01a-651e0aee5ac8} (XUL Cache)
Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} (Google Toolbar for Firefox)
Extensions\{997b6590-90b7-4757-99cc-613caff5fa7d} (XUL Cache)
Extensions\{b36fa08a-43e3-4c14-9cf3-cbca82c6d2f7} (XUL Cache)
Extensions\{c490dc17-6b81-4e9f-956e-476885c1b158} (XUL Cache)
Extensions\{de14998f-0a60-4467-bfe8-fde74bdbd3b5} (XUL Cache)
Prefs.js - browser.search.defaultenginename, Google
Prefs.js - browser.search.defaulturl, hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
Prefs.js - browser.search.selectedEngine, Google
Prefs.js - browser.startup.homepage, hxxp://en-us.start.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:fr:official
Prefs.js - browser.startup.homepage_override.mstone, rv:1.8.1

========================================

**** Internet Explorer Version [7.0.5730.13] ****

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Start Page - hxxp://skynet.be/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157
HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Start Page - hxxp://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
HKCU_URLSearchHooks|{d1a1c8f1-e3d9-48df-802f-20201061ef61} - "Messenger Plus Live Belgium Toolbar" (C:\Program Files\Messenger_Plus_Live_Belgium\prxtbMes0.dll)
HKCU_URLSearchHooks|{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} (x)
HKCU_Toolbar\ShellBrowser|{BC4FFE41-DE9F-46FA-B455-AAD49B9F9938} (x)
HKCU_Toolbar\ShellBrowser|{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} (x)
HKCU_Toolbar\WebBrowser|{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} (C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll)
HKCU_Toolbar\WebBrowser|{C4069E3A-68F1-403E-B40E-20066696354B} (C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll)
HKCU_Toolbar\WebBrowser|{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} (x)
HKCU_Toolbar\WebBrowser|{196C3A46-4758-433D-A600-802C804AF39C} (x)
HKCU_Toolbar\WebBrowser|{D1A1C8F1-E3D9-48DF-802F-20201061EF61} (C:\Program Files\Messenger_Plus_Live_Belgium\prxtbMes0.dll)
HKCU_Toolbar\WebBrowser|{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E} (x)
HKCU_Toolbar\WebBrowser|{BC4FFE41-DE9F-46FA-B455-AAD49B9F9938} (x)
HKLM_Toolbar|{0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} (C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll)
HKLM_Toolbar|{C4069E3A-68F1-403E-B40E-20066696354B} (C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll)
HKLM_Toolbar|{d1a1c8f1-e3d9-48df-802f-20201061ef61} (C:\Program Files\Messenger_Plus_Live_Belgium\prxtbMes0.dll)
HKLM_Toolbar|{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} (x)
HKLM_Toolbar|{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} (x)
HKLM_Toolbar|{98889811-442D-49dd-99D7-DC866BE87DBC} (C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll)
HKLM_ElevationPolicy\${ELV_GUID} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe (Babylon Ltd.)
HKLM_ElevationPolicy\{2ed6129f-f1b6-4708-a0fa-863836515ada} - C:\Program Files\Fichiers communs\Supportsoft\bin\sprthelper.exe (SupportSoft, Inc.)
HKLM_ElevationPolicy\{44295CB8-D71B-11DA-8750-001185653D78} - c:\program files\google\googletoolbar3user.exe (x)
HKLM_ElevationPolicy\{447E51BA-F48B-42C4-B703-444C60CC4887} - C:\Program Files\uTorrentBar_FR\uTorrentBar_FRToolbarHelper.exe (?)
HKLM_ElevationPolicy\{7B560075-5063-4212-BD2A-F1449D865B73} - C:\Documents and Settings\latchatchapaty\Local Settings\Application Data\Conduit\CT2535304\Messenger_Plus_Live_BelgiumAutoUpdaterHelper.exe (x)
HKLM_ElevationPolicy\{8789CF97-CBE7-44DB-AF40-EA7458C8640D} - C:\Program Files\Messenger_Plus_Live_Belgium\Messenger_Plus_Live_BelgiumToolbarHelper1.exe (?)
HKLM_ElevationPolicy\{A2D14993-7315-4f91-AD76-20605495ED6C} - C:\Program Files\ESTsoft\ALUpdate\ALUpExt.exe (x)
HKLM_ElevationPolicy\{C8FE2181-CAE7-49EE-9B04-DB7EB4DA544A} - C:\Program Files\Java\jre1.6.0_07\bin\ssvagent.exe (x)
HKLM_ElevationPolicy\{E6D65E6A-6CD0-40CF-9066-3C0C4C6484E0} - C:\Program Files\Belgacom\agent\bin\bcont_nm.exe (SupportSoft, Inc.)
HKLM_ElevationPolicy\{F2632B95-A2AD-4283-B49A-34D4802BA647} - C:\Program Files\ESTsoft\ALUpdate\ALUpdate.exe (x)
HKLM_ElevationPolicy\{FAF199D2-BFA7-4394-A4DE-044A08E59B32} - C:\WINDOWS\system32\Macromed\Flash\FlashUtil9b.exe (x)
HKLM_Extensions\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - "?" (?)
HKLM_Extensions\{85d1f590-48f4-11d9-9669-0800200c9a66} - "?" (?)
HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?)
BHO\{00A4AEE3-781E-4B18-80F1-7C0C62B16235} - "?" (C:\WINDOWS\system32\atl32.dll)
BHO\{2EECD738-5844-4a99-B4B6-146BF802613B} - "CescrtHlpr Object" (C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll)
BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?)
BHO\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - "Search Helper" (C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll)
BHO\{9ECB9560-04F9-4bbc-943D-298DDF1699E1} - "CNisExtBho Class" (C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll)
BHO\{A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - "CNavExtBho Class" (C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll)
BHO\{d1a1c8f1-e3d9-48df-802f-20201061ef61} - "Messenger Plus Live Belgium Toolbar" (C:\Program Files\Messenger_Plus_Live_Belgium\prxtbMes0.dll)

========================================

C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 0 Fichier(s)

C:\Ad-Report-SCAN[1].txt - 13/04/2011 21:19:32 (5479 Octet(s)) 

Fin à: 21:20:37, 13/04/2011 
 
============== E.O.F ============== 

est ce bien cela

latchatchapaty · Answer

======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Lancé à 21:19:01 le 13/04/2011, Mode normal

Microsoft Windows XP Édition familiale Service Pack 3 (X86) 
latchatchapaty@LAFAMILLE ( ) 
 
============== RECHERCHE ==============



Clé trouvée: HKLM\Software\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Clé trouvée: HKLM\Software\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8}
Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}


============== SCAN ADDITIONNEL ==============

-- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\FireFox\Profiles\yl5km6iz.default --
Extensions\ffxtlbr@babylon.com (Babylon)
Extensions\staged-xpis (?)
Extensions\{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} (uTorrentBar_FR Community Toolbar)
Extensions\{28bfdd4b-7045-4520-b01a-651e0aee5ac8} (XUL Cache)
Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} (?)
Extensions\{997b6590-90b7-4757-99cc-613caff5fa7d} (XUL Cache)
Extensions\{b36fa08a-43e3-4c14-9cf3-cbca82c6d2f7} (XUL Cache)
Extensions\{c490dc17-6b81-4e9f-956e-476885c1b158} (XUL Cache)
Extensions\{de14998f-0a60-4467-bfe8-fde74bdbd3b5} (XUL Cache)
Searchplugins\LiveSearch.xml (    hxxp://search.live.com/results.aspx)
Prefs.js - browser.search.defaultenginename, Google
Prefs.js - browser.search.defaulturl, hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
Prefs.js - browser.startup.homepage_override.mstone, rv:1.8.1
Prefs.js - keyword.URL, hxxp://search.live.com/results.aspx?mkt=be-FR&FORM=MICJV1&q=
Prefs.js - browser.startup.homepage, hxxp://www.plusnetwork.com
Prefs.js - keyword.URL, hxxp://search.live.com/results.aspx?mkt=be-FR&FORM=MICJV1&q=

-- C:\Documents and Settings\client\Application Data\Mozilla\FireFox\Profiles\vzdm94av.default --
Extensions\{28bfdd4b-7045-4520-b01a-651e0aee5ac8} (XUL Cache)
Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} (Google Toolbar for Firefox)
Extensions\{997b6590-90b7-4757-99cc-613caff5fa7d} (XUL Cache)
Extensions\{b36fa08a-43e3-4c14-9cf3-cbca82c6d2f7} (XUL Cache)
Extensions\{c490dc17-6b81-4e9f-956e-476885c1b158} (XUL Cache)
Extensions\{de14998f-0a60-4467-bfe8-fde74bdbd3b5} (XUL Cache)
Prefs.js - browser.search.defaultenginename, Google
Prefs.js - browser.search.defaulturl, hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
Prefs.js - browser.search.selectedEngine, Google
Prefs.js - browser.startup.homepage, hxxp://en-us.start.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:fr:official
Prefs.js - browser.startup.homepage_override.mstone, rv:1.8.1

========================================

**** Internet Explorer Version [7.0.5730.13] ****

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Start Page - hxxp://skynet.be/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157
HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Start Page - hxxp://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
HKCU_URLSearchHooks|{d1a1c8f1-e3d9-48df-802f-20201061ef61} - "Messenger Plus Live Belgium Toolbar" (C:\Program Files\Messenger_Plus_Live_Belgium\prxtbMes0.dll)
HKCU_URLSearchHooks|{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} (x)
HKCU_Toolbar\ShellBrowser|{BC4FFE41-DE9F-46FA-B455-AAD49B9F9938} (x)
HKCU_Toolbar\ShellBrowser|{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} (x)
HKCU_Toolbar\WebBrowser|{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} (C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll)
HKCU_Toolbar\WebBrowser|{C4069E3A-68F1-403E-B40E-20066696354B} (C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll)
HKCU_Toolbar\WebBrowser|{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} (x)
HKCU_Toolbar\WebBrowser|{196C3A46-4758-433D-A600-802C804AF39C} (x)
HKCU_Toolbar\WebBrowser|{D1A1C8F1-E3D9-48DF-802F-20201061EF61} (C:\Program Files\Messenger_Plus_Live_Belgium\prxtbMes0.dll)
HKCU_Toolbar\WebBrowser|{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E} (x)
HKCU_Toolbar\WebBrowser|{BC4FFE41-DE9F-46FA-B455-AAD49B9F9938} (x)
HKLM_Toolbar|{0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} (C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll)
HKLM_Toolbar|{C4069E3A-68F1-403E-B40E-20066696354B} (C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll)
HKLM_Toolbar|{d1a1c8f1-e3d9-48df-802f-20201061ef61} (C:\Program Files\Messenger_Plus_Live_Belgium\prxtbMes0.dll)
HKLM_Toolbar|{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} (x)
HKLM_Toolbar|{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} (x)
HKLM_Toolbar|{98889811-442D-49dd-99D7-DC866BE87DBC} (C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll)
HKLM_ElevationPolicy\${ELV_GUID} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe (Babylon Ltd.)
HKLM_ElevationPolicy\{2ed6129f-f1b6-4708-a0fa-863836515ada} - C:\Program Files\Fichiers communs\Supportsoft\bin\sprthelper.exe (SupportSoft, Inc.)
HKLM_ElevationPolicy\{44295CB8-D71B-11DA-8750-001185653D78} - c:\program files\google\googletoolbar3user.exe (x)
HKLM_ElevationPolicy\{447E51BA-F48B-42C4-B703-444C60CC4887} - C:\Program Files\uTorrentBar_FR\uTorrentBar_FRToolbarHelper.exe (?)
HKLM_ElevationPolicy\{7B560075-5063-4212-BD2A-F1449D865B73} - C:\Documents and Settings\latchatchapaty\Local Settings\Application Data\Conduit\CT2535304\Messenger_Plus_Live_BelgiumAutoUpdaterHelper.exe (x)
HKLM_ElevationPolicy\{8789CF97-CBE7-44DB-AF40-EA7458C8640D} - C:\Program Files\Messenger_Plus_Live_Belgium\Messenger_Plus_Live_BelgiumToolbarHelper1.exe (?)
HKLM_ElevationPolicy\{A2D14993-7315-4f91-AD76-20605495ED6C} - C:\Program Files\ESTsoft\ALUpdate\ALUpExt.exe (x)
HKLM_ElevationPolicy\{C8FE2181-CAE7-49EE-9B04-DB7EB4DA544A} - C:\Program Files\Java\jre1.6.0_07\bin\ssvagent.exe (x)
HKLM_ElevationPolicy\{E6D65E6A-6CD0-40CF-9066-3C0C4C6484E0} - C:\Program Files\Belgacom\agent\bin\bcont_nm.exe (SupportSoft, Inc.)
HKLM_ElevationPolicy\{F2632B95-A2AD-4283-B49A-34D4802BA647} - C:\Program Files\ESTsoft\ALUpdate\ALUpdate.exe (x)
HKLM_ElevationPolicy\{FAF199D2-BFA7-4394-A4DE-044A08E59B32} - C:\WINDOWS\system32\Macromed\Flash\FlashUtil9b.exe (x)
HKLM_Extensions\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - "?" (?)
HKLM_Extensions\{85d1f590-48f4-11d9-9669-0800200c9a66} - "?" (?)
HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?)
BHO\{00A4AEE3-781E-4B18-80F1-7C0C62B16235} - "?" (C:\WINDOWS\system32\atl32.dll)
BHO\{2EECD738-5844-4a99-B4B6-146BF802613B} - "CescrtHlpr Object" (C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll)
BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?)
BHO\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - "Search Helper" (C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll)
BHO\{9ECB9560-04F9-4bbc-943D-298DDF1699E1} - "CNisExtBho Class" (C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll)
BHO\{A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - "CNavExtBho Class" (C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll)
BHO\{d1a1c8f1-e3d9-48df-802f-20201061ef61} - "Messenger Plus Live Belgium Toolbar" (C:\Program Files\Messenger_Plus_Live_Belgium\prxtbMes0.dll)

========================================

C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 0 Fichier(s)

C:\Ad-Report-SCAN[1].txt - 13/04/2011 21:19:32 (5479 Octet(s)) 

Fin à: 21:20:37, 13/04/2011 
 
============== E.O.F ============== 
oups voici celui du nettoyage

latchatchapaty · Answer

j'essaye de faire les windows update mais cela ne fonctionne toujours pas la page me dit que je ne suis pas connectee

latchatchapaty · Answer

desolée mais je dois vous quitte a demain pour continue le nettoyage 
merci et bonne nuit

gen-hackman · Answer

ok pourquoi tu as fait recherche avec ad-remover ? j'écris en Francais pourtant ! ^^

latchatchapaty · Answer

Bonjour,
desolée mais en le le chargant c'est comme cela qu'il c'est mis et je l'avais deja fait il y avait 2 ou3 jours 
mais bon que dois je faire maintenant?

gen-hackman · Answer

ce que j 'ai demandé :)

latchatchapaty · Answer

======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [2]) -> Lancé à 14:17:17 le 14/04/2011, Mode normal

Microsoft Windows XP Édition familiale Service Pack 3 (X86) 
latchatchapaty@LAFAMILLE ( ) 
 
============== ACTION(S) ==============



(!) -- Fichiers temporaires supprimés.


Clé supprimée: HKLM\Software\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Clé supprimée: HKLM\Software\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8}


============== SCAN ADDITIONNEL ==============

-- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\FireFox\Profiles\yl5km6iz.default --
Extensions\ffxtlbr@babylon.com (Babylon)
Extensions\staged-xpis (?)
Extensions\{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} (uTorrentBar_FR Community Toolbar)
Extensions\{28bfdd4b-7045-4520-b01a-651e0aee5ac8} (XUL Cache)
Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} (?)
Extensions\{997b6590-90b7-4757-99cc-613caff5fa7d} (XUL Cache)
Extensions\{b36fa08a-43e3-4c14-9cf3-cbca82c6d2f7} (XUL Cache)
Extensions\{c490dc17-6b81-4e9f-956e-476885c1b158} (XUL Cache)
Extensions\{de14998f-0a60-4467-bfe8-fde74bdbd3b5} (XUL Cache)
Searchplugins\LiveSearch.xml (    hxxp://search.live.com/results.aspx)
Prefs.js - browser.search.defaultenginename, Google
Prefs.js - browser.search.defaulturl, hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
Prefs.js - browser.startup.homepage_override.mstone, rv:1.8.1
Prefs.js - keyword.URL, hxxp://search.live.com/results.aspx?mkt=be-FR&FORM=MICJV1&q=
Prefs.js - browser.startup.homepage, hxxp://www.plusnetwork.com
Prefs.js - keyword.URL, hxxp://search.live.com/results.aspx?mkt=be-FR&FORM=MICJV1&q=

-- C:\Documents and Settings\client\Application Data\Mozilla\FireFox\Profiles\vzdm94av.default --
Extensions\{28bfdd4b-7045-4520-b01a-651e0aee5ac8} (XUL Cache)
Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} (Google Toolbar for Firefox)
Extensions\{997b6590-90b7-4757-99cc-613caff5fa7d} (XUL Cache)
Extensions\{b36fa08a-43e3-4c14-9cf3-cbca82c6d2f7} (XUL Cache)
Extensions\{c490dc17-6b81-4e9f-956e-476885c1b158} (XUL Cache)
Extensions\{de14998f-0a60-4467-bfe8-fde74bdbd3b5} (XUL Cache)
Prefs.js - browser.search.defaultenginename, Google
Prefs.js - browser.search.defaulturl, hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
Prefs.js - browser.search.selectedEngine, Google
Prefs.js - browser.startup.homepage, hxxp://en-us.start.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:fr:official
Prefs.js - browser.startup.homepage_override.mstone, rv:1.8.1

========================================

**** Internet Explorer Version [7.0.5730.13] ****

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Start Page - hxxp://skynet.be/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Start Page - hxxp://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
HKCU_URLSearchHooks|{d1a1c8f1-e3d9-48df-802f-20201061ef61} - "Messenger Plus Live Belgium Toolbar" (C:\Program Files\Messenger_Plus_Live_Belgium\prxtbMes0.dll)
HKCU_URLSearchHooks|{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} (x)
HKCU_Toolbar\ShellBrowser|{BC4FFE41-DE9F-46FA-B455-AAD49B9F9938} (x)
HKCU_Toolbar\ShellBrowser|{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} (x)
HKCU_Toolbar\WebBrowser|{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} (C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll)
HKCU_Toolbar\WebBrowser|{C4069E3A-68F1-403E-B40E-20066696354B} (C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll)
HKCU_Toolbar\WebBrowser|{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} (x)
HKCU_Toolbar\WebBrowser|{196C3A46-4758-433D-A600-802C804AF39C} (x)
HKCU_Toolbar\WebBrowser|{D1A1C8F1-E3D9-48DF-802F-20201061EF61} (C:\Program Files\Messenger_Plus_Live_Belgium\prxtbMes0.dll)
HKCU_Toolbar\WebBrowser|{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E} (x)
HKCU_Toolbar\WebBrowser|{BC4FFE41-DE9F-46FA-B455-AAD49B9F9938} (x)
HKLM_Toolbar|{0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} (C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll)
HKLM_Toolbar|{C4069E3A-68F1-403E-B40E-20066696354B} (C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll)
HKLM_Toolbar|{d1a1c8f1-e3d9-48df-802f-20201061ef61} (C:\Program Files\Messenger_Plus_Live_Belgium\prxtbMes0.dll)
HKLM_Toolbar|{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} (x)
HKLM_Toolbar|{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} (x)
HKLM_Toolbar|{98889811-442D-49dd-99D7-DC866BE87DBC} (C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll)
HKLM_ElevationPolicy\${ELV_GUID} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe (Babylon Ltd.)
HKLM_ElevationPolicy\{2ed6129f-f1b6-4708-a0fa-863836515ada} - C:\Program Files\Fichiers communs\Supportsoft\bin\sprthelper.exe (SupportSoft, Inc.)
HKLM_ElevationPolicy\{44295CB8-D71B-11DA-8750-001185653D78} - c:\program files\google\googletoolbar3user.exe (x)
HKLM_ElevationPolicy\{447E51BA-F48B-42C4-B703-444C60CC4887} - C:\Program Files\uTorrentBar_FR\uTorrentBar_FRToolbarHelper.exe (?)
HKLM_ElevationPolicy\{7B560075-5063-4212-BD2A-F1449D865B73} - C:\Documents and Settings\latchatchapaty\Local Settings\Application Data\Conduit\CT2535304\Messenger_Plus_Live_BelgiumAutoUpdaterHelper.exe (x)
HKLM_ElevationPolicy\{8789CF97-CBE7-44DB-AF40-EA7458C8640D} - C:\Program Files\Messenger_Plus_Live_Belgium\Messenger_Plus_Live_BelgiumToolbarHelper1.exe (?)
HKLM_ElevationPolicy\{A2D14993-7315-4f91-AD76-20605495ED6C} - C:\Program Files\ESTsoft\ALUpdate\ALUpExt.exe (x)
HKLM_ElevationPolicy\{C8FE2181-CAE7-49EE-9B04-DB7EB4DA544A} - C:\Program Files\Java\jre1.6.0_07\bin\ssvagent.exe (x)
HKLM_ElevationPolicy\{E6D65E6A-6CD0-40CF-9066-3C0C4C6484E0} - C:\Program Files\Belgacom\agent\bin\bcont_nm.exe (SupportSoft, Inc.)
HKLM_ElevationPolicy\{F2632B95-A2AD-4283-B49A-34D4802BA647} - C:\Program Files\ESTsoft\ALUpdate\ALUpdate.exe (x)
HKLM_ElevationPolicy\{FAF199D2-BFA7-4394-A4DE-044A08E59B32} - C:\WINDOWS\system32\Macromed\Flash\FlashUtil9b.exe (x)
HKLM_Extensions\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - "?" (?)
HKLM_Extensions\{85d1f590-48f4-11d9-9669-0800200c9a66} - "?" (?)
HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?)
BHO\{00A4AEE3-781E-4B18-80F1-7C0C62B16235} - "?" (C:\WINDOWS\system32\atl32.dll)
BHO\{2EECD738-5844-4a99-B4B6-146BF802613B} - "CescrtHlpr Object" (C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll)
BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?)
BHO\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - "Search Helper" (C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll)
BHO\{9ECB9560-04F9-4bbc-943D-298DDF1699E1} - "CNisExtBho Class" (C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll)
BHO\{A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - "CNavExtBho Class" (C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll)
BHO\{d1a1c8f1-e3d9-48df-802f-20201061ef61} - "Messenger Plus Live Belgium Toolbar" (C:\Program Files\Messenger_Plus_Live_Belgium\prxtbMes0.dll)

========================================

C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 27 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 13/04/2011 21:25:51 (8236 Octet(s)) 
C:\Ad-Report-CLEAN[2].txt - 14/04/2011 14:17:34 (5963 Octet(s)) 
C:\Ad-Report-SCAN[1].txt - 13/04/2011 21:19:32 (8173 Octet(s)) 

Fin à: 14:19:59, 14/04/2011 
 
============== E.O.F ============== 
voila le rapport je crois qu'il est bien fait cette fois

gen-hackman · Answer

demarrer/ tous les programmes / windows update , prends tout et installe

latchatchapaty · Answer

impossible je tombe toujours sur la page qui me dit que je ne suis pas connectee et ensuite le genius s'ouvre 
donc je ne sais pas comment il faut que je procede
merci

gen-hackman · Answer

tu me parles avec ce pc en question là ?

latchatchapaty · Answer

je viens de regarde dans aide et support je l'ai trouve 

en cherchant un peu j'ai trouve dans panneau de configuration les mises a jour 

mais en allant plus loin j'ai remarque que en allant dans centre d'aide et support il mettait une tache avec mises a jour 
alors je l'ai fait mais il y en a deux qui sont rouge donc elles ne sont pas en ordre

latchatchapaty · Answer

oui effectivement c'est mon pc et nous sommes 2 a le partagé

gen-hackman · Answer

alors je l'ai fait mais il y en a deux qui sont rouge donc elles ne sont pas en ordre

precise stp

latchatchapaty · Answer

j'ai trouve sur aide et support les mises a jour donc j'ai effectuer c'est mises a jour mais en verifiant il y en a 2 qui ne ce sont pas faite elles sont avec le point rouge les autres sont en vert donc celles la sont bonnes et pas les deux en rouge

latchatchapaty · Answer

(kb978601) du 14 avril 2010

gen-hackman · Answer

essaie de la prendre ici ?

http://www.microsoft.com/downloads/en/details.aspx?familyid=2A01DDF0-F3EA-47C8-ADA2-E69F6C1B5F96&displaylang=en

latchatchapaty · Answer

setup error 

setup cannot update your windows xp files because the language 
installed on your system is different from the update language

voila ce qu'il me dit

gen-hackman · Answer

desolé je t'ai mis celle en anglais 

http://www.microsoft.com/downloads/fr-fr/details.aspx?FamilyID=2A01DDF0-F3EA-47C8-ADA2-E69F6C1B5F96

latchatchapaty · Answer

voila mais la mises a jour est faite mais  la mises a jour (kb 978601)
est toujours rouge 
encore une petite question 
avec tous ce que j'ai fait j'ai mis a la corbeille un documents contenant des photos de mon fils pour son rapport de stage comment puis je faire et sont elle encore sur la carte mère?

gen-hackman · Answer

ils ne sont plus dans la corbeille ?

refais un scan otl stp

latchatchapaty · Answer

OTL logfile created on: 14/04/2011 18:52:18 - Run 2
OTL by OldTimer - Version 3.2.22.3     Folder = C:\Documents and Settings\latchatchapaty\Mes documents
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy
 
511,00 Mb Total Physical Memory | 127,00 Mb Available Physical Memory | 25,00% Memory free
1,00 Gb Paging File | 1,00 Gb Available in Paging File | 48,00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 152,66 Gb Total Space | 23,51 Gb Free Space | 15,40% Space Free | Partition Type: NTFS
 
Computer Name: LAFAMILLE | User Name: latchatchapaty | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========/color
 
PRC - [2011/04/14 14:23:42 | 000,514,560 | -HS- | M] () -- C:\WINDOWS\scrrunwow.exe
PRC - [2011/04/14 10:24:30 | 000,514,560 | -HS- | M] () -- C:\WINDOWS\senscfgwow.exe
PRC - [2011/04/13 20:19:52 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\latchatchapaty\Mes documents\OTL.exe
PRC - [2011/04/11 18:21:15 | 001,072,640 | -HS- | M] () -- C:\WINDOWS\system32\A.tmp
PRC - [2011/04/05 13:41:18 | 001,410,560 | ---- | M] () -- C:\WINDOWS\system32
etui032.exe
PRC - [2011/04/05 13:41:18 | 001,410,560 | ---- | M] () -- C:\WINDOWS\system32\msrle3232.exe
PRC - [2011/03/01 18:28:50 | 000,090,112 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
PRC - [2010/10/27 20:17:52 | 000,207,424 | ---- | M] (ArcSoft Inc.) -- C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACDaemon.exe
PRC - [2010/08/25 11:27:44 | 000,309,824 | ---- | M] (ArcSoft Inc.) -- C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ArcCon.ac
PRC - [2010/03/18 11:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) -- C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe
PRC - [2010/03/04 16:08:22 | 000,099,720 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
PRC - [2009/04/30 13:23:26 | 000,090,112 | ---- | M] () -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
PRC - [2009/03/31 10:39:36 | 000,233,472 | ---- | M] (Teruten) -- C:\WINDOWS\system32\FsUsbExService.Exe
PRC - [2009/01/26 16:31:16 | 002,144,088 | ---- | M] (Safer Networking Limited) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
PRC - [2008/05/29 12:18:32 | 000,202,016 | R--- | M] (SupportSoft, Inc.) -- C:\Program Files\Belgacom\bin\sprtsvc.exe
PRC - [2008/05/29 12:18:04 | 000,202,016 | R--- | M] (SupportSoft, Inc.) -- C:\Program Files\Belgacom\bin\sprtcmd.exe
PRC - [2008/04/14 04:34:03 | 001,037,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008/03/07 23:01:30 | 000,169,320 | ---- | M] (Symantec Corporation) -- C:\Program Files\Fichiers communs\Symantec Shared\CCSETMGR.EXE
PRC - [2008/03/07 23:01:28 | 000,191,848 | ---- | M] (Symantec Corporation) -- C:\Program Files\Fichiers communs\Symantec Shared\CCEVTMGR.EXE
PRC - [2008/03/07 23:01:28 | 000,053,096 | ---- | M] (Symantec Corporation) -- C:\Program Files\Fichiers communs\Symantec Shared\CCAPP.EXE
PRC - [2008/01/29 17:38:32 | 000,583,048 | ---- | M] (Symantec Corporation) -- C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
PRC - [2007/10/01 14:50:08 | 000,214,408 | ---- | M] (Symantec Corporation) -- C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
PRC - [2007/09/13 06:47:38 | 000,202,088 | ---- | M] (Symantec Corporation) -- C:\Program Files\Fichiers communs\Symantec Shared\CCPROXY.EXE
PRC - [2007/05/28 12:00:24 | 000,139,888 | ---- | M] (Symantec Corporation) -- C:\Program Files\Norton Internet Security\Norton AntiVirus\NAVAPSVC.EXE
PRC - [2006/12/15 19:41:50 | 000,750,720 | ---- | M] (Symantec Corporation) -- C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
PRC - [2006/12/08 12:06:17 | 001,119,888 | ---- | M] (Symantec Corporation) -- C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
PRC - [2006/05/11 16:50:18 | 001,160,848 | ---- | M] (Symantec Corporation) -- C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
PRC - [2005/10/25 10:28:51 | 000,054,928 | ---- | M] (Symantec Corporation) -- C:\Program Files\Fichiers communs\Symantec Shared\DJSNETCN.exe
PRC - [2005/06/23 20:33:00 | 000,057,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
PRC - [2004/01/26 11:38:38 | 000,866,816 | ---- | M] (THOMSON Telecom Belgium) -- C:\Program Files\Thomson\SpeedTouch USB\dragdiag.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========/color
 
MOD - [2011/04/13 20:19:52 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\latchatchapaty\Mes documents\OTL.exe
MOD - [2008/05/29 12:18:20 | 000,116,000 | R--- | M] (SupportSoft, Inc.) -- C:\Program Files\Belgacom\bin\sprthook.dll
MOD - [2008/04/14 04:33:50 | 000,025,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wsock32.dll
MOD - [2008/04/14 04:30:54 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
MOD - [2008/03/07 23:01:28 | 000,379,240 | ---- | M] (Symantec Corporation) -- C:\Program Files\Fichiers communs\Symantec Shared\CCL40.DLL
MOD - [2006/05/03 22:53:54 | 000,174,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\framedyn.dll
MOD - [2005/10/25 10:26:16 | 000,123,488 | ---- | M] (Symantec Corporation) -- C:\Program Files\Fichiers communs\Symantec Shared\AntiSpam\asOEHook.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========/color
 
SRV - File not found [Disabled | Stopped] --  -- (HidServ)
SRV - File not found [On_Demand | Stopped] --  -- (AppMgmt)
SRV - [2011/04/05 13:41:18 | 001,410,560 | ---- | M] () [Auto | Running] -- C:\WINDOWS\system32\msrle3232.exe -- (Messenger32)
SRV - [2011/03/31 13:26:56 | 000,565,760 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\WINDOWS\System32\printhook.exe -- (printhook.exe)
SRV - [2010/03/18 11:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [Auto | Running] -- C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon)
SRV - [2010/03/04 16:08:22 | 002,106,760 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_0.EXE -- (LiveUpdate)
SRV - [2010/03/04 16:08:22 | 000,099,720 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe -- (Planificateur LiveUpdate automatique)
SRV - [2009/04/30 13:23:26 | 000,090,112 | ---- | M] () [Auto | Running] -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe -- (OMSI download service)
SRV - [2009/03/31 10:39:36 | 000,233,472 | ---- | M] (Teruten) [Auto | Running] -- C:\WINDOWS\system32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2008/05/29 12:18:32 | 000,202,016 | R--- | M] (SupportSoft, Inc.) [Auto | Running] -- C:\Program Files\Belgacom\bin\sprtsvc.exe -- (sprtsvc_belgacom) SupportSoft Sprocket Service (belgacom)
SRV - [2008/05/29 12:17:12 | 000,382,320 | R--- | M] (SupportSoft, Inc.) [Auto | Stopped] -- C:\Program Files\Fichiers communs\Supportsoft\bin\ssrc.exe -- (SupportSoft RemoteAssist)
SRV - [2008/03/07 23:01:30 | 000,169,320 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe -- (ccSetMgr)
SRV - [2008/03/07 23:01:28 | 000,191,848 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe -- (ccEvtMgr)
SRV - [2008/01/29 17:38:32 | 000,583,048 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe -- (LiveUpdate Notice Service)
SRV - [2007/10/01 14:50:08 | 000,214,408 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe -- (SNDSrvc)
SRV - [2007/09/13 06:47:38 | 000,202,088 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe -- (ccProxy)
SRV - [2007/05/28 12:00:24 | 000,139,888 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Norton Internet Security\Norton AntiVirus
avapsvc.exe -- (navapsvc)
SRV - [2007/02/01 18:20:46 | 000,045,696 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Norton Internet Security\comHost.exe -- (comHost)
SRV - [2006/12/15 19:41:50 | 000,750,720 | ---- | M] (Symantec Corporation) [On_Demand | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE -- (NSCService)
SRV - [2006/12/08 12:06:17 | 001,119,888 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe -- (Symantec Core LC)
SRV - [2006/05/11 16:50:18 | 001,160,848 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe -- (SPBBCSvc)
SRV - [2006/03/24 13:13:32 | 000,072,328 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Norton Internet Security\ccPwdSvc.exe -- (ccISPwdSvc)
SRV - [2005/10/25 10:31:54 | 000,198,368 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe -- (SAVScan)
SRV - [2005/10/25 10:28:51 | 000,054,928 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\DJSNETCN.exe -- (DJSNETCN)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========/color
 
DRV - [2011/03/31 10:00:00 | 001,393,144 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\VirusDefs\20110410.002\NAVEX15.SYS -- (NAVEX15)
DRV - [2011/03/31 10:00:00 | 000,086,136 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\VirusDefs\20110410.002\NAVENG.SYS -- (NAVENG)
DRV - [2011/03/15 21:38:10 | 000,102,448 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2010/09/15 20:07:08 | 000,270,712 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\SymcData\idsdefs\20110407.001\SymIDSCo.sys -- (SYMIDSCO)
DRV - [2010/05/28 10:00:00 | 000,371,248 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
DRV - [2010/05/12 12:14:58 | 000,121,576 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadmdm.sys -- (ssadmdm)
DRV - [2010/05/12 12:14:56 | 000,096,488 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadbus.sys -- (ssadbus) SAMSUNG Android USB Composite Device driver (WDM)
DRV - [2010/05/12 12:14:56 | 000,012,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadmdfl.sys -- (ssadmdfl) SAMSUNG Android USB Modem (Filter)
DRV - [2010/04/27 04:25:16 | 000,098,432 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bbus.sys -- (ss_bbus) SAMSUNG USB Mobile Device (WDM)
DRV - [2010/04/27 04:25:14 | 000,132,608 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ssm_mdm.sys -- (ssm_mdm)
DRV - [2010/04/27 04:25:14 | 000,104,448 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ssm_bus.sys -- (ssm_bus) SAMSUNG Mobile USB Device II 1.0 driver (WDM)
DRV - [2010/04/27 04:25:14 | 000,014,848 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ssm_mdfl.sys -- (ssm_mdfl)
DRV - [2010/02/06 17:30:33 | 000,005,632 | ---- | M] () [File_System | System | Running] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2009/08/05 22:48:42 | 000,054,752 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\fssfltr_tdi.sys -- (fssfltr)
DRV - [2009/03/31 10:39:36 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2009/01/06 18:27:14 | 000,124,464 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SYMEVENT.SYS -- (SymEvent)
DRV - [2008/04/13 20:45:29 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2008/01/18 16:16:28 | 000,100,648 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\a016obex.sys -- (a016obex)
DRV - [2008/01/18 16:16:26 | 000,110,504 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\a016mdm.sys -- (a016mdm)
DRV - [2008/01/18 16:16:26 | 000,104,488 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\a016mgmt.sys -- (a016mgmt) Sony Ericsson Device A016 USB WMC Device Management Drivers (WDM)
DRV - [2008/01/18 16:16:24 | 000,015,016 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\a016mdfl.sys -- (a016mdfl)
DRV - [2008/01/18 16:16:22 | 000,083,880 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\a016bus.sys -- (a016bus) Sony Ericsson Device A016 driver (WDM)
DRV - [2008/01/09 13:28:34 | 000,027,632 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\seehcri.sys -- (seehcri)
DRV - [2007/12/05 23:58:21 | 000,028,672 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CO_Mon.sys -- (CO_Mon)
DRV - [2007/10/01 14:49:26 | 000,189,320 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\SYMTDI.SYS -- (SYMTDI)
DRV - [2007/10/01 14:49:20 | 000,023,944 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\SYMREDRV.SYS -- (SYMREDRV)
DRV - [2007/10/01 14:49:16 | 000,031,624 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\SYMIDS.SYS -- (SYMIDS)
DRV - [2007/10/01 14:49:10 | 000,028,040 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\SYMNDIS.SYS -- (SYMNDIS)
DRV - [2007/10/01 14:49:04 | 000,098,184 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\SYMFW.SYS -- (SYMFW)
DRV - [2007/10/01 14:48:56 | 000,012,680 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\SYMDNS.SYS -- (SYMDNS)
DRV - [2006/12/08 12:06:17 | 000,010,344 | ---- | M] (Symantec Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\symlcbrd.sys -- (symlcbrd)
DRV - [2006/11/10 16:05:00 | 000,018,688 | ---- | M] (Arcsoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\afc.sys -- (Afc)
DRV - [2006/05/11 16:50:18 | 000,389,776 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCDrv.sys -- (SPBBCDrv)
DRV - [2005/10/25 10:31:53 | 000,053,896 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Norton Internet Security\Norton AntiVirus\Savrtpel.sys -- (SAVRTPEL)
DRV - [2005/10/25 10:31:51 | 000,334,984 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Norton Internet Security\Norton AntiVirus\savrt.sys -- (SAVRT)
DRV - [2004/08/25 07:28:46 | 000,787,456 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2003/12/08 11:53:48 | 000,053,600 | ---- | M] (THOMSON) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\alcan5wn.sys -- (alcan5wn) SpeedTouch USB ADSL PPP Networking Driver (NDISWAN)
DRV - [2003/12/08 11:53:46 | 000,070,688 | ---- | M] (THOMSON) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\alcaudsl.sys -- (alcaudsl)
DRV - [2003/07/02 04:42:00 | 000,027,904 | ---- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\viaagp1.sys -- (viaagp1)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========/color
 
 
[color=#E56717]========== Internet Explorer ==========/color
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.proximus.be/pickx
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,XMLHTTP_UUID_Default = E3 AE A4 00 1E 78 18 4B 80 F1 7C 0C 62 B1 62 35  [binary data]
IE - HKCU\..\URLSearchHook: {05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {d1a1c8f1-e3d9-48df-802f-20201061ef61} - C:\Program Files\Messenger_Plus_Live_Belgium\prxtbMes0.dll (Conduit Ltd.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
[color=#E56717]========== FireFox ==========/color
 
FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.search.defaulturl: "https://www.google.com/webhp?lr=&ie=UTF-8&oe=UTF-8&gws_rd=ssl"
FF - prefs.js..keyword.URL: "https://www.bing.com/?scope=web&mkt=fr-FR&FORM=MICJV1"
FF - prefs.js..browser.startup.homepage: "http://www.plusnetwork.com"
FF - prefs.js..keyword.URL: "https://www.bing.com/?scope=web&mkt=fr-FR&FORM=MICJV1"
 
FF - HKLM\software\mozilla\Firefox\extensions\{B728AB94-9BC7-49b7-B76A-422BB31B2FD0}: C:\Program Files\ArcSoft\Video Downloader\Plugin_FireFox [2009/05/31 00:05:52 | 000,000,000 | ---D | M]
 
[2009/04/24 20:08:06 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Extensions
[2009/04/24 20:08:06 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Extensions\mozswing@mozswing.org
[2011/04/13 19:48:06 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions
[2011/04/07 09:36:10 | 000,000,000 | ---D | M] (uTorrentBar_FR Community Toolbar) -- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e}
[2011/04/09 10:01:58 | 000,000,000 | ---D | M] (XUL Cache) -- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\{28bfdd4b-7045-4520-b01a-651e0aee5ac8}
[2007/11/22 17:48:18 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2011/04/06 16:13:26 | 000,000,000 | ---D | M] (XUL Cache) -- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\{997b6590-90b7-4757-99cc-613caff5fa7d}
[2011/04/13 19:14:52 | 000,000,000 | ---D | M] (XUL Cache) -- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\{b36fa08a-43e3-4c14-9cf3-cbca82c6d2f7}
[2010/01/07 13:48:19 | 000,000,000 | ---D | M] (XUL Cache) -- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\{c490dc17-6b81-4e9f-956e-476885c1b158}
[2011/04/14 17:42:37 | 000,000,000 | ---D | M] (XUL Cache) -- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\{de14998f-0a60-4467-bfe8-fde74bdbd3b5}
[2011/04/07 21:26:01 | 000,000,000 | ---D | M] (Babylon) -- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com
[2007/11/22 17:48:18 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\staged-xpis
[2009/02/06 16:01:54 | 000,001,861 | ---- | M] () -- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\searchplugins\LiveSearch.xml
[2007/11/22 17:51:37 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2006/12/09 17:13:22 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2006/12/15 14:39:48 | 000,229,376 | ---- | M] ( ) -- C:\Program Files\Mozilla Firefox\plugins
phardwaredetection.dll
 
O1 HOSTS File: ([2009/04/27 19:31:12 | 000,000,795 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (no name) - {00A4AEE3-781E-4B18-80F1-7C0C62B16235} - C:\WINDOWS\system32\atl32.dll (Borland Software Corporation)
O2 - BHO: (Yahoo! Toolbar Helper) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (CescrtHlpr Object) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll (Babylon BHO)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Programme d'aide de l'Assistant de connexion Windows Live) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (CNisExtBho Class) - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll (Symantec Corporation)
O2 - BHO: (CNavExtBho Class) - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NAVSHEXT.DLL (Symantec Corporation)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll (Google Inc.)
O2 - BHO: (Messenger Plus Live Belgium Toolbar) - {d1a1c8f1-e3d9-48df-802f-20201061ef61} - C:\Program Files\Messenger_Plus_Live_Belgium\prxtbMes0.dll (Conduit Ltd.)
O2 - BHO: (EpsonToolBandKicker Class) - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O3 - HKLM\..\Toolbar: (no name) - {05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Norton Internet Security) - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll (Babylon Ltd.)
O3 - HKLM\..\Toolbar: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Norton AntiVirus) - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NAVSHEXT.DLL (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Messenger Plus Live Belgium Toolbar) - {d1a1c8f1-e3d9-48df-802f-20201061ef61} - C:\Program Files\Messenger_Plus_Live_Belgium\prxtbMes0.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {BC4FFE41-DE9F-46FA-B455-AAD49B9F9938} - No CLSID value found.
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Internet Security) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll (Symantec Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (Norton AntiVirus) - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NAVSHEXT.DLL (Symantec Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (Messenger Plus Live Belgium Toolbar) - {D1A1C8F1-E3D9-48DF-802F-20201061EF61} - C:\Program Files\Messenger_Plus_Live_Belgium\prxtbMes0.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O3 - HKCU\..\Toolbar\WebBrowser: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe Photo Downloader] C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ArcSoft Connection Service] C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.)
O4 - HKLM..\Run: [BabylonToolbar] C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe (Babylon Ltd.)
O4 - HKLM..\Run: [Belgacom] C:\Program Files\Belgacom\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [ccApp] C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [Cmaudio]  File not found
O4 - HKLM..\Run: [NPSStartup]  File not found
O4 - HKLM..\Run: [scrrunwow.exe] C:\WINDOWS\scrrunwow.exe ()
O4 - HKLM..\Run: [senscfgwow.exe] C:\WINDOWS\senscfgwow.exe ()
O4 - HKLM..\Run: [SpeedTouch USB Diagnostics] C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe (THOMSON Telecom Belgium)
O4 - HKLM..\Run: [Symantec PIF AlertEng] C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe (Symantec Corporation)
O4 - HKCU..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKCU..\Run: [NBJ] C:\Program Files\Ahead\Nero BackItUp\NBJ.exe (Ahead Software AG)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)
O4 - HKLM..\RunServices: [DJSNetCN] C:\Program Files\Fichiers communs\Symantec Shared\DJSNETCN.exe (Symantec Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll (Google Inc.)
O9 - Extra 'Tools' menuitem : Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - Reg Error: Key error. File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://appldnld.apple.com/QuickTime/qtactivex/qtplugin.cab (QuickTime Object)
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab (Facebook Photo Uploader 5 Control)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab (Trend Micro ActiveX Scan Agent 6.6)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {32C3FEAE-0877-4767-8C20-62A5829A0945} http://static.ak.facebook.com/fbplugin/win32/axfbootloader.cab?1271605607984 (Reg Error: Key error.)
O16 - DPF: {34DC6011-88B5-4EA9-BA7A-DC7B4F4437FE} http://ips.poi.de/ips-opdata/layout/fnac/objects/jordan.cab (JordanUploader Class)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab (MSN Photo Upload Tool)
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} http://www.casimages.com/iu/ImageUploader5.cab (Image Uploader Control)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} http://download.bitdefender.com/resources/scanner/sources/fr/scan8/oscan8.cab (BDSCANONLINE Control)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (Reg Error: Key error.)
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} http://www.virustraq.com/img/scan_virus/webscan.cab (WScanCtl Class)
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} http://cid-dcf989d2c078dc99.spaces.live.com/PhotoUpload/MsnPUpld.cab (Windows Live Photo Upload Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} http://gfx2.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab (Windows Live Hotmail Photo Upload Tool)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\WINDOWS\system32\msidntld32.dll) - C:\WINDOWS\system32\msidntld32.dll (Borland Software Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKCU Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll ()
O24 - Desktop Components:0 (Ma page d'accueil) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\latchatchapaty\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\latchatchapaty\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O30 - LSA: Authentication Packages - (tutqro.dll) -  File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005/04/26 18:08:30 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========/color
 
[2011/04/14 17:27:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood
[2011/04/14 17:27:20 | 000,583,544 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\latchatchapaty\Mes documents\WindowsXP-KB978601-x86-FRA.exe
[2011/04/14 17:12:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Mes documents\My Art
[2011/04/14 17:11:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Mes documents\NPS
[2011/04/14 16:44:56 | 000,576,376 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\latchatchapaty\Mes documents\WindowsXP-KB978601-x86-ENU.exe
[2011/04/13 21:18:58 | 000,000,000 | ---D | C] -- C:\Program Files\Ad-Remover
[2011/04/13 21:15:09 | 001,285,400 | ---- | C] (C_XX) -- C:\Documents and Settings\latchatchapaty\Mes documents\AD-R.exe
[2011/04/13 20:57:30 | 000,000,000 | ---D | C] -- C:\Kill'em
[2011/04/13 20:19:50 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\latchatchapaty\Mes documents\OTL.exe
[2011/04/13 20:05:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis
[2011/04/13 17:01:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Local Settings\Application Data\PackageAware
[2011/04/12 14:27:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Multi Virus Cleaner 2011
[2011/04/12 14:27:43 | 000,000,000 | ---D | C] -- C:\Program Files\AxBx
[2011/04/12 14:27:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Mes documents\mvc
[2011/04/09 17:51:27 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\latchatchapaty\Recent
[2011/04/09 16:02:38 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\latchatchapaty\Mes documents\Ma musique
[2011/04/08 17:26:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Documents\microsoft
[2011/04/08 11:41:09 | 000,000,000 | ---D | C] -- C:\Program Files\ZHPDiag
[2011/04/07 21:28:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Application Data\BabylonToolbar
[2011/04/07 21:25:53 | 000,000,000 | ---D | C] -- C:\Program Files\BabylonToolbar
[2011/04/07 20:55:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Bureau\julia
[2011/04/07 10:40:10 | 000,000,000 | ---D | C] -- C:\Program Files\ToniArts
[2011/04/07 10:40:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\EasyCleaner
[2011/04/07 10:39:13 | 002,951,802 | ---- | C] (InstallShield Software Corporation) -- C:\Documents and Settings\latchatchapaty\Mes documents\easycleaner.exe
[2011/04/07 09:42:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Application Data\Sammsoft
[2011/04/07 09:36:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Local Settings\Application Data\uTorrentBar_FR
[2011/04/07 09:33:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Application Data\uTorrent
[2011/04/07 08:34:00 | 006,783,685 | ---- | C] (Shareaza Development Team                                   ) -- C:\Documents and Settings\latchatchapaty\Mes documents\Shareaza_2.5.4.0_Win32.exe
[2011/04/07 07:25:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Application Data\PCFix
[2011/04/05 16:13:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\eMule
[2011/04/05 13:46:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\191459548
[2011/04/05 13:45:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\WinRAR
[2011/04/05 13:42:35 | 000,000,000 | -HSD | C] -- C:\WINDOWS\System32\A85638EAE282AEDCA5049233D3A90B73
[2011/04/05 13:41:38 | 000,264,192 | ---- | C] (Borland Software Corporation) -- C:\WINDOWS\System32\msidntld32.dll
[2011/04/05 13:41:20 | 000,417,280 | ---- | C] (Borland Software Corporation) -- C:\WINDOWS\System32\atl32.dll
[2011/04/03 19:32:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Application Data\ML
[2011/03/31 13:28:21 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\35A8249A185D243CAC8D468C9A8EED1D
[2011/03/31 13:26:58 | 000,565,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\printhook.exe
[2011/03/31 13:20:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Mes documents\FrostWire
[2011/03/31 13:19:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Application Data\FrostWire
[2011/03/31 13:19:13 | 000,000,000 | ---D | C] -- C:\Program Files\FrostWire
[2011/03/28 12:20:05 | 000,000,000 | ---D | C] -- C:\Program Files\Yuna Software
[2009/11/20 20:04:25 | 000,148,736 | ---- | C] (Avanquest Software) -- C:\Documents and Settings\All Users\Application Data\hpe1A.dll
[2009/09/12 10:23:31 | 000,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\latchatchapaty\Application Data\pcouffin.sys
[2006/12/27 15:45:49 | 000,151,552 | R--- | C] ( ) -- C:\WINDOWS\System32\ATIDEMGR.dll
[5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[12 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]
[1 C:\Documents and Settings\latchatchapaty\Mes documents\*.tmp files -> C:\Documents and Settings\latchatchapaty\Mes documents\*.tmp -> ]
[1 C:\Documents and Settings\latchatchapaty\Bureau\*.tmp files -> C:\Documents and Settings\latchatchapaty\Bureau\*.tmp -> ]
[1 C:\Documents and Settings\latchatchapaty\*.tmp files -> C:\Documents and Settings\latchatchapaty\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========/color
 
[2011/04/14 19:00:00 | 000,000,272 | ---- | M] () -- C:\WINDOWS	asks\RMSchedule.job
[2011/04/14 18:54:32 | 000,001,185 | ---- | M] () -- C:\WINDOWS\System32\1689558591
[2011/04/14 18:02:03 | 000,001,054 | ---- | M] () -- C:\WINDOWS	asks\GoogleUpdateTaskMachineUA.job
[2011/04/14 17:27:25 | 000,583,544 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\latchatchapaty\Mes documents\WindowsXP-KB978601-x86-FRA.exe
[2011/04/14 17:13:49 | 000,022,528 | ---- | M] () -- C:\Documents and Settings\latchatchapaty\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/04/14 16:45:00 | 000,576,376 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\latchatchapaty\Mes documents\WindowsXP-KB978601-x86-ENU.exe
[2011/04/14 14:24:47 | 000,002,422 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/04/14 14:24:40 | 000,001,050 | ---- | M] () -- C:\WINDOWS	asks\GoogleUpdateTaskMachineCore.job
[2011/04/14 14:23:42 | 000,514,560 | -HS- | M] () -- C:\WINDOWS\scrrunwow.exe
[2011/04/14 14:23:40 | 000,000,144 | -HS- | M] () -- C:\WINDOWS\System32\1151251731
[2011/04/14 14:22:45 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/04/14 14:22:41 | 536,137,728 | -HS- | M] () -- C:\hiberfil.sys
[2011/04/14 10:24:30 | 000,514,560 | -HS- | M] () -- C:\WINDOWS\senscfgwow.exe
[2011/04/13 21:19:00 | 000,001,554 | ---- | M] () -- C:\Documents and Settings\latchatchapaty\Bureau\AD-R.lnk
[2011/04/13 21:15:30 | 000,000,552 | ---- | M] () -- C:\Documents and Settings\latchatchapaty\Bureau\Raccourci vers AD-R.lnk
[2011/04/13 21:15:13 | 001,285,400 | ---- | M] (C_XX) -- C:\Documents and Settings\latchatchapaty\Mes documents\AD-R.exe
[2011/04/13 20:57:22 | 000,683,753 | ---- | M] () -- C:\Documents and Settings\latchatchapaty\Mes documents\Pre_scan.exe
[2011/04/13 20:20:54 | 000,000,545 | ---- | M] () -- C:\Documents and Settings\latchatchapaty\Bureau\Raccourci vers OTL.exe.lnk
[2011/04/13 20:19:52 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\latchatchapaty\Mes documents\OTL.exe
[2011/04/13 20:05:05 | 000,001,734 | ---- | M] () -- C:\Documents and Settings\latchatchapaty\Bureau\HijackThis.lnk
[2011/04/13 18:33:28 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2011/04/13 17:42:10 | 734,517,920 | ---- | M] () -- C:\Documents and Settings\latchatchapaty\Mes documents\Princesse Raiponce 2010.TRUEFRENCH.BDRiP.MD.XviD-By.Hadopix.[eMule-DivX.com].avi
[2011/04/12 14:27:48 | 000,000,840 | ---- | M] () -- C:\Documents and Settings\latchatchapaty\Bureau\Multi Virus Cleaner 2011.lnk
[2011/04/12 14:26:49 | 005,460,749 | ---- | M] () -- C:\Documents and Settings\latchatchapaty\Mes documents\mvc.zip
[2011/04/10 23:44:07 | 000,193,024 | ---- | M] () -- C:\WINDOWS\System32\msimsg32.exe
[2011/04/08 20:00:00 | 000,000,586 | ---- | M] () -- C:\WINDOWS	asks\Norton AntiVirus - Effectuer une analyse complète du système - client.job
[2011/04/08 11:47:42 | 000,000,512 | ---- | M] () -- C:\PhysicalDisk0_MBR.bin
[2011/04/07 22:08:22 | 000,520,704 | -HS- | M] () -- C:\WINDOWS\kbdswwow.exe
[2011/04/07 18:59:45 | 000,520,704 | -HS- | M] () -- C:\WINDOWS
cxpntwow.exe
[2011/04/07 10:39:16 | 002,951,802 | ---- | M] (InstallShield Software Corporation) -- C:\Documents and Settings\latchatchapaty\Mes documents\easycleaner.exe
[2011/04/07 09:25:05 | 006,783,685 | ---- | M] (Shareaza Development Team                                   ) -- C:\Documents and Settings\latchatchapaty\Mes documents\Shareaza_2.5.4.0_Win32.exe
[2011/04/07 09:06:01 | 000,520,704 | -HS- | M] () -- C:\WINDOWS\offfiltwow.exe
[2011/04/06 18:04:20 | 000,520,704 | -HS- | M] () -- C:\WINDOWS\wstdecodwow.exe
[2011/04/06 16:52:09 | 000,011,427 | ---- | M] () -- C:\WINDOWS\System32\GnuHashes.ini
[2011/04/05 16:13:11 | 000,000,652 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\eMule.lnk
[2011/04/05 16:11:14 | 003,389,035 | ---- | M] () -- C:\Documents and Settings\latchatchapaty\Mes documents\eMule0.50a-Installer.exe
[2011/04/05 13:43:14 | 000,203,776 | -HS- | M] () -- C:\WINDOWS\System32\unrar.exe
[2011/04/05 13:41:40 | 000,000,097 | ---- | M] () -- C:\WINDOWS\System32\1851847220
[2011/04/05 13:41:38 | 000,264,192 | ---- | M] (Borland Software Corporation) -- C:\WINDOWS\System32\msidntld32.dll
[2011/04/05 13:41:26 | 000,193,024 | ---- | M] () -- C:\WINDOWS\System32\msidntld32.exe
[2011/04/05 13:41:21 | 000,417,280 | ---- | M] (Borland Software Corporation) -- C:\WINDOWS\System32\atl32.dll
[2011/04/05 13:41:18 | 001,410,560 | ---- | M] () -- C:\WINDOWS\System32
etui032.exe
[2011/04/05 13:41:18 | 001,410,560 | ---- | M] () -- C:\WINDOWS\System32\msrle3232.exe
[2011/04/03 01:48:04 | 000,516,646 | ---- | M] () -- C:\WINDOWS\System32\perfh00C.dat
[2011/04/03 01:48:04 | 000,444,528 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/04/03 01:48:04 | 000,087,830 | ---- | M] () -- C:\WINDOWS\System32\perfc00C.dat
[2011/04/03 01:48:04 | 000,073,032 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011/04/03 01:48:03 | 000,436,084 | ---- | M] () -- C:\WINDOWS\System32\perfh040.dat
[2011/04/03 01:48:03 | 000,059,430 | ---- | M] () -- C:\WINDOWS\System32\perfc040.dat
[2011/04/01 20:45:52 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\LauncherAccess.dt
[2011/03/31 13:26:56 | 000,565,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\printhook.exe
[2011/03/22 16:28:09 | 000,001,729 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Adobe  9.lnk
[5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[12 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]
[1 C:\Documents and Settings\latchatchapaty\Mes documents\*.tmp files -> C:\Documents and Settings\latchatchapaty\Mes documents\*.tmp -> ]
[1 C:\Documents and Settings\latchatchapaty\Bureau\*.tmp files -> C:\Documents and Settings\latchatchapaty\Bureau\*.tmp -> ]
[1 C:\Documents and Settings\latchatchapaty\*.tmp files -> C:\Documents and Settings\latchatchapaty\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========/color
 
[2011/04/14 14:23:44 | 000,514,560 | -HS- | C] () -- C:\WINDOWS\scrrunwow.exe
[2011/04/14 10:24:36 | 000,514,560 | -HS- | C] () -- C:\WINDOWS\senscfgwow.exe
[2011/04/13 21:19:00 | 000,001,554 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Bureau\AD-R.lnk
[2011/04/13 21:15:30 | 000,000,552 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Bureau\Raccourci vers AD-R.lnk
[2011/04/13 20:57:14 | 000,683,753 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Mes documents\Pre_scan.exe
[2011/04/13 20:20:54 | 000,000,545 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Bureau\Raccourci vers OTL.exe.lnk
[2011/04/13 20:05:05 | 000,001,734 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Bureau\HijackThis.lnk
[2011/04/12 14:27:48 | 000,000,840 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Bureau\Multi Virus Cleaner 2011.lnk
[2011/04/12 14:26:46 | 005,460,749 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Mes documents\mvc.zip
[2011/04/10 23:44:07 | 000,193,024 | ---- | C] () -- C:\WINDOWS\System32\msimsg32.exe
[2011/04/08 11:47:42 | 000,000,512 | ---- | C] () -- C:\PhysicalDisk0_MBR.bin
[2011/04/07 22:08:25 | 000,520,704 | -HS- | C] () -- C:\WINDOWS\kbdswwow.exe
[2011/04/07 18:59:47 | 000,520,704 | -HS- | C] () -- C:\WINDOWS
cxpntwow.exe
[2011/04/07 09:06:29 | 000,520,704 | -HS- | C] () -- C:\WINDOWS\offfiltwow.exe
[2011/04/06 18:04:43 | 000,520,704 | -HS- | C] () -- C:\WINDOWS\wstdecodwow.exe
[2011/04/05 16:17:39 | 734,517,920 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Mes documents\Princesse Raiponce 2010.TRUEFRENCH.BDRiP.MD.XviD-By.Hadopix.[eMule-DivX.com].avi
[2011/04/05 16:13:11 | 000,000,652 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\eMule.lnk
[2011/04/05 16:11:09 | 003,389,035 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Mes documents\eMule0.50a-Installer.exe
[2011/04/05 13:43:29 | 000,001,185 | ---- | C] () -- C:\WINDOWS\System32\1689558591
[2011/04/05 13:43:15 | 000,000,144 | -HS- | C] () -- C:\WINDOWS\System32\1151251731
[2011/04/05 13:43:14 | 000,203,776 | -HS- | C] () -- C:\WINDOWS\System32\unrar.exe
[2011/04/05 13:41:40 | 001,410,560 | ---- | C] () -- C:\WINDOWS\System32
etui032.exe
[2011/04/05 13:41:27 | 001,410,560 | ---- | C] () -- C:\WINDOWS\System32\msrle3232.exe
[2011/04/05 13:41:27 | 000,000,097 | ---- | C] () -- C:\WINDOWS\System32\1851847220
[2011/04/05 13:41:26 | 000,193,024 | ---- | C] () -- C:\WINDOWS\System32\msidntld32.exe
[2011/03/31 13:33:36 | 000,011,427 | ---- | C] () -- C:\WINDOWS\System32\GnuHashes.ini
[2010/01/07 13:32:23 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\29358.exe
[2010/01/07 13:12:23 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\11478.exe
[2010/01/07 12:52:22 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\15724.exe
[2010/01/06 22:11:01 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\19169.exe
[2009/11/13 16:16:19 | 000,000,736 | ---- | C] () -- C:\WINDOWS\SamsungMaster.INI
[2009/11/13 16:09:08 | 000,765,952 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009/11/13 16:09:08 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009/11/13 16:09:08 | 000,008,704 | ---- | C] () -- C:\WINDOWS\System32\vidccleaner.exe
[2009/09/12 10:23:31 | 000,081,920 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Application Data\ezpinst.exe
[2009/09/12 10:23:31 | 000,007,176 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Application Data\pcouffin.cat
[2009/09/12 10:23:31 | 000,001,144 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Application Data\pcouffin.inf
[2009/08/25 13:49:00 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2009/08/25 13:49:00 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2009/08/25 13:48:46 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Application Data\$_hpcst$.hpc
[2009/05/09 14:10:52 | 000,084,480 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2009/01/05 21:39:16 | 000,000,062 | ---- | C] () -- C:\WINDOWS\pcvcdbr.INI
[2009/01/05 21:39:16 | 000,000,000 | ---- | C] () -- C:\WINDOWS\pcvcdvw.INI
[2008/12/31 18:04:42 | 000,691,560 | ---- | C] () -- C:\WINDOWS\System32\OGACheckControl.dll
[2008/12/31 18:04:42 | 000,528,744 | ---- | C] () -- C:\WINDOWS\System32\OGAVerify.exe
[2008/11/07 12:22:04 | 000,303,104 | ---- | C] () -- C:\WINDOWS\Uninstall_tkexe.exe
[2008/10/15 12:02:47 | 000,000,033 | ---- | C] () -- C:\WINDOWS\Multimedia manager.INI
[2008/09/26 11:07:02 | 000,000,924 | ---- | C] () -- C:\WINDOWS\posteriza.INI
[2008/09/16 16:58:43 | 000,000,011 | ---- | C] () -- C:\WINDOWS\permis.ini
[2008/07/30 14:35:53 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\LauncherAccess.dt
[2008/07/30 14:31:45 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2008/07/29 16:38:56 | 000,000,045 | -H-- | C] () -- C:\WINDOWS\dsez1349.dat
[2008/05/24 15:29:08 | 000,217,073 | ---- | C] () -- C:\WINDOWS\meta4.exe
[2008/05/24 15:29:08 | 000,066,560 | ---- | C] () -- C:\WINDOWS\MOTA113.exe
[2008/05/24 15:29:07 | 000,502,784 | ---- | C] () -- C:\WINDOWS\x2.64.exe
[2008/05/24 15:29:07 | 000,240,128 | ---- | C] () -- C:\WINDOWS\System32\x.264.exe
[2008/05/24 15:29:07 | 000,027,648 | ---- | C] () -- C:\WINDOWS\System32\AVSredirect.dll
[2008/05/24 15:29:06 | 000,471,552 | ---- | C] () -- C:\WINDOWS\System32\Smab.dll
[2008/03/24 12:52:03 | 000,000,137 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Local Settings\Application Data\fusioncache.dat
[2008/03/09 12:36:16 | 000,436,084 | ---- | C] () -- C:\WINDOWS\System32\perfh040.dat
[2008/03/09 12:36:16 | 000,059,430 | ---- | C] () -- C:\WINDOWS\System32\perfc040.dat
[2007/12/05 23:58:18 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\drivers\CO_Mon.sys
[2007/09/29 09:45:12 | 000,131,072 | R--- | C] () -- C:\WINDOWS\System32\mtkjpeg.dll
[2007/04/12 16:01:33 | 000,000,118 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI
[2007/04/05 19:00:51 | 000,000,029 | ---- | C] () -- C:\WINDOWS\DEBUGSM.INI
[2006/12/27 15:45:59 | 000,516,096 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe
[2006/12/16 14:58:37 | 000,022,528 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006/12/13 15:22:06 | 000,092,240 | ---- | C] () -- C:\WINDOWS\System32\EPPICPrinterDB.dat
[2006/12/13 15:22:06 | 000,001,120 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_IT.dat
[2006/12/13 15:22:06 | 000,001,107 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_GE.dat
[2006/12/13 15:22:06 | 000,000,099 | ---- | C] () -- C:\WINDOWS\System32\PICSDK.ini
[2006/12/13 15:22:05 | 000,026,154 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern1.dat
[2006/12/13 15:22:05 | 000,024,903 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern3.dat
[2006/12/13 15:22:05 | 000,021,390 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern5.dat
[2006/12/13 15:22:05 | 000,020,148 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern2.dat
[2006/12/13 15:22:05 | 000,011,811 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern4.dat
[2006/12/13 15:22:05 | 000,004,943 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern6.dat
[2006/12/13 15:22:05 | 000,001,146 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_DU.dat
[2006/12/13 15:22:05 | 000,001,139 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_PT.dat
[2006/12/13 15:22:05 | 000,001,139 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_BP.dat
[2006/12/13 15:22:05 | 000,001,136 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_ES.dat
[2006/12/13 15:22:05 | 000,001,129 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_FR.dat
[2006/12/13 15:22:05 | 000,001,129 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_CF.dat
[2006/12/13 15:22:05 | 000,001,104 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_EN.dat
[2006/12/13 14:58:39 | 000,000,025 | ---- | C] () -- C:\WINDOWS\CDE DX3800EFGIPSD.ini
[2006/12/13 14:43:28 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2006/12/10 20:38:41 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2006/12/09 17:13:25 | 000,000,000 | ---- | C] () -- C:\WINDOWS
sreg.dat
[2006/05/25 02:22:06 | 000,053,248 | ---- | C] () -- C:\WINDOWS\bdoscandel.exe
[2005/04/27 22:59:56 | 000,005,606 | ---- | C] () -- C:\WINDOWS\System32\stci.dll
[2005/04/26 19:32:16 | 000,004,205 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2005/04/26 19:30:56 | 000,103,032 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2005/04/26 19:24:32 | 000,000,131 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2005/04/26 19:22:21 | 000,000,092 | ---- | C] () -- C:\WINDOWS\CMISETUP.INI
[2005/04/26 19:22:21 | 000,000,026 | ---- | C] () -- C:\WINDOWS\CMCDPLAY.INI
[2005/04/26 19:22:17 | 000,233,472 | ---- | C] () -- C:\WINDOWS\System32\cmirmdrv.exe
[2005/04/26 19:22:17 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\cmirmdrv.dll
[2005/04/26 19:22:17 | 000,000,536 | ---- | C] () -- C:\WINDOWS\Wininit.ini
[2005/04/26 19:22:16 | 000,266,240 | ---- | C] () -- C:\WINDOWS\CMIUninstall.exe
[2005/04/26 19:22:16 | 000,225,280 | ---- | C] () -- C:\WINDOWS\CmiRmRedundDir.exe
[2005/04/26 19:22:16 | 000,028,672 | ---- | C] () -- C:\WINDOWS\CMIRmDriver.dll
[2005/04/26 18:33:13 | 000,036,864 | R--- | C] () -- C:\WINDOWS\System32\ctrldll.dll
[2005/04/26 18:33:13 | 000,032,768 | R--- | C] () -- C:\WINDOWS\System32mctrl.exe
[2005/04/26 18:22:23 | 000,002,699 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2005/04/26 18:22:21 | 000,005,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2005/04/26 18:10:33 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2005/04/26 18:05:20 | 000,021,892 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2005/03/14 15:38:28 | 000,000,469 | ---- | C] () -- C:\WINDOWS\bdoscandellang.ini
[2004/08/25 07:27:00 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx.dll
[2004/08/25 07:26:56 | 000,389,120 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx.exe
[2004/08/05 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2004/08/05 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004/08/05 14:00:00 | 000,516,646 | ---- | C] () -- C:\WINDOWS\System32\perfh00C.dat
[2004/08/05 14:00:00 | 000,444,528 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2004/08/05 14:00:00 | 000,322,810 | ---- | C] () -- C:\WINDOWS\System32\perfi00C.dat
[2004/08/05 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004/08/05 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004/08/05 14:00:00 | 000,087,830 | ---- | C] () -- C:\WINDOWS\System32\perfc00C.dat
[2004/08/05 14:00:00 | 000,073,032 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2004/08/05 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004/08/05 14:00:00 | 000,034,108 | ---- | C] () -- C:\WINDOWS\System32\perfd00C.dat
[2004/08/05 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004/08/05 14:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004/08/05 14:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2004/08/05 14:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2004/08/05 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32
oise.dat
 
[color=#E56717]========== Alternate Data Streams ==========/color
 
@Alternate Data Stream - 16 bytes -> C:\Documents and Settings\latchatchapaty\Mes documents\Shareaza Downloads:Shareaza.GUID
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D1B5B4F1

< End of report >
non la corbeille se vide avec le ccleaner

gen-hackman · Answer

non OTL comme la premiere fois

latchatchapaty · Answer

http://www.cijoint.fr/cjlink.php?file=cj201104/cijIlKzD4x.txt

c'est mieux ceci

gen-hackman · Answer

tu n'ecoutes pas .....

spybot tourne encore dans ton pc alors que je t'avais dit de le virer 

il bloque les outils en plus d'etre pourri comme dit plus haut

latchatchapaty · Answer

Bonjour,
je pensais l'avoir supprimer mais je viens de verifier puisque tu me dit qu'il etait encore la 
et en effet en faisant un recherche j'ai trouve un dossier dans program files 
et il me dit en voulant le supprimé 
impossible de supprimer advcheck.dll
comment dois je faire merci

gen-hackman · Answer

tu ne l'as pas desinstallé via ajout/suppression de programmes ?

latchatchapaty · Answer

ben si justement mais il ne sais pas completement desintalle 
(je supposse)

gen-hackman · Answer

fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.


&#9654 Télécharge ici :

Malwarebytes  

&#9654 Installe le ( choisis bien "francais" ; ne modifie pas les paramètres d'installe ) et mets le à jour .

(NB : Si tu as un message d'erreur t'indiquant qu'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : COMCTL32.OCX

&#9654 Potasses le Tuto pour te familiariser avec le prg :


( cela dit, il est très simple d'utilisation ).

relance malwarebytes en suivant scrupuleusement ces consignes :

! Déconnecte toi et ferme toutes applications en cours !

&#9654 Lance Malwarebyte's .

Fais un examen dit "Complet" .

&#9654 Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
&#9654 à la fin tu cliques sur "résultat" .
&#9654 Vérifie que tous les objets infectés soient validés, puis clique sur " suppression " .

&#9654 Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !


&#9654 Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)

latchatchapaty · Answer

j'ai deja fait ce truc et ici pour le relance il me fallait les mises a jour et il ne veut plus me les donner donc je l'ai suipprimer le mien 
puis j'ai repris le tiens et la il c'est cahrge mais une petite fenetre c'est ouverte et Vb accelerator SGrid control run time error '0'

que dois faire

latchatchapaty · Answer

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Version de la base de données: 5363

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

15/04/2011 17:15:50
mbam-log-2011-04-15 (17-15-50).txt

Type d'examen: Examen rapide
Elément(s) analysé(s): 147006
Temps écoulé: 9 minute(s), 58 seconde(s)

Processus mémoire infecté(s): 5
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 2
Valeur(s) du Registre infectée(s): 5
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 26

Processus mémoire infecté(s):
c:\WINDOWS\senscfgwow.exe (Trojan.TracurW.Gen) -> 1004 -> Unloaded process successfully.
c:\WINDOWS\scrrunwow.exe (Trojan.TracurW.Gen) -> 1732 -> Unloaded process successfully.
c:\WINDOWS\modemuiwow.exe (Trojan.TracurW.Gen) -> 952 -> Unloaded process successfully.
c:\WINDOWS\vssapiwow.exe (Trojan.TracurW.Gen) -> 2368 -> Unloaded process successfully.
c:\WINDOWS\kbdno1wow.exe (Trojan.TracurW.Gen) -> 3752 -> Unloaded process successfully.

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\.fsharproj (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MESSENGER32 (Trojan.Tracur) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\senscfgwow.exe (Trojan.TracurW.Gen) -> Value: senscfgwow.exe -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\scrrunwow.exe (Trojan.TracurW.Gen) -> Value: scrrunwow.exe -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\modemuiwow.exe (Trojan.TracurW.Gen) -> Value: modemuiwow.exe -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\vssapiwow.exe (Trojan.TracurW.Gen) -> Value: vssapiwow.exe -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\kbdno1wow.exe (Trojan.TracurW.Gen) -> Value: kbdno1wow.exe -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
c:\documents and settings\client\application data\02000000b46dab33724c.manifest (Malware.Trace) -> Quarantined and deleted successfully.
c:\documents and settings\client\application data\02000000b46dab33724o.manifest (Malware.Trace) -> Quarantined and deleted successfully.
c:\documents and settings\client\application data\02000000b46dab33724p.manifest (Malware.Trace) -> Quarantined and deleted successfully.
c:\documents and settings\client\application data\02000000b46dab33724s.manifest (Malware.Trace) -> Quarantined and deleted successfully.
c:\documents and settings\latchatchapaty\application data\02000000b46dab33720c.manifest (Malware.Trace) -> Quarantined and deleted successfully.
c:\documents and settings\latchatchapaty\application data\02000000b46dab33720o.manifest (Malware.Trace) -> Quarantined and deleted successfully.
c:\documents and settings\latchatchapaty\application data\02000000b46dab33720p.manifest (Malware.Trace) -> Quarantined and deleted successfully.
c:\documents and settings\latchatchapaty\application data\02000000b46dab33720s.manifest (Malware.Trace) -> Quarantined and deleted successfully.
c:\documents and settings\latchatchapaty\application data\02000000b46dab33724c.manifest (Malware.Trace) -> Quarantined and deleted successfully.
c:\documents and settings\latchatchapaty\application data\02000000b46dab33724o.manifest (Malware.Trace) -> Quarantined and deleted successfully.
c:\documents and settings\latchatchapaty\application data\02000000b46dab33724p.manifest (Malware.Trace) -> Quarantined and deleted successfully.
c:\documents and settings\latchatchapaty\application data\02000000b46dab33724s.manifest (Malware.Trace) -> Quarantined and deleted successfully.
c:\documents and settings\localservice\application data\02000000b46dab331235c.manifest (Malware.Trace) -> Quarantined and deleted successfully.
c:\documents and settings\localservice\application data\02000000b46dab331235o.manifest (Malware.Trace) -> Quarantined and deleted successfully.
c:\documents and settings\localservice\application data\02000000b46dab331235p.manifest (Malware.Trace) -> Quarantined and deleted successfully.
c:\documents and settings\localservice\application data\02000000b46dab331235s.manifest (Malware.Trace) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\02000000b46dab331235c.manifest (Malware.Trace) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\02000000b46dab331235o.manifest (Malware.Trace) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\02000000b46dab331235p.manifest (Malware.Trace) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\02000000b46dab331235s.manifest (Malware.Trace) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\gnuhashes.ini (Trojan.Tracur) -> Quarantined and deleted successfully.
c:\WINDOWS\senscfgwow.exe (Trojan.TracurW.Gen) -> Quarantined and deleted successfully.
c:\WINDOWS\scrrunwow.exe (Trojan.TracurW.Gen) -> Quarantined and deleted successfully.
c:\WINDOWS\modemuiwow.exe (Trojan.TracurW.Gen) -> Quarantined and deleted successfully.
c:\WINDOWS\vssapiwow.exe (Trojan.TracurW.Gen) -> Quarantined and deleted successfully.
c:\WINDOWS\kbdno1wow.exe (Trojan.TracurW.Gen) -> Quarantined and deleted successfully.

desolée pour le temps

gen-hackman · Answer

c'est l'appInit_Dll qui recharge l'infection refais un scan OTL comme au debut config et tout on va tout virer

latchatchapaty · Answer

http://www.cijoint.fr/cjlink.php?file=cj201104/cijxM8azAh.txt
s.t.p

gen-hackman · Answer

ATTENTION !!! : Script personnalisé pour cette machine uniquement , ne pas reproduire !! 

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...." 

sur OTL.exe pour le lancer.


&#9654Copie la liste qui se trouve en gras ci-dessous,

&#9654 colle-la dans la zone sous "Personnalisation" :


:processes
explorer.exe
iexplore.exe
firefox.exe
msnmsgr.exe
Teatimer.exe
upnpuiwow.exe
D.tmp
Rundll32.exe
netui032.exe    
msrle3232.exe    

:Services
Messenger32

:OTL
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,XMLHTTP_UUID_Default = E3 AE A4 00 1E 78 18 4B 80 F1 7C 0C 62 B1 62 35  [binary data]      
IE - HKCU\..\URLSearchHook: {05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {d1a1c8f1-e3d9-48df-802f-20201061ef61} - C:\Program Files\Messenger_Plus_Live_Belgium\prxtbMes0.dll (Conduit Ltd.)   
O2 - BHO: (no name) - {00A4AEE3-781E-4B18-80F1-7C0C62B16235} - C:\WINDOWS\system32\atl32.dll (Borland Software Corporation)
O2 - BHO: (CescrtHlpr Object) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll (Babylon BHO)
O2 - BHO: (Messenger Plus Live Belgium Toolbar) - {d1a1c8f1-e3d9-48df-802f-20201061ef61} - C:\Program Files\Messenger_Plus_Live_Belgium\prxtbMes0.dll (Conduit Ltd.)  
O3 - HKLM\..\Toolbar: (no name) - {05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll (Babylon Ltd.)
O3 - HKLM\..\Toolbar: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - No CLSID value found.  
O3 - HKLM\..\Toolbar: (Messenger Plus Live Belgium Toolbar) - {d1a1c8f1-e3d9-48df-802f-20201061ef61} - C:\Program Files\Messenger_Plus_Live_Belgium\prxtbMes0.dll (Conduit Ltd.)  
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {BC4FFE41-DE9F-46FA-B455-AAD49B9F9938} - No CLSID value found.
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - No CLSID value found.   
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Messenger Plus Live Belgium Toolbar) - {D1A1C8F1-E3D9-48DF-802F-20201061EF61} - C:\Program Files\Messenger_Plus_Live_Belgium\prxtbMes0.dll (Conduit Ltd.)      
O4 - HKLM\..\Run: [BabylonToolbar] C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe (Babylon Ltd.)    => Babylon Ltd®Babylon Toolbar  
O4 - HKLM\..\Run: [Cmaudio]  File not found
O4 - HKLM\..\Run: [NPSStartup]  File not found
O4 - HKLM\..\Run: [upnpuiwow.exe] C:\WINDOWS\upnpuiwow.exe ()      
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)    => Safer Net Working®Spybot S&D  
O16 - DPF: {32C3FEAE-0877-4767-8C20-62A5829A0945} http://static.ak.facebook.com/fbplugin/win32/axfbootloader.cab?1271605607984 (Reg Error: Key error.) 
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (Reg Error: Key error.) 
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) 
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) 
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) 
[2011/04/07 21:28:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Application Data\BabylonToolbar 
[2011/04/05 13:46:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\191459548      
[2011/04/05 13:41:38 | 000,264,192 | ---- | C] (Borland Software Corporation) -- C:\WINDOWS\System32\msidntld32.dll  
[2011/04/05 13:41:20 | 000,417,280 | ---- | C] (Borland Software Corporation) -- C:\WINDOWS\System32\atl32.dll
[2011/04/03 19:32:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Application Data\ML      
[2011/03/31 13:28:21 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\35A8249A185D243CAC8D468C9A8EED1D      
[2011/04/07 22:08:22 | 000,520,704 | -HS- | M] () -- C:\WINDOWS\kbdswwow.exe  
[2011/04/07 18:59:45 | 000,520,704 | -HS- | M] () -- C:\WINDOWS
cxpntwow.exe 
[2011/04/07 10:39:16 | 002,951,802 | ---- | M] (InstallShield Software Corporation) -- C:\Documents and Settings\latchatchapaty\Mes documents\easycleaner.exe      
[2011/04/07 09:06:01 | 000,520,704 | -HS- | M] () -- C:\WINDOWS\offfiltwow.exe  
[2011/04/06 18:04:20 | 000,520,704 | -HS- | M] () -- C:\WINDOWS\wstdecodwow.exe      
[2011/04/05 13:43:14 | 000,203,776 | -HS- | M] () -- C:\WINDOWS\System32\unrar.exe      
[2011/04/05 13:41:40 | 000,000,097 | ---- | M] () -- C:\WINDOWS\System32\1851847220      
[2011/04/05 13:41:38 | 000,264,192 | ---- | M] (Borland Software Corporation) -- C:\WINDOWS\System32\msidntld32.dll 
[2011/04/05 13:41:26 | 000,193,024 | ---- | M] () -- C:\WINDOWS\System32\msidntld32.exe 
[2011/04/05 13:41:21 | 000,417,280 | ---- | M] (Borland Software Corporation) -- C:\WINDOWS\System32\atl32.dll 
[2011/04/05 13:41:18 | 001,410,560 | ---- | M] () -- C:\WINDOWS\System32
etui032.exe 
[2011/04/05 13:41:18 | 001,410,560 | ---- | M] () -- C:\WINDOWS\System32\msrle3232.exe 


:Reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=-
"IMJPMIG8.1"=-
"MSPY2002"=-
"NeroFilterCheck"=-
"PHIME2002A"=-
"PHIME2002ASync"=-
"RemoteControl"=-
"SunJavaUpdateSched"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"=""

:Files
C:\WINDOWS\upnpuiwow.exe      
C:\WINDOWS\system32\D.tmp
C:\WINDOWS\system32
etui032.exe  
C:\WINDOWS\system32\msrle3232.exe
C:\Program Files\Spybot - Search & Destroy
C:\Program Files\BabylonToolbar
C:\WINDOWS\system32\msidntld32.dll 
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy    
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Multi Virus Cleaner 2011      
C:\Documents and Settings\All Users\Application Data\hpe1A.dll      
C:\WINDOWS\System32\GnuHashes.ini    
C:\WINDOWS\System32\1151251731      
C:\Documents and Settings\latchatchapaty\Mes documents\malware.exe      
C:\WINDOWS\System32\msimsg32.exe      
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D1B5B4F1      

:commands
[emptytemp]
[start explorer]
[reboot]


&#9654 Clique sur "Correction" pour lancer la suppression.


&#9654 Poste le rapport qui logiquement s'ouvrira tout seul en fin de travail appres le redemarrage.

latchatchapaty · Answer

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
Process iexplore.exe killed successfully!
No active process named firefox.exe was found!
Process msnmsgr.exe killed successfully!
No active process named Teatimer.exe was found!
Unable to kill active process upnpuiwow.exe!
No active process named D.tmp was found!
No active process named Rundll32.exe was found!
No active process named netui032.exe was found!
No active process named msrle3232.exe was found!
========== SERVICES/DRIVERS ==========
Service Messenger32 stopped successfully!
Service Messenger32 deleted successfully!
========== OTL ==========
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\XMLHTTP_UUID_Default| /E : value set successfully!
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e}\ not found.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{d1a1c8f1-e3d9-48df-802f-20201061ef61} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d1a1c8f1-e3d9-48df-802f-20201061ef61}\ deleted successfully.
C:\Program Files\Messenger_Plus_Live_Belgium\prxtbMes0.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00A4AEE3-781E-4B18-80F1-7C0C62B16235}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00A4AEE3-781E-4B18-80F1-7C0C62B16235}\ deleted successfully.
C:\WINDOWS\system32\atl32.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}\ deleted successfully.
C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d1a1c8f1-e3d9-48df-802f-20201061ef61}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d1a1c8f1-e3d9-48df-802f-20201061ef61}\ not found.
File C:\Program Files\Messenger_Plus_Live_Belgium\prxtbMes0.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\{98889811-442D-49dd-99D7-DC866BE87DBC} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{98889811-442D-49dd-99D7-DC866BE87DBC}\ deleted successfully.
C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\{d1a1c8f1-e3d9-48df-802f-20201061ef61} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d1a1c8f1-e3d9-48df-802f-20201061ef61}\ not found.
File C:\Program Files\Messenger_Plus_Live_Belgium\prxtbMes0.dll not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\{BC4FFE41-DE9F-46FA-B455-AAD49B9F9938} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BC4FFE41-DE9F-46FA-B455-AAD49B9F9938}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{D1A1C8F1-E3D9-48DF-802F-20201061EF61} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D1A1C8F1-E3D9-48DF-802F-20201061EF61}\ not found.
File C:\Program Files\Messenger_Plus_Live_Belgium\prxtbMes0.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run not found.
C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run not found.
C:\WINDOWS\upnpuiwow.exe moved successfully.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run not found.
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe moved successfully.
Starting removal of ActiveX control {32C3FEAE-0877-4767-8C20-62A5829A0945}
C:\WINDOWS\Downloaded Program Files\axfbootloader.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{32C3FEAE-0877-4767-8C20-62A5829A0945}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32C3FEAE-0877-4767-8C20-62A5829A0945}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{32C3FEAE-0877-4767-8C20-62A5829A0945}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{32C3FEAE-0877-4767-8C20-62A5829A0945}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32C3FEAE-0877-4767-8C20-62A5829A0945}\ not found.
Starting removal of ActiveX control {7530BFB8-7293-4D34-9923-61A11451AFC5}
C:\WINDOWS\Downloaded Program Files\OnlineScanner.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{7530BFB8-7293-4D34-9923-61A11451AFC5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7530BFB8-7293-4D34-9923-61A11451AFC5}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7530BFB8-7293-4D34-9923-61A11451AFC5}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7530BFB8-7293-4D34-9923-61A11451AFC5}\ not found.
Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {E2883E8F-472F-4FB0-9522-AC9BF37916A7}
C:\WINDOWS\Downloaded Program Files\gp.inf not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
C:\Documents and Settings\latchatchapaty\Application Data\BabylonToolbar\BabylonToolbar folder moved successfully.
C:\WINDOWS\System32\191459548 folder moved successfully.
C:\WINDOWS\system32\msidntld32.dll moved successfully.
File C:\WINDOWS\System32\atl32.dll not found.
C:\Documents and Settings\latchatchapaty\Application Data\ML\MLNetFilter folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\ML folder moved successfully.
C:\WINDOWS\System32\35A8249A185D243CAC8D468C9A8EED1D\conf	emplates folder moved successfully.
C:\WINDOWS\System32\35A8249A185D243CAC8D468C9A8EED1D\conf
ames folder moved successfully.
C:\WINDOWS\System32\35A8249A185D243CAC8D468C9A8EED1D\conf folder moved successfully.
C:\WINDOWS\System32\35A8249A185D243CAC8D468C9A8EED1D folder moved successfully.
C:\WINDOWS\kbdswwow.exe moved successfully.
C:\WINDOWS
cxpntwow.exe moved successfully.
C:\Documents and Settings\latchatchapaty\Mes documents\easycleaner.exe moved successfully.
C:\WINDOWS\offfiltwow.exe moved successfully.
C:\WINDOWS\wstdecodwow.exe moved successfully.
C:\WINDOWS\system32\unrar.exe moved successfully.
C:\WINDOWS\system32\1851847220 moved successfully.
File C:\WINDOWS\System32\msidntld32.dll not found.
C:\WINDOWS\system32\msidntld32.exe moved successfully.
File C:\WINDOWS\System32\atl32.dll not found.
C:\WINDOWS\system32
etui032.exe moved successfully.
C:\WINDOWS\system32\msrle3232.exe moved successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Adobe Reader Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\IMJPMIG8.1 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\MSPY2002 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\NeroFilterCheck not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\PHIME2002A not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\PHIME2002ASync not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\RemoteControl not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\SunJavaUpdateSched not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\"AppInit_DLLS"|"" /E : value set successfully!
========== FILES ==========
File\Folder C:\WINDOWS\upnpuiwow.exe not found.
C:\WINDOWS\system32\D.tmp moved successfully.
File\Folder C:\WINDOWS\system32
etui032.exe not found.
File\Folder C:\WINDOWS\system32\msrle3232.exe not found.
C:\Program Files\Spybot - Search & Destroy folder moved successfully.
C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\bh folder moved successfully.
C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19 folder moved successfully.
C:\Program Files\BabylonToolbar\BabylonToolbar folder moved successfully.
C:\Program Files\BabylonToolbar folder moved successfully.
File\Folder C:\WINDOWS\system32\msidntld32.dll not found.
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy folder moved successfully.
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Multi Virus Cleaner 2011 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\hpe1A.dll moved successfully.
C:\WINDOWS\System32\GnuHashes.ini moved successfully.
C:\WINDOWS\System32\1151251731 moved successfully.
C:\Documents and Settings\latchatchapaty\Mes documents\malware.exe moved successfully.
C:\WINDOWS\System32\msimsg32.exe moved successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:D1B5B4F1 deleted successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: client
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 2043225 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: latchatchapaty
->Temp folder emptied: 13298148 bytes
->Temporary Internet Files folder emptied: 63904135 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 15374 bytes
 
User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 7106938 bytes
 
User: NetworkService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 92734 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 4619776 bytes
%systemroot%\System32\dllcache .tmp files removed: 1099264 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 255 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 40804200 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 127,00 mb
 
 
OTL by OldTimer - Version 3.2.22.3 log created on 04152011_202501

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...
voila le rapport

gen-hackman · Answer

il me faudra un nouveau scan OTL voir ce qui n a pas ete supprimé

latchatchapaty · Answer

Bonjour

voila le nouveau rapport 
mais on dirais que le pc fonctionne vraiment bien 

j'attend ton verdict 

http://www.cijoint.fr/cjlink.php?file=cj201104/cij9ATtflj.txt

gen-hackman · Answer

Fais analyser le(s) fichier(s) suivants sur Virustotal :

Virus Total

    clique sur "Parcourir" et trouve puis selectionne ce(s) fichier(s) :

C:\WINDOWS\system32\printhook.exe  

    * Clique maintenant sur Envoyer le fichier. et laisse travailler tant que "Situation actuelle : en cours d'analyse" est affiché.
    * Il est possible que le fichier soit mis en file d'attente en raison d'un grand nombre de demandes d'analyses. En ce cas, il te faudra patienter sans actualiser la page.
    * Lorsque l'analyse est terminée colle le lien de(s)( la) page(s)  dans ta prochaine réponse.

latchatchapaty · Answer

Bonjour 
je ne sais vraiment pas si c'est cela qu'il fallait  tous en anglais 



Antivirus Version Last update Result 
AhnLab-V3 2011.04.18.02 2011.04.18 - 
AntiVir 7.11.6.169 2011.04.18 TR/Crypt.EPACK.Gen2 
Antiy-AVL 2.0.3.7 2011.04.18 - 
Avast 4.8.1351.0 2011.04.18 Win32:Zboter-B 
Avast5 5.0.677.0 2011.04.18 Win32:Zboter-B 
AVG 10.0.0.1190 2011.04.18 - 
BitDefender 7.2 2011.04.18 Gen:Variant.Kazy.17351 
CAT-QuickHeal 11.00 2011.04.18 (Suspicious) - DNAScan 
ClamAV 0.97.0.0 2011.04.18 - 
Commtouch 5.3.2.6 2011.04.18 - 
Comodo 8388 2011.04.18 TrojWare.Win32.Kryptik.LNM 
DrWeb 5.0.2.03300 2011.04.18 - 
Emsisoft 5.1.0.5 2011.04.18 Gen.Variant.Zbot!IK 
eSafe 7.0.17.0 2011.04.17 - 
eTrust-Vet 36.1.8277 2011.04.18 - 
F-Prot 4.6.2.117 2011.04.17 - 
F-Secure 9.0.16440.0 2011.04.18 Gen:Variant.Kazy.17351 
Fortinet 4.2.257.0 2011.04.18 - 
GData 22 2011.04.18 Gen:Variant.Kazy.17351 
Ikarus T3.1.1.103.0 2011.04.18 Gen.Variant.Zbot 
Jiangmin 13.0.900 2011.04.18 - 
K7AntiVirus 9.96.4412 2011.04.18 - 
Kaspersky 7.0.0.125 2011.04.18 - 
McAfee 5.400.0.1158 2011.04.18 - 
McAfee-GW-Edition 2010.1D 2011.04.18 - 
Microsoft 1.6702 2011.04.18 - 
NOD32 6052 2011.04.18 a variant of Win32/Kryptik.MLX 
Norman 6.07.07 2011.04.18 - 
Panda 10.0.3.5 2011.04.17 - 
PCTools 7.0.3.5 2011.04.18 - 
Prevx 3.0 2011.04.18 - 
Rising 23.54.00.06 2011.04.18 - 
Sophos 4.64.0 2011.04.18 - 
SUPERAntiSpyware 4.40.0.1006 2011.04.16 - 
Symantec 20101.3.2.89 2011.04.18 WS.Reputation.1 
TheHacker 6.7.0.1.176 2011.04.17 - 
TrendMicro 9.200.0.1012 2011.04.18 - 
TrendMicro-HouseCall 9.200.0.1012 2011.04.18 - 
VBA32 3.12.16.0 2011.04.18 - 
VIPRE 9050 2011.04.18 Trojan.Win32.Kryptik.mgs (v) 
ViRobot 2011.4.18.4416 2011.04.18 - 
VirusBuster 13.6.310.0 2011.04.18 - 
MD5: f2d457d45740508283c4d008d768688b 
SHA1: 23771adb3dd0a65236600d40711a03cd86dfb750 
SHA256: bcd7e647278c5699701dd2bfdc8e8127856aac0dd116a47088d66a9248bd1f16 
File size: 565760 bytes 
Scan date: 2011-04-18 14:52:50 (UTC)

gen-hackman · Answer

tu peux m'envoyer le fichier ?

latchatchapaty · Answer

Bonjour 
quel fichier celui qui est dans le pc ou celui de l'analyse 
le c windows....

gen-hackman · Answer

je parlais de ca

C:\WINDOWS\system32\printhook.exe

latchatchapaty · Answer

Bonjour 

desolée mais je ne sais pàs faire de copier coller avec ce fichier 
mais dit moi si deja ce que j'ai fait pour le trouve c'est bon 
donc j'ai ouvert le disque local 
ensuite le dossier windows j'ai trouve un dossier system 32
j'ai auvert ce fichier et dedans j'ai trouve le printhook.exe
comment dois je faire 
merci

gen-hackman · Answer

hello

clic droit dessus , envoyer vers , dossiers compressés , puis tu envoies l'archive via cijoint.fr

latchatchapaty · Answer

http://www.cijoint.fr/cjlink.php?file=cj201104/cijGnzskZv.zip

voila je crois que c'est cela etmilles excuses pour la lenteur 
et mon idiotie
j'aurais du le savoir mais j'avais oublie comment il fallait faire 
merci de ta patience

gen-hackman · Answer

ok tu peux le supprimer manuellement ?

latchatchapaty · Answer

il me le dit impossible de supprimer

gen-hackman · Answer

refais un scan en mode sans echec avec malwarebytes , mais avant fais une mise à jour de ce dernier en mode normal

latchatchapaty · Answer

il ne veut pas ce mettre a jour

gen-hackman · Answer

telecharge le fichier de mise a jour manuelle

http://data.mbamupdates.com/tools/mbam-rules.exe

sinon y a un message d'eereur ?

latchatchapaty · Answer

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Version de la base de données: 5363

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

21/04/2011 17:10:18
mbam-log-2011-04-21 (17-10-09).txt

Type d'examen: Examen rapide
Elément(s) analysé(s): 145076
Temps écoulé: 11 minute(s), 45 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 5

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\.fsharproj (Trojan.BHO) -> No action taken.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
c:\WINDOWS\system32\02000000b46dab331235c.manifest (Malware.Trace) -> No action taken.
c:\WINDOWS\system32\02000000b46dab331235o.manifest (Malware.Trace) -> No action taken.
c:\WINDOWS\system32\02000000b46dab331235p.manifest (Malware.Trace) -> No action taken.
c:\WINDOWS\system32\02000000b46dab331235s.manifest (Malware.Trace) -> No action taken.
c:\WINDOWS\system32\gnuhashes.ini (Trojan.Tracur) -> No action taken.

gen-hackman · Answer

ok arrives-tu à faire la mise a jour de MBAM maintenant ?

latchatchapaty · Answer

Bobsoir 
et bien non elle est perimée depuis 144 jour et je n'y arrive pas

gen-hackman · Answer

un message d'erreur ?

essaie avec ceci :

http://data.mbamupdates.com/tools/mbam-rules.exe

latchatchapaty · Answer

bi non encore message d'erreur
(12150, 0,WinHttpQuerryHeaders)

gen-hackman · Answer

nettoie-le avec ceci puis reinstalle-le

https://data-cdn.mbamupdates.com/v1/tools/mbam-clean/data/mbam-clean-2.3.0.1001.exe

latchatchapaty · Answer

Bonjour je viens de faire ce qui etait demande au dessus et voila encore une fois il ne veut pas faire la mise a jour elle est perimée depuis 145 jours 
que dois je faire

gen-hackman · Answer

ATTENTION !!! : Script personnalisé pour cette machine uniquement , ne pas reproduire !! 

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...." 

sur OTL.exe pour le lancer.


&#9654Copie la liste qui se trouve en gras ci-dessous,

&#9654 colle-la dans la zone sous "Personnalisation" :


:processes
explorer.exe
iexplore.exe
firefox.exe
msnmsgr.exe
Teatimer.exe
printhook.exe  
    
:Services
printhook.exe

:OTL
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,XMLHTTP_UUID_Default =      
O4 - HKLM\..\Run: [BabylonToolbar]  File not found
O4 - HKLM\..\Run: [Cmaudio]  File not found
O4 - HKLM\..\Run: [NPSStartup]  File not found
O4 - HKLM\..\Run: [upnpuiwow.exe]  File not found
O4 - HKCU\..\Run: [SpybotSD TeaTimer]  File not found
O30 - LSA: Authentication Packages - (tutqro.dll) -  File not found

:Files
C:\WINDOWS\system32\printhook.exe      
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com      
C:\WINDOWS\System32\35A8249A185D243CAC8D468C9A8EED1D      
C:\Documents and Settings\latchatchapaty\Mes documents\comctl32.ocx       
C:\Documents and Settings\latchatchapaty\Application Data\BabylonToolbar
C:\WINDOWS\System32\A85638EAE282AEDCA5049233D3A90B73      
C:\WINDOWS\System32\GnuHashes.ini 
C:\WINDOWS\System32\1689558591      
C:\WINDOWS	asks\RMSchedule.job  
C:\WINDOWS\System32\29358.exe      
C:\WINDOWS\System32\11478.exe      
C:\WINDOWS\System32\15724.exe      
C:\WINDOWS\System32\19169.exe
C:\WINDOWS\MOTA113.exe  
C:\WINDOWS\dsez1349.dat      
  
:commands
[emptytemp]
[start explorer]
[reboot]


&#9654 Clique sur "Correction" pour lancer la suppression.


&#9654 Poste le rapport qui logiquement s'ouvrira tout seul en fin de travail appres le redemarrage.

latchatchapaty · Answer

Bonjour et joyeuse Pâques^
voila le rapport


All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
Process iexplore.exe killed successfully!
No active process named firefox.exe was found!
Process msnmsgr.exe killed successfully!
No active process named Teatimer.exe was found!
No active process named printhook.exe was found!
========== SERVICES/DRIVERS ==========
Service printhook.exe stopped successfully!
Service printhook.exe deleted successfully!
========== OTL ==========
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\XMLHTTP_UUID_Default| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run not found.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Authentication Packages:tutqro.dll deleted successfully.
========== FILES ==========
C:\WINDOWS\system32\printhook.exe moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\defaults\preferences\.svn	mp	ext-base folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\defaults\preferences\.svn	mp\props folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\defaults\preferences\.svn	mp\prop-base folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\defaults\preferences\.svn	mp folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\defaults\preferences\.svn	ext-base folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\defaults\preferences\.svn\props folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\defaults\preferences\.svn\prop-base folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\defaults\preferences\.svn folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\defaults\preferences folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\defaults\.svn	mp	ext-base folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\defaults\.svn	mp\props folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\defaults\.svn	mp\prop-base folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\defaults\.svn	mp folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\defaults\.svn	ext-base folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\defaults\.svn\props folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\defaults\.svn\prop-base folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\defaults\.svn folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\defaults folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\.svn	mp	ext-base folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\.svn	mp\props folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\.svn	mp\prop-base folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\.svn	mp folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\.svn	ext-base folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\.svn\props folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\.svn\prop-base folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\.svn folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\.svn	mp	ext-base folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\.svn	mp\props folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\.svn	mp\prop-base folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\.svn	mp folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\.svn	ext-base folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\.svn\props folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\.svn\prop-base folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\.svn folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\imgs\.svn	mp	ext-base folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\imgs\.svn	mp\props folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\imgs\.svn	mp\prop-base folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\imgs\.svn	mp folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\imgs\.svn	ext-base folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\imgs\.svn\props folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\imgs\.svn\prop-base folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\imgs\.svn folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\imgs folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\.svn	mp	ext-base folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\.svn	mp\props folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\.svn	mp\prop-base folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\.svn	mp folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\.svn	ext-base folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\.svn\props folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\.svn\prop-base folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content\.svn folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\content folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\components folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\.svn	mp	ext-base folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\.svn	mp\props folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\.svn	mp\prop-base folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\.svn	mp folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\.svn	ext-base folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\.svn\props folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\.svn\prop-base folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com\.svn folder moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\ffxtlbr@babylon.com folder moved successfully.
C:\WINDOWS\System32\35A8249A185D243CAC8D468C9A8EED1D\conf	emplates folder moved successfully.
C:\WINDOWS\System32\35A8249A185D243CAC8D468C9A8EED1D\conf
ames folder moved successfully.
C:\WINDOWS\System32\35A8249A185D243CAC8D468C9A8EED1D\conf folder moved successfully.
C:\WINDOWS\System32\35A8249A185D243CAC8D468C9A8EED1D folder moved successfully.
C:\Documents and Settings\latchatchapaty\Mes documents\comctl32.ocx moved successfully.
C:\Documents and Settings\latchatchapaty\Application Data\BabylonToolbar folder moved successfully.
C:\WINDOWS\System32\A85638EAE282AEDCA5049233D3A90B73\h folder moved successfully.
C:\WINDOWS\System32\A85638EAE282AEDCA5049233D3A90B73\b folder moved successfully.
C:\WINDOWS\System32\A85638EAE282AEDCA5049233D3A90B73 folder moved successfully.
C:\WINDOWS\System32\GnuHashes.ini moved successfully.
C:\WINDOWS\System32\1689558591 moved successfully.
C:\WINDOWS	asks\RMSchedule.job moved successfully.
C:\WINDOWS\System32\29358.exe moved successfully.
C:\WINDOWS\System32\11478.exe moved successfully.
C:\WINDOWS\System32\15724.exe moved successfully.
C:\WINDOWS\System32\19169.exe moved successfully.
C:\WINDOWS\MOTA113.exe moved successfully.
C:\WINDOWS\dsez1349.dat moved successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: client
->Temp folder emptied: 2722 bytes
->Temporary Internet Files folder emptied: 7356772 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Flash cache emptied: 657 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: latchatchapaty
->Temp folder emptied: 44461386 bytes
->Temporary Internet Files folder emptied: 53887985 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 14026 bytes
 
User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 14819152 bytes
 
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 65938 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 255 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 115,00 mb
 
 
OTL by OldTimer - Version 3.2.22.3 log created on 04242011_170042

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

gen-hackman · Answer

j'ai rien compris

retente la mise à jour de Malwarebytes

latchatchapaty · Answer

la mise a jour de malware ne veut pas car il dit perimée depuis 144 jour 
j'ai fait toutes les facons que tu ma donne mais rien a faire

gen-hackman · Answer

quelle version as-tu reinstallé apres MBAM-clean ?

latchatchapaty · Answer

celle qui a sur le site je supposse que c'est la toute nouvelle
mais meme celle la ca na pas fonctionne

gen-hackman · Answer

ouvre Malwarebytes Anti-Malware et va dans "paramètres"
va à "paramètres de mise à jour " choisis le serveur proxy: 85.25.139.53 et Port: 3128

latchatchapaty · Answer

erreur 12029,0 winhttpsendrequest

gen-hackman · Answer

re-vire les reglages proxy , remets comme c'etait , puis 

reessaie en mode sans echec avec prise en charge reseau

latchatchapaty · Answer

non desolee c'est la (12150, 0,WinHttpQuerryHeaders)qui revient

gen-hackman · Answer

le pc

latchatchapaty · Answer

c'est le f8 qu'il faut taper je ne sais pas trop bien

gen-hackman · Answer

oui :)

latchatchapaty · Answer

j'ai fait en mode echec et je n'etais plus connectee 
donc je l'ai redemarre et il c'est remis tous seul 
j'ai essaye la mise a jour du malware mais encore la meme erreur (12150, 0,WinHttpQuerryHeaders)

gen-hackman · Answer

je t'avais dit en mode sans echec avec prise en charge reseau

latchatchapaty · Answer

je vais voir

latchatchapaty · Answer

je suis en mode sans echec

latchatchapaty · Answer

elles se sont mises en mode sans echec et ici je viens de l'ouvrir et il ma demander de le mettree a jour et j'ai encore eu la meme erreur comment cela ce fait il ?

gen-hackman · Answer

refais un scan OTL stp

latchatchapaty · Answer

http://www.cijoint.fr/cjlink.php?file=cj201104/cij6y4qWqy.txt

gen-hackman · Answer

utorrent 
emule 
Frostwire 
Azureus 

tu t'etonnes d'etre infecté toi ? 

============================= 

ca correspond à quoi ca ? : 

C:\Documents and Settings\latchatchapaty\Mes documents\mvc.zip       

============================= 

ATTENTION !!! : Script personnalisé pour cette machine uniquement , ne pas reproduire !! 

si tu as XP => double clique 
si tu as Vista ou windows 7 => clic droit "executer en tant que...."  

sur OTL.exe pour le lancer. 


&#9654Copie la liste qui se trouve en gras ci-dessous, 

&#9654 colle-la dans la zone sous "Personnalisation" : 


:processes 
explorer.exe 
iexplore.exe 
firefox.exe 
msnmsgr.exe 
Teatimer.exe 

:Services 
Bonjour Service 

:OTL 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,XMLHTTP_UUID_Default =       
[2011/04/21 06:53:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Local Settings\Application Data\Conduit  
[2011/04/07 09:36:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Local Settings\Application Data\uTorrentBar_FR   
[2011/04/24 16:56:42 | 000,001,729 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Adobe Reader 9.lnk       
[2011/04/23 15:11:49 | 007,622,112 | ---- | M] (Malwarebytes Corporation                                    ) -- C:\Documents and Settings\latchatchapaty\Mes documents\malwarebytes-anti-malware_malwarebytes_anti-malware_1.50_francais_215092.exe       
[2011/04/12 14:27:48 | 000,000,840 | ---- | M] () -- C:\Documents and Settings\latchatchapaty\Bureau\Multi Virus Cleaner 2011.lnk       
@Alternate Data Stream - 16 bytes -> C:\Documents and Settings\latchatchapaty\Mes documents\Shareaza Downloads:Shareaza.GUID       


:Reg 
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] 
"Cmaudio"=- 
"NPSStartup"=- 
"SpybotSD TeaTimer"=- 

:Files 
C:\Documents and Settings\Thomas\Bureau\comctl32.ocx     
C:\Documents and Settings\Thomas\Bureau\mbam-setup-1.50.1.1100.exe       
C:\Documents and Settings\All Users\Application Data\BOONTY   
C:\Documents and Settings\All Users\Application Data\PopCap     
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:81405BF2       

  
:commands 
[emptytemp] 
[start explorer] 
[reboot] 
 

&#9654 Clique sur "Correction" pour lancer la suppression. 


&#9654 Poste le rapport qui logiquement s'ouvrira tout seul en fin de travail appres le redemarrage. 

G3?-?@¢??@?......Concepteur de List_Kill'em...Pre_Scan....MBR_Repair....

latchatchapaty · Answer

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
Process iexplore.exe killed successfully!
No active process named firefox.exe was found!
Process msnmsgr.exe killed successfully!
No active process named Teatimer.exe was found!
========== SERVICES/DRIVERS ==========
Error: No service named Bonjour Service was found to stop!
Service\Driver key Bonjour Service not found.
========== OTL ==========
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\XMLHTTP_UUID_Default| /E : value set successfully!
Folder C:\Documents and Settings\latchatchapaty\Local Settings\Application Data\Conduit\ not found.
Folder C:\Documents and Settings\latchatchapaty\Local Settings\Application Data\uTorrentBar_FR\ not found.
File C:\Documents and Settings\All Users\Bureau\Adobe Reader 9.lnk not found.
File C:\Documents and Settings\latchatchapaty\Mes documents\malwarebytes-anti-malware_malwarebytes_anti-malware_1.50_francais_215092.exe not found.
File C:\Documents and Settings\latchatchapaty\Bureau\Multi Virus Cleaner 2011.lnk not found.
Unable to delete ADS C:\Documents and Settings\latchatchapaty\Mes documents\Shareaza Downloads:Shareaza.GUID .
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Cmaudio not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\NPSStartup not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\SpybotSD TeaTimer not found.
========== FILES ==========
File\Folder C:\Documents and Settings\Thomas\Bureau\comctl32.ocx not found.
File\Folder C:\Documents and Settings\Thomas\Bureau\mbam-setup-1.50.1.1100.exe not found.
File\Folder C:\Documents and Settings\All Users\Application Data\BOONTY not found.
File\Folder C:\Documents and Settings\All Users\Application Data\PopCap not found.
Unable to delete ADS C:\Documents and Settings\All Users\Application Data\TEMP:81405BF2 .
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: client
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: latchatchapaty
->Temp folder emptied: 808 bytes
->Temporary Internet Files folder emptied: 1473667 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 47544 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 255 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 101908 bytes
 
Total Files Cleaned = 2,00 mb
 
 
OTL by OldTimer - Version 3.2.22.3 log created on 04252011_141845

Files\Folders moved on Reboot...
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\NY3M3501\lander_6[1].htm moved successfully.
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\HO14244Y
otice[1].htm moved successfully.

Registry entries deleted on Reboot...

gen-hackman · Answer

refais un scan OTL

latchatchapaty · Answer

Bonjour,

voici le scan

OTL logfile created on: 26/04/2011 17:05:33 - Run 8
OTL by OldTimer - Version 3.2.22.3     Folder = C:\Documents and Settings\latchatchapaty\Mes documents
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy
 
511,00 Mb Total Physical Memory | 124,00 Mb Available Physical Memory | 24,00% Memory free
1,00 Gb Paging File | 1,00 Gb Available in Paging File | 61,00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 152,66 Gb Total Space | 12,37 Gb Free Space | 8,11% Space Free | Partition Type: NTFS
 
Computer Name: LAFAMILLE | User Name: latchatchapaty | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011/04/13 20:19:52 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\latchatchapaty\Mes documents\OTL.exe
PRC - [2011/03/01 18:28:50 | 000,090,112 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
PRC - [2010/10/27 20:17:52 | 000,207,424 | ---- | M] (ArcSoft Inc.) -- C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACDaemon.exe
PRC - [2010/08/25 11:27:44 | 000,309,824 | ---- | M] (ArcSoft Inc.) -- C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ArcCon.ac
PRC - [2010/03/18 11:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) -- C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe
PRC - [2010/03/04 16:08:22 | 002,106,760 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_0.EXE
PRC - [2010/03/04 16:08:22 | 000,148,872 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\LiveUpdate\AUPDATE.EXE
PRC - [2010/03/04 16:08:22 | 000,103,816 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
PRC - [2010/03/04 16:08:22 | 000,099,720 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
PRC - [2009/04/30 13:23:26 | 000,090,112 | ---- | M] () -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
PRC - [2009/03/31 10:39:36 | 000,233,472 | ---- | M] (Teruten) -- C:\WINDOWS\system32\FsUsbExService.Exe
PRC - [2008/05/29 12:18:32 | 000,202,016 | R--- | M] (SupportSoft, Inc.) -- C:\Program Files\Belgacom\bin\sprtsvc.exe
PRC - [2008/05/29 12:18:04 | 000,202,016 | R--- | M] (SupportSoft, Inc.) -- C:\Program Files\Belgacom\bin\sprtcmd.exe
PRC - [2008/04/14 04:34:03 | 001,037,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008/03/07 23:01:30 | 000,169,320 | ---- | M] (Symantec Corporation) -- C:\Program Files\Fichiers communs\Symantec Shared\CCSETMGR.EXE
PRC - [2008/03/07 23:01:28 | 000,191,848 | ---- | M] (Symantec Corporation) -- C:\Program Files\Fichiers communs\Symantec Shared\CCEVTMGR.EXE
PRC - [2008/03/07 23:01:28 | 000,053,096 | ---- | M] (Symantec Corporation) -- C:\Program Files\Fichiers communs\Symantec Shared\CCAPP.EXE
PRC - [2008/01/29 17:38:32 | 000,583,048 | ---- | M] (Symantec Corporation) -- C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
PRC - [2007/10/01 14:50:08 | 000,214,408 | ---- | M] (Symantec Corporation) -- C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
PRC - [2007/09/13 06:47:38 | 000,202,088 | ---- | M] (Symantec Corporation) -- C:\Program Files\Fichiers communs\Symantec Shared\CCPROXY.EXE
PRC - [2007/05/28 12:00:24 | 000,139,888 | ---- | M] (Symantec Corporation) -- C:\Program Files\Norton Internet Security\Norton AntiVirus\NAVAPSVC.EXE
PRC - [2006/12/15 19:41:50 | 000,750,720 | ---- | M] (Symantec Corporation) -- C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
PRC - [2006/12/08 12:06:17 | 001,119,888 | ---- | M] (Symantec Corporation) -- C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
PRC - [2006/05/11 16:50:18 | 001,160,848 | ---- | M] (Symantec Corporation) -- C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
PRC - [2005/10/25 10:28:51 | 000,054,928 | ---- | M] (Symantec Corporation) -- C:\Program Files\Fichiers communs\Symantec Shared\DJSNETCN.exe
PRC - [2005/06/23 20:33:00 | 000,057,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
PRC - [2004/01/26 11:38:38 | 000,866,816 | ---- | M] (THOMSON Telecom Belgium) -- C:\Program Files\Thomson\SpeedTouch USB\dragdiag.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2011/04/13 20:19:52 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\latchatchapaty\Mes documents\OTL.exe
MOD - [2008/05/29 12:18:20 | 000,116,000 | R--- | M] (SupportSoft, Inc.) -- C:\Program Files\Belgacom\bin\sprthook.dll
MOD - [2008/04/14 04:30:54 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
MOD - [2008/03/07 23:01:28 | 000,379,240 | ---- | M] (Symantec Corporation) -- C:\Program Files\Fichiers communs\Symantec Shared\CCL40.DLL
MOD - [2006/05/03 22:53:54 | 000,174,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\framedyn.dll
MOD - [2005/10/25 10:26:16 | 000,123,488 | ---- | M] (Symantec Corporation) -- C:\Program Files\Fichiers communs\Symantec Shared\AntiSpam\asOEHook.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] --  -- (HidServ)
SRV - File not found [On_Demand | Stopped] --  -- (AppMgmt)
SRV - [2010/03/18 11:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [Auto | Running] -- C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon)
SRV - [2010/03/04 16:08:22 | 002,106,760 | ---- | M] (Symantec Corporation) [On_Demand | Running] -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_0.EXE -- (LiveUpdate)
SRV - [2010/03/04 16:08:22 | 000,099,720 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe -- (Planificateur LiveUpdate automatique)
SRV - [2009/04/30 13:23:26 | 000,090,112 | ---- | M] () [Auto | Running] -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe -- (OMSI download service)
SRV - [2009/03/31 10:39:36 | 000,233,472 | ---- | M] (Teruten) [Auto | Running] -- C:\WINDOWS\system32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2008/05/29 12:18:32 | 000,202,016 | R--- | M] (SupportSoft, Inc.) [Auto | Running] -- C:\Program Files\Belgacom\bin\sprtsvc.exe -- (sprtsvc_belgacom) SupportSoft Sprocket Service (belgacom)
SRV - [2008/05/29 12:17:12 | 000,382,320 | R--- | M] (SupportSoft, Inc.) [Auto | Stopped] -- C:\Program Files\Fichiers communs\Supportsoft\bin\ssrc.exe -- (SupportSoft RemoteAssist)
SRV - [2008/03/07 23:01:30 | 000,169,320 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe -- (ccSetMgr)
SRV - [2008/03/07 23:01:28 | 000,191,848 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe -- (ccEvtMgr)
SRV - [2008/01/29 17:38:32 | 000,583,048 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe -- (LiveUpdate Notice Service)
SRV - [2007/10/01 14:50:08 | 000,214,408 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe -- (SNDSrvc)
SRV - [2007/09/13 06:47:38 | 000,202,088 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe -- (ccProxy)
SRV - [2007/05/28 12:00:24 | 000,139,888 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Norton Internet Security\Norton AntiVirus
avapsvc.exe -- (navapsvc)
SRV - [2007/02/01 18:20:46 | 000,045,696 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Norton Internet Security\comHost.exe -- (comHost)
SRV - [2006/12/15 19:41:50 | 000,750,720 | ---- | M] (Symantec Corporation) [On_Demand | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE -- (NSCService)
SRV - [2006/12/08 12:06:17 | 001,119,888 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe -- (Symantec Core LC)
SRV - [2006/05/11 16:50:18 | 001,160,848 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe -- (SPBBCSvc)
SRV - [2006/03/24 13:13:32 | 000,072,328 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Norton Internet Security\ccPwdSvc.exe -- (ccISPwdSvc)
SRV - [2005/10/25 10:31:54 | 000,198,368 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe -- (SAVScan)
SRV - [2005/10/25 10:28:51 | 000,054,928 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\DJSNETCN.exe -- (DJSNETCN)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2011/04/18 09:59:52 | 001,393,144 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\VirusDefs\20110424.002\NAVEX15.SYS -- (NAVEX15)
DRV - [2011/04/18 09:59:52 | 000,086,136 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\VirusDefs\20110424.002\NAVENG.SYS -- (NAVENG)
DRV - [2011/03/15 21:38:10 | 000,102,448 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2010/09/15 20:07:08 | 000,270,712 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\SymcData\idsdefs\20110420.001\SymIDSCo.sys -- (SYMIDSCO)
DRV - [2010/05/28 10:00:00 | 000,371,248 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
DRV - [2010/05/12 12:14:58 | 000,121,576 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadmdm.sys -- (ssadmdm)
DRV - [2010/05/12 12:14:56 | 000,096,488 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadbus.sys -- (ssadbus) SAMSUNG Android USB Composite Device driver (WDM)
DRV - [2010/05/12 12:14:56 | 000,012,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadmdfl.sys -- (ssadmdfl) SAMSUNG Android USB Modem (Filter)
DRV - [2010/04/27 04:25:16 | 000,098,432 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bbus.sys -- (ss_bbus) SAMSUNG USB Mobile Device (WDM)
DRV - [2010/04/27 04:25:14 | 000,132,608 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssm_mdm.sys -- (ssm_mdm)
DRV - [2010/04/27 04:25:14 | 000,104,448 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssm_bus.sys -- (ssm_bus) SAMSUNG Mobile USB Device II 1.0 driver (WDM)
DRV - [2010/04/27 04:25:14 | 000,014,848 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssm_mdfl.sys -- (ssm_mdfl)
DRV - [2010/02/06 17:30:33 | 000,005,632 | ---- | M] () [File_System | System | Running] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2009/08/05 22:48:42 | 000,054,752 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\fssfltr_tdi.sys -- (fssfltr)
DRV - [2009/03/31 10:39:36 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2009/01/06 18:27:14 | 000,124,464 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SYMEVENT.SYS -- (SymEvent)
DRV - [2008/04/13 20:45:29 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2008/01/18 16:16:28 | 000,100,648 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\a016obex.sys -- (a016obex)
DRV - [2008/01/18 16:16:26 | 000,110,504 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\a016mdm.sys -- (a016mdm)
DRV - [2008/01/18 16:16:26 | 000,104,488 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\a016mgmt.sys -- (a016mgmt) Sony Ericsson Device A016 USB WMC Device Management Drivers (WDM)
DRV - [2008/01/18 16:16:24 | 000,015,016 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\a016mdfl.sys -- (a016mdfl)
DRV - [2008/01/18 16:16:22 | 000,083,880 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\a016bus.sys -- (a016bus) Sony Ericsson Device A016 driver (WDM)
DRV - [2008/01/09 13:28:34 | 000,027,632 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\seehcri.sys -- (seehcri)
DRV - [2007/12/05 23:58:21 | 000,028,672 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CO_Mon.sys -- (CO_Mon)
DRV - [2007/10/01 14:49:26 | 000,189,320 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\SYMTDI.SYS -- (SYMTDI)
DRV - [2007/10/01 14:49:20 | 000,023,944 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\SYMREDRV.SYS -- (SYMREDRV)
DRV - [2007/10/01 14:49:16 | 000,031,624 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\SYMIDS.SYS -- (SYMIDS)
DRV - [2007/10/01 14:49:10 | 000,028,040 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\SYMNDIS.SYS -- (SYMNDIS)
DRV - [2007/10/01 14:49:04 | 000,098,184 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\SYMFW.SYS -- (SYMFW)
DRV - [2007/10/01 14:48:56 | 000,012,680 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\SYMDNS.SYS -- (SYMDNS)
DRV - [2006/12/08 12:06:17 | 000,010,344 | ---- | M] (Symantec Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\symlcbrd.sys -- (symlcbrd)
DRV - [2006/11/10 16:05:00 | 000,018,688 | ---- | M] (Arcsoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\afc.sys -- (Afc)
DRV - [2006/05/11 16:50:18 | 000,389,776 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCDrv.sys -- (SPBBCDrv)
DRV - [2005/10/25 10:31:53 | 000,053,896 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Norton Internet Security\Norton AntiVirus\Savrtpel.sys -- (SAVRTPEL)
DRV - [2005/10/25 10:31:51 | 000,334,984 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Norton Internet Security\Norton AntiVirus\savrt.sys -- (SAVRT)
DRV - [2004/08/25 07:28:46 | 000,787,456 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2003/12/08 11:53:48 | 000,053,600 | ---- | M] (THOMSON) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\alcan5wn.sys -- (alcan5wn) SpeedTouch USB ADSL PPP Networking Driver (NDISWAN)
DRV - [2003/12/08 11:53:46 | 000,070,688 | ---- | M] (THOMSON) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\alcaudsl.sys -- (alcaudsl)
DRV - [2003/07/02 04:42:00 | 000,027,904 | ---- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\viaagp1.sys -- (viaagp1)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.proximus.be/pickx
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,XMLHTTP_UUID_Default = 
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.search.defaulturl: "https://www.google.com/webhp?lr=&ie=UTF-8&oe=UTF-8&gws_rd=ssl"
FF - prefs.js..keyword.URL: "https://www.bing.com/?scope=web&mkt=fr-FR&FORM=MICJV1"
FF - prefs.js..browser.startup.homepage: "http://www.plusnetwork.com"
FF - prefs.js..keyword.URL: "https://www.bing.com/?scope=web&mkt=fr-FR&FORM=MICJV1"
 
FF - HKLM\software\mozilla\Firefox\extensions\{B728AB94-9BC7-49b7-B76A-422BB31B2FD0}: C:\Program Files\ArcSoft\Video Downloader\Plugin_FireFox [2009/05/31 00:05:52 | 000,000,000 | ---D | M]
 
[2009/04/24 20:08:06 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Extensions
[2009/04/24 20:08:06 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Extensions\mozswing@mozswing.org
[2011/04/24 17:01:02 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions
[2011/04/07 09:36:10 | 000,000,000 | ---D | M] (uTorrentBar_FR Community Toolbar) -- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e}
[2011/04/09 10:01:58 | 000,000,000 | ---D | M] (XUL Cache) -- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\{28bfdd4b-7045-4520-b01a-651e0aee5ac8}
[2007/11/22 17:48:18 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2011/04/06 16:13:26 | 000,000,000 | ---D | M] (XUL Cache) -- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\{997b6590-90b7-4757-99cc-613caff5fa7d}
[2011/04/13 19:14:52 | 000,000,000 | ---D | M] (XUL Cache) -- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\{b36fa08a-43e3-4c14-9cf3-cbca82c6d2f7}
[2010/01/07 13:48:19 | 000,000,000 | ---D | M] (XUL Cache) -- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\{c490dc17-6b81-4e9f-956e-476885c1b158}
[2011/04/15 17:12:03 | 000,000,000 | ---D | M] (XUL Cache) -- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\{de14998f-0a60-4467-bfe8-fde74bdbd3b5}
[2011/04/15 17:41:55 | 000,000,000 | ---D | M] (XUL Cache) -- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\{f0fa7ce6-040d-4576-ae3a-dd068660532b}
[2007/11/22 17:48:18 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\extensions\staged-xpis
[2009/02/06 16:01:54 | 000,001,861 | ---- | M] () -- C:\Documents and Settings\latchatchapaty\Application Data\Mozilla\Firefox\Profiles\yl5km6iz.default\searchplugins\LiveSearch.xml
[2007/11/22 17:51:37 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2006/12/09 17:13:22 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2006/12/15 14:39:48 | 000,229,376 | ---- | M] ( ) -- C:\Program Files\Mozilla Firefox\plugins
phardwaredetection.dll
 
O1 HOSTS File: ([2009/04/27 19:31:12 | 000,000,795 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Yahoo! Toolbar Helper) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Programme d'aide de l'Assistant de connexion Windows Live) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (CNisExtBho Class) - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll (Symantec Corporation)
O2 - BHO: (CNavExtBho Class) - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NAVSHEXT.DLL (Symantec Corporation)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll (Google Inc.)
O2 - BHO: (EpsonToolBandKicker Class) - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O3 - HKLM\..\Toolbar: (Norton Internet Security) - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Norton AntiVirus) - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NAVSHEXT.DLL (Symantec Corporation)
O3 - HKLM\..\Toolbar: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Internet Security) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll (Symantec Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (Norton AntiVirus) - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NAVSHEXT.DLL (Symantec Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O3 - HKCU\..\Toolbar\WebBrowser: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe Photo Downloader] C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ArcSoft Connection Service] C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.)
O4 - HKLM..\Run: [Belgacom] C:\Program Files\Belgacom\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [ccApp] C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [SpeedTouch USB Diagnostics] C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe (THOMSON Telecom Belgium)
O4 - HKLM..\Run: [Symantec PIF AlertEng] C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe (Symantec Corporation)
O4 - HKCU..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKCU..\Run: [NBJ] C:\Program Files\Ahead\Nero BackItUp\NBJ.exe (Ahead Software AG)
O4 - HKCU..\Run: [SpybotSD TeaTimer]  File not found
O4 - HKLM..\RunServices: [DJSNetCN] C:\Program Files\Fichiers communs\Symantec Shared\DJSNETCN.exe (Symantec Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll (Google Inc.)
O9 - Extra 'Tools' menuitem : Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - Reg Error: Key error. File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://appldnld.apple.com/QuickTime/qtactivex/qtplugin.cab (QuickTime Object)
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab (Facebook Photo Uploader 5 Control)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab (Trend Micro ActiveX Scan Agent 6.6)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {34DC6011-88B5-4EA9-BA7A-DC7B4F4437FE} http://ips.poi.de/ips-opdata/layout/fnac/objects/jordan.cab (JordanUploader Class)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab (MSN Photo Upload Tool)
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} http://www.casimages.com/iu/ImageUploader5.cab (Image Uploader Control)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} http://download.bitdefender.com/resources/scanner/sources/fr/scan8/oscan8.cab (BDSCANONLINE Control)
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} http://www.virustraq.com/img/scan_virus/webscan.cab (WScanCtl Class)
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} http://cid-dcf989d2c078dc99.spaces.live.com/PhotoUpload/MsnPUpld.cab (Windows Live Photo Upload Control)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} http://gfx2.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab (Windows Live Hotmail Photo Upload Tool)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKCU Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll ()
O24 - Desktop Components:0 (Ma page d'accueil) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\latchatchapaty\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\latchatchapaty\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005/04/26 18:08:30 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011/04/23 15:12:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Application Data\Malwarebytes
[2011/04/23 15:12:21 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2011/04/23 15:12:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Malwarebytes' Anti-Malware
[2011/04/23 15:12:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2011/04/23 15:12:15 | 000,019,288 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2011/04/23 15:12:14 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011/04/21 07:02:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Application Data\Azureus
[2011/04/20 12:48:06 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\latchatchapaty\Recent
[2011/04/19 11:23:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Application Data\PhotoScape
[2011/04/19 11:22:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\PhotoScape
[2011/04/19 11:22:27 | 000,000,000 | ---D | C] -- C:\Program Files\PhotoScape
[2011/04/19 11:21:45 | 017,327,195 | ---- | C] (Mooii) -- C:\Documents and Settings\latchatchapaty\Mes documents\PhotoScapeSetup_V3.5.exe
[2011/04/15 20:25:01 | 000,000,000 | ---D | C] -- C:\_OTL
[2011/04/14 17:27:20 | 000,583,544 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\latchatchapaty\Mes documents\WindowsXP-KB978601-x86-FRA.exe
[2011/04/14 17:12:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Mes documents\My Art
[2011/04/14 17:11:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Mes documents\NPS
[2011/04/14 16:44:56 | 000,576,376 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\latchatchapaty\Mes documents\WindowsXP-KB978601-x86-ENU.exe
[2011/04/13 21:18:58 | 000,000,000 | ---D | C] -- C:\Program Files\Ad-Remover
[2011/04/13 21:15:09 | 001,285,400 | ---- | C] (C_XX) -- C:\Documents and Settings\latchatchapaty\Mes documents\AD-R.exe
[2011/04/13 20:57:30 | 000,000,000 | ---D | C] -- C:\Kill'em
[2011/04/13 20:19:50 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\latchatchapaty\Mes documents\OTL.exe
[2011/04/13 20:05:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis
[2011/04/13 17:01:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Local Settings\Application Data\PackageAware
[2011/04/12 14:27:43 | 000,000,000 | ---D | C] -- C:\Program Files\AxBx
[2011/04/12 14:27:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Mes documents\mvc
[2011/04/09 16:02:38 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\latchatchapaty\Mes documents\Ma musique
[2011/04/08 17:26:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Documents\microsoft
[2011/04/08 11:41:09 | 000,000,000 | ---D | C] -- C:\Program Files\ZHPDiag
[2011/04/07 20:55:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Bureau\julia
[2011/04/07 10:40:10 | 000,000,000 | ---D | C] -- C:\Program Files\ToniArts
[2011/04/07 10:40:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\EasyCleaner
[2011/04/07 09:42:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Application Data\Sammsoft
[2011/04/07 09:33:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Application Data\uTorrent
[2011/04/07 08:34:00 | 006,783,685 | ---- | C] (Shareaza Development Team                                   ) -- C:\Documents and Settings\latchatchapaty\Mes documents\Shareaza_2.5.4.0_Win32.exe
[2011/04/07 07:25:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Application Data\PCFix
[2011/04/05 16:13:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\eMule
[2011/04/05 13:45:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\WinRAR
[2011/03/31 13:20:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Mes documents\FrostWire
[2011/03/31 13:19:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\latchatchapaty\Application Data\FrostWire
[2011/03/31 13:19:13 | 000,000,000 | ---D | C] -- C:\Program Files\FrostWire
[2011/03/28 12:20:05 | 000,000,000 | ---D | C] -- C:\Program Files\Yuna Software
[2009/09/12 10:23:31 | 000,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\latchatchapaty\Application Data\pcouffin.sys
[2006/12/27 15:45:49 | 000,151,552 | R--- | C] ( ) -- C:\WINDOWS\System32\ATIDEMGR.dll
[1 C:\Documents and Settings\latchatchapaty\Mes documents\*.tmp files -> C:\Documents and Settings\latchatchapaty\Mes documents\*.tmp -> ]
[1 C:\Documents and Settings\latchatchapaty\Bureau\*.tmp files -> C:\Documents and Settings\latchatchapaty\Bureau\*.tmp -> ]
[1 C:\Documents and Settings\latchatchapaty\*.tmp files -> C:\Documents and Settings\latchatchapaty\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011/04/26 17:02:07 | 000,001,054 | ---- | M] () -- C:\WINDOWS	asks\GoogleUpdateTaskMachineUA.job
[2011/04/26 16:59:47 | 000,002,422 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/04/26 16:57:39 | 000,001,050 | ---- | M] () -- C:\WINDOWS	asks\GoogleUpdateTaskMachineCore.job
[2011/04/26 16:56:53 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/04/26 16:56:46 | 536,137,728 | -HS- | M] () -- C:\hiberfil.sys
[2011/04/25 10:56:42 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Malwarebytes' Anti-Malware.lnk
[2011/04/22 20:00:00 | 000,000,586 | ---- | M] () -- C:\WINDOWS	asks\Norton AntiVirus - Effectuer une analyse complète du système - client.job
[2011/04/20 08:37:56 | 000,027,136 | ---- | M] () -- C:\Documents and Settings\latchatchapaty\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/04/20 06:26:11 | 006,783,685 | ---- | M] (Shareaza Development Team                                   ) -- C:\Documents and Settings\latchatchapaty\Mes documents\Shareaza_2.5.4.0_Win32.exe
[2011/04/19 11:22:55 | 000,000,724 | ---- | M] () -- C:\Documents and Settings\latchatchapaty\Application Data\Microsoft\Internet Explorer\Quick Launch\PhotoScape.lnk
[2011/04/19 11:22:55 | 000,000,706 | ---- | M] () -- C:\Documents and Settings\latchatchapaty\Bureau\PhotoScape.lnk
[2011/04/19 11:22:06 | 017,327,195 | ---- | M] (Mooii) -- C:\Documents and Settings\latchatchapaty\Mes documents\PhotoScapeSetup_V3.5.exe
[2011/04/17 19:28:15 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2011/04/14 17:27:25 | 000,583,544 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\latchatchapaty\Mes documents\WindowsXP-KB978601-x86-FRA.exe
[2011/04/14 16:45:00 | 000,576,376 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\latchatchapaty\Mes documents\WindowsXP-KB978601-x86-ENU.exe
[2011/04/13 21:19:00 | 000,001,554 | ---- | M] () -- C:\Documents and Settings\latchatchapaty\Bureau\AD-R.lnk
[2011/04/13 21:15:30 | 000,000,552 | ---- | M] () -- C:\Documents and Settings\latchatchapaty\Bureau\Raccourci vers AD-R.lnk
[2011/04/13 21:15:13 | 001,285,400 | ---- | M] (C_XX) -- C:\Documents and Settings\latchatchapaty\Mes documents\AD-R.exe
[2011/04/13 20:57:22 | 000,683,753 | ---- | M] () -- C:\Documents and Settings\latchatchapaty\Mes documents\Pre_scan.exe
[2011/04/13 20:20:54 | 000,000,545 | ---- | M] () -- C:\Documents and Settings\latchatchapaty\Bureau\Raccourci vers OTL.exe.lnk
[2011/04/13 20:19:52 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\latchatchapaty\Mes documents\OTL.exe
[2011/04/13 20:05:05 | 000,001,734 | ---- | M] () -- C:\Documents and Settings\latchatchapaty\Bureau\HijackThis.lnk
[2011/04/13 17:42:10 | 734,517,920 | ---- | M] () -- C:\Documents and Settings\latchatchapaty\Mes documents\Princesse Raiponce 2010.TRUEFRENCH.BDRiP.MD.XviD-By.Hadopix.[eMule-DivX.com].avi
[2011/04/12 14:26:49 | 005,460,749 | ---- | M] () -- C:\Documents and Settings\latchatchapaty\Mes documents\mvc.zip
[2011/04/08 11:47:42 | 000,000,512 | ---- | M] () -- C:\PhysicalDisk0_MBR.bin
[2011/04/05 16:13:11 | 000,000,652 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\eMule.lnk
[2011/04/05 16:11:14 | 003,389,035 | ---- | M] () -- C:\Documents and Settings\latchatchapaty\Mes documents\eMule0.50a-Installer.exe
[2011/04/03 01:48:04 | 000,516,646 | ---- | M] () -- C:\WINDOWS\System32\perfh00C.dat
[2011/04/03 01:48:04 | 000,444,528 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/04/03 01:48:04 | 000,087,830 | ---- | M] () -- C:\WINDOWS\System32\perfc00C.dat
[2011/04/03 01:48:04 | 000,073,032 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011/04/03 01:48:03 | 000,436,084 | ---- | M] () -- C:\WINDOWS\System32\perfh040.dat
[2011/04/03 01:48:03 | 000,059,430 | ---- | M] () -- C:\WINDOWS\System32\perfc040.dat
[2011/04/01 20:45:52 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\LauncherAccess.dt
[1 C:\Documents and Settings\latchatchapaty\Mes documents\*.tmp files -> C:\Documents and Settings\latchatchapaty\Mes documents\*.tmp -> ]
[1 C:\Documents and Settings\latchatchapaty\Bureau\*.tmp files -> C:\Documents and Settings\latchatchapaty\Bureau\*.tmp -> ]
[1 C:\Documents and Settings\latchatchapaty\*.tmp files -> C:\Documents and Settings\latchatchapaty\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011/04/25 10:58:10 | 536,137,728 | -HS- | C] () -- C:\hiberfil.sys
[2011/04/23 15:12:21 | 000,000,784 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Malwarebytes' Anti-Malware.lnk
[2011/04/19 11:22:55 | 000,000,724 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Application Data\Microsoft\Internet Explorer\Quick Launch\PhotoScape.lnk
[2011/04/19 11:22:55 | 000,000,706 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Bureau\PhotoScape.lnk
[2011/04/13 21:19:00 | 000,001,554 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Bureau\AD-R.lnk
[2011/04/13 21:15:30 | 000,000,552 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Bureau\Raccourci vers AD-R.lnk
[2011/04/13 20:57:14 | 000,683,753 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Mes documents\Pre_scan.exe
[2011/04/13 20:20:54 | 000,000,545 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Bureau\Raccourci vers OTL.exe.lnk
[2011/04/13 20:05:05 | 000,001,734 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Bureau\HijackThis.lnk
[2011/04/12 14:26:46 | 005,460,749 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Mes documents\mvc.zip
[2011/04/08 11:47:42 | 000,000,512 | ---- | C] () -- C:\PhysicalDisk0_MBR.bin
[2011/04/05 16:17:39 | 734,517,920 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Mes documents\Princesse Raiponce 2010.TRUEFRENCH.BDRiP.MD.XviD-By.Hadopix.[eMule-DivX.com].avi
[2011/04/05 16:13:11 | 000,000,652 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\eMule.lnk
[2011/04/05 16:11:09 | 003,389,035 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Mes documents\eMule0.50a-Installer.exe
[2009/11/13 16:16:19 | 000,000,736 | ---- | C] () -- C:\WINDOWS\SamsungMaster.INI
[2009/11/13 16:09:08 | 000,765,952 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009/11/13 16:09:08 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009/11/13 16:09:08 | 000,008,704 | ---- | C] () -- C:\WINDOWS\System32\vidccleaner.exe
[2009/09/12 10:23:31 | 000,081,920 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Application Data\ezpinst.exe
[2009/09/12 10:23:31 | 000,007,176 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Application Data\pcouffin.cat
[2009/09/12 10:23:31 | 000,001,144 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Application Data\pcouffin.inf
[2009/08/25 13:49:00 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2009/08/25 13:49:00 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2009/08/25 13:48:46 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Application Data\$_hpcst$.hpc
[2009/05/09 14:10:52 | 000,084,480 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2009/01/05 21:39:16 | 000,000,062 | ---- | C] () -- C:\WINDOWS\pcvcdbr.INI
[2009/01/05 21:39:16 | 000,000,000 | ---- | C] () -- C:\WINDOWS\pcvcdvw.INI
[2008/12/31 18:04:42 | 000,691,560 | ---- | C] () -- C:\WINDOWS\System32\OGACheckControl.dll
[2008/12/31 18:04:42 | 000,528,744 | ---- | C] () -- C:\WINDOWS\System32\OGAVerify.exe
[2008/11/07 12:22:04 | 000,303,104 | ---- | C] () -- C:\WINDOWS\Uninstall_tkexe.exe
[2008/10/15 12:02:47 | 000,000,033 | ---- | C] () -- C:\WINDOWS\Multimedia manager.INI
[2008/09/26 11:07:02 | 000,000,924 | ---- | C] () -- C:\WINDOWS\posteriza.INI
[2008/09/16 16:58:43 | 000,000,011 | ---- | C] () -- C:\WINDOWS\permis.ini
[2008/07/30 14:35:53 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\LauncherAccess.dt
[2008/07/30 14:31:45 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2008/05/24 15:29:08 | 000,217,073 | ---- | C] () -- C:\WINDOWS\meta4.exe
[2008/05/24 15:29:07 | 000,502,784 | ---- | C] () -- C:\WINDOWS\x2.64.exe
[2008/05/24 15:29:07 | 000,240,128 | ---- | C] () -- C:\WINDOWS\System32\x.264.exe
[2008/05/24 15:29:07 | 000,027,648 | ---- | C] () -- C:\WINDOWS\System32\AVSredirect.dll
[2008/05/24 15:29:06 | 000,471,552 | ---- | C] () -- C:\WINDOWS\System32\Smab.dll
[2008/03/24 12:52:03 | 000,000,137 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Local Settings\Application Data\fusioncache.dat
[2008/03/09 12:36:16 | 000,436,084 | ---- | C] () -- C:\WINDOWS\System32\perfh040.dat
[2008/03/09 12:36:16 | 000,059,430 | ---- | C] () -- C:\WINDOWS\System32\perfc040.dat
[2007/12/05 23:58:18 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\drivers\CO_Mon.sys
[2007/09/29 09:45:12 | 000,131,072 | R--- | C] () -- C:\WINDOWS\System32\mtkjpeg.dll
[2007/04/12 16:01:33 | 000,000,118 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI
[2007/04/05 19:00:51 | 000,000,029 | ---- | C] () -- C:\WINDOWS\DEBUGSM.INI
[2006/12/27 15:45:59 | 000,516,096 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe
[2006/12/16 14:58:37 | 000,027,136 | ---- | C] () -- C:\Documents and Settings\latchatchapaty\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006/12/13 15:22:06 | 000,092,240 | ---- | C] () -- C:\WINDOWS\System32\EPPICPrinterDB.dat
[2006/12/13 15:22:06 | 000,001,120 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_IT.dat
[2006/12/13 15:22:06 | 000,001,107 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_GE.dat
[2006/12/13 15:22:06 | 000,000,099 | ---- | C] () -- C:\WINDOWS\System32\PICSDK.ini
[2006/12/13 15:22:05 | 000,026,154 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern1.dat
[2006/12/13 15:22:05 | 000,024,903 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern3.dat
[2006/12/13 15:22:05 | 000,021,390 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern5.dat
[2006/12/13 15:22:05 | 000,020,148 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern2.dat
[2006/12/13 15:22:05 | 000,011,811 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern4.dat
[2006/12/13 15:22:05 | 000,004,943 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern6.dat
[2006/12/13 15:22:05 | 000,001,146 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_DU.dat
[2006/12/13 15:22:05 | 000,001,139 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_PT.dat
[2006/12/13 15:22:05 | 000,001,139 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_BP.dat
[2006/12/13 15:22:05 | 000,001,136 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_ES.dat
[2006/12/13 15:22:05 | 000,001,129 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_FR.dat
[2006/12/13 15:22:05 | 000,001,129 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_CF.dat
[2006/12/13 15:22:05 | 000,001,104 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_EN.dat
[2006/12/13 14:58:39 | 000,000,025 | ---- | C] () -- C:\WINDOWS\CDE DX3800EFGIPSD.ini
[2006/12/13 14:43:28 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2006/12/10 20:38:41 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2006/12/09 17:13:25 | 000,000,000 | ---- | C] () -- C:\WINDOWS
sreg.dat
[2006/05/25 02:22:06 | 000,053,248 | ---- | C] () -- C:\WINDOWS\bdoscandel.exe
[2005/04/27 22:59:56 | 000,005,606 | ---- | C] () -- C:\WINDOWS\System32\stci.dll
[2005/04/26 19:32:16 | 000,004,205 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2005/04/26 19:30:56 | 000,103,032 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2005/04/26 19:24:32 | 000,000,131 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2005/04/26 19:22:21 | 000,000,092 | ---- | C] () -- C:\WINDOWS\CMISETUP.INI
[2005/04/26 19:22:21 | 000,000,026 | ---- | C] () -- C:\WINDOWS\CMCDPLAY.INI
[2005/04/26 19:22:17 | 000,233,472 | ---- | C] () -- C:\WINDOWS\System32\cmirmdrv.exe
[2005/04/26 19:22:17 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\cmirmdrv.dll
[2005/04/26 19:22:17 | 000,000,536 | ---- | C] () -- C:\WINDOWS\Wininit.ini
[2005/04/26 19:22:16 | 000,266,240 | ---- | C] () -- C:\WINDOWS\CMIUninstall.exe
[2005/04/26 19:22:16 | 000,225,280 | ---- | C] () -- C:\WINDOWS\CmiRmRedundDir.exe
[2005/04/26 19:22:16 | 000,028,672 | ---- | C] () -- C:\WINDOWS\CMIRmDriver.dll
[2005/04/26 18:33:13 | 000,036,864 | R--- | C] () -- C:\WINDOWS\System32\ctrldll.dll
[2005/04/26 18:33:13 | 000,032,768 | R--- | C] () -- C:\WINDOWS\System32mctrl.exe
[2005/04/26 18:22:23 | 000,002,699 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2005/04/26 18:22:21 | 000,005,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2005/04/26 18:10:33 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2005/04/26 18:05:20 | 000,021,892 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2005/03/14 15:38:28 | 000,000,469 | ---- | C] () -- C:\WINDOWS\bdoscandellang.ini
[2004/08/25 07:27:00 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx.dll
[2004/08/25 07:26:56 | 000,389,120 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx.exe
[2004/08/05 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2004/08/05 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004/08/05 14:00:00 | 000,516,646 | ---- | C] () -- C:\WINDOWS\System32\perfh00C.dat
[2004/08/05 14:00:00 | 000,444,528 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2004/08/05 14:00:00 | 000,322,810 | ---- | C] () -- C:\WINDOWS\System32\perfi00C.dat
[2004/08/05 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004/08/05 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004/08/05 14:00:00 | 000,087,830 | ---- | C] () -- C:\WINDOWS\System32\perfc00C.dat
[2004/08/05 14:00:00 | 000,073,032 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2004/08/05 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004/08/05 14:00:00 | 000,034,108 | ---- | C] () -- C:\WINDOWS\System32\perfd00C.dat
[2004/08/05 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004/08/05 14:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004/08/05 14:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2004/08/05 14:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2004/08/05 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32
oise.dat
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 16 bytes -> C:\Documents and Settings\latchatchapaty\Mes documents\Shareaza Downloads:Shareaza.GUID

< End of report >

gen-hackman · Answer

salut retour je l'aurais voulu via cijoint.fr

gen-hackman · Answer

ta page d'accueil "skynet.be" , c'est normal ?

gen-hackman · Answer

Pour nettoyer les outils utilsés et mieux sécuriser ton pc -------------------------------------------------------------- Je t'invite à suivre ce tutoriel pour le final il inclut ♦ du nettoyage après desinfection ♦ des mises à jour pour combler des failles de securité de logiciels importants non mis à jour ▶ et enfin quelques conseils à suivre afin que la protection soit plus efficace _________________________________________________ Telecharge ici : PureRa (par l'editeur de JavaRa) Lance-le (clic droit "executer en tant qu'administrateur" pour Vista/7) => Configuration clique sur "Clean" L'outil va faire son scan puis son nettoyage à la fin du rapport tu auras une ligne comme ca : Total space cleaned: 8140878 bytes transmets juste cette ligne , le reste importe peu __________________________________________________ Si nous avons utilisé Defogger et cliqué sur "disable" , tu peux le "reenable" __________________________________________________ ▶ Télécharge DelFix sur ton bureau. ▶ Lance le, tape suppression puis valide Patiente pendant le scan jusqu'à l'ouverture du rapport. ▶ Copie/Colle le contenu du rapport dans ta prochaine réponse. Note : Le rapport se trouve également sous C:\DelFix.txt tu peux le desinstaller ___________________________________________________ ▶ Télécharge :ATF Cleaner par Atribune Ferme tous tes navigateurs Double-clique (clic droit "en tant qu'administrateur" pour Vista) ATF-Cleaner.exe afin de lancer le programme. Sous l'onglet Main, choisis : Select All Clique sur le bouton Empty Selected Si tu utilises le navigateur Firefox : Clique Firefox au haut et choisis : Select All Clique le bouton Empty Selected a NOTE : Si tu veux conserver tes mots de passe sauvegardés, clique No à l'invité. Si tu utilises le navigateur Opera : Clique Opera au haut et choisis : Select All Clique le bouton Empty Selected NOTE : Si tu veux conserver tes mots de passe sauvegardés, clique No à l'invité. Clique Exit, du menu prinicipal, afin de fermer le programme. Pour obtenir du Support technique, double-clique l'adresse électronique située au bas de chacun des menus. __________________________________________________ ▶ Tu peux garder ATF pour d'eventuels nettoyages un peu plus poussés __________________________________________________ ▶ Télécharge et installe CCleaner (N'installe pas la Yahoo Toolbar) : * Lance-le.(clic droit "en tant qu'administrateur" pour Vista) => Configuration fais le nettoyage dans le registre et dans le nettoyeur autant de fois qu'il trouve des choses à l analyse __________________________________________________ Attention : ne pas toucher au PC pendant qu'il travaille ! ▶ Nettoyage et Défragmentation de tes Disques *Nettoyage : Clic droit sur "poste de travail"(ordinateur pour vista) ==>"ouvrir" ==>clic droit sur le disque C ==>Propriétés ==>onglet "Général" Cliques sur le bouton "nettoyage de disque", OK tu le fais pour chacun de tes disques ________________________________________________ *Vérifications des erreurs : Clic droit sur "poste de travail"(ordinateur pour vista) ==>"ouvrir" ==>clic droit sur le disque C ==>Propriétés ==>onglet "Outil" "Vérifier maintenant", une boîte s'ouvre, cocher les cases : -réparer automatiquement les erreurs... -rechercher et tenter une récupération... --->Démarrer, ok Note : s'il te dis de redémarrer ton Pc pour le faire , tu redémarres et tu laisses faire, cela prend un peu de temps c'est normal tu le fais pour chacun de tes disques ________________________________________________ ensuite toujours dans le même onglet tu choisis : *Défragmentation : "défragmenter maintenant", OK une boîte s'ouvre, tu sélectionnes le disque à défragmenter, et tu cliques sur "analyser", puis après l'analyse, "défragmenter" . OK tu le fais pour chacun de tes disques _______________________________________________ Note : si tu as un utilitaire pour défragmenter , utilises le à la place pour ce faire Defraggler est proposé _________________________________________________ ▶ Peux-tu vérifier ta Console Java ? : et installer la nouvelle version si besoin est (dans ce cas désinstalle avant l'ancienne version). voici pour desinstaller : JavaRa Décompresse le fichier sur le Bureau (Clic droit > Extraire tout). * Double-clique (clic droit "en tant qu'administrateur" pour Vista) sur le répertoire JavaRa. * Puis double-clique sur le fichier JavaRa.exe (le exe peut ne pas s'afficher). * Choisis Français puis clique sur Select. * Clique sur Recherche de mises à jour. * Sélectionne Mettre à jour via jucheck.exe puis clique sur Rechercher. * Autorise le processus à se connecter s'il le demande, clique sur Installer et suis les instructions d'installation qui prennent quelques minutes. * L'installation est terminée, reviens à l'écran de JavaRa et clique sur Effacer les anciennes versions. * Clique sur Oui pour confirmer. Laisse travailler et clique ensuite sur OK, puis une deuxième fois sur OK. * Un rapport va s'ouvrir. Poste-le dans ta prochaine réponse. * Ferme l'application. Note : le rapport se trouve aussi dans C:\ sous le nom JavaRa.log. _________________________________________________ ▶ Mets à jour Adobe Reader si ce n'est pas le cas (désinstalle avant la version antérieure) et pense à decocher l'installation de McAfee proposée discrêtement __________________________________________________ ▶ Je te conseille si tu n en as pas , afin de mieux securiser ton pc , d'installer un parefeu : Online armor ou KERIO ou JETICO ou ZONE ALARM (mettre que le parefeu gratuit) ou COMODO https://www.commentcamarche.net/telecharger/securite/16545-online-armor-personal-firewall/ https://www.01net.com/telecharger/windows/Securite/firewall/fiches/39911.html https://forum.pcastuces.com/sujet.asp?f=25&s=35606 https://www.clubic.com/telecharger-fiche11071-sunbelt-personal-firewall-ex-kerio.html https://manuelsdaide.com/contact/ http://www.open-files.com/forum/index.php?showtopic=29277 https://www.commentcamarche.net/telecharger/securite/24863-zonealarm/ ___________________________________________________ ▶ Tu peux aussi vider ta corbeille,quoi que Ccleaner le fasse tout seul _____________________________________________________ ▶ Si nous avons utilisé MalwareByte's Anti-Malware , vide sa quarantaine : * Lance le programme puis clique sur . * Sélectionne tous les éléments puis clique sur . * Quitte le programme. ______________________________________________________ ▶ si tu as installé Antivir : Configuration ________________________________________________________ ▶ Idem pour ton antivirus : vide sa quarantaine si ce n'est pas déjà fait ______________________________________________________ ▶ Désactive et réactive la restauration de système, pour cela : suis les instructions du lien : Lien XP Lien Vista ▶ Sitôt fait , recrées un point de restoration dit "sain" pour parer à quelques eventuels problêmes dans le futur ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Quelques conseils et recommandations pour l'avenir : ▶ Passe un coup de MalwareByte's Anti-Malware de temps en temps (1 fois par semaine , suivant l'utilisation que tu fais de ton PC. ▶ Utilise aussi tes autres logiciels de protection (scannes antivirus, antispywares...). N'oublie pas de faire les mises à jour avant de les utiliser. * Pense aussi à faire une défragmentation de tes disques durs de temps en temps (garde suffisamment d'espace sur C:\ (1/3 de libre pour être à l'aise)) _____________ ▶ Pour bien protéger ton PC : [1 seul Antivirus] + [1 seul Pare feu] + [Un bon Antispyware] + [Mises à Jour récentes Windows et Logiciels de Protection] + [Utilisation de Firefox -ou autres- (Internet Explorer présente des failles de sécurité qui mettent longtemps avant d'être corrigées mais il faut absolument le conserver pour les mises à jour Windows et Windows live Messenger)] Je te conseille d'installer cette extension pour Firefox pour securiser ton surf : WOT Je te conseille d'installer cette extension pour Internet Explorer pour securiser ton surf : WOT PS : En fait la meilleure des protections c'est toi même : ce que tu fais avec ton PC : où tu surfes, télécharges...ect.... Les virus utilisent les failles de ton PC pour infecter un système à lire aussi Et ceci ▶ dans le souhait de vouloir desinstaller un antivirus au profit d'un autre , voici quelques liens : Desinstaller Avast Desinstaller BitDefender Desinstaller Norton Desinstaller Kaspersky Desinstaller AVG ou tout en un : Désinstallation Antivirus , Parefeu , Antispyware _____________ ▶ Si tu as Vista n'oublie pas de réactiver le controle des comptes des utilisateurs(UAC) ___________ ▶ si nous avons affiché les fichiers cachés , n'oublies pas de les remettre en attribut "caché" ▶ Clique sur le menu Demarrer /Panneau de configuration/Options des dossiers/ puis dans l'onglet Affichage * - Décoche Afficher les fichiers et dossiers cachés * - coche Masquer les extensions des fichiers dont le type est connu * - coche Masquer les fichiers protégés du système d'exploitation (recommandé) ▶ clique sur Appliquer, puis OK. ____________ Voila, Bonne lecture, à bientot , une fois tout ceci fait, tu peux mettre le topic en resolu Bonne continuation et surtout , prudence et bon surf :)

latchatchapaty · Answer

JavaRa 1.16 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Fri Apr 29 20:43:11 2011

Found and removed: C:\Documents and Settings\latchatchapaty\Application Data\Sun\Java\jre1.6.0_15

Found and removed: C:\Documents and Settings\latchatchapaty\Application Data\Sun\Java\JRERunOnce.exe

Found and removed: Applications\javaw.exe

Found and removed: CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}

Found and removed: JavaScript

Found and removed: JavaScript Author

Found and removed: JavaScript1.1

Found and removed: JavaScript1.1 Author

Found and removed: JavaScript1.2

Found and removed: JavaScript1.2 Author

Found and removed: Software\Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}

Found and removed: Software\Classes\JavaPlugin.160_07

Found and removed: Software\Classes\JavaPlugin.160_17

Found and removed: Software\JavaSoft\Java Update

Found and removed: Software\JavaSoft\Java Runtime Environment\1.6.0_17

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}

Found and removed: SOFTWARE\Classes\JavaPlugin

Found and removed: SOFTWARE\Classes\JavaPlugin.160_17

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_07

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_17

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_17

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_17

Found and removed: SOFTWARE\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}

------------------------------------

Finished reporting.

Pourriez vous verifier mon pc

93 réponses

Newsletters