Suppression virus bagle/Beagle probable

essayes en mode sans échec
surtout, ne redémarre pas ton pc en mode sans échec par msconfig, c'est vivement déconseillé

donc redemarrer le pc en mode sans echec en faisant F8 c ca?

Ah..Bonne (ou mauvaise selon le point de vue ou l'on se place..) il m'a retiré 12 fichiers infecté par Win32.HLLM.Beagle..mais je suis pas au bout de mes peines a mon avis ce n'est que le debut..

apparemment mauvais signe il en reste j'arrive toujours pas a reactiver avast ..

Ton Avast est probablement corrompu, du à l'infection

Essaye ceci, car j'aimerai bien voir l'état du PC

Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.

-> http://images.malwareremoval.com/random/RSIT.exe

! Déconnecte toi et ferme toutes tes applications en cours !

Double-clique sur RSIT.exe pour le lancer .

-> Une première fenêtre s'ouvre avec en titre : Disclaimer of warranty .

* Devant l'option List files/folders created ... , tu choisis : 2 months

* clique ensuite sur Continue pour lancer l'analyse ...


-> laisse faire le scan et ne touche pas au PC ...


Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-note).

Poste le contenu de log.txt (c'est celui qui apparait à l'écran), ainsi que de info.txt (que tu verras dans la barre des tâches), pour analyse et attends la suite ...

Important : poste un rapport, puis l'autre dans la réponse suivante
Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum


( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )-

ok je fais ca de suite

Premier fichier texte, log.txt voila le resultat :

Logfile of random's system information tool 1.06 (written by random/random)
Run by Stanislas at 2009-07-26 16:19:27
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
System drive C: has 53 GB (46%) free of 114 GB
Total RAM: 2037 MB (52% free)

HijackThis download failed

======Scheduled tasks folder======

C:\Windows\tasks\User_Feed_Synchronization-{6D319BD8-BE1C-4C2E-8926-EC2CD8AFD151}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-11-29 436288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}]
Kiwee Toolbar - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeIEToolbar.dll [2009-05-26 277648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96}]
ShowBarObj Class - C:\Windows\system32\ActiveToolBand.dll [2007-04-25 299008]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-09 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - Acer eDataSecurity Management - C:\Windows\system32\eDStoolbar.dll [2007-04-25 151552]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar avec bloqueur de fenêtres pop-up - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-11-29 436288]
{6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - Kiwee Toolbar - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeIEToolbar.dll [2009-05-26 277648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
"ALaunch"=C:\Acer\ALaunch\AlaunchClient.exe []
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-07-06 4669440]
"eDataSecurity Loader"=C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe [2007-04-25 457216]
"Acer Tour"= []
"PLFSetL"=C:\Windows\PLFSetL.exe [2007-07-05 94208]
"LManager"=C:\PROGRA~1\LAUNCH~1\LManager.exe [2007-06-27 752136]
"PlayMovie"=C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe [2007-05-24 206952]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [2007-03-21 174872]
"Apoint"=C:\Program Files\Apoint2K\Apoint.exe [2007-06-06 159744]
"eRecoveryService"= []
"Acer Tour Reminder"=C:\Acer\AcerTour\Reminder.exe [2004-04-27 876544]
"WarReg_PopUp"=C:\Acer\WR_PopUp\WarReg_PopUp.exe [2006-11-05 57344]
"SetPanel"=C:\Acer\APanel\APanel.cmd []
"eAudio"=C:\Acer\Empowering Technology\eAudio\eAudio.exe [2007-06-11 1286144]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-09 148888]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2008-01-02 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2008-01-02 166424]
"Persistence"=C:\Windows\system32\igfxpers.exe [2008-01-02 133656]
"KiweeHook"=C:\Program Files\Kiwee Toolbar\2.8.167\kwtbaim.exe [2009-05-26 56456]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-05-26 413696]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-07-13 292128]
"IS CfgWiz"=C:\Program Files\Common Files\Symantec Shared\OPC\{31011D49-D90C-4da0-878B-78D28AD507AF}\cltUIStb.exe /MODULE CfgWiz /GUID {BC8D3EAF-F864-4d4b-AB4D-B3D0C32E2840} /MODE CfgWiz /CMDLINE REBOOT []
"ccApp"=C:\Program Files\Common Files\Symantec Shared\ccApp.exe []
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-07-26 81000]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"ClipSrv"=C:\Users\STANIS~1\AppData\Roaming\clipsrv.exe [2009-07-23 57344]
"rsvp"=C:\Users\STANIS~1\LOCALS~1\APPLIC~1\rsvp.exe /waitservice []
"Esent Utl"=C:\Users\STANIS~1\AppData\Local\Temp\esentutl.exe [2009-07-23 57344]
"Spool"=C:\Windows\System\spoolsv.exe [2009-07-23 57344]
"Logman"=C:\Windows\System32\drivers\logman.exe [2009-07-23 57344]
"ComRepl"=C:\Users\STANIS~1\AppData\Local\Temp\comrepl.exe [2009-07-23 57344]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-19 1233920]
"Acer Tour Reminder"=C:\Acer\AcerTour\Reminder.exe [2004-04-27 876544]
"MsnMsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2009-02-06 3885408]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]
"TomTomHOME.exe"=C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [2009-04-24 251240]
"ManyCam"=C:\Program Files\ManyCam 2.3\ManyCam.exe [2008-10-14 1791272]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"Esent Utl"=C:\Users\STANIS~1\LOCALS~1\APPLIC~1\MICROS~1\esentutl.exe [2009-07-23 57344]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Empowering Technology Launcher.lnk - C:\Acer\Empowering Technology\eAPLauncher.exe

C:\Users\Stanislas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
is-8VVKT.lnk - C:\Users\Stanislas\Favorites\Desktop\Virus Removal Tool1\is-8VVKT\startup.exe
is-UKG5H.lnk - C:\Users\Stanislas\Favorites\Desktop\Virus Removal Tool\is-UKG5H\startup.exe
MSN Pictures Displayer.lnk - C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
OneNote 2007 - Capture d'écran et lancement.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
OpenOffice.org 3.0.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="eNetHook.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2008-01-02 200704]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0440de99-7c0a-11dd-ba1c-fbafbf520c7b}]
shell\AutoRun\command - F:\InstallTomTomHOME.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{397388e0-45fe-11de-8570-f498cf164843}]
shell\AutoRun\command - G:\InstallTomTomHOME.exe


======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 2 months======

2009-07-26 16:16:02 ----D---- C:\Program Files\trend micro
2009-07-26 16:16:01 ----D---- C:\rsit
2009-07-26 10:46:24 ----A---- C:\Windows\system32\aswBoot.exe
2009-07-26 01:36:48 ----SHD---- C:\Windows\system32\%APPDATA%
2009-07-25 18:17:36 ----A---- C:\4btx799q.exe
2009-07-25 18:00:43 ----A---- C:\Windows\ntbtlog.txt
2009-07-25 16:41:28 ----A---- C:\Windows\system32\ban_list.txt
2009-07-25 16:07:36 ----D---- C:\Program Files\ESET
2009-07-25 15:49:17 ----D---- C:\Program Files\Panda Security
2009-07-25 15:40:11 ----D---- C:\Windows\BDOSCAN8
2009-07-25 13:34:40 ----D---- C:\Windows\Sun
2009-07-25 13:22:29 ----A---- C:\Startvir.txt
2009-07-25 12:52:09 ----D---- C:\FindyKill
2009-07-23 17:51:43 ----A---- C:\Windows\system32\igfxres.dll
2009-07-23 17:51:42 ----A---- C:\Windows\sessmgr.exe
2009-07-23 17:51:41 ----A---- C:\Users\Stanislas\AppData\Roaming\clipsrv.exe
2009-07-23 17:48:47 ----HD---- C:\Users\Stanislas\AppData\Roaming\m
2009-07-23 17:47:34 ----A---- C:\Users\Stanislas\AppData\Roaming\esentutl.exe
2009-07-23 17:47:08 ----HD---- C:\Users\Stanislas\AppData\Roaming\drivers
2009-07-23 17:36:29 ----D---- C:\Users\Stanislas\AppData\Roaming\Babylon
2009-07-23 17:36:29 ----D---- C:\ProgramData\Babylon
2009-07-23 17:31:25 ----D---- C:\Program Files\eToro
2009-07-23 17:30:38 ----D---- C:\Program Files\WinZix
2009-07-23 17:29:23 ----D---- C:\Program Files\Windows Live Safety Center
2009-07-22 18:52:28 ----D---- C:\Program Files\iPod
2009-07-22 18:52:25 ----D---- C:\Program Files\iTunes
2009-07-15 19:44:53 ----A---- C:\Windows\system32\t2embed.dll
2009-07-15 19:44:53 ----A---- C:\Windows\system32\fontsub.dll
2009-07-15 19:44:53 ----A---- C:\Windows\system32\dciman32.dll
2009-07-15 19:44:53 ----A---- C:\Windows\system32\atmfd.dll
2009-06-27 19:12:43 ----A---- C:\Windows\system32\infocardapi.dll
2009-06-27 19:12:41 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2009-06-27 19:12:40 ----A---- C:\Windows\system32\icardagt.exe
2009-06-27 19:12:39 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2009-06-27 19:12:39 ----A---- C:\Windows\system32\icardres.dll
2009-06-27 19:12:37 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2009-06-27 19:12:32 ----A---- C:\Windows\system32\PresentationHost.exe
2009-06-27 19:04:23 ----A---- C:\Windows\system32\dfshim.dll
2009-06-27 19:04:19 ----A---- C:\Windows\system32\mscoree.dll
2009-06-27 19:04:17 ----A---- C:\Windows\system32\netfxperf.dll
2009-06-27 19:03:56 ----A---- C:\Windows\system32\mscorier.dll
2009-06-27 19:03:48 ----A---- C:\Windows\system32\mscories.dll
2009-06-27 19:02:45 ----A---- C:\Windows\system32\iesetup.dll
2009-06-27 19:02:44 ----A---- C:\Windows\system32\ieui.dll
2009-06-27 19:02:44 ----A---- C:\Windows\system32\iertutil.dll
2009-06-27 19:02:44 ----A---- C:\Windows\system32\iernonce.dll
2009-06-27 19:02:44 ----A---- C:\Windows\system32\ie4uinit.exe
2009-06-27 19:02:43 ----A---- C:\Windows\system32\wininet.dll
2009-06-27 19:02:43 ----A---- C:\Windows\system32\urlmon.dll
2009-06-27 19:02:43 ----A---- C:\Windows\system32\jsproxy.dll
2009-06-27 19:02:43 ----A---- C:\Windows\system32\iedkcs32.dll
2009-06-27 19:02:41 ----A---- C:\Windows\system32\mshtml.dll
2009-06-27 19:02:41 ----A---- C:\Windows\system32\ieframe.dll
2009-06-27 19:00:35 ----A---- C:\Windows\system32\mshtmled.dll
2009-06-27 19:00:35 ----A---- C:\Windows\system32\icardie.dll
2009-06-27 19:00:34 ----A---- C:\Windows\system32\msls31.dll
2009-06-27 19:00:34 ----A---- C:\Windows\system32\mshtmler.dll
2009-06-27 19:00:34 ----A---- C:\Windows\system32\admparse.dll
2009-06-27 19:00:33 ----A---- C:\Windows\system32\imgutil.dll
2009-06-27 19:00:33 ----A---- C:\Windows\system32\ieakeng.dll
2009-06-27 19:00:33 ----A---- C:\Windows\system32\dxtrans.dll
2009-06-27 19:00:33 ----A---- C:\Windows\system32\dxtmsft.dll
2009-06-27 19:00:33 ----A---- C:\Windows\system32\corpol.dll
2009-06-27 19:00:32 ----A---- C:\Windows\system32\occache.dll
2009-06-27 19:00:32 ----A---- C:\Windows\system32\msfeedsbs.dll
2009-06-27 19:00:32 ----A---- C:\Windows\system32\licmgr10.dll
2009-06-27 19:00:32 ----A---- C:\Windows\system32\inseng.dll
2009-06-27 19:00:32 ----A---- C:\Windows\system32\iepeers.dll
2009-06-27 19:00:31 ----A---- C:\Windows\system32\WinFXDocObj.exe
2009-06-27 19:00:31 ----A---- C:\Windows\system32\wextract.exe
2009-06-27 19:00:31 ----A---- C:\Windows\system32\webcheck.dll
2009-06-27 19:00:31 ----A---- C:\Windows\system32\msrating.dll
2009-06-27 19:00:31 ----A---- C:\Windows\system32\ieakui.dll
2009-06-27 19:00:31 ----A---- C:\Windows\system32\ieaksie.dll
2009-06-27 19:00:30 ----A---- C:\Windows\system32\mstime.dll
2009-06-27 19:00:30 ----A---- C:\Windows\system32\msfeedssync.exe
2009-06-27 19:00:29 ----A---- C:\Windows\system32\pngfilt.dll
2009-06-27 19:00:29 ----A---- C:\Windows\system32\msfeeds.dll
2009-06-27 19:00:29 ----A---- C:\Windows\system32\advpack.dll
2009-06-27 19:00:28 ----A---- C:\Windows\system32\ieapfltr.dll
2009-06-27 19:00:25 ----A---- C:\Windows\system32\vbscript.dll
2009-06-27 19:00:25 ----A---- C:\Windows\system32\jscript.dll
2009-06-27 19:00:24 ----A---- C:\Windows\system32\url.dll
2009-06-27 19:00:22 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2009-06-27 19:00:22 ----A---- C:\Windows\system32\mshta.exe
2009-06-27 19:00:22 ----A---- C:\Windows\system32\iexpress.exe
2009-06-27 19:00:22 ----A---- C:\Windows\system32\iesysprep.dll
2009-06-27 19:00:17 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2009-06-27 19:00:17 ----A---- C:\Windows\system32\SetDepNx.exe
2009-06-27 19:00:16 ----A---- C:\Windows\system32\PDMSetup.exe
2009-06-27 19:00:16 ----A---- C:\Windows\system32\ieUnatt.exe
2009-06-23 18:50:29 ----D---- C:\Program Files\QuickTime
2009-06-14 11:36:06 ----A---- C:\Windows\system32\EncDec.dll
2009-06-14 11:36:05 ----A---- C:\Windows\system32\psisdecd.dll
2009-06-12 18:05:17 ----D---- C:\lgupload
2009-06-12 17:39:08 ----D---- C:\Users\Stanislas\AppData\Roaming\LG Electronics
2009-06-12 01:04:30 ----D---- C:\Program Files\LG Electronics
2009-06-12 01:02:34 ----D---- C:\Program Files\LG PC Suite 2
2009-06-12 01:01:58 ----D---- C:\Users\Stanislas\AppData\Roaming\InstallShield
2009-06-11 17:50:01 ----A---- C:\Windows\system32\localspl.dll
2009-06-11 17:49:59 ----A---- C:\Windows\system32\rpcrt4.dll
2009-06-09 18:18:18 ----D---- C:\Program Files\Video Capture Master

======List of files/folders modified in the last 2 months======

2009-07-26 16:19:18 ----D---- C:\Windows\Temp
2009-07-26 16:16:02 ----RD---- C:\Program Files
2009-07-26 12:29:10 ----D---- C:\Windows\System32
2009-07-26 12:29:10 ----D---- C:\Windows\inf
2009-07-26 12:29:10 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-07-26 10:50:29 ----HD---- C:\Windows\system32\drivers
2009-07-26 10:48:36 ----SD---- C:\Windows\Downloaded Program Files
2009-07-26 10:47:10 ----D---- C:\Windows\system32\Tasks
2009-07-26 10:43:17 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-07-26 10:43:16 ----D---- C:\ProgramData\Spybot - Search & Destroy
2009-07-26 10:14:53 ----D---- C:\Windows\Prefetch
2009-07-26 01:47:43 ----D---- C:\Windows\Minidump
2009-07-26 01:47:34 ----D---- C:\Windows
2009-07-26 01:38:40 ----D---- C:\Program Files\Common Files\Sandlot Shared
2009-07-25 18:02:27 ----D---- C:\Windows\system32\catroot2
2009-07-25 16:45:29 ----D---- C:\ToA
2009-07-25 16:45:21 ----HD---- C:\ProgramData
2009-07-25 16:44:08 ----HD---- C:\Windows\system32\GroupPolicy
2009-07-25 16:16:04 ----D---- C:\Dark Age of Camelot - Catacombs
2009-07-25 14:05:26 ----D---- C:\Windows\system
2009-07-25 12:26:56 ----SHD---- C:\System Volume Information
2009-07-23 00:45:52 ----D---- C:\Windows\winsxs
2009-07-23 00:45:52 ----D---- C:\Program Files\Internet Explorer
2009-07-22 18:53:00 ----SHD---- C:\Windows\Installer
2009-07-22 18:52:27 ----D---- C:\Program Files\Common Files\Apple
2009-07-22 18:23:38 ----D---- C:\Windows\system32\catroot
2009-07-17 18:09:02 ----D---- C:\MyWorks
2009-07-16 14:43:03 ----D---- C:\Program Files\Windows Mail
2009-07-12 21:59:08 ----D---- C:\ProgramData\Kaspersky Lab
2009-07-07 17:10:56 ----A---- C:\Windows\system32\mrt.exe
2009-07-03 22:17:46 ----D---- C:\Windows\Tasks
2009-07-02 19:03:41 ----D---- C:\Windows\Microsoft.NET
2009-07-02 19:03:34 ----RSD---- C:\Windows\assembly
2009-06-27 20:07:58 ----D---- C:\Windows\rescache
2009-06-27 19:47:24 ----D---- C:\Windows\system32\fr-FR
2009-06-27 19:47:22 ----D---- C:\Windows\system32\XPSViewer
2009-06-27 19:47:22 ----D---- C:\Windows\system32\wbem
2009-06-27 19:47:22 ----D---- C:\Windows\system32\en-US
2009-06-27 19:47:17 ----D---- C:\Windows\system32\migration
2009-06-27 19:47:15 ----D---- C:\Windows\PolicyDefinitions
2009-06-27 19:33:42 ----D---- C:\ProgramData\Microsoft Help
2009-06-27 19:31:46 ----RSD---- C:\Windows\Fonts
2009-06-27 19:31:43 ----D---- C:\Program Files\Common Files\microsoft shared
2009-06-27 19:31:28 ----D---- C:\Program Files\Microsoft Works
2009-06-14 19:04:13 ----D---- C:\Windows\ehome
2009-06-12 01:04:29 ----HD---- C:\Program Files\InstallShield Installation Information
2009-06-06 13:01:40 ----D---- C:\Program Files\Messenger Plus! Live

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 111111s1ro1s1a;111111s1ro1s1a; \??\C:\Users\Stanislas\AppData\Roaming\drivers\111wfs1intwq.sys [2009-07-26 114959]
R1 DritekPortIO;Dritek General Port I/O; \??\C:\PROGRA~1\LAUNCH~1\DPortIO.sys [2006-11-02 20112]
R1 sK9Ou0s;sK9Ou0s; \??\C:\Users\Stanislas\AppData\Roaming\drivers\11s11ro1s1a2.sys [2009-07-26 7168]
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; \??\C:\Program Files\Acer Arcade Deluxe\Play Movie\000.fcl [2006-11-02 13560]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\DRIVERS\aswMonFlt.sys [2009-02-05 51792]
R2 int15;int15; \??\C:\Acer\Empowering Technology\eRecovery\int15.sys [2006-12-07 76584]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2007-02-24 39936]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-01-23 42496]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2007-03-21 37376]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2007-01-30 8704]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\DRIVERS\Apfiltr.sys [2007-06-14 154624]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2007-06-18 737280]
R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-19 14208]
R3 DKbFltr;Dritek Keyboard Filter Driver; C:\Windows\system32\DRIVERS\DKbFltr.sys [2006-11-02 21264]
R3 enecir;ENE CIR Receiver; C:\Windows\system32\DRIVERS\enecir.sys [2007-03-07 32256]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-03-19 23400]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2007-04-26 984064]
R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2007-04-26 208384]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-01-02 2016256]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-07-10 1792792]
R3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver; C:\Windows\system32\DRIVERS\ManyCam.sys [2008-01-14 21632]
R3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
R3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
R3 NTIDrvr;Upper Class Filter Driver; C:\Windows\system32\DRIVERS\NTIDrvr.sys [2007-08-10 6144]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-19 88576]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2007-08-02 1749376]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2007-04-26 660480]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-19 11264]
S1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys []
S1 aswSP;avast! Self Protection; C:\Windows\system32\drivers\aswSP.sys []
S1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys []
S2 aswFsBlk;aswFsBlk; C:\Windows\system32\DRIVERS\aswFsBlk.sys []
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2007-06-05 179712]
S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2006-11-02 200704]
S3 IDSvix86;Symantec Intrusion Prevention Driver; \??\C:\PROGRA~2\Symantec\DEFINI~1\SymcData\idsdefs\20061025.029\IDSvix86.sys [2006-11-21 202872]
S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 NETw3v32;Pilote de carte Intel(R) PRO/Wireless 3945ABG pour Windows Vista 32 bits; C:\Windows\system32\DRIVERS\NETw3v32.sys [2006-11-02 1781760]
S3 NETw4v32;Pilote de carte Intel(R) Wireless WiFi Link pour Windows Vista 32 bits; C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-04-30 2219520]
S3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT.SYS []
S3 usbaudio;Pilote USB audio (WDM); C:\Windows\system32\drivers\usbaudio.sys [2008-01-19 73088]
S3 usbbus;LGE Mobile Composite USB Device; C:\Windows\system32\DRIVERS\lgusbbus.sys [2007-07-11 12416]
S3 UsbDiag;LGE Mobile USB Serial Port; C:\Windows\system32\DRIVERS\lgusbdiag.sys [2007-07-11 19840]
S3 USBModem;LGE Mobile USB Modem; C:\Windows\system32\DRIVERS\lgusbmodem.sys [2007-07-11 21632]
S3 usbscan;Pilote de scanneur USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-19 39936]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AGWinService;AG Windows Service; C:\Program Files\AGI\common\win32\PythonService.exe [2009-05-26 10240]
R2 ALaunchService;ALaunch Service; C:\Acer\ALaunch\ALaunchSvc.exe [2007-01-26 50688]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-06-05 144712]
R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 eDataSecurity Service;eDSService.exe; C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe [2007-04-25 457512]
R2 eLockService;eLock Service; C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe [2007-03-14 24576]
R2 eNet Service;eNet Service; C:\Acer\Empowering Technology\eNet\eNet Service.exe [2007-05-22 135168]
R2 eRecoveryService;eRecovery Service; C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [2007-02-13 53248]
R2 eSettingsService;eSettings Service; C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe [2007-05-10 24576]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe [2007-03-21 355096]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440]
R2 MobilityService;MobilityService; C:\Acer\Mobility Center\MobilityService.exe [2006-11-24 107008]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2007-01-23 266343]
R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe [2009-04-24 92008]
R2 WMIService;ePower Service; C:\Acer\Empowering Technology\ePower\ePowerSvc.exe [2007-09-14 167936]
R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2007-01-30 386560]
R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2009-07-13 542496]
S2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-07-26 18752]
S2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-07-26 138680]
S2 CLTNetCnService;Symantec Lic NetConnect service; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe /h ccCommon []
S3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-07-26 254040]
S3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-07-26 352920]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

-----------------EOF-----------------

Deuxieme rapport, info.txt :

info.txt logfile of random's system information tool 1.06 2009-07-26 16:16:15

======Uninstall list======

-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{31403E22-2FDB-452F-AE9E-20854633226D}\Setup.EXE" -uninst
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A450831D-25F6-4F42-9662-D000B25E0D82}\setup.exe" -uninstall
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AA4BF92B-2AAF-11DA-9D78-000129760D75}\setup.exe" -uninstall
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B145EC69-66F5-11D8-9D75-000129760D75}\setup.exe" -uninstall
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B804C424-B66D-447A-84BD-C6B88C392C3A}\setup.exe" -uninstall
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F79A208D-D929-11D9-9D77-000129760D75}\setup.exe" -uninstall
Acer Arcade Deluxe-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EFBDC2B0-FAA8-4B78-8DE1-AEBE7958FA37}\setup.exe" -uninstall
Acer Crystal Eye Webcam Video Class Camera -->C:\Program Files\InstallShield Installation Information\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}\setup.exe -runfromtemp -l0x040c -removeonly -u
Acer Crystal Eye webcam-->C:\Program Files\InstallShield Installation Information\{AA047D7C-5E7C-4878-B75C-77589151B563}\setup.exe -runfromtemp -l0x0009 -removeonly
Acer eAudio Management-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{57265292-228A-41FA-9AEC-4620CBCC2739}\Setup.exe" -uninstall
Acer eDataSecurity Management-->C:\Acer\Empowering Technology\eDataSecurity\eDSnstHelper.exe -Operation UNINSTALL
Acer eLock Management-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{116FF17B-1A30-4FC2-9B01-5BC5BD46B0B3}\setup.exe" -l0x40c -removeonly
Acer Empowering Technology-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AB6097D9-D722-4987-BD9E-A076E2848EE2}\setup.exe" -l0x40c -removeonly
Acer eNet Management-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C06554A1-2C1E-4D20-B613-EE62C79927CC}\setup.exe" -l0x40c -removeonly
Acer ePower Management-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{58E5844B-7CE2-413D-83D1-99294BF6C74F}\setup.exe" -l0x40c -removeonly
Acer ePresentation Management-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BF839132-BD43-4056-ACBF-4377F4A88E2A}\setup.exe" -l0x40c -removeonly
Acer eSettings Management-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CE65A9A0-9686-45C6-9098-3C9543A412F0}\setup.exe" -l0x40c -removeonly
Acer GridVista-->C:\Windows\UnInst32.exe GridV.UNI
Acer Mobility Center Plug-In-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{11316260-6666-467B-AC34-183FCB5D4335}\setup.exe" -l0x40c -removeonly
Acer ScreenSaver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}\setup.exe" -l0x9 -removeonly
Acer Tour-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{94389919-B0AA-4882-9BE8-9F0B004ECA35}\setup.exe" -l0x40c -removeonly
Activation Assistant for the 2007 Microsoft Office suites-->"C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}\Microsoft Office Activation Assistant.exe" REMOVE=TRUE MODIFY=FALSE
Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)-->MsiExec.exe /X{6846389C-BAC0-4374-808E-B120F86AF5D7}
Adobe Reader 8.1.2-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A81200000003}
ALPS Touch Pad Driver-->C:\Program Files\Apoint2K\Uninstap.exe ADDREMOVE
Apple Mobile Device Support-->MsiExec.exe /I{C337BDAF-CB4E-47E2-BE1A-CB31BB7DD0E3}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
Big Kahuna Reef 2-->"C:\Program Files\Acer GameZone\Big Kahuna Reef 2\Uninstall.exe" "C:\Program Files\Acer GameZone\Big Kahuna Reef 2\install.log"
Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
Cake Mania-->"C:\Program Files\Acer GameZone\Cake Mania\Uninstall.exe" "C:\Program Files\Acer GameZone\Cake Mania\install.log"
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Dark Age of Camelot - Shrouded Isles-->C:\SHROUD~1\UNWISE.EXE C:\SHROUD~1\INSTALL.LOG
Dynasty-->"C:\Program Files\Acer GameZone\Dynasty\Uninstall.exe" "C:\Program Files\Acer GameZone\Dynasty\install.log"
ESET Online Scanner v3-->C:\Program Files\ESET\ESET Online Scanner\OnlineScannerUninstaller.exe
Galapago-->"C:\Program Files\Acer GameZone\Galapago\Uninstall.exe" "C:\Program Files\Acer GameZone\Galapago\install.log"
Galerie de photos Windows Live-->MsiExec.exe /X{44E54A81-9D91-4AA1-9417-80AFF134F5FF}
HDAUDIO Soft Data Fax Modem with SmartCP-->C:\Program Files\CONEXANT\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFAOR2C06_118\UIU32m.exe -U -IAcrZUn32z.inf
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
Intel(R) Graphics Media Accelerator Driver-->C:\Windows\system32\igxpun.exe -uninstall
Intel(R) Matrix Storage Manager-->C:\Windows\System32\Imsmudlg.exe
iTunes-->MsiExec.exe /I{99ECF41F-5CCA-42BD-B8B8-A8333E2E2944}
Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216010FF}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}
Kiwee Toolbar-->"C:\Program Files\AGI\common\bootstrapper.exe" -uninstall"\"C:/Program Files/AGI/Python25\pythonw.exe\" \"C:\Program Files\AGI\common\pyagcore\installer.pyc\" -u KiweeToolbar"
Launch Manager-->C:\Windows\UnInst32.exe LManager.UNI
LG PC Suite-->C:\Program Files\InstallShield Installation Information\{993960EE-CA4D-443F-8F88-E24260DD5FD2}\setup.exe -runfromtemp -l0x040c -removeonly
LG USB Modem driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C3ABE126-2BB2-4246-BFE1-6797679B3579}\setup.exe" -l0x40c LG -removeonly
Luxor 2-->"C:\Program Files\Acer GameZone\Luxor 2\Uninstall.exe" "C:\Program Files\Acer GameZone\Luxor 2\install.log"
ManyCam 2.3 (remove only)-->"C:\Program Files\ManyCam 2.3\uninstall.exe"
Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft .NET Framework 3.5 SP1-->C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00A1-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office Home and Student 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
Microsoft Office OneNote MUI (French) 2007-->MsiExec.exe /X{90120000-00A1-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {14809F99-C601-4D4A-9391-F1E8FAA964C5}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Works-->MsiExec.exe /I{6B1CB38D-E2E4-4A30-933D-EFDEBA76AD9C}
Mise à jour Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {B761869A-B85C-40E2-994C-A1CE78AC8F2C}
Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {C3DCA38E-005E-41BA-A52A-7C3429F351C3}
Mise à jour Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {81536A04-DBFB-4DB3-978F-0F284590C223}
MSN Pictures Displayer 4.6-->"C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe" /U
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB941833)-->MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
Mystery Case Files - Prime Suspects-->"C:\Program Files\Acer GameZone\Mystery Case Files - Prime Suspects\Uninstall.exe" "C:\Program Files\Acer GameZone\Mystery Case Files - Prime Suspects\install.log"
Mystery Case Files Ravenhearst-->"C:\Program Files\Acer GameZone\Mystery Case Files Ravenhearst\Uninstall.exe" "C:\Program Files\Acer GameZone\Mystery Case Files Ravenhearst\install.log"
Norton Internet Security-->MsiExec.exe /I{3672B097-EA69-4bfe-B92F-29AE6D9D2B34}
NTI Backup NOW! 4.7-->"C:\Program Files\InstallShield Installation Information\{67ADE9AF-5CD9-4089-8825-55DE4B366799}\setup.exe" -removeonly
NTI CD & DVD-Maker-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2} /l1036 CDM7
OpenOffice.org 3.0-->MsiExec.exe /I{6860B340-530D-46B3-91F8-1AE1F70F7C33}
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
PDFCreator-->C:\Program Files\PDFCreator\unins000.exe
PowerProducer 3.72-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\Setup.EXE" -uninstall
QuickTime-->MsiExec.exe /I{C78EAC6F-7A73-452E-8134-DBB2165C5A68}
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m
RICOH R5C83x/84x Flash Media Controller Driver Ver.3.51.01-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{59F6A514-9813-47A3-948C-8A155460CC2A}\setup.exe" -l0x40c anything
Sandlot Games Client Services-->"C:\Program Files\Common Files\Sandlot Shared\unins000.exe"
Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
Security Update for 2007 Microsoft Office System (KB969679)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C66E4A6C-6E07-4C63-8CCD-2493B5087C73}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for Microsoft Office Excel 2007 (KB969682)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C03803BD-745A-46F8-8557-817DED578780}
Security Update for Microsoft Office PowerPoint 2007 (KB957789)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
Security Update for Microsoft Office system 2007 (KB969613)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
Security Update for Microsoft Office Word 2007 (KB969604)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {CF3D6499-709C-43D0-8908-BC5652656050}
Star Defender 3-->"C:\Program Files\Acer GameZone\Star Defender 3\Uninstall.exe" "C:\Program Files\Acer GameZone\Star Defender 3\install.log"
TomTom HOME 2.6.3.1609-->C:\Program Files\TomTom HOME 2\Uninstall TomTom HOME.exe
TomTom HOME Visual Studio Merge Modules-->MsiExec.exe /I{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}
Treasures o



Pour moi c'est du chinois!

Supprimer les restes de symantec

http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/fr_docid/20050414110429924

désinstaller avast

https://www.avast.com/fr-fr/uninstall-utility

installer Avira Antivir
http://www.commentcamarche.net/telecharger/telecharger-55-antivir

Suppression des restes symantec ca donne :

can not create temp folder archive.

Je redemarre en mode sans echec et je refait voir ce que ca donne.Et j'ne profites pour degager avast en mme temps
a tt

alors.. en fait j'ai relancer la suprpesion de symantec en MSE ca a marché, idem pour avast..du coup me suis dit..peut etre que usbfix va marcher aussi..Et bingo c'est en cours je poste le rapport des que fini! a tt et milles merci encore

pas du tout.. et la le scan du poste de travail c'est la cata..c encore plein de bagle..et on est qu'a 60%

je comprends pourquoi cela bloque

mauvais signe je suppose?

scan a 70% 4 menaces trouvés, 41 objets infectés..

voila le rapport :


############################## | FindyKill V5.004 |

# User : Stanislas (Administrateurs) # PC-DE-STANISLAS
# Update on 17/07/09 by Chiquitine29
# Start at: 23:01:51 | 26/07/2009
# Website : http://pagesperso-orange.fr/NosTools/index.html

# Intel(R) Pentium(R) Dual CPU T2370 @ 1.73GHz
# Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6001 32-bit) # Service Pack 1
# Internet Explorer 8.0.6001.18783
# Windows Firewall Status : Enabled

# C:\ # Disque fixe local # 111,69 Go (51,59 Go free) [ACER] # NTFS
# D:\ # Disque fixe local # 56,75 Go (56,66 Go free) [DATA] # NTFS
# E:\ # Disque CD-ROM
# F:\ # Disque fixe local # 54,69 Go (54,6 Go free) [Musique] # NTFS
# G:\ # Disque amovible # 980,55 Mo (528,53 Mo free) [PS GRAND CH] # FAT32

############################## | Processus actifs |

C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\Dwm.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\svchost.exe
C:\Program Files\AGI\common\win32\PythonService.exe
C:\Acer\ALaunch\ALaunchSvc.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
C:\Acer\Empowering Technology\eNet\eNet Service.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Acer\Mobility Center\MobilityService.exe
C:\Windows\system32\svchost.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Windows\system32\svchost.exe
C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\runonce.exe
C:\Windows\system32\conime.exe

################## | C: |


################## | C:\Windows |

Supprimé ! C:\Windows\Prefetch\MDELK.EXE-288F7189.pf
Supprimé ! C:\Windows\Prefetch\WINUPGRO.EXE-B9E72D89.pf

################## | C:\Windows\system32 |

Supprimé ! C:\Windows\system32\ban_list.txt

################## | C:\Windows\system32\drivers |

Supprimé ! C:\Windows\system32\drivers\down

################## | C:\Users\Stanislas\AppData\Roaming |

Supprimé ! C:\Users\Stanislas\AppData\Roaming\drivers\111wfs1intwq.sys
Supprimé ! C:\Users\Stanislas\AppData\Roaming\drivers\11s11ro1s1a2.sys
Supprimé ! C:\Users\Stanislas\AppData\Roaming\drivers\winupgro.exe
Supprimé ! C:\Users\Stanislas\AppData\Roaming\m\data.oct
Supprimé ! C:\Users\Stanislas\AppData\Roaming\m\flec006.exe
Supprimé ! C:\Users\Stanislas\AppData\Roaming\m\list.oct
Supprimé ! C:\Users\Stanislas\AppData\Roaming\m\srvlist.oct
Supprimé ! C:\Users\Stanislas\AppData\Roaming\drivers\downld
Supprimé ! C:\Users\Stanislas\AppData\Roaming\drivers
Supprimé ! C:\Users\Stanislas\AppData\Roaming\m\shared
Supprimé ! C:\Users\Stanislas\AppData\Roaming\m

################## | Autres ... |

# Références de comparaison Bagle MD5 :

File : C:\Users\Stanislas\AppData\Roaming\drivers\winupgro.exe
-> Crc32 : 91f4539e | Md5 : e148b325bb56ce39cc8627f9660895f3

Supprimé ! "C:\Acer\AcerTour\Reminder.exe"
-> Size : 876544 | Crc32 : 91f4539e | Md5 : e148b325bb56ce39cc8627f9660895f3


################## | Temporary Internet Files |

Supprimé ! C:\Users\Stanislas\Local Settings\Temporary Internet Files\Content.IE5\EID2ZAGL\b64_3[1].jpg
Supprimé ! C:\Users\Stanislas\Local Settings\Temporary Internet Files\Content.IE5\EID2ZAGL\b64_6[1].jpg
Supprimé ! C:\Users\Stanislas\Local Settings\Temporary Internet Files\Content.IE5\EID2ZAGL\file[1].txt
Supprimé ! C:\Users\Stanislas\Local Settings\Temporary Internet Files\Content.IE5\HCQTRP8W\b64[1].jpg
Supprimé ! C:\Users\Stanislas\Local Settings\Temporary Internet Files\Content.IE5\HCQTRP8W\b64[2].jpg
Supprimé ! C:\Users\Stanislas\Local Settings\Temporary Internet Files\Content.IE5\HCQTRP8W\file[1].txt
Supprimé ! C:\Users\Stanislas\Local Settings\Temporary Internet Files\Content.IE5\I7AQ17ES\b64[1].jpg
Supprimé ! C:\Users\Stanislas\Local Settings\Temporary Internet Files\Content.IE5\I7AQ17ES\b64_3[1].jpg
Supprimé ! C:\Users\Stanislas\Local Settings\Temporary Internet Files\Content.IE5\I7AQ17ES\b64_3[2].jpg
Supprimé ! C:\Users\Stanislas\Local Settings\Temporary Internet Files\Content.IE5\I7AQ17ES\b64_3[3].jpg
Supprimé ! C:\Users\Stanislas\Local Settings\Temporary Internet Files\Content.IE5\I7AQ17ES\b64_6[2].jpg
Supprimé ! C:\Users\Stanislas\Local Settings\Temporary Internet Files\Content.IE5\I7AQ17ES\mxd[1].jpg
Supprimé ! C:\Users\Stanislas\Local Settings\Temporary Internet Files\Content.IE5\OS6X3RYA\b64[1].jpg
Supprimé ! C:\Users\Stanislas\Local Settings\Temporary Internet Files\Content.IE5\OS6X3RYA\b64_1[1].jpg
Supprimé ! C:\Users\Stanislas\Local Settings\Temporary Internet Files\Content.IE5\OS6X3RYA\b64_3[1].jpg
Supprimé ! C:\Users\Stanislas\Local Settings\Temporary Internet Files\Content.IE5\OS6X3RYA\b64_3[2].jpg

################## | Registre / Clés infectieuses |

Supprimé ! [HKCU\Software\bisoft]
Supprimé ! [HKCU\Software\DateTime4]
Supprimé ! [HKCU\Software\Microsoft\Windows\UI] "KEY540534"
Supprimé ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] "drvsyskit"
Supprimé ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] "german.exe"
Supprimé ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] "mule_st_key"
Supprimé ! [HKU\S-1-5-21-4092390610-2276262758-338597328-1000\Software\FFC]
Supprimé ! [HKCU\Software\Local AppWizard-Generated Applications\patch]
Supprimé ! [HKCU\Software\Local AppWizard-Generated Applications\winupgro]

################## | Etat / Services / Informations |

# Mode sans echec : OK


# Affichage des fichiers cachés : OK

# Uac : OK

# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# EapHost -> Start = 2 ( Good = 2 | Bad = 4 )
# Wlansvc -> Start = 2 ( Good = 2 | Bad = 4 )
# SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 )
# windefend -> Start = 2 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )

# Présent ! C:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# Présent ! D:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# Présent ! F:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# Présent ! G:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.

################## | PEH ... |

Corrompu : C:\Program Files\Acer GameZone\Cake Mania\Launch.exe
[Offset = 00000104 - Valeur = 0x0001]

Corrompu : C:\Program Files\Acer GameZone\Dynasty\Launch.exe
[Offset = 00000104 - Valeur = 0x0001]

Corrompu : C:\Program Files\Acer GameZone\Galapago\Launch.exe
[Offset = 00000104 - Valeur = 0x0001]

Corrompu : C:\Program Files\Acer GameZone\Luxor 2\Launch.exe
[Offset = 00000104 - Valeur = 0x0001]

Corrompu : C:\Program Files\Acer GameZone\Mystery Case Files - Prime Suspects\Launch.exe
[Offset = 00000104 - Valeur = 0x0001]

Corrompu : C:\Program Files\Acer GameZone\Mystery Case Files Ravenhearst\Launch.exe
[Offset = 00000104 - Valeur = 0x0001]

Corrompu : C:\Program Files\Acer GameZone\Star Defender 3\Launch.exe
[Offset = 00000104 - Valeur = 0x0001]

Corrompu : C:\Program Files\Acer GameZone\Treasures of the Deep\Launch.exe
[Offset = 00000104 - Valeur = 0x0001]

Corrompu : C:\Program Files\Acer GameZone\Zuma Deluxe\Launch.exe
[Offset = 00000104 - Valeur = 0x0001]

Corrompu : C:\Windows\assembly\GAC_32\mcupdate\6.0.6000.0__31bf3856ad364e35\mcupdate.exe
[Offset = 000000E4 - Valeur = 0x0001]

Tentative de réparation...
Sauvegarde : mcupdate.exe.REN
[Offset = 000000E4 - Nouvelle valeur = 0x4C01]
Fichier réparé avec succès.


Corrompu : C:\Windows\ehome\mcupdate.exe
[Offset = 000000E4 - Valeur = 0x0001]

Tentative de réparation...
Sauvegarde : mcupdate.exe.REN
[Offset = 000000E4 - Nouvelle valeur = 0x4C01]
Fichier réparé avec succès.


Corrompu : C:\Windows\winsxs\x86_mcupdate_31bf3856ad364e35_6.0.6001.18115_none_c897052babd1f663\mcupdate.exe
[Offset = 000000E4 - Valeur = 0x0001]

Le fichier n'a pas pu être réparé.



################## | Cracks / Keygens / Serials |

"C:\Users\Stanislas\Favorites\.housecall6.6\"patch.exe""
26/07/2009 10:17 |Size 218736 |Crc32 12c79c8b |Md5 b9a80ba0083fb8196f8ca0bef053ea4e


################## | ! Fin du rapport # FindyKill V5.004 ! |

"C:\Users\Stanislas\Favorites\.housecall6.6\"patch.exe""
26/07/2009 10:17 |Size 218736 |Crc32 12c79c8b |Md5 b9a80ba0083fb8196f8ca0bef053ea4e

il faudra supprimer ceci, mais c'est dans un dossier caché

http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/fr_docid/20050414110429924
pour supprimer restes de symantec


https://www.avast.com/fr-fr/uninstall-utility
pour désinstaller proprement avast



http://www.commentcamarche.net/telecharger/telecharger-55-antivir
pour installer Avira Antivir meilleur que avast

on avait pas deja fait ca tout a l'heure?

t'as installé un anti-virus ? Moi j'en vois pas avant de le faire, refait moi un RSIT

Bonjour, as tu réessayé lop SD ?

non je le fait de suite

Voila pour le rapport log SD :
--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU T2370 @ 1.73GHz )
BIOS : Default System BIOS
USER : Stanislas ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:111 Go (Free:51 Go)
D:\ (Local Disk) - NTFS - Total:56 Go (Free:56 Go)
E:\ (CD or DVD)
F:\ (Local Disk) - NTFS - Total:54 Go (Free:54 Go)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 28/07/2009|22:12 )

[ UAC => 1 ]

--------------------\\ Listing des dossiers dans Local

[10/05/2008|17:44] C:\Users\STANIS~1\AppData\Local\Acer Arcade Deluxe
[10/05/2008|14:43] C:\Users\STANIS~1\AppData\Local\acer eNM
[01/06/2008|16:12] C:\Users\STANIS~1\AppData\Local\Adobe
[21/05/2009|20:02] C:\Users\STANIS~1\AppData\Local\Apple
[04/06/2009|19:26] C:\Users\STANIS~1\AppData\Local\Apple Computer
[10/05/2008|14:41] C:\Users\STANIS~1\AppData\Local\Application Data
[16/06/2008|11:52] C:\Users\STANIS~1\AppData\Local\CyberLink
[31/03/2009|19:08] C:\Users\STANIS~1\AppData\Local\d3d9caps.dat
[13/07/2009|00:44] C:\Users\STANIS~1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[29/06/2008|20:27] C:\Users\STANIS~1\AppData\Local\DVDivine
[27/06/2009|19:55] C:\Users\STANIS~1\AppData\Local\GDIPFONTCACHEV1.DAT
[10/05/2008|14:41] C:\Users\STANIS~1\AppData\Local\Historique
[16/06/2008|11:51] C:\Users\STANIS~1\AppData\Local\HomeMedia
[28/07/2009|21:52] C:\Users\STANIS~1\AppData\Local\IconCache.db
[27/07/2009|07:00] C:\Users\STANIS~1\AppData\Local\Microsoft
[19/06/2009|14:26] C:\Users\STANIS~1\AppData\Local\Microsoft Games
[11/07/2008|18:40] C:\Users\STANIS~1\AppData\Local\Microsoft Help
[17/07/2008|21:36] C:\Users\STANIS~1\AppData\Local\Oberon Games
[15/06/2008|18:51] C:\Users\STANIS~1\AppData\Local\PlayMovie
[10/05/2008|17:44] C:\Users\STANIS~1\AppData\Local\PowerCinema
[28/07/2009|21:56] C:\Users\STANIS~1\AppData\Local\Temp
[10/05/2008|14:41] C:\Users\STANIS~1\AppData\Local\Temporary Internet Files
[06/09/2008|15:17] C:\Users\STANIS~1\AppData\Local\TomTom
[29/01/2009|01:20] C:\Users\STANIS~1\AppData\Local\VideoMagician
[28/12/2008|21:07] C:\Users\STANIS~1\AppData\Local\VirtualStore

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[28/07/2009 19:46][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{6D319BD8-BE1C-4C2E-8926-EC2CD8AFD151}.job
[28/07/2009 21:54][--ah-----] C:\Windows\tasks\SA.DAT
[28/07/2009 21:52][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[10/08/2007|09:59] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
[21/05/2009|20:04] C:\ProgramData\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[15/08/2008|12:05] C:\ProgramData\Adobe
[21/05/2009|20:00] C:\ProgramData\Apple
[21/05/2009|20:04] C:\ProgramData\Apple Computer
[02/11/2006|15:02] C:\ProgramData\Application Data
[26/07/2009|23:42] C:\ProgramData\Avira
[23/07/2009|17:36] C:\ProgramData\Babylon
[10/05/2008|14:37] C:\ProgramData\Bureau
[25/01/2009|13:42] C:\ProgramData\CanonBJ
[29/06/2008|20:25] C:\ProgramData\CyberLink
[02/11/2006|15:02] C:\ProgramData\Desktop
[02/11/2006|15:02] C:\ProgramData\Documents
[11/10/2008|11:53] C:\ProgramData\Downloaded Installations
[10/05/2008|14:37] C:\ProgramData\Favoris
[02/11/2006|15:02] C:\ProgramData\Favorites
[12/05/2008|12:32] C:\ProgramData\Forge of Games
[12/07/2009|21:59] C:\ProgramData\Kaspersky Lab
[29/06/2008|14:21] C:\ProgramData\Kaspersky Lab Setup Files
[27/07/2009|17:09] C:\ProgramData\Malwarebytes
[10/05/2008|14:37] C:\ProgramData\Menu D‚marrer
[11/08/2008|23:46] C:\ProgramData\Messenger Plus!
[20/01/2009|21:19] C:\ProgramData\Microsoft
[27/06/2009|19:33] C:\ProgramData\Microsoft Help
[10/05/2008|14:37] C:\ProgramData\ModŠles
[17/06/2008|17:41] C:\ProgramData\MumboJumbo
[26/07/2009|17:40] C:\ProgramData\NortonInstaller
[25/07/2009|16:45] C:\ProgramData\ntuser.pol
[15/06/2008|20:35] C:\ProgramData\Sandlot Games
[26/07/2009|10:43] C:\ProgramData\Spybot - Search & Destroy
[02/11/2006|15:02] C:\ProgramData\Start Menu
[17/07/2008|21:36] C:\ProgramData\TEMP
[02/11/2006|15:02] C:\ProgramData\Templates
[06/09/2008|15:12] C:\ProgramData\TomTom
[10/05/2008|15:59] C:\ProgramData\WLInstaller
[11/05/2008|14:51] C:\ProgramData\Yahoo! Companion

--------------------\\ Listing des dossiers dans C:\Program Files

[21/02/2008|11:37] C:\Program Files\Acer Arcade Deluxe
[21/02/2008|11:30] C:\Program Files\ACER Crystal Eye webcam
[27/07/2009|22:54] C:\Program Files\Acer GameZone
[21/02/2008|11:41] C:\Program Files\Acer Inc
[10/08/2007|09:59] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[15/08/2008|12:06] C:\Program Files\Adobe
[21/02/2008|11:39] C:\Program Files\Apoint2K
[21/05/2009|20:02] C:\Program Files\Apple Software Update
[26/07/2009|23:42] C:\Program Files\Avira
[21/05/2009|20:03] C:\Program Files\Bonjour
[27/07/2009|22:52] C:\Program Files\Common Files
[10/08/2007|08:40] C:\Program Files\CONEXANT
[10/08/2007|09:43] C:\Program Files\CyberLink
[25/07/2009|16:07] C:\Program Files\ESET
[23/07/2009|17:34] C:\Program Files\eToro
[10/05/2008|14:37] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[12/06/2009|01:04] C:\Program Files\InstallShield Installation Information
[21/02/2008|11:29] C:\Program Files\Intel
[28/07/2009|21:52] C:\Program Files\Internet Explorer
[22/07/2009|18:52] C:\Program Files\iPod
[22/07/2009|18:52] C:\Program Files\iTunes
[17/04/2009|19:28] C:\Program Files\Java
[29/11/2008|17:19] C:\Program Files\JRE
[21/02/2008|11:35] C:\Program Files\Launch Manager
[12/06/2009|01:04] C:\Program Files\LG Electronics
[12/06/2009|01:03] C:\Program Files\LG PC Suite 2
[27/07/2009|18:14] C:\Program Files\Malwarebytes' Anti-Malware
[28/12/2008|21:29] C:\Program Files\ManyCam 2.3
[30/10/2008|15:18] C:\Program Files\Messenger
[06/06/2009|13:01] C:\Program Files\Messenger Plus! Live
[20/01/2009|21:28] C:\Program Files\Microsoft
[11/05/2008|15:06] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[02/11/2006|14:37] C:\Program Files\Microsoft Games
[10/08/2007|09:58] C:\Program Files\Microsoft Office
[01/03/2009|21:49] C:\Program Files\Microsoft Silverlight
[20/01/2009|21:29] C:\Program Files\Microsoft SQL Server Compact Edition
[27/06/2009|19:31] C:\Program Files\Microsoft Works
[10/08/2007|09:55] C:\Program Files\Microsoft.NET
[21/07/2008|21:44] C:\Program Files\Movie Maker
[02/11/2006|14:37] C:\Program Files\MSBuild
[29/10/2008|20:13] C:\Program Files\MSN Pictures Displayer
[11/05/2008|14:55] C:\Program Files\MSXML 4.0
[10/08/2007|09:18] C:\Program Files\NewTech Infosystems
[29/11/2008|17:19] C:\Program Files\OpenOffice.org 3
[26/07/2009|10:48] C:\Program Files\Panda Security
[20/10/2008|19:27] C:\Program Files\PDFCreator
[23/06/2009|18:51] C:\Program Files\QuickTime
[10/08/2007|08:31] C:\Program Files\Realtek
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[26/07/2009|10:43] C:\Program Files\Spybot - Search & Destroy
[21/02/2008|11:30] C:\Program Files\SUYIN
[21/05/2009|19:08] C:\Program Files\TomTom DesktopSuite
[06/09/2008|15:17] C:\Program Files\TomTom HOME
[21/05/2009|19:11] C:\Program Files\TomTom HOME 2
[21/05/2009|19:11] C:\Program Files\TomTom International B.V
[27/07/2009|07:07] C:\Program Files\trend micro
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[09/06/2009|18:18] C:\Program Files\Video Capture Master
[16/06/2008|12:35] C:\Program Files\VideoLAN
[21/07/2008|21:44] C:\Program Files\Windows Calendar
[21/07/2008|21:44] C:\Program Files\Windows Collaboration
[21/07/2008|21:44] C:\Program Files\Windows Defender
[21/07/2008|21:44] C:\Program Files\Windows Journal
[17/02/2009|12:54] C:\Program Files\Windows Live
[23/07/2009|17:29] C:\Program Files\Windows Live Safety Center
[20/01/2009|21:27] C:\Program Files\Windows Live SkyDrive
[16/07/2009|14:43] C:\Program Files\Windows Mail
[13/03/2009|18:51] C:\Program Files\Windows Media Player
[10/05/2008|14:37] C:\Program Files\Windows NT
[21/07/2008|21:44] C:\Program Files\Windows Photo Gallery
[21/07/2008|21:44] C:\Program Files\Windows Sidebar
[22/07/2008|19:49] C:\Program Files\WinRAR
[10/05/2008|14:41] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[15/08/2008|12:05] C:\Program Files\Common Files\Adobe
[22/07/2009|18:52] C:\Program Files\Common Files\Apple
[10/08/2007|09:55] C:\Program Files\Common Files\DESIGNER
[10/08/2007|09:30] C:\Program Files\Common Files\InstallShield
[29/11/2008|17:17] C:\Program Files\Common Files\Java
[10/08/2007|09:18] C:\Program Files\Common Files\LightScribe
[27/06/2009|19:31] C:\Program Files\Common Files\microsoft shared
[10/08/2007|09:18] C:\Program Files\Common Files\muvee Technologies
[10/08/2007|09:19] C:\Program Files\Common Files\NewTech Infosystems
[26/07/2009|01:38] C:\Program Files\Common Files\Sandlot Shared
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[21/02/2008|11:30] C:\Program Files\Common Files\snp2uvc
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[21/07/2008|21:44] C:\Program Files\Common Files\System
[20/01/2009|21:19] C:\Program Files\Common Files\Windows Live
[10/05/2008|16:12] C:\Program Files\Common Files\WindowsLiveInstaller

--------------------\\ Process

( 92 Processes )

iexplore.exe ~ [PID:816]
iexplore.exe ~ [PID:3796]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\Users\STANIS~1\AppData\Local\Temp\Stanislas.bmp

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-28 22:12:56
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 732

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\Users\STANIS~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HYC7G8B9\0-O1TSadUD-crack-s-[1].png
C:\Users\STANIS~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HYC7G8B9\0-O1TSadUD-crack-s-[2].png
C:\Users\STANIS~1\AppData\Roaming\Microsoft\Windows\Recent\COMPLETE 2 in 1 pack - Kaspersky Internet Security & AntiVirus Anti-Virus 2009 v8.0.0.357 crack + serial + Keygen.lnk
C:\Users\STANIS~1\AppData\Roaming\Microsoft\Windows\Recent\COMPLETE 2 in 1 pack - Kaspersky Internet Security & AntiVirus Anti-Virus 2009 v8.0.0.357 crack + serial + Keygen.rar.lnk
C:\Users\STANIS~1\AppData\Roaming\Microsoft\Windows\Recent\Kaspersky Internet Security 2009 v8.0.0.357 + 3 Years Subscription Key crack + serial.rar.lnk
C:\Users\STANIS~1\AppData\Roaming\Microsoft\Windows\Recent\Kaspersky Internet Security 8 2009 Crack Keygen.zip.lnk
C:\Users\STANIS~1\Documents\Mes fichiers re‡us\COMPLETE 2 in 1 pack - Kaspersky Internet Security & AntiVirus Anti-Virus 2009 v8.0.0.357 crack + serial + Keygen
C:\Users\STANIS~1\Documents\Mes fichiers re‡us\COMPLETE 2 in 1 pack - Kaspersky Internet Security & AntiVirus Anti-Virus 2009 v8.0.0.357 crack + serial + Keygen\How to activate.txt
C:\Users\STANIS~1\Documents\Mes fichiers re‡us\COMPLETE 2 in 1 pack - Kaspersky Internet Security & AntiVirus Anti-Virus 2009 v8.0.0.357 crack + serial + Keygen\Kaspersky Internet Security 2009 v8.0.0.357 + 3 Years Subscription Key crack + serial.rar
C:\Users\STANIS~1\Documents\Mes fichiers re‡us\COMPLETE 2 in 1 pack - Kaspersky Internet Security & AntiVirus Anti-Virus 2009 v8.0.0.357 crack + serial + Keygen\picture.JPG
C:\Users\STANIS~1\Documents\Mes fichiers re‡us\COMPLETE 2 in 1 pack - Kaspersky Internet Security & AntiVirus Anti-Virus 2009 v8.0.0.357 crack + serial + Keygen\readme.txt
C:\Users\STANIS~1\Documents\Mes fichiers re‡us\COMPLETE 2 in 1 pack - Kaspersky Internet Security & AntiVirus Anti-Virus 2009 v8.0.0.357 crack + serial + Keygen\release_notes_kav_en.htm
C:\Users\STANIS~1\Documents\Mes fichiers re‡us\COMPLETE 2 in 1 pack - Kaspersky Internet Security & AntiVirus Anti-Virus 2009 v8.0.0.357 crack + serial + Keygen\release_notes_kis_en.htm
C:\Users\STANIS~1\Documents\Mes fichiers re‡us\COMPLETE 2 in 1 pack - Kaspersky Internet Security & AntiVirus Anti-Virus 2009 v8.0.0.357 crack + serial + Keygen\step1.jpg
C:\Users\STANIS~1\Documents\Mes fichiers re‡us\COMPLETE 2 in 1 pack - Kaspersky Internet Security & AntiVirus Anti-Virus 2009 v8.0.0.357 crack + serial + Keygen\step2.jpg
C:\Users\STANIS~1\Documents\Mes fichiers re‡us\COMPLETE 2 in 1 pack - Kaspersky Internet Security & AntiVirus Anti-Virus 2009 v8.0.0.357 crack + serial + Keygen\step3.jpg


[F:47][D:96]-> C:\Users\STANIS~1\AppData\Local\Temp
[F:57][D:1]-> C:\Users\STANIS~1\AppData\Roaming\MICROS~1\Windows\Cookies
[F:349][D:5]-> C:\Users\STANIS~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:1][D:1]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 28/07/2009|22:15 - Option : [1]

--------------------\\ Fin du rapport a 22:15:02
[ UAC => 1 ]

il reste quelques petites infections, telle que la kiwee toolbar

je pensais pourtant l'avoir supprimer la kiwee toolbar

essaye de refaire toolbar SD en mode suppression

bonjour,

F3 - REG:win.ini: load=C:\Users\STANIS~1\LOCALS~1\APPLIC~1\logman.exe
bizarre

2009-07-25 18:17:36 ----A---- C:\4btx799q.exe
bizarre

2009-07-26 17:40:28 ----D---- C:\ProgramData\NortonInstaller
2009-07-25 16:07:36 ----D---- C:\Program Files\ESET
2009-07-25 15:49:17 ----D---- C:\Program Files\Panda Security
2009-07-12 21:59:08 ----D---- C:\ProgramData\Kaspersky Lab
Parcoure tes dossiers: Ouvre le dossier Programmes files, et supprime ces restants de eset et panda
ouvre le dossier caché ProgramData et supprime les restants de norton installer et kaspersky

C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
Ouvre le dossier Program Files\Alwil Software, et supprime les restants de avast

is-8VVKT.lnk - C:\Users\Stanislas\Favorites\Desktop\Virus Removal Tool1\is-8VVKT\startup.exe
is-UKG5H.lnk - C:\Users\Stanislas\Favorites\Desktop\Virus Removal Tool\is-UKG5H\startup.exe
Est-ce que cela te sert ?

Surtout, ne télécharge plus de cracks et keygen

Il faudrai que tu installes le Service Pack 2 pour Windows Vista, car il a des failles de sécurité

Bonsoir,

Pour ce qui est des fichiers que tu trouve bizarre, que dois je en faire?

Les 4 autres dossiers je les aies supprimés.

Plus de traces de avast chez moi.

Quand au deux fichiers :

is-8VVKT.lnk - C:\Users\Stanislas\Favorites\Desktop\Virus Removal Tool1\is-8VVKT\startup.exe
is-UKG5H.lnk - C:\Users\Stanislas\Favorites\Desktop\Virus Removal Tool\is-UKG5H\startup.exe

je ne sais meme pas ce que sais donc pour ce qui aies que ca me serve..pas du tout!

Excuses moi
C:\Users\STANIS~1\LOCALS~1\APPLIC~1\logman.exe
C:\Users\Stanislas\Favorites\Desktop\Virus Removal Tool1\is-8VVKT\startup.exe
C:\Users\Stanislas\Favorites\Desktop\Virus Removal Tool\is-UKG5H\startup.exe

Essaye de les supprimer en mode sans échec, le dossier Favorites est un dossier caché

Bonjour,

Alors hier soir j'ai installé le Service Pack 2 d'où mon absence..Ce soir je supprimerais les fichiers en MSE des que je rentrerais..serait une impression ou on en voit presque le bout..?

bonsoir,
Jacques gache, c'est quoi ça ?
C:\4btx799q.exe
F3 - REG:win.ini: load=C:\Users\STANIS~1\LOCALS~1\APPLIC~1\logman.exe

Il faudra le supprimer avec OTM

du nouveau sur ce fichier?