impossible d'ouvrir quoi que ce soitRésolu/Fermé

Question

Bonjour,
Tout d'abord , je doit vous dire que je suis novice. En plus je ne sait pas où mettre ce post.
J'ai un gros soucis (sinon je ne serai pas ici), je ne peux rien ouvrir à part naviguer sur internet avec explorer.
Même jouer aux cartes est impossible. Je peux télécharger mais pas possible de les ouvrir. J'ai débuté le tutoriel qui semblait correspondre à mon problème mais je n'ai pas franchi la premiere étape.
Si une personne charitable pouvait m'aider cela serait génial.
Merci de l'aide.

boubou2b · Accepted Answer

Bonjour,
oui, j'ai essayé mais rien ne se passe. Comme précisé dans le post précédent, on dirait qu'ily a que le ventilateur qui fonctionne. Le pc a comme perdu son disque dur, puisque rien ne se passe à l'allumage.
Merci, une autre idée peut etre ?
Vu qu'il est vieux (6 ou 7 ans), je ne sais pas si le faire réparer est une bonne idée.

benurrr · Answer

salut

pour soulager le pc va içi et fait un scan antivirus en ligne

https://www.eset.com/

boubou2b · Answer

Merci, j'essaye et vous tiens au courant.

boubou2b · Answer

J'ai essayé de pemettre un message hier soir mais impossible.

boubou2b · Answer

J'ai fait 2 fois le scan virus (et oui j'avais pas vu qu'il y avait des parametres avancés), et mon problème est toujours au même point.
Si vous avez d'autres suggestions, je suis preneuse.
Merci de l'aide que vous m'apportez.

benurrr · Answer

bonjour,oui le site hier était en maintenance

Telecharge combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe

-> Double clique sur combofix.exe. s'il se lance pas lance le en faisant un clic droit et ouvrir
-> Tape sur la touche 1 (Yes) pour démarrer le scan. 
-> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse. 

NOTE : Le rapport se trouve également ici : C:\Combofix.txt 

Avant d'utiliser ComboFix : 

-> Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours. 

-> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil. 

Une fois fait, sur ton bureau double-clic sur Combofix.exe. 

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc. 

-Attention  Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes. risque de figer l'ordi 

- En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire. 

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt) 

-> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet. 

-> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message. 

!\ Ne touche à rien tant que le scan n'est pas terminé. /!\ : risque de figer l'ordi (plantage complet) 

::Si combofix detecte quelque chose et de demande a redémarrer tu accepte

boubou2b · Answer

Merci pour l'aide. J'ai été un peu longue car impossible de désactiver l'anti virus et oh miracle j'ai réussi à le désinstaller. Voici donc le rapport fourni par combofix (incompréhensible pour moi). Merci de me donner votre diagnostic docteur;)
ComboFix 10-02-12.01 - aurelie 15/02/2010  15:26:48.1.2 - x86
Microsoft Windows XP Édition familiale  5.1.2600.2.1252.33.1036.18.1023.743 [GMT 1:00]
Lancé depuis: c:\documents and settings\aurelie\Bureau\ComboFix.exe
.

((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\aurelie\Application Data\inst.exe
c:\documents and settings\aurelie\Local Settings\Temporary Internet Files\1MPm7px.jpg
c:\documents and settings\aurelie\Local Settings\Temporary Internet Files\3bo7L.jpg
c:\documents and settings\aurelie\Local Settings\Temporary Internet Files\M53Lj.jpg
c:\documents and settings\aurelie\Local Settings\Temporary Internet Files\MPMmYa5.jpg
c:\windows\system32\VB6KO.DLL

.
(((((((((((((((((((((((((((((   Fichiers créés du 2010-01-15 au 2010-02-15  ))))))))))))))))))))))))))))))))))))
.

2010-02-15 12:45 . 2010-02-15 12:45	--------	d-----w-	C:\F-Secure
2010-02-15 06:12 . 2010-02-15 06:12	--------	d-sh--w-	c:\documents and settings\aurelie\IECompatCache
2010-02-15 06:11 . 2010-02-15 06:11	--------	d-sh--w-	c:\documents and settings\aurelie\PrivacIE
2010-02-14 20:15 . 2010-02-14 20:15	--------	d-sh--w-	c:\documents and settings\NetworkService\IETldCache
2010-02-14 20:13 . 2010-02-14 20:13	--------	d-sh--w-	c:\documents and settings\aurelie\IETldCache
2010-02-14 20:11 . 2009-12-11 08:38	69120	------w-	c:\windows\system32\dllcache\iecompat.dll
2010-02-14 20:10 . 2010-02-14 20:10	--------	d-----w-	c:\windows\ie8updates
2010-02-14 20:10 . 2009-12-21 19:07	12800	------w-	c:\windows\system32\dllcache\xpshims.dll
2010-02-14 20:10 . 2009-12-21 19:06	55296	------w-	c:\windows\system32\dllcache\msfeedsbs.dll
2010-02-14 20:10 . 2009-12-21 19:06	594432	------w-	c:\windows\system32\dllcache\msfeeds.dll
2010-02-14 20:10 . 2009-12-21 19:06	1985536	------w-	c:\windows\system32\dllcache\iertutil.dll
2010-02-14 20:10 . 2009-12-21 19:06	246272	------w-	c:\windows\system32\dllcache\ieproxy.dll
2010-02-14 20:10 . 2009-12-21 19:06	11070464	------w-	c:\windows\system32\dllcache\ieframe.dll
2010-02-14 20:09 . 2010-02-14 20:10	--------	dc-h--w-	c:\windows\ie8
2010-02-14 20:09 . 2010-02-14 20:09	--------	d-----w-	c:\windows\system32\fr-FR
2010-02-14 14:18 . 2010-02-14 14:18	--------	d-----w-	c:\program files\ESET
2010-02-13 17:32 . 2009-06-30 08:37	28552	----a-w-	c:\windows\system32\drivers\pavboot.sys
2010-02-13 17:32 . 2010-02-13 17:32	--------	d-----w-	c:\program files\Panda Security
2010-02-13 17:08 . 2010-02-13 21:46	--------	d-----w-	c:\windows\BDOSCAN8
2010-02-13 14:41 . 2010-02-13 14:41	--------	d-----w-	c:\windows\system32\wbem\Repository
2010-02-02 07:36 . 2010-02-02 07:36	--------	d-----w-	c:\program files\Safari
2010-02-02 07:31 . 2010-02-02 07:31	79144	----a-w-	c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\Safari 5.31.21.10\SetupAdmin.exe
2010-02-02 07:17 . 2010-02-02 07:17	--------	d-----w-	c:\program files\iPod
2010-02-02 07:16 . 2010-02-02 07:17	--------	d-----w-	c:\program files\iTunes
2010-02-02 07:04 . 2010-02-02 07:04	72488	----a-w-	c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 9.0.3.15\SetupAdmin.exe
2010-01-29 21:32 . 2010-01-29 21:32	--------	d-----w-	c:\windows\system32\XPSViewer
2010-01-29 21:31 . 2010-01-29 21:31	--------	d-----w-	c:\program files\Reference Assemblies
2010-01-29 21:31 . 2008-07-06 12:06	89088	----a-w-	c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll
2010-01-29 21:31 . 2008-07-06 12:06	89088	------w-	c:\windows\system32\dllcache\filterpipelineprintproc.dll
2010-01-29 21:31 . 2008-07-06 12:06	575488	------w-	c:\windows\system32\xpsshhdr.dll
2010-01-29 21:31 . 2008-07-06 12:06	575488	------w-	c:\windows\system32\dllcache\xpsshhdr.dll
2010-01-29 21:31 . 2008-07-06 12:06	117760	------w-	c:\windows\system32\prntvpt.dll
2010-01-29 21:31 . 2008-07-06 10:50	597504	------w-	c:\windows\system32\Spool\prtprocs\w32x86\printfilterpipelinesvc.exe
2010-01-29 21:31 . 2008-07-06 10:50	597504	------w-	c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2010-01-29 21:31 . 2008-07-06 12:06	1676288	------w-	c:\windows\system32\xpssvcs.dll
2010-01-29 21:31 . 2008-07-06 12:06	1676288	------w-	c:\windows\system32\dllcache\xpssvcs.dll
2010-01-29 21:26 . 2010-01-29 21:26	--------	d-----w-	c:\program files\MSXML 6.0
2010-01-28 19:37 . 2009-01-22 13:28	290816	----a-w-	c:\windows\system32\decdll.dll
2010-01-28 19:36 . 2010-01-29 09:57	--------	d-----w-	c:\program files\Free Video Converter
2010-01-28 19:36 . 2010-01-28 19:37	--------	d-----w-	c:\documents and settings\aurelie\Application Data\FreeVideoConverter
2010-01-24 14:38 . 2010-01-31 14:37	72212	---ha-w-	c:\windows\system32\mlfcache.dat
2010-01-24 14:31 . 2009-05-18 13:17	26600	----a-w-	c:\windows\system32\drivers\GEARAspiWDM.sys
2010-01-24 14:31 . 2008-04-17 12:12	107368	----a-w-	c:\windows\system32\GEARAspi.dll
2010-01-24 14:30 . 2010-01-24 14:31	--------	d-----w-	c:\documents and settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
2010-01-24 14:29 . 2010-01-24 14:29	--------	d-----w-	c:\program files\Bonjour
2010-01-24 14:25 . 2010-01-24 14:25	--------	d-----w-	c:\program files\Apple Software Update
2010-01-24 14:24 . 2009-08-28 18:42	40448	----a-w-	c:\windows\system32\drivers\usbaapl.sys
2010-01-24 14:24 . 2009-08-28 18:42	2065696	----a-w-	c:\windows\system32\usbaaplrc.dll
2010-01-24 14:24 . 2010-02-02 07:16	--------	d-----w-	c:\program files\Fichiers communs\Apple

.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-02-15 14:13 . 2006-09-21 18:48	--------	d-----w-	c:\documents and settings\aurelie\Application Data\OpenOffice.org2
2010-02-15 14:12 . 2009-12-28 19:33	--------	d-----w-	c:\program files\lg_fwupdate
2010-02-15 14:11 . 2006-11-09 14:03	--------	d-----w-	c:\program files\AntivirusFirewall
2010-02-15 14:08 . 2006-11-09 14:04	--------	d-----w-	c:\documents and settings\All Users\Application Data\F-Secure
2010-02-15 14:08 . 2005-12-16 01:18	88702	----a-w-	c:\windows\system32\perfc00C.dat
2010-02-15 14:08 . 2005-12-16 01:18	519862	----a-w-	c:\windows\system32\perfh00C.dat
2010-02-15 14:05 . 2009-12-31 21:18	--------	d-----w-	c:\documents and settings\aurelie\Application Data\HPAppData
2010-02-14 18:30 . 2007-08-20 12:06	--------	d-----w-	c:\program files\Navilog1
2010-01-31 13:52 . 2006-08-09 12:45	96256	----a-w-	c:\documents and settings\aurelie\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-01-29 21:32 . 2007-09-28 11:59	--------	d-----w-	c:\program files\MSBuild
2010-01-28 10:23 . 2007-10-05 17:45	--------	d-----w-	c:\documents and settings\aurelie\Application Data\Apple Computer
2010-01-28 10:13 . 2007-09-17 10:13	--------	d-----w-	c:\documents and settings\All Users\Application Data\Apple
2010-01-24 14:30 . 2006-09-19 11:58	--------	d-----w-	c:\documents and settings\All Users\Application Data\Apple Computer
2010-01-24 14:29 . 2006-09-19 11:54	--------	d-----w-	c:\program files\QuickTime
2010-01-14 19:38 . 2010-01-14 19:37	--------	d-----w-	c:\program files\InterActual
2010-01-06 06:58 . 2010-01-06 06:58	--------	d-----w-	c:\documents and settings\All Users\Application Data\HPSSUPPLY
2010-01-04 12:38 . 2009-12-29 21:59	--------	d-----w-	c:\documents and settings\aurelie\Application Data\Nero
2009-12-31 21:25 . 2009-12-31 21:24	--------	d-----w-	c:\program files\Windows Live
2009-12-31 21:25 . 2009-12-31 21:25	--------	d-----w-	c:\program files\Microsoft
2009-12-31 21:25 . 2009-12-31 21:25	--------	d-----w-	c:\program files\Windows Live SkyDrive
2009-12-31 21:24 . 2009-12-31 21:24	--------	d-----w-	c:\program files\Microsoft SQL Server Compact Edition
2009-12-31 21:18 . 2009-12-31 20:57	--------	d-----w-	c:\documents and settings\All Users\Application Data\Yahoo! Companion
2009-12-31 21:16 . 2009-12-31 21:14	--------	d-----w-	c:\documents and settings\aurelie\Application Data\HP
2009-12-31 21:16 . 2009-12-31 21:16	--------	d-----w-	c:\program files\Fichiers communs\Windows Live
2009-12-31 21:15 . 2009-12-31 21:15	--------	d-----w-	c:\documents and settings\All Users\Application Data\WEBREG
2009-12-31 21:15 . 2009-12-31 20:08	219466	----a-w-	c:\windows\hpoins40.dat
2009-12-31 21:15 . 2009-12-31 20:51	--------	d-----w-	c:\documents and settings\All Users\Application Data\HP
2009-12-31 20:57 . 2009-12-31 20:57	--------	d-----w-	c:\program files\Yahoo!
2009-12-31 20:57 . 2009-12-31 20:57	--------	d-----w-	c:\documents and settings\aurelie\Application Data\Yahoo!
2009-12-31 20:56 . 2009-12-31 20:41	--------	d-----w-	c:\program files\HP
2009-12-31 20:54 . 2009-12-31 20:54	--------	d-----w-	c:\documents and settings\All Users\Application Data\HP Product Assistant
2009-12-31 20:53 . 2009-12-31 20:53	--------	d-----w-	c:\program files\Fichiers communs\HP
2009-12-31 20:52 . 2009-12-31 20:52	--------	d-----w-	c:\program files\Fichiers communs\Hewlett-Packard
2009-12-31 16:14 . 2005-05-10 00:17	352640	----a-w-	c:\windows\system32\drivers\srv.sys
2009-12-30 06:32 . 2009-12-30 06:32	--------	d-----w-	c:\program files\MSXML 4.0
2009-12-29 21:57 . 2009-12-29 21:45	--------	d-----w-	c:\program files\Fichiers communs\Nero
2009-12-29 21:57 . 2009-12-28 18:47	--------	d-----w-	c:\program files\Nero
2009-12-29 21:48 . 2009-12-28 18:47	--------	d-----w-	c:\documents and settings\All Users\Application Data\Nero
2009-12-29 21:42 . 2009-12-29 21:42	--------	d-----w-	c:\program files\Fichiers communs\LightScribe
2009-12-29 21:29 . 2007-01-27 17:31	--------	d-----w-	c:\documents and settings\aurelie\Application Data\CyberLink
2009-12-28 19:45 . 2009-12-28 19:44	--------	d-----w-	c:\documents and settings\aurelie\Application Data\Ahead
2009-12-28 19:42 . 2009-12-28 19:42	--------	d-----w-	c:\documents and settings\All Users\Application Data
View_Profiles
2009-12-28 19:39 . 2009-12-28 19:33	16384	----a-w-	c:\windows\system32\lgfwunis.exe
2009-12-28 19:33 . 2005-12-16 09:53	--------	d--h--w-	c:\program files\InstallShield Installation Information
2009-12-28 18:49 . 2009-12-28 18:47	--------	d-----w-	c:\program files\Fichiers communs\Ahead
2009-12-28 17:54 . 2005-12-16 01:22	--------	d-----w-	c:\program files\CyberLink
2009-12-28 17:08 . 2006-08-04 17:17	--------	d-----w-	c:\program files\eMule
2009-12-21 19:07 . 2005-07-03 02:16	916480	----a-w-	c:\windows\system32\wininet.dll
2009-12-17 07:59 . 2004-08-05 05:00	347648	----a-w-	c:\windows\system32\mspaint.exe
2009-12-14 07:36 . 2004-08-05 05:00	33280	----a-w-	c:\windows\system32\csrsrv.dll
2009-12-04 14:41 . 2005-01-19 04:26	453760	----a-w-	c:\windows\system32\drivers\mrxsmb.sys
2009-11-27 17:34 . 2004-08-05 05:00	17920	----a-w-	c:\windows\system32\msyuv.dll
2009-11-27 17:34 . 2004-08-05 05:00	1297408	----a-w-	c:\windows\system32\quartz.dll
2009-11-27 16:38 . 2004-08-05 05:00	8704	----a-w-	c:\windows\system32	sbyuv.dll
2009-11-27 16:38 . 2004-08-05 05:00	85504	----a-w-	c:\windows\system32\avifil32.dll
2009-11-27 16:38 . 2004-08-05 05:00	48128	----a-w-	c:\windows\system32\iyuv_32.dll
2009-11-27 16:38 . 2004-08-05 05:00	28672	----a-w-	c:\windows\system32\msvidc32.dll
2009-11-27 16:38 . 2004-08-05 05:00	11264	----a-w-	c:\windows\system32\msrle32.dll
2009-11-21 16:42 . 2004-08-05 05:00	470528	----a-w-	c:\windows\AppPatch\aclayers.dll
.

(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LightScribe Control Panel"="c:\program files\Fichiers communs\LightScribe\LightScribeControlPanel.exe" [2009-08-20 2363392]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2004-10-13 1694208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"="Alaunch" [X]
"High Definition Audio Property Page Shortcut"="HDAShCut.exe" [2005-01-07 61952]
"RTHDCPL"="RTHDCPL.EXE" [2005-09-22 14854144]
"ntiMUI"="c:\program files\NewTech Infosystems\NTI CD & DVD-Maker 7
tiMUI.exe" [2005-05-11 45056]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 32768]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-05 208952]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-05 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
"eRecoveryService"="c:\acer\Empowering Technology\eRecovery\Monitor.exe" [2005-11-16 397312]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-11-11 7311360]
"nwiz"="nwiz.exe" [2005-11-11 1519616]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2005-11-11 86016]
"AspireService"="c:\program files\Acer\Acer eMode Management\AspireService.exe" [2005-09-29 114688]
"MediaSync"="c:\program files\Acer\Acer eConsole\MediaSync.exe" [2005-09-21 425984]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"NeroFilterCheck"="c:\program files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2008-07-14 570664]
"LGODDFU"="c:\program files\lg_fwupdate\fwupdate.exe" [2009-12-28 557056]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-11-10 417792]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-01-22 141608]
"AppleSyncNotifier"="c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2009-08-13 177440]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-05 15360]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe"=
"c:\program files\ABBYY\FineReader 5.0 Sprint\Sprint.exe"= c:\program files\ABBYY\FineReader 5.0 Sprint\Sprint.exe:192.168.1.11/255.255.255.255:Enabled:ABBYY FineReader 5.0 Sprint Plus
"c:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"=
"c:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"=
"c:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"=
"c:\Program Files\HP\Digital Imaging\bin\hposid01.exe"=
"c:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"=
"c:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe"=
"c:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"=
"c:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe"=
"c:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe"=
"c:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe"=
"c:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe"=
"c:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe"=
"c:\Program Files\HP\HP Software Update\HPWUCli.exe"=
"c:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe"=
"c:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"=
"c:\Program Files\Bonjour\mDNSResponder.exe"=
"c:\Program Files\iTunes\iTunes.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3000:UDP"= 3000:UDP:BiG BanG 9
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

R0 m5287;m5287;c:\windows\system32\drivers\m5287.sys [05/02/2005 08:00 85888]
R0 pavboot;pavboot;c:\windows\system32\drivers\pavboot.sys [13/02/2010 18:32 28552]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [07/02/2007 21:29 639224]
S3 AF05BDA;AF9005 BDA Device;c:\windows\system32\drivers\AF05BDA.sys [02/12/2006 19:04 133504]
S3 WlanUIG;Sagem 802.11g Wireless LAN USB Adapter Driver;c:\windows\system32\drivers\WlanUIG.sys [22/03/2007 17:10 379456]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12	REG_MULTI_SZ   	Pml Driver HPZ12 Net Driver HPZ12
HPService	REG_MULTI_SZ   	HPSLPSVC
hpdevmgmt	REG_MULTI_SZ   	hpqcxs08 hpqddsvc

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-08-20 12:24	451872	----a-w-	c:\program files\Fichiers communs\LightScribe\LSRunOnce.exe
.
Contenu du dossier 'Tâches planifiées'

2010-02-02 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.orange.fr/
uInternet Settings,ProxyOverride = *.local
IE: Add to AMV Convert Tool... - c:\program files\MP3 Player Utilities 4.00\AMVConverter\grab.html
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: MediaManager tool grab multimedia file - c:\program files\MP3 Player Utilities 4.00\MediaManager\grab.html
DPF: {104B0A37-AB99-4F06-8032-8BBDC3B77DDB} - hxxp://www8.photoweb.fr/telechargement/Photoweb_uploader.cab
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.zebulon.fr/scan8/oscan8.cab
DPF: {68C1822F-F5C7-4404-A73F-03C10E0E94DA} - hxxp://www4.photoweb.fr/telechargement/Photoweb_uploader.cab
DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} - hxxps://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.1.cab
DPF: {B9F79165-A264-4C4A-A211-133A5E8D647F} - hxxp://orange.securitoo.com/pchc/fscax.cab
.
- - - - ORPHELINS SUPPRIMES - - - -

HKCU-Run-WOOKIT - c:\progra~1\Wanadoo\Shell.exe
HKCU-Run-ares - c:\program files\Ares\Ares.exe
HKCU-Run-WINSOS VERIFY - c:\program files\WINSOS\WINSOS.EXE
HKCU-Run-eMuleAutoStart - c:\program files\eMule\emule.exe
AddRemove-BSPlayer1 - c:\program files\Webteh\BSplayer\uninstall.exe
AddRemove-HijackThis - c:\program files\Hijackthis Version Française\HijackThis.exe



**************************************************************************
Recherche de processus cachés ... 

Recherche d'éléments en démarrage automatique cachés ... 

Recherche de fichiers cachés ... 

Scan terminé avec succès
Fichiers cachés: 

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(552)
c:\windows\system32\Ati2evxx.dll
.
Heure de fin: 2010-02-15  15:33:17
ComboFix-quarantined-files.txt  2010-02-15 14:33

Avant-CF: 1 719 648 256 octets libres
Après-CF: 5 008 547 840 octets libres

WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect

- - End Of File - - 041F7E218F830EFC0356A80D6F8FFDB0

boubou2b · Answer

Le simple fait d'avoir lancé un combofix semble avoir bien amélioré le problème je peux enfin ouvrir les .exe.
Mais je n'aimerai pas que cela recommence alors j'espère qu'il y a ou aura quelque chose à faire.
Encore merci de me consacrer du temps.

benurrr · Answer

pendant que je regarde ton rapport tu peut poster un hijackthis stp

poste un rapport hijackthis (outil de diagnostic)
Télécharge http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe

--) Enregistre HJTInstall.exe sur ton bureau
--) Double-clique sur HJTInstall.exe pour lancer le programme
--) Par défaut, il s'installera içi C:\Programme Files\Trend Micro\HijackThis
--) Accepte la license en cliquant sur le bouton "I Accept"
--) Choisis l'option "Do a system scan and save a log file"
--) Clique sur "Save log" pour enregistrer le rapport qui s'ouvrira avec le bloc-note
--) Clique sur "Édition -> Sélectionner tout", puis sur "Édition -> Copier" pour copier tout le contenu du rapport
--) Colle le rapport que tu viens de copier sur ce forum
--) Ne fixe encore AUCUNE ligne,

boubou2b · Answer

Désolée, de ne pas avoir répondu avant, mais je crois que mon ordi a planté tout court.
Je m'explique, il a fallu que je réinstalle un anti virus, et au moment du redémarrage plus rien. Même pas il se lance, la lumiere témoin d'allumage ne s'allume plus et il ne fait que ventileret il n'a pas l'air d'acceder au disque dur...
Je crois que je suis bonne pour en racheter un...
J'aimerai avoir un avis sur la mort, ou pas, de ma bestiole.
En tous les cas encore MERCI, c'est sympa de savoir qu'on est soutenu.

benurrr · Answer

salut

a tu essayer de démarrer en mode sans échec ?

pour cela (tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter)

benurrr · Answer

si c'est une tour ouvre la donne un petit coup de nettoyage et démonte la pile quelque minute oublie pas de débrancher l'alimentation avant d'y mettre les mains

boubou2b · Answer

Bonjour,
Désolée de ne pas avoir donné de nouvelles avant, quelques petits soucis sans gravité à la maison.
Merci aussi pour la solution d'enlever la pile j'ai aussi dépoussièré les barettes mémoires.
Donc voici comme promis le rapport demandé et j'ai suivi les instructions je n'ai rien fixé.
Encore merci de me consacrer du temps.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:11:55, on 13/01/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Orange\Antivirus Firewall\Anti-Virus\fsgk32st.exe
C:\Program Files\Orange\Antivirus Firewall\Common\FSMA32.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Orange\Antivirus Firewall\Common\FSHDLL32.EXE
C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Acer\Acer eMode Management\AspireService.exe
C:\Program Files\Acer\Acer eConsole\MediaSync.exe
C:\Program Files\lg_fwupdate\fwupdate.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Orange\Antivirus Firewall\Common\FSM32.EXE
C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Orange\Antivirus Firewall\FWES\Program\fsdfwd.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
C:\Program Files\Orange\Antivirus Firewall\FSGUI\POSTINSTALL.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Orange\Antivirus Firewall\Anti-Virus\FSGK32.EXE
C:\Program Files\Orange\Antivirus Firewall\Anti-Virus\fssm32.exe
C:\Program Files\Orange\Antivirus Firewall\Anti-Virus\fsav32.exe
C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINDOWS\system32\BhoECart.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: LitmusBHO - {C6867EB7-8350-4856-877F-93CF8AE3DC9C} - C:\Program Files\Orange\Antivirus Firewall\NRS\iescript\baselitmus.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Browsing Protection Toolbar - {265EEE8E-3228-44D3-AEA5-F7FDF5860049} - C:\Program Files\Orange\Antivirus Firewall\NRS\iescript\baselitmus.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7
tiMUI.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AspireService] C:\Program Files\Acer\Acer eMode Management\AspireService.exe
O4 - HKLM\..\Run: [MediaSync] C:\Program Files\Acer\Acer eConsole\MediaSync.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [LGODDFU] "C:\Program Files\lg_fwupdate\fwupdate.exe" blrun
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Orange\Antivirus Firewall\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Orange\Antivirus Firewall\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\system32\Macromed\Flash\FlashUtil10d.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Program Files\MP3 Player Utilities 4.00\AMVConverter\grab.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.00\MediaManager\grab.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Afficher ou masquer l'HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://s.tf1.fr/mmdia/static/rawflow/clients/5.3.1.0/Rawflow.cab
O16 - DPF: {104B0A37-AB99-4F06-8032-8BBDC3B77DDB} (Telechargement Control) - http://www8.photoweb.fr/telechargement/Photoweb_uploader.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.extrafilm.fr/ImageUploader5.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://appldnld.apple.com.edgesuite.net/...
O16 - DPF: {68C1822F-F5C7-4404-A73F-03C10E0E94DA} (telechargement-photoweb) - http://www4.photoweb.fr/telechargement/Photoweb_uploader.cab
O16 - DPF: {6EBC6744-5383-4213-AD5E-66434ECA1812} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols/nordnet/orange/so-4.1/resources/fslauncher.cab
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {9191F686-7F0A-441D-8A98-2FE3AC1BD913} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.1.cab
O16 - DPF: {B9F79165-A264-4C4A-A211-133A5E8D647F} (F-Secure Health Check 1.1) - http://orange.securitoo.com/pchc/fscax.cab
O23 - Service: Acer Media Server - Acer Inc. - C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: C-DillaCdaC11BA - C-Dilla Ltd - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Orange\Antivirus Firewall\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Orange\Antivirus Firewall\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Orange\Antivirus Firewall\Common\FSMA32.EXE
O23 - Service: F-Secure ORSP Client (FSORSPClient) - F-Secure Corporation - C:\Program Files\Orange\Antivirus Firewall\ORSP Client\fsorsp.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe

benurrr · Answer

salut

télécharge

http://www.malwarebytes.org/mbam/program/mbam-setup.exe

a l'installation vérifie que mise a jour et lancer programme et scan complet sont bien cocher

Une fois a jour, le programme va se lancer; clic sur l´onglet paramètre, et coche la case : "Arrêter internet explorer pendant la suppression".

A la fin du scan clique sur Afficher les résultats

Vérifier si tout est coché et clic Supprimer la sélection

S'il t'es demandé de redémarrer >>> clique sur "Yes"

Et tu poste le rapport générer

boubou2b · Answer

Merci pour cette réponse, mais je fais quoi du hijack où je dois faire un fix.
Cela n'est pas genant de lancer malwarebytes ?

benurrr · Answer

non tu fixe rien sur le hijack pour l'instant

si tu fixe il apparaitrons pas dans le prochain rapport mais l'infection sera toujours la

boubou2b · Answer

ok je lance merci.

boubou2b · Answer

Coucou,,
Voici le rapport demandé, en attente d'instructions.
Encore merci.
Malwarebytes' Anti-Malware 1.44
Version de la base de données: 3760
Windows 5.1.2600 Service Pack 2
Internet Explorer 8.0.6001.18702

13/01/2006 02:10:08
mbam-log-2006-01-13 (02-10-08).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 226176
Temps écoulé: 58 minute(s), 42 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

benurrr · Answer

ok c'est bon signe

Desactive ton antivirus le temps de la manip ainsi que ton parefeu si présent(car il est detecté a tort comme infection)

 Télécharge et installe List&Kill'em et enregistre le sur ton bureau

http://sd-1.archive-host.com/membres/up/829108531491024/List_Killem_Install.exe


 Branche clés usb , disques durs externes , mp3 , mp4 , etc..

double clique ( clic droit "exécuter en tant qu'administrateur" pour Vista/7 ) sur le raccourci sur ton bureau pour lancer l'installation

coche la case "créer une icône sur le bureau"

une fois terminée , clic sur "terminer" et le programme se lancera seul

choisis la langue puis choisis l'option 1 = Mode Recherche

 laisse travailler l'outil

à l'apparition de la fenêtre blanche , c'est un peu long , c'est normal , le programme n'est pas bloqué.

un rapport du nom de catchme apparait sur ton bureau , ignore-le,ne le poste pas , mais ne le supprime pas pour l instant, le scan n'est pas fini.

Poste le contenu du rapport qui s'ouvre aux 100 % du scan à l'écran "COMPLETED"

boubou2b · Answer

L'ordinateur a redemarrer et je n'étais pas devant, où peut on récuperer le rapport ?
Ou dois-je tout recommencer ?
Merci.

benurrr · Answer

dans le poste de travaille puis C:Kill'em.txt

boubou2b · Answer

Je crois que c'est celui ci. Le rapport où je devais fixer des choses ou pas a disparu lui aussi (en fait, je ne sais pas où il se trouve).
Merci encore pour lr temps consacré.
List'em by g3n-h@ckm@n 1.2.5.2

User : aurelie (Administrateurs) 
Update on 16/02/2010 by g3n-h@ckm@n ::::: 13.30 
Start at: 02:29:57 | 13/01/2006
Contact : https://forums.commentcamarche.net/forum/virus-securite-7

              Intel(R) Pentium(R) D CPU 3.00GHz
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 2
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Disabled
AV : Anti-virus firewall 9.10 9.10 [ Enabled | Updated ]
FW : Anti-virus firewall 9.10[ Enabled ]9.10

C:\ -> Disque fixe local | 90,57 Go (4,13 Go free) [ACER] | NTFS
D:\ -> Disque fixe local | 91,82 Go (18,48 Go free) [ACERDATA] | FAT32
E:\ -> Disque CD-ROM
G:\ -> Disque amovible
H:\ -> Disque amovible
I:\ -> Disque amovible
J:\ -> Disque amovible

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running 

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Orange\Antivirus Firewall\Anti-Virus\fsgk32st.exe
C:\Program Files\Orange\Antivirus Firewall\Anti-Virus\FSGK32.EXE
C:\Program Files\Orange\Antivirus Firewall\Common\FSMA32.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Orange\Antivirus Firewall\Common\FSHDLL32.EXE
C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\Program Files\Acer\Acer eMode Management\AspireService.exe
C:\Program Files\Acer\Acer eConsole\MediaSync.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\lg_fwupdate\fwupdate.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Orange\Antivirus Firewall\Common\FSM32.EXE
C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
C:\Program Files\Orange\Antivirus Firewall\ORSP Client\fsorsp.exe
C:\Program Files\Orange\Antivirus Firewall\FWES\Program\fsdfwd.exe
C:\Program Files\Orange\Antivirus Firewall\Anti-Virus\fssm32.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Orange\Antivirus Firewall\Anti-Virus\fsav32.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\List_Kill'em\List_Kill'em.scr
C:\WINDOWS\system32\cmd.exe
C:\Documents and Settings\aurelie\Local Settings	emp\5.tmp\pv.exe

======================
Keys "Run" 
======================
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
LightScribe Control Panel	REG_SZ         	C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe -hidden
MSMSGS	REG_SZ         	"C:\Program Files\Messenger\msmsgs.exe" /background
ctfmon.exe	REG_SZ         	C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
LaunchApp	REG_SZ         	Alaunch 
High Definition Audio Property Page Shortcut	REG_SZ         	HDAShCut.exe 
RTHDCPL	REG_SZ         	RTHDCPL.EXE 
ntiMUI	REG_SZ         	c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7
tiMUI.exe 
SunJavaUpdateSched	REG_SZ         	"C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" 
RemoteControl	REG_SZ         	"C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" 
IMJPMIG8.1	REG_SZ         	"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 
MSPY2002	REG_SZ         	C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC 
PHIME2002ASync	REG_SZ         	C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC 
PHIME2002A	REG_SZ         	C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName 
eRecoveryService	REG_SZ         	C:\Acer\Empowering Technology\eRecovery\Monitor.exe 
NvCplDaemon	REG_SZ         	RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup 
nwiz	REG_SZ         	nwiz.exe /install 
NvMediaCenter	REG_SZ         	RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit 
AspireService	REG_SZ         	C:\Program Files\Acer\Acer eMode Management\AspireService.exe 
MediaSync	REG_SZ         	C:\Program Files\Acer\Acer eConsole\MediaSync.exe 
Adobe Reader Speed Launcher	REG_SZ         	"C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" 
NeroFilterCheck	REG_SZ         	C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe 
LGODDFU	REG_SZ         	"C:\Program Files\lg_fwupdate\fwupdate.exe" blrun 
HP Software Update	REG_SZ         	C:\Program Files\HP\HP Software Update\HPWuSchd2.exe 
QuickTime Task	REG_SZ         	"C:\Program Files\QuickTime\qttask.exe" -atboottime 
iTunesHelper	REG_SZ         	"C:\Program Files\iTunes\iTunesHelper.exe" 
AppleSyncNotifier	REG_SZ         	C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe 
F-Secure Manager	REG_SZ         	"C:\Program Files\Orange\Antivirus Firewall\Common\FSM32.EXE" /splash 
F-Secure TNB	REG_SZ         	"C:\Program Files\Orange\Antivirus Firewall\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW 
 
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]

=====================
Other Keys
=====================
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] 
dontdisplaylastusername	REG_DWORD      	0 (0x0) 
legalnoticecaption	REG_SZ         	 
legalnoticetext	REG_SZ         	 
shutdownwithoutlogon	REG_DWORD      	1 (0x1) 
undockwithoutlogon	REG_DWORD      	1 (0x1) 
DisableRegistryTools	REG_DWORD      	0 (0x0) 

===============
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] 
NoDriveTypeAutoRun	REG_DWORD      	323 (0x143) 
NoDriveAutoRun	REG_DWORD      	67108863 (0x3ffffff) 
NoDrives	REG_DWORD      	0 (0x0) 

===============
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] 
HonorAutoRunSetting	REG_DWORD      	1 (0x1) 
NoDriveAutoRun	REG_DWORD      	67108863 (0x3ffffff) 
NoDriveTypeAutoRun	REG_DWORD      	323 (0x143) 
NoDrives	REG_DWORD      	0 (0x0) 

=============== 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

===============
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] 
 AutoRestartShell	REG_DWORD      	1 (0x1) 
 DefaultDomainName	REG_SZ         	AURÉLIE 
 DefaultUserName	REG_SZ         	aurelie 
 LegalNoticeCaption	REG_SZ         	 
 LegalNoticeText	REG_SZ         	 
 PowerdownAfterShutdown	REG_SZ         	0 
 ReportBootOk	REG_SZ         	1 
 Shell	REG_SZ         	Explorer.exe 
 ShutdownWithoutLogon	REG_SZ         	0 
 System	REG_SZ         	 
 Userinit	REG_SZ         	C:\WINDOWS\system32\userinit.exe, 
 VmApplet	REG_SZ         	rundll32 shell32,Control_RunDLL "sysdm.cpl" 
 SfcQuota	REG_DWORD      	-1 (0xffffffff) 
 allocatecdroms	REG_SZ         	0 
 allocatedasd	REG_SZ         	0 
 allocatefloppies	REG_SZ         	0 
 cachedlogonscount	REG_SZ         	10 
 forceunlocklogon	REG_DWORD      	0 (0x0) 
 passwordexpirywarning	REG_DWORD      	14 (0xe) 
 scremoveoption	REG_SZ         	0 
 AllowMultipleTSSessions	REG_DWORD      	1 (0x1) 
 UIHost	REG_EXPAND_SZ  	logonui.exe 
 LogonType	REG_DWORD      	1 (0x1) 
 Background	REG_SZ         	0 0 0 
 DebugServerCommand	REG_SZ         	no 
 SFCDisable	REG_DWORD      	0 (0x0) 
 WinStationsDisabled	REG_SZ         	0 
 HibernationPreviouslyEnabled	REG_DWORD      	1 (0x1) 
 ShowLogonOptions	REG_DWORD      	0 (0x0) 
 AltDefaultUserName	REG_SZ         	aurelie 
 AltDefaultDomainName	REG_SZ         	AURÉLIE 

===============
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\AtiExtEvent]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\crypt32chain]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\cryptnet]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\cscdll]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\ScCertProp]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\Schedule]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\sclgntfy]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\SensLogn]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify	ermsrv]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\wlballoon]

===============
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
{AEB6717E-7E19-11d0-97EE-00C04FD91972}	REG_SZ         	 

===============
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
%windir%\system32\sessmgr.exe	REG_SZ         	%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
C:\Program Files\Acer\Acer eConsole\MediaSync.exe	REG_SZ         	C:\Program Files\Acer\Acer eConsole\MediaSync.exe:LocalSubNet:Enabled:Media Synchoronizer
C:\Program Files\Acer\Acer eConsole\eConsole.exe	REG_SZ         	C:\Program Files\Acer\Acer eConsole\eConsole.exe:LocalSubNet:Enabled:eConsole
C:\Program Files\Acer\Acer eConsole\MediaServerService.exe	REG_SZ         	C:\Program Files\Acer\Acer eConsole\MediaServerService.exe:LocalSubNet:Enabled:Acer Media Server
C:\Program Files\ABBYY\FineReader 5.0 Sprint\Sprint.exe	REG_SZ         	C:\Program Files\ABBYY\FineReader 5.0 Sprint\Sprint.exe:192.168.1.11/255.255.255.255:Enabled:ABBYY FineReader 5.0 Sprint Plus
C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE	REG_SZ         	C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe
C:\Program Files\HP\Digital Imaging\bin\hposid01.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe
C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe
C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe
C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe
C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe:*:Enabled:hpqgpc01.exe
C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe
C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe
C:\Program Files\HP\HP Software Update\HPWUCli.exe	REG_SZ         	C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe
C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe
C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe	REG_SZ         	C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare
C:\Program Files\Bonjour\mDNSResponder.exe	REG_SZ         	C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour
C:\Program Files\iTunes\iTunes.exe	REG_SZ         	C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
%windir%\system32\sessmgr.exe	REG_SZ         	%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe
C:\Program Files\HP\Digital Imaging\bin\hposid01.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe
C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe
C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe
C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe
C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe:*:Enabled:hpqgpc01.exe
C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe
C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe
C:\Program Files\HP\HP Software Update\HPWUCli.exe	REG_SZ         	C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe
C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe
C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe	REG_SZ         	C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare

===============
ActivX controls
===============
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{029FDBA6-3547-11D7-AA4C-0050BF051A00}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{104B0A37-AB99-4F06-8032-8BBDC3B77DDB}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{166B1BCA-3F9C-11CF-8075-444553540000}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{5D637FAD-E202-48D1-8F18-5B9C459BD1E3}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{5D86DDB5-BDF9-441B-9E9E-D4730F4EE499}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{62475759-9E84-458E-A1AB-5D2C442ADFDE}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{68C1822F-F5C7-4404-A73F-03C10E0E94DA}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{6EBC6744-5383-4213-AD5E-66434ECA1812}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{7530BFB8-7293-4D34-9923-61A11451AFC5}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{8AD9C840-044E-11D1-B3E9-00805F499D93}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{9191F686-7F0A-441D-8A98-2FE3AC1BD913}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{B79A53C0-1DAC-4636-BACE-FD086A7A79BF}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{B9F79165-A264-4C4A-A211-133A5E8D647F}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{D27CDB6E-AE6D-11CF-96B8-444553540000}

===============
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{26923b43-4d38-484f-9b9e-de460746276c}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10072CEC-8CC1-11D1-986E-00A0C955B42F}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{233C1507-6A77-46A4-9443-F871F945D258}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{283807B5-2C60-11D0-A31D-00AA00B92C03}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2A202491-F00D-11cf-87CC-0020AFEECF20}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{36f8ec70-c29a-11d1-b5c7-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3af36230-a269-11d1-b5bf-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3bf42070-b3b1-11d1-b5c5-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{411EDCF7-755D-414E-A74B-3DCD6583F589}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4278c270-a269-11d1-b5bf-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA855-CC51-11CF-AAFA-00AA00B6015F}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{45ea75a0-a269-11d1-b5bf-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f216970-c90c-11d1-b5c7-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f645220-306d-11d2-995d-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5945c046-1e7d-11d1-bc44-00c04fd912be}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5A8D6EE0-3E18-11D0-821E-444553540000}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5fd399c0-a70a-11d1-9948-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{630b1da0-b465-11d1-9948-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6fab99d0-bab8-11d1-994a-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{73fa19d0-2d75-11d2-995d-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7790769C-0471-11d2-AF11-00C04FA35D02}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4340}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4383}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8b15971b-5355-4c82-8c07-7e181ea07608}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9381D8F2-0288-11D0-9501-00AA00B911A5}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{94de52c8-2d59-4f1b-883e-79663d2d9a8c}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9A394342-4A68-4EBA-85A6-55B559F4E700}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{ACC563BC-4266-43f0-B6ED-9D38C4202C7E}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C9E9A340-D1F1-11D0-821E-444553540600}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CC2A9BA0-3BDD-11D0-821E-444553540000}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CDD7975E-60F8-41d5-8149-19E51D6F71D0}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D27CDB6E-AE6D-11cf-96B8-444553540000}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{DAA94A2A-2A8D-4D3B-9DB8-56FBECED082D}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{de5aed00-a4bf-11d1-9948-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{E92B03AB-B707-11d2-9CBD-0000F87A369E}

==============
BHO :
======
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{0347C33E-8762-4905-BF09-768834316C61}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{2E03C0FD-4C48-43A7-9A54-00240C70FF16}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{C6867EB7-8350-4856-877F-93CF8AE3DC9C}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]

================
Internet Explorer :
================
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
Start Page	REG_SZ         	https://www.msn.com/fr-fr/?ocid=iehp

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
Start Page	REG_SZ         	https://www.orange.fr/portail

========
Services
========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services] 

Ndisuio : 0x3 ( OK = 3 )
SharedAccess : 0x2 ( OK = 2 )
wuauserv : 0x2 ( OK = 2 )

=========
Atapi.sys
=========

%%%% HASHDEEP-1.0
%%%% size,md5,sha256,filename
## Invoked from: C:\Documents and Settings\aurelie\Local Settings	emp\5.tmp
## C:\> hashdeep C:\WINDOWS\System32\Drivers\atapi.sys
## 
95360,cdfe4411a69c224bd1d11b2da92dac51,0e6b23a80f171550575bebc56f7500cd87a5cf03b2b9fdc49bc3de96282cd69d,C:\WINDOWS\System32\Drivers\atapi.sys


Sources
======= 
 
C:\WINDOWS\ERDNT\cache\atapi.sys  
C:\WINDOWS\SoftwareDistribution\Download\23ec66f2314a80d718b5483ab6e865af\atapi.sys  
C:\WINDOWS\system32\drivers\atapi.sys  

Référence :
==========

Win XP_32b     : a64013e98426e1877cb653685c5c0009
Win XP_SP2_32b : CDFE4411A69C224BD1D11B2DA92DAC51
Win XP_SP3_32b : 9F3A2F5AA6875C72BF062C712CFA2674
Vista_32b      : e03e8c99d15d0381e02743c36afc7c6f
Vista_SP1_32b  : 2d9c903dc76a66813d350a562de40ed9
Vista_SP2_32b  : 1F05B78AB91C9075565A9D8A4B880BC4
Vista_SP2_64b  : 1898FAE8E07D97F2F6C2D5326C633FAC
Windows 7_32b  : 80C40F7FDFC376E4C5FEEC28B41C119E
Windows 7_64b  : 02062C0B390B7729EDC9E69C680A6F3C
 
=======
Drive :
=======

Défragmenteur de disque Windows
Copyright (c) 2001 Microsoft Corp. et Executive Software International Inc.

Rapport d'analyse                 	 
    90,57 Go total,  4,13 Go libre (4%),  33% fragmenté (fragmentation du fichier 62%)

Vous devriez défragmenter ce volume. 	 

¤¤¤¤¤¤¤¤¤¤ Files/folders :

Present !! : C:\Documents and Settings\All Users\Application Data\.zreglib  
Present !! : C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache  
Present !! : C:\Program Files\BitLord  
Present !! : C:\WINDOWS\mbr.exe  
Present !! : C:\WINDOWS\SlantAdj.dll  
Present !! : C:\Documents and Settings\aurelie\Application Data\pcouffin.inf  
Present !! : C:\Documents and Settings\aurelie\Application Data\Microsoft\Clip Organizer\mstore10.mgc  
Present !! : C:\Documents and Settings\aurelie\LOCAL Settings\Temp\preconfig.exe  
Present !! : C:\Documents and Settings\aurelie\LOCAL Settings\Temp\fsprod.dll  
Present !! : C:\Documents and Settings\aurelie\LOCAL Settings\Temp\fssfm.dll  
 
¤¤¤¤¤¤¤¤¤¤ Keys : 

Present !! : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{0E5CBF21-D15F-11D0-8301-00AA005B4383}  
Present !! : HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDrives  
Present !! : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDrives  
Present !! : HKEY_USERS\S-1-5-21-1352976129-4025786766-809395480-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDrives  
Present !! : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Install.exe"  
Present !! : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Setup.exe"  
Present !! : "HKLM\Software\Trymedia Systems"  
Present !! : HKCR\CLSID\{248dd896-bb45-11cf-9abc-0080c7e7b78d}  
Present !! : HKCR\CLSID\{248dd897-bb45-11cf-9abc-0080c7e7b78d}  
Present !! : HKCR\Interface\{248dd892-bb45-11cf-9abc-0080c7e7b78d}  
Present !! : HKCR\Interface\{248dd893-bb45-11cf-9abc-0080c7e7b78d}  
Present !! : HKCR\interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25e}  
Present !! : HKCR\Interface\{e420a65f-9984-4b8c-9fa9-1ed69d3b0a13}  
Present !! : HKCR\Interface\{E9C4CBEB-7BDF-47FF-8EDF-D72B50BB50EF}  
Present !! : HKCR\Interface\{ea58c2ea-be26-49dd-9b9a-c8e4e5ca7791}  
Present !! : HKCR\Interface\{eb9e5c1c-b1f9-4c2b-be8a-27d6446fdaf8}  
Present !! : HKCR\Interface\{ec1a2105-5621-440f-987d-27ef428131d9}  
Present !! : HKCR\interface\{ebab4a71-8c34-461a-b57d-dd041d439555}  
Present !! : HKCR\interface\{edb1a56e-2224-4c79-a4bd-42a39c6e4608}  
Present !! : HKCR\interface\{EEE6C358-6118-11DC-9C72-001320C79847}  
Present !! : HKCR\interface\{EEE6C359-6118-11DC-9C72-001320C79847}  
Present !! : HKCR\interface\{EEE6C35A-6118-11DC-9C72-001320C79847}  
Present !! : HKCR\interface\{f06fea43-0cc3-4bf6-a85b-5efb1c07aa4b}  
Present !! : HKCR\interface\{f171a44f-7af5-43e1-afed-edc826a1b0f5}  
Present !! : HKCR\Interface\{f2f8c877-b06c-4b5e-95e7-aacfc9e8219d}  
Present !! : HKCR\Interface\{f43ec88b-b6c8-4969-a763-e2bf55602cce}  
Present !! : HKCR\interface\{f5ac8b35-5b15-4e8f-8046-43858973b495}  
Present !! : HKCR\Interface\{f786cb18-3809-4e49-bc99-9a66da47db8b}  
Present !! : HKCR\Interface\{f814be58-1bf9-4b50-829a-e889f86127ad}  
Present !! : HKCR\Interface\{F8ACA5A0-060A-478A-8368-1407780D2251}  
Present !! : HKCR\interface\{fc94a0f7-9c7c-4ae2-9106-5c212332b209}  
Present !! : HKCR\Interface\{fca28ac5-c1e1-4d67-a5ae-c44d6c374d9f}  
Present !! : HKCR\intermplug  
Present !! : HKCR\internetexperienceenhancer.internetexperienceenhancer  
Present !! : HKCR\KiweeIEToolbar.KiweeToolbar  
Present !! : HKCR\KiweeIEToolbar.KiweeToolbar.1  
Present !! : HKCR\KiweeIEToolbar.ToolbarInfo  
Present !! : HKCR\KiweeIEToolbar.ToolbarInfo.1  
Present !! : HKCR\kt_bho.KettleBho  
Present !! : HKCR\MagicControl.MagicComponent  
Present !! : HKCR\MagicControl.MagicComponent.1  
Present !! : HKCR\mediagateway.installer  
Present !! : HKCR\MediaPlayer.GraphicsUtils  
Present !! : HKCR\MediaPlayer.GraphicsUtils.1  
Present !! : HKCR\MgMediaPlayer.GifAnimator  
Present !! : HKCR\MgMediaPlayer.GifAnimator.1  
Present !! : HKCR\minibugtransporter.minibugtransporterx  
Present !! : HKCR\minibugtransporter.minibugtransporterx.1  
Present !! : HKCR\mslagent.3  
Present !! : HKCR\mslagent.3.1  
Present !! : HKCR\msram.tchongabho  
Present !! : HKCR\MWSearch.cfgwr  
Present !! : HKCR\MWSearch.cfgwr.1  
Present !! : HKCR\MWSearch.StockBar  
Present !! : HKCR\MWSearch.StockBar.1  
Present !! : HKCR\MWSearch.tbactivator  
Present !! : HKCR\MWSearch.tbactivator.1  
Present !! : HKCR\Myglobalsearchbar.settingsplugin  
Present !! : HKCR\Myglobalsearchbar.settingsplugin.1  
Present !! : HKCR\Myglobalsearchbar.toolbarplugin  
Present !! : HKCR\Myglobalsearchbar.toolbarplugin.1  
Present !! : HKCR\MyQuickSearchToolBar.SettingsPlugin  
Present !! : HKCR\MyQuickSearchToolBar.SettingsPlugin.1  
Present !! : HKCR\Mysearch.popswatterbarbutton  
Present !! : HKCR\Mysearch.popswatterbarbutton.1  
Present !! : HKCR\Mysearch.popswattersettingscontrol  
Present !! : HKCR\Mysearch.popswattersettingscontrol.1  
Present !! : HKCR\Mysearchtoolbar.netscapeshutdown  
Present !! : HKCR\Mysearchtoolbar.netscapeshutdown.1  
Present !! : HKCR\Mysearchtoolbar.netscapestartup  
Present !! : HKCR\Mysearchtoolbar.netscapestartup.1  
Present !! : HKCR\Mysearchtoolbar.settingsplugin  
Present !! : HKCR\Mysearchtoolbar.settingsplugin.1  
Present !! : HKCR\MyWebSearch.ChatSessionPlugin  
Present !! : HKCR\MyWebSearch.ChatSessionPlugin.1  
Present !! : HKCR\MyWebSearch.HTMLPanel  
Present !! : HKCR\MyWebSearch.HTMLPanel.1  
Present !! : HKCR\MyWebSearch.OutlookAddin  
Present !! : HKCR\MyWebSearch.OutlookAddin.1  
Present !! : HKCR\MyWebSearch.PseudoTransparentPlugin  
Present !! : HKCR\MyWebSearch.PseudoTransparentPlugin.1  
Present !! : HKCR\MyWebSearchToolBar.SettingsPlugin  
Present !! : HKCR\MyWebSearchToolBar.SettingsPlugin.1  
Present !! : HKCR\MyWebSearchToolBar.ToolbarPlugin  
Present !! : HKCR\MyWebSearchToolBar.ToolbarPlugin.1  
Present !! : HKCR\NaviHelper.NaviHelperObject  
Present !! : HKCR\NaviHelper.NaviHelperObject.1  
Present !! : HKCR\NaviPromo.EGNaviScoring  
Present !! : HKCR\NaviPromo.EGNaviScoring.1  
Present !! : HKCR\NetPumper.AddUrl  
Present !! : HKCR\NetPumperNNProxy.NetscapeInterface  
Present !! : HKCR\oberontb.band  
Present !! : HKCR\oberontb.band.1  
Present !! : HKCR\oeactivexdll.desktopbuttonhandler  
Present !! : HKCR\oeactivexdll.desktopbuttonhandler.1  
Present !! : HKCR\oeactivexdll.desktopoeaddin1  
Present !! : HKCR\oeactivexdll.desktopoeaddin1.1  
Present !! : HKCR\OutlookAddin.Addin  
Present !! : HKCR\OutlookAddin.Addin.1  
Present !! : HKCR\P2ECOM.EGP2ECOM  
Present !! : HKCR\parttimeb  
Present !! : HKCR\popcaploader.popcaploaderctrl2  
Present !! : HKCR\popcaploader.popcaploaderctrl2.1  
Present !! : HKCRxresult.rxresultfilter  
Present !! : HKCRxresult.rxresultfilter.1  
Present !! : HKCR\saix.installercaller  
Present !! : HKCR\saix.installercaller.1  
Present !! : HKCR\screensavercontrol.screensaverinstaller  
Present !! : HKCR\screensavercontrol.screensaverinstaller.1  
Present !! : HKCR\SearchSettings.BHO  
Present !! : HKCR\SearchSettings.BHO.1  
Present !! : HKCR\seekmo.desktopflash  
Present !! : HKCR\seekmo.desktopflash.1  
Present !! : HKCR\seekmoax.clientdetector  
Present !! : HKCR\seekmoax.clientdetector.1  
Present !! : HKCR\seekmoax.userprofiles  
Present !! : HKCR\seekmoax.userprofiles.1  
Present !! : HKCR\shoppingreport.hbax  
Present !! : HKCR\shoppingreport.hbax.1  
Present !! : HKCR\shoppingreport.hbinfoband  
Present !! : HKCR\shoppingreport.hbinfoband.1  
Present !! : HKCR\shoppingreport.iebutton  
Present !! : HKCR\shoppingreport.iebutton.1  
Present !! : HKCR\shoppingreport.iebuttona  
Present !! : HKCR\shoppingreport.iebuttona.1  
Present !! : HKCR\shoppingreport.rprtctrl  
Present !! : HKCR\shoppingreport.rprtctrl.1  
Present !! : HKCR\SPEEDBIT1.SPEEDBIT1  
Present !! : HKCR\SPEEDBIT1.SPEEDBIT1.3  
Present !! : HKCR\srv.coreservices  
Present !! : HKCR\srv.coreservices.1  
Present !! : HKCR\sssinstaller.installer  
Present !! : HKCR\sssinstaller.installer.1  
Present !! : HKCR\sssinstaller.sinstaller  
Present !! : HKCR\sssinstaller.sinstaller.1  
Present !! : HKCR\sud_ext  
Present !! : HKCR\SWEETIE.IEToolbar  
Present !! : HKCR\SWEETIE.IEToolbar.1  
Present !! : HKCR\SWEETIE.SWEETIE  
Present !! : HKCR\SWEETIE.SWEETIE.1  
Present !! : HKCR\SWEETIE.SWEETIE.3  
Present !! : HKCR\SweetIM_URLSearchHook.ToolbarURLSearchHook  
Present !! : HKCR\SweetIM_URLSearchHook.ToolbarURLSearchHook.1  
Present !! : HKCR\swelladsforyou.swelladsforyou.1  
Present !! : HKCR\SystemFileAssociations\Directory.Audio\shellex\ContextMenuHandlers\secure_del  
Present !! : HKCR\SystemFileAssociations\Directory.Video\shellex\ContextMenuHandlers\secure_del  
Present !! : HKCR	hebestadsforyou.thebestadsforyou  
Present !! : HKCR	hebestadsforyou.thebestadsforyou.1  
Present !! : HKCR\ToolBand.SWEETIE  
Present !! : HKCR\ToolBand.SWEETIE.1  
Present !! : HKCR	oolbar.htmlmenuui  
Present !! : HKCR	oolbar.htmlmenuui.1  
Present !! : HKCR	oolbar.toolbarctl  
Present !! : HKCR	oolbar.toolbarctl.1  
Present !! : HKCR\Toolbar3.SWEETIE  
Present !! : HKCR\Toolbar3.SWEETIE.1  
Present !! : HKCR\Torrent101  
Present !! : HKCR\TorrentQ  
Present !! : HKCR\TorrentSoftware  
Present !! : HKCR\TypeLib\{04011C11-2F3B-44ed-977C-270CA669C6B2}  
Present !! : HKCR\TypeLib\{0514c9b0-e4c6-4d6b-a3a6-b38bc280b115}  
Present !! : HKCR\TypeLib\{06EC63CC-4823-4836-ABB8-AB5F3971FA5C}  
Present !! : HKCR\TypeLib\{07B18EA0-A523-4961-B6BB-170DE4475CCA}  
Present !! : HKCR\Typelib\{08755390-f46d-4d09-968c-3430166b3189}  
Present !! : HKCR\Typelib\{087c4054-0a2b-4f35-b0db-bed3e21650f4}  
Present !! : HKCR\Typelib\{0923208c-e259-4ed5-a778-cb607da350ad}  
Present !! : HKCR\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A}  
Present !! : HKCR\TypeLib\{0E594D22-ACE6-43A2-BCDA-BB7C65D3FE8C}  
Present !! : HKCR\TypeLib\{0E677220-E309-4341-81BD-3CC3018BF5B3}  
Present !! : HKCR\TypeLib\{10954590-2B3A-41EC-97BB-C95A5E646DA9}  
Present !! : HKCR\TypeLib\{1145A909-A836-44B8-B03A-48D858B0F43E}  
Present !! : HKCR\TypeLib\{1AE427B0-E3B7-4D2E-A6B9-36605B0F214E}  
Present !! : HKCR\TypeLib\{1510d162-dace-de7d-0d0a-1556c8a81de9}  
Present !! : HKCR\Typelib\{1D4DB7D0-6EC9-47A3-BD87-1E41684E07BB}  
Present !! : HKCR\TypeLib\{1F445F82-42C0-46F3-9A2E-6ADB79046D41}  
Present !! : HKCR\Typelib\{229d2451-a617-4b30-b5e8-8138694240cb}  
Present !! : HKCR\TypeLib\{22c12739-c111-44c6-9bb7-f335c2a9be2a}  
Present !! : HKCR\TypeLib\{2473BF20-CA0A-11DA-88DB-0050BF2938E1}  
Present !! : HKCR\TypeLib\{248dd890-bb45-11cf-9abc-0080c7e7b78d}  
Present !! : HKCR\Typelib\{259EEB17-79AA-44DF-8410-8E55F82A902A}  
Present !! : HKCR\TypeLib\{2850bdc7-2330-4e31-9fa0-88268846539a}  
Present !! : HKCR\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554}  
Present !! : HKCR\TypeLib\{310b6b01-d56c-a278-2f47-b8cf1066c079}  
Present !! : HKCR\Typelib\{3160f356-e8c3-4de2-a698-92eeeb3d3400}  
Present !! : HKCR\TypeLib\{37b85a20-692b-4205-9cad-2626e4993404}  
Present !! : HKCR\Typelib\{3b8e549e-0c73-4aab-8939-5ea2ed102cc6}  
Present !! : HKCR\Typelib\{3c2d2a1e-031f-4397-9614-87c932a848e0}  
Present !! : HKCR\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906}  
Present !! : HKCR\TypeLib\{4509d3cc-b642-4745-b030-645b79522c6d}  
Present !! : HKCR\Typelib\{45397063-d7d0-47c2-9508-26487608a298}  
Present !! : HKCR\TypeLib\{478CAB91-9E28-11D4-97FF-0050047D51FB}  
Present !! : HKCR\TypeLib\{497dddb6-6eee-4561-9621-b77dc82c1f84}  
Present !! : HKCR\Typelib\{4cf5a3c1-07a2-4336-9b54-6870452ebde1}  
Present !! : HKCR\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}  
Present !! : HKCR\Typelib\{52cde0e4-d73b-11dd-9b90-fcc056d89593}  
Present !! : HKCR\Typelib\{5303e828-3a4c-11de-ac1c-f77f55d89593}  
Present !! : HKCR\TypeLib\{5630B768-1C09-4105-9E03-E35985E36B0B}  
Present !! : HKCR\TypeLib\{5A445F80-DAB5-4CD9-8A05-CD09AC145AA2}  
Present !! : HKCR\Typelib\{58906392-79C4-497C-ACC6-6942B59F1A08}  
Present !! : HKCR\TypeLib\{5BAD7FAE-81F0-4439-8C1A-3E8907998047}  
Present !! : HKCR\Typelib\{6c5ba655-5cec-47bb-a6d3-82a4afe7da87}  
Present !! : HKCR\Typelib\{710993A2-4F87-41D7-B6FE-F5A20368465F}  
Present !! : HKCR\Typelib\{71e9cf40-af72-4b55-bd3f-1fea2a0eaea6}  
Present !! : HKCR\Typelib\{71efe583-62fe-4419-9918-ca3b683f7b36}  
Present !! : HKCR\Typelib\{74278296-0ec7-4f7a-ad55-eb7a2f35f311}  
Present !! : HKCR\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9}  
Present !! : HKCR\TypeLib\{7699AEF9-F83A-44FA-B374-AA02CEDF247D}

benurrr · Answer

y'a du monde c'est excellent on va pouvoir supprimer sa 

mais ton rapport n'est pas  complet repos te le en n'oubliant rien 

pour cela quand tu ouvre ton rapport en haut tu a édition tu clique dessus et la tu fait sélectionner tous et tu reclic sur édition et tu fait copier tous et le colle içi

boubou2b · Answer

Heu, je crois que c'est le même, je n'ai eu que celui-là ou alors mon ordinateur a redemarrer avant la fin.
Merci encore.
List'em by g3n-h@ckm@n 1.2.5.2

User : aurelie (Administrateurs) 
Update on 16/02/2010 by g3n-h@ckm@n ::::: 13.30 
Start at: 02:29:57 | 13/01/2006
Contact : https://forums.commentcamarche.net/forum/virus-securite-7

              Intel(R) Pentium(R) D CPU 3.00GHz
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 2
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Disabled
AV : Anti-virus firewall 9.10 9.10 [ Enabled | Updated ]
FW : Anti-virus firewall 9.10[ Enabled ]9.10

C:\ -> Disque fixe local | 90,57 Go (4,13 Go free) [ACER] | NTFS
D:\ -> Disque fixe local | 91,82 Go (18,48 Go free) [ACERDATA] | FAT32
E:\ -> Disque CD-ROM
G:\ -> Disque amovible
H:\ -> Disque amovible
I:\ -> Disque amovible
J:\ -> Disque amovible

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running 

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Orange\Antivirus Firewall\Anti-Virus\fsgk32st.exe
C:\Program Files\Orange\Antivirus Firewall\Anti-Virus\FSGK32.EXE
C:\Program Files\Orange\Antivirus Firewall\Common\FSMA32.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Orange\Antivirus Firewall\Common\FSHDLL32.EXE
C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\Program Files\Acer\Acer eMode Management\AspireService.exe
C:\Program Files\Acer\Acer eConsole\MediaSync.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\lg_fwupdate\fwupdate.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Orange\Antivirus Firewall\Common\FSM32.EXE
C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
C:\Program Files\Orange\Antivirus Firewall\ORSP Client\fsorsp.exe
C:\Program Files\Orange\Antivirus Firewall\FWES\Program\fsdfwd.exe
C:\Program Files\Orange\Antivirus Firewall\Anti-Virus\fssm32.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Orange\Antivirus Firewall\Anti-Virus\fsav32.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\List_Kill'em\List_Kill'em.scr
C:\WINDOWS\system32\cmd.exe
C:\Documents and Settings\aurelie\Local Settings	emp\5.tmp\pv.exe

======================
Keys "Run" 
======================
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
LightScribe Control Panel	REG_SZ         	C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe -hidden
MSMSGS	REG_SZ         	"C:\Program Files\Messenger\msmsgs.exe" /background
ctfmon.exe	REG_SZ         	C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
LaunchApp	REG_SZ         	Alaunch 
High Definition Audio Property Page Shortcut	REG_SZ         	HDAShCut.exe 
RTHDCPL	REG_SZ         	RTHDCPL.EXE 
ntiMUI	REG_SZ         	c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7
tiMUI.exe 
SunJavaUpdateSched	REG_SZ         	"C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" 
RemoteControl	REG_SZ         	"C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" 
IMJPMIG8.1	REG_SZ         	"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 
MSPY2002	REG_SZ         	C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC 
PHIME2002ASync	REG_SZ         	C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC 
PHIME2002A	REG_SZ         	C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName 
eRecoveryService	REG_SZ         	C:\Acer\Empowering Technology\eRecovery\Monitor.exe 
NvCplDaemon	REG_SZ         	RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup 
nwiz	REG_SZ         	nwiz.exe /install 
NvMediaCenter	REG_SZ         	RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit 
AspireService	REG_SZ         	C:\Program Files\Acer\Acer eMode Management\AspireService.exe 
MediaSync	REG_SZ         	C:\Program Files\Acer\Acer eConsole\MediaSync.exe 
Adobe Reader Speed Launcher	REG_SZ         	"C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" 
NeroFilterCheck	REG_SZ         	C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe 
LGODDFU	REG_SZ         	"C:\Program Files\lg_fwupdate\fwupdate.exe" blrun 
HP Software Update	REG_SZ         	C:\Program Files\HP\HP Software Update\HPWuSchd2.exe 
QuickTime Task	REG_SZ         	"C:\Program Files\QuickTime\qttask.exe" -atboottime 
iTunesHelper	REG_SZ         	"C:\Program Files\iTunes\iTunesHelper.exe" 
AppleSyncNotifier	REG_SZ         	C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe 
F-Secure Manager	REG_SZ         	"C:\Program Files\Orange\Antivirus Firewall\Common\FSM32.EXE" /splash 
F-Secure TNB	REG_SZ         	"C:\Program Files\Orange\Antivirus Firewall\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW 
 
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]

=====================
Other Keys
=====================
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] 
dontdisplaylastusername	REG_DWORD      	0 (0x0) 
legalnoticecaption	REG_SZ         	 
legalnoticetext	REG_SZ         	 
shutdownwithoutlogon	REG_DWORD      	1 (0x1) 
undockwithoutlogon	REG_DWORD      	1 (0x1) 
DisableRegistryTools	REG_DWORD      	0 (0x0) 

===============
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] 
NoDriveTypeAutoRun	REG_DWORD      	323 (0x143) 
NoDriveAutoRun	REG_DWORD      	67108863 (0x3ffffff) 
NoDrives	REG_DWORD      	0 (0x0) 

===============
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] 
HonorAutoRunSetting	REG_DWORD      	1 (0x1) 
NoDriveAutoRun	REG_DWORD      	67108863 (0x3ffffff) 
NoDriveTypeAutoRun	REG_DWORD      	323 (0x143) 
NoDrives	REG_DWORD      	0 (0x0) 

=============== 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

===============
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] 
 AutoRestartShell	REG_DWORD      	1 (0x1) 
 DefaultDomainName	REG_SZ         	AURÉLIE 
 DefaultUserName	REG_SZ         	aurelie 
 LegalNoticeCaption	REG_SZ         	 
 LegalNoticeText	REG_SZ         	 
 PowerdownAfterShutdown	REG_SZ         	0 
 ReportBootOk	REG_SZ         	1 
 Shell	REG_SZ         	Explorer.exe 
 ShutdownWithoutLogon	REG_SZ         	0 
 System	REG_SZ         	 
 Userinit	REG_SZ         	C:\WINDOWS\system32\userinit.exe, 
 VmApplet	REG_SZ         	rundll32 shell32,Control_RunDLL "sysdm.cpl" 
 SfcQuota	REG_DWORD      	-1 (0xffffffff) 
 allocatecdroms	REG_SZ         	0 
 allocatedasd	REG_SZ         	0 
 allocatefloppies	REG_SZ         	0 
 cachedlogonscount	REG_SZ         	10 
 forceunlocklogon	REG_DWORD      	0 (0x0) 
 passwordexpirywarning	REG_DWORD      	14 (0xe) 
 scremoveoption	REG_SZ         	0 
 AllowMultipleTSSessions	REG_DWORD      	1 (0x1) 
 UIHost	REG_EXPAND_SZ  	logonui.exe 
 LogonType	REG_DWORD      	1 (0x1) 
 Background	REG_SZ         	0 0 0 
 DebugServerCommand	REG_SZ         	no 
 SFCDisable	REG_DWORD      	0 (0x0) 
 WinStationsDisabled	REG_SZ         	0 
 HibernationPreviouslyEnabled	REG_DWORD      	1 (0x1) 
 ShowLogonOptions	REG_DWORD      	0 (0x0) 
 AltDefaultUserName	REG_SZ         	aurelie 
 AltDefaultDomainName	REG_SZ         	AURÉLIE 

===============
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\AtiExtEvent]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\crypt32chain]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\cryptnet]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\cscdll]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\ScCertProp]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\Schedule]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\sclgntfy]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\SensLogn]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify	ermsrv]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\wlballoon]

===============
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
{AEB6717E-7E19-11d0-97EE-00C04FD91972}	REG_SZ         	 

===============
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
%windir%\system32\sessmgr.exe	REG_SZ         	%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
C:\Program Files\Acer\Acer eConsole\MediaSync.exe	REG_SZ         	C:\Program Files\Acer\Acer eConsole\MediaSync.exe:LocalSubNet:Enabled:Media Synchoronizer
C:\Program Files\Acer\Acer eConsole\eConsole.exe	REG_SZ         	C:\Program Files\Acer\Acer eConsole\eConsole.exe:LocalSubNet:Enabled:eConsole
C:\Program Files\Acer\Acer eConsole\MediaServerService.exe	REG_SZ         	C:\Program Files\Acer\Acer eConsole\MediaServerService.exe:LocalSubNet:Enabled:Acer Media Server
C:\Program Files\ABBYY\FineReader 5.0 Sprint\Sprint.exe	REG_SZ         	C:\Program Files\ABBYY\FineReader 5.0 Sprint\Sprint.exe:192.168.1.11/255.255.255.255:Enabled:ABBYY FineReader 5.0 Sprint Plus
C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE	REG_SZ         	C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe
C:\Program Files\HP\Digital Imaging\bin\hposid01.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe
C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe
C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe
C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe
C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe:*:Enabled:hpqgpc01.exe
C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe
C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe
C:\Program Files\HP\HP Software Update\HPWUCli.exe	REG_SZ         	C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe
C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe
C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe	REG_SZ         	C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare
C:\Program Files\Bonjour\mDNSResponder.exe	REG_SZ         	C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour
C:\Program Files\iTunes\iTunes.exe	REG_SZ         	C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
%windir%\system32\sessmgr.exe	REG_SZ         	%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe
C:\Program Files\HP\Digital Imaging\bin\hposid01.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe
C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe
C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe
C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe
C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe:*:Enabled:hpqgpc01.exe
C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe
C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe
C:\Program Files\HP\HP Software Update\HPWUCli.exe	REG_SZ         	C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe
C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe	REG_SZ         	C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe
C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe	REG_SZ         	C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare

===============
ActivX controls
===============
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{029FDBA6-3547-11D7-AA4C-0050BF051A00}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{104B0A37-AB99-4F06-8032-8BBDC3B77DDB}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{166B1BCA-3F9C-11CF-8075-444553540000}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{5D637FAD-E202-48D1-8F18-5B9C459BD1E3}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{5D86DDB5-BDF9-441B-9E9E-D4730F4EE499}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{62475759-9E84-458E-A1AB-5D2C442ADFDE}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{68C1822F-F5C7-4404-A73F-03C10E0E94DA}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{6EBC6744-5383-4213-AD5E-66434ECA1812}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{7530BFB8-7293-4D34-9923-61A11451AFC5}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{8AD9C840-044E-11D1-B3E9-00805F499D93}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{9191F686-7F0A-441D-8A98-2FE3AC1BD913}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{B79A53C0-1DAC-4636-BACE-FD086A7A79BF}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{B9F79165-A264-4C4A-A211-133A5E8D647F}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{D27CDB6E-AE6D-11CF-96B8-444553540000}

===============
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{26923b43-4d38-484f-9b9e-de460746276c}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10072CEC-8CC1-11D1-986E-00A0C955B42F}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{233C1507-6A77-46A4-9443-F871F945D258}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{283807B5-2C60-11D0-A31D-00AA00B92C03}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2A202491-F00D-11cf-87CC-0020AFEECF20}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{36f8ec70-c29a-11d1-b5c7-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3af36230-a269-11d1-b5bf-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3bf42070-b3b1-11d1-b5c5-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{411EDCF7-755D-414E-A74B-3DCD6583F589}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4278c270-a269-11d1-b5bf-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA855-CC51-11CF-AAFA-00AA00B6015F}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{45ea75a0-a269-11d1-b5bf-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f216970-c90c-11d1-b5c7-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f645220-306d-11d2-995d-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5945c046-1e7d-11d1-bc44-00c04fd912be}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5A8D6EE0-3E18-11D0-821E-444553540000}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5fd399c0-a70a-11d1-9948-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{630b1da0-b465-11d1-9948-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6fab99d0-bab8-11d1-994a-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{73fa19d0-2d75-11d2-995d-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7790769C-0471-11d2-AF11-00C04FA35D02}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4340}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4383}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8b15971b-5355-4c82-8c07-7e181ea07608}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9381D8F2-0288-11D0-9501-00AA00B911A5}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{94de52c8-2d59-4f1b-883e-79663d2d9a8c}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9A394342-4A68-4EBA-85A6-55B559F4E700}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{ACC563BC-4266-43f0-B6ED-9D38C4202C7E}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C9E9A340-D1F1-11D0-821E-444553540600}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CC2A9BA0-3BDD-11D0-821E-444553540000}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CDD7975E-60F8-41d5-8149-19E51D6F71D0}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D27CDB6E-AE6D-11cf-96B8-444553540000}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{DAA94A2A-2A8D-4D3B-9DB8-56FBECED082D}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{de5aed00-a4bf-11d1-9948-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{E92B03AB-B707-11d2-9CBD-0000F87A369E}

==============
BHO :
======
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{0347C33E-8762-4905-BF09-768834316C61}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{2E03C0FD-4C48-43A7-9A54-00240C70FF16}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{C6867EB7-8350-4856-877F-93CF8AE3DC9C}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]

================
Internet Explorer :
================
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
Start Page	REG_SZ         	https://www.msn.com/fr-fr/?ocid=iehp

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
Start Page	REG_SZ         	https://www.orange.fr/portail

========
Services
========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services] 

Ndisuio : 0x3 ( OK = 3 )
SharedAccess : 0x2 ( OK = 2 )
wuauserv : 0x2 ( OK = 2 )

=========
Atapi.sys
=========

%%%% HASHDEEP-1.0
%%%% size,md5,sha256,filename
## Invoked from: C:\Documents and Settings\aurelie\Local Settings	emp\5.tmp
## C:\> hashdeep C:\WINDOWS\System32\Drivers\atapi.sys
## 
95360,cdfe4411a69c224bd1d11b2da92dac51,0e6b23a80f171550575bebc56f7500cd87a5cf03b2b9fdc49bc3de96282cd69d,C:\WINDOWS\System32\Drivers\atapi.sys


Sources
======= 
 
C:\WINDOWS\ERDNT\cache\atapi.sys  
C:\WINDOWS\SoftwareDistribution\Download\23ec66f2314a80d718b5483ab6e865af\atapi.sys  
C:\WINDOWS\system32\drivers\atapi.sys  

Référence :
==========

Win XP_32b     : a64013e98426e1877cb653685c5c0009
Win XP_SP2_32b : CDFE4411A69C224BD1D11B2DA92DAC51
Win XP_SP3_32b : 9F3A2F5AA6875C72BF062C712CFA2674
Vista_32b      : e03e8c99d15d0381e02743c36afc7c6f
Vista_SP1_32b  : 2d9c903dc76a66813d350a562de40ed9
Vista_SP2_32b  : 1F05B78AB91C9075565A9D8A4B880BC4
Vista_SP2_64b  : 1898FAE8E07D97F2F6C2D5326C633FAC
Windows 7_32b  : 80C40F7FDFC376E4C5FEEC28B41C119E
Windows 7_64b  : 02062C0B390B7729EDC9E69C680A6F3C
 
=======
Drive :
=======

Défragmenteur de disque Windows
Copyright (c) 2001 Microsoft Corp. et Executive Software International Inc.

Rapport d'analyse                 	 
    90,57 Go total,  4,13 Go libre (4%),  33% fragmenté (fragmentation du fichier 62%)

Vous devriez défragmenter ce volume. 	 

¤¤¤¤¤¤¤¤¤¤ Files/folders :

Present !! : C:\Documents and Settings\All Users\Application Data\.zreglib  
Present !! : C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache  
Present !! : C:\Program Files\BitLord  
Present !! : C:\WINDOWS\mbr.exe  
Present !! : C:\WINDOWS\SlantAdj.dll  
Present !! : C:\Documents and Settings\aurelie\Application Data\pcouffin.inf  
Present !! : C:\Documents and Settings\aurelie\Application Data\Microsoft\Clip Organizer\mstore10.mgc  
Present !! : C:\Documents and Settings\aurelie\LOCAL Settings\Temp\preconfig.exe  
Present !! : C:\Documents and Settings\aurelie\LOCAL Settings\Temp\fsprod.dll  
Present !! : C:\Documents and Settings\aurelie\LOCAL Settings\Temp\fssfm.dll  
 
¤¤¤¤¤¤¤¤¤¤ Keys : 

Present !! : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{0E5CBF21-D15F-11D0-8301-00AA005B4383}  
Present !! : HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDrives  
Present !! : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDrives  
Present !! : HKEY_USERS\S-1-5-21-1352976129-4025786766-809395480-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDrives  
Present !! : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Install.exe"  
Present !! : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Setup.exe"  
Present !! : "HKLM\Software\Trymedia Systems"  
Present !! : HKCR\CLSID\{248dd896-bb45-11cf-9abc-0080c7e7b78d}  
Present !! : HKCR\CLSID\{248dd897-bb45-11cf-9abc-0080c7e7b78d}  
Present !! : HKCR\Interface\{248dd892-bb45-11cf-9abc-0080c7e7b78d}  
Present !! : HKCR\Interface\{248dd893-bb45-11cf-9abc-0080c7e7b78d}  
Present !! : HKCR\interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25e}  
Present !! : HKCR\Interface\{e420a65f-9984-4b8c-9fa9-1ed69d3b0a13}  
Present !! : HKCR\Interface\{E9C4CBEB-7BDF-47FF-8EDF-D72B50BB50EF}  
Present !! : HKCR\Interface\{ea58c2ea-be26-49dd-9b9a-c8e4e5ca7791}  
Present !! : HKCR\Interface\{eb9e5c1c-b1f9-4c2b-be8a-27d6446fdaf8}  
Present !! : HKCR\Interface\{ec1a2105-5621-440f-987d-27ef428131d9}  
Present !! : HKCR\interface\{ebab4a71-8c34-461a-b57d-dd041d439555}  
Present !! : HKCR\interface\{edb1a56e-2224-4c79-a4bd-42a39c6e4608}  
Present !! : HKCR\interface\{EEE6C358-6118-11DC-9C72-001320C79847}  
Present !! : HKCR\interface\{EEE6C359-6118-11DC-9C72-001320C79847}  
Present !! : HKCR\interface\{EEE6C35A-6118-11DC-9C72-001320C79847}  
Present !! : HKCR\interface\{f06fea43-0cc3-4bf6-a85b-5efb1c07aa4b}  
Present !! : HKCR\interface\{f171a44f-7af5-43e1-afed-edc826a1b0f5}  
Present !! : HKCR\Interface\{f2f8c877-b06c-4b5e-95e7-aacfc9e8219d}  
Present !! : HKCR\Interface\{f43ec88b-b6c8-4969-a763-e2bf55602cce}  
Present !! : HKCR\interface\{f5ac8b35-5b15-4e8f-8046-43858973b495}  
Present !! : HKCR\Interface\{f786cb18-3809-4e49-bc99-9a66da47db8b}  
Present !! : HKCR\Interface\{f814be58-1bf9-4b50-829a-e889f86127ad}  
Present !! : HKCR\Interface\{F8ACA5A0-060A-478A-8368-1407780D2251}  
Present !! : HKCR\interface\{fc94a0f7-9c7c-4ae2-9106-5c212332b209}  
Present !! : HKCR\Interface\{fca28ac5-c1e1-4d67-a5ae-c44d6c374d9f}  
Present !! : HKCR\intermplug  
Present !! : HKCR\internetexperienceenhancer.internetexperienceenhancer  
Present !! : HKCR\KiweeIEToolbar.KiweeToolbar  
Present !! : HKCR\KiweeIEToolbar.KiweeToolbar.1  
Present !! : HKCR\KiweeIEToolbar.ToolbarInfo  
Present !! : HKCR\KiweeIEToolbar.ToolbarInfo.1  
Present !! : HKCR\kt_bho.KettleBho  
Present !! : HKCR\MagicControl.MagicComponent  
Present !! : HKCR\MagicControl.MagicComponent.1  
Present !! : HKCR\mediagateway.installer  
Present !! : HKCR\MediaPlayer.GraphicsUtils  
Present !! : HKCR\MediaPlayer.GraphicsUtils.1  
Present !! : HKCR\MgMediaPlayer.GifAnimator  
Present !! : HKCR\MgMediaPlayer.GifAnimator.1  
Present !! : HKCR\minibugtransporter.minibugtransporterx  
Present !! : HKCR\minibugtransporter.minibugtransporterx.1  
Present !! : HKCR\mslagent.3  
Present !! : HKCR\mslagent.3.1  
Present !! : HKCR\msram.tchongabho  
Present !! : HKCR\MWSearch.cfgwr  
Present !! : HKCR\MWSearch.cfgwr.1  
Present !! : HKCR\MWSearch.StockBar  
Present !! : HKCR\MWSearch.StockBar.1  
Present !! : HKCR\MWSearch.tbactivator  
Present !! : HKCR\MWSearch.tbactivator.1  
Present !! : HKCR\Myglobalsearchbar.settingsplugin  
Present !! : HKCR\Myglobalsearchbar.settingsplugin.1  
Present !! : HKCR\Myglobalsearchbar.toolbarplugin  
Present !! : HKCR\Myglobalsearchbar.toolbarplugin.1  
Present !! : HKCR\MyQuickSearchToolBar.SettingsPlugin  
Present !! : HKCR\MyQuickSearchToolBar.SettingsPlugin.1  
Present !! : HKCR\Mysearch.popswatterbarbutton  
Present !! : HKCR\Mysearch.popswatterbarbutton.1  
Present !! : HKCR\Mysearch.popswattersettingscontrol  
Present !! : HKCR\Mysearch.popswattersettingscontrol.1  
Present !! : HKCR\Mysearchtoolbar.netscapeshutdown  
Present !! : HKCR\Mysearchtoolbar.netscapeshutdown.1  
Present !! : HKCR\Mysearchtoolbar.netscapestartup  
Present !! : HKCR\Mysearchtoolbar.netscapestartup.1  
Present !! : HKCR\Mysearchtoolbar.settingsplugin  
Present !! : HKCR\Mysearchtoolbar.settingsplugin.1  
Present !! : HKCR\MyWebSearch.ChatSessionPlugin  
Present !! : HKCR\MyWebSearch.ChatSessionPlugin.1  
Present !! : HKCR\MyWebSearch.HTMLPanel  
Present !! : HKCR\MyWebSearch.HTMLPanel.1  
Present !! : HKCR\MyWebSearch.OutlookAddin  
Present !! : HKCR\MyWebSearch.OutlookAddin.1  
Present !! : HKCR\MyWebSearch.PseudoTransparentPlugin  
Present !! : HKCR\MyWebSearch.PseudoTransparentPlugin.1  
Present !! : HKCR\MyWebSearchToolBar.SettingsPlugin  
Present !! : HKCR\MyWebSearchToolBar.SettingsPlugin.1  
Present !! : HKCR\MyWebSearchToolBar.ToolbarPlugin  
Present !! : HKCR\MyWebSearchToolBar.ToolbarPlugin.1  
Present !! : HKCR\NaviHelper.NaviHelperObject  
Present !! : HKCR\NaviHelper.NaviHelperObject.1  
Present !! : HKCR\NaviPromo.EGNaviScoring  
Present !! : HKCR\NaviPromo.EGNaviScoring.1  
Present !! : HKCR\NetPumper.AddUrl  
Present !! : HKCR\NetPumperNNProxy.NetscapeInterface  
Present !! : HKCR\oberontb.band  
Present !! : HKCR\oberontb.band.1  
Present !! : HKCR\oeactivexdll.desktopbuttonhandler  
Present !! : HKCR\oeactivexdll.desktopbuttonhandler.1  
Present !! : HKCR\oeactivexdll.desktopoeaddin1  
Present !! : HKCR\oeactivexdll.desktopoeaddin1.1  
Present !! : HKCR\OutlookAddin.Addin  
Present !! : HKCR\OutlookAddin.Addin.1  
Present !! : HKCR\P2ECOM.EGP2ECOM  
Present !! : HKCR\parttimeb  
Present !! : HKCR\popcaploader.popcaploaderctrl2  
Present !! : HKCR\popcaploader.popcaploaderctrl2.1  
Present !! : HKCRxresult.rxresultfilter  
Present !! : HKCRxresult.rxresultfilter.1  
Present !! : HKCR\saix.installercaller  
Present !! : HKCR\saix.installercaller.1  
Present !! : HKCR\screensavercontrol.screensaverinstaller  
Present !! : HKCR\screensavercontrol.screensaverinstaller.1  
Present !! : HKCR\SearchSettings.BHO  
Present !! : HKCR\SearchSettings.BHO.1  
Present !! : HKCR\seekmo.desktopflash  
Present !! : HKCR\seekmo.desktopflash.1  
Present !! : HKCR\seekmoax.clientdetector  
Present !! : HKCR\seekmoax.clientdetector.1  
Present !! : HKCR\seekmoax.userprofiles  
Present !! : HKCR\seekmoax.userprofiles.1  
Present !! : HKCR\shoppingreport.hbax  
Present !! : HKCR\shoppingreport.hbax.1  
Present !! : HKCR\shoppingreport.hbinfoband  
Present !! : HKCR\shoppingreport.hbinfoband.1  
Present !! : HKCR\shoppingreport.iebutton  
Present !! : HKCR\shoppingreport.iebutton.1  
Present !! : HKCR\shoppingreport.iebuttona  
Present !! : HKCR\shoppingreport.iebuttona.1  
Present !! : HKCR\shoppingreport.rprtctrl  
Present !! : HKCR\shoppingreport.rprtctrl.1  
Present !! : HKCR\SPEEDBIT1.SPEEDBIT1  
Present !! : HKCR\SPEEDBIT1.SPEEDBIT1.3  
Present !! : HKCR\srv.coreservices  
Present !! : HKCR\srv.coreservices.1  
Present !! : HKCR\sssinstaller.installer  
Present !! : HKCR\sssinstaller.installer.1  
Present !! : HKCR\sssinstaller.sinstaller  
Present !! : HKCR\sssinstaller.sinstaller.1  
Present !! : HKCR\sud_ext  
Present !! : HKCR\SWEETIE.IEToolbar  
Present !! : HKCR\SWEETIE.IEToolbar.1  
Present !! : HKCR\SWEETIE.SWEETIE  
Present !! : HKCR\SWEETIE.SWEETIE.1  
Present !! : HKCR\SWEETIE.SWEETIE.3  
Present !! : HKCR\SweetIM_URLSearchHook.ToolbarURLSearchHook  
Present !! : HKCR\SweetIM_URLSearchHook.ToolbarURLSearchHook.1  
Present !! : HKCR\swelladsforyou.swelladsforyou.1  
Present !! : HKCR\SystemFileAssociations\Directory.Audio\shellex\ContextMenuHandlers\secure_del  
Present !! : HKCR\SystemFileAssociations\Directory.Video\shellex\ContextMenuHandlers\secure_del  
Present !! : HKCR	hebestadsforyou.thebestadsforyou  
Present !! : HKCR	hebestadsforyou.thebestadsforyou.1  
Present !! : HKCR\ToolBand.SWEETIE  
Present !! : HKCR\ToolBand.SWEETIE.1  
Present !! : HKCR	oolbar.htmlmenuui  
Present !! : HKCR	oolbar.htmlmenuui.1  
Present !! : HKCR	oolbar.toolbarctl  
Present !! : HKCR	oolbar.toolbarctl.1  
Present !! : HKCR\Toolbar3.SWEETIE  
Present !! : HKCR\Toolbar3.SWEETIE.1  
Present !! : HKCR\Torrent101  
Present !! : HKCR\TorrentQ  
Present !! : HKCR\TorrentSoftware  
Present !! : HKCR\TypeLib\{04011C11-2F3B-44ed-977C-270CA669C6B2}  
Present !! : HKCR\TypeLib\{0514c9b0-e4c6-4d6b-a3a6-b38bc280b115}  
Present !! : HKCR\TypeLib\{06EC63CC-4823-4836-ABB8-AB5F3971FA5C}  
Present !! : HKCR\TypeLib\{07B18EA0-A523-4961-B6BB-170DE4475CCA}  
Present !! : HKCR\Typelib\{08755390-f46d-4d09-968c-3430166b3189}  
Present !! : HKCR\Typelib\{087c4054-0a2b-4f35-b0db-bed3e21650f4}  
Present !! : HKCR\Typelib\{0923208c-e259-4ed5-a778-cb607da350ad}  
Present !! : HKCR\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A}  
Present !! : HKCR\TypeLib\{0E594D22-ACE6-43A2-BCDA-BB7C65D3FE8C}  
Present !! : HKCR\TypeLib\{0E677220-E309-4341-81BD-3CC3018BF5B3}  
Present !! : HKCR\TypeLib\{10954590-2B3A-41EC-97BB-C95A5E646DA9}  
Present !! : HKCR\TypeLib\{1145A909-A836-44B8-B03A-48D858B0F43E}  
Present !! : HKCR\TypeLib\{1AE427B0-E3B7-4D2E-A6B9-36605B0F214E}  
Present !! : HKCR\TypeLib\{1510d162-dace-de7d-0d0a-1556c8a81de9}  
Present !! : HKCR\Typelib\{1D4DB7D0-6EC9-47A3-BD87-1E41684E07BB}  
Present !! : HKCR\TypeLib\{1F445F82-42C0-46F3-9A2E-6ADB79046D41}  
Present !! : HKCR\Typelib\{229d2451-a617-4b30-b5e8-8138694240cb}  
Present !! : HKCR\TypeLib\{22c12739-c111-44c6-9bb7-f335c2a9be2a}  
Present !! : HKCR\TypeLib\{2473BF20-CA0A-11DA-88DB-0050BF2938E1}  
Present !! : HKCR\TypeLib\{248dd890-bb45-11cf-9abc-0080c7e7b78d}  
Present !! : HKCR\Typelib\{259EEB17-79AA-44DF-8410-8E55F82A902A}  
Present !! : HKCR\TypeLib\{2850bdc7-2330-4e31-9fa0-88268846539a}  
Present !! : HKCR\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554}  
Present !! : HKCR\TypeLib\{310b6b01-d56c-a278-2f47-b8cf1066c079}  
Present !! : HKCR\Typelib\{3160f356-e8c3-4de2-a698-92eeeb3d3400}  
Present !! : HKCR\TypeLib\{37b85a20-692b-4205-9cad-2626e4993404}  
Present !! : HKCR\Typelib\{3b8e549e-0c73-4aab-8939-5ea2ed102cc6}  
Present !! : HKCR\Typelib\{3c2d2a1e-031f-4397-9614-87c932a848e0}  
Present !! : HKCR\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906}  
Present !! : HKCR\TypeLib\{4509d3cc-b642-4745-b030-645b79522c6d}  
Present !! : HKCR\Typelib\{45397063-d7d0-47c2-9508-26487608a298}  
Present !! : HKCR\TypeLib\{478CAB91-9E28-11D4-97FF-0050047D51FB}  
Present !! : HKCR\TypeLib\{497dddb6-6eee-4561-9621-b77dc82c1f84}  
Present !! : HKCR\Typelib\{4cf5a3c1-07a2-4336-9b54-6870452ebde1}  
Present !! : HKCR\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}  
Present !! : HKCR\Typelib\{52cde0e4-d73b-11dd-9b90-fcc056d89593}  
Present !! : HKCR\Typelib\{5303e828-3a4c-11de-ac1c-f77f55d89593}  
Present !! : HKCR\TypeLib\{5630B768-1C09-4105-9E03-E35985E36B0B}  
Present !! : HKCR\TypeLib\{5A445F80-DAB5-4CD9-8A05-CD09AC145AA2}  
Present !! : HKCR\Typelib\{58906392-79C4-497C-ACC6-6942B59F1A08}  
Present !! : HKCR\TypeLib\{5BAD7FAE-81F0-4439-8C1A-3E8907998047}  
Present !! : HKCR\Typelib\{6c5ba655-5cec-47bb-a6d3-82a4afe7da87}  
Present !! : HKCR\Typelib\{710993A2-4F87-41D7-B6FE-F5A20368465F}  
Present !! : HKCR\Typelib\{71e9cf40-af72-4b55-bd3f-1fea2a0eaea6}  
Present !! : HKCR\Typelib\{71efe583-62fe-4419-9918-ca3b683f7b36}  
Present !! : HKCR\Typelib\{74278296-0ec7-4f7a-ad55-eb7a2f35f311}  
Present !! : HKCR\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9}  
Present !! : HKCR\TypeLib\{7699AEF9-F83A-44FA-B374-AA02CEDF247D}

benurrr · Answer

ok il est trop long c'est pour sa qu'il s'affiche pas en entier

alors fais ceci :

Clique sur ce lien :

http://www.cijoint.fr/

Clique sur Parcourir et cherche le fichier C:Kill'em.txt 

Clique sur Ouvrir.

Clique sur "Cliquez ici pour déposer le fichier".

Un lien de cette forme :

http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt

est ajouté dans la page.

Copie ce lien dans ta réponse.

boubou2b · Answer

Merci
Voici l'operation demandée.
http://www.cijoint.fr/cjlink.php?file=cj201002/cijoe7txVi.txt

benurrr · Answer

toujours pas complet sa nous permettra de le raccourcir

&#9654; Relance List&Kill'em(soit en clic droit pour vista),avec le raccourci sur ton bureau.
mais cette fois-ci :

&#9654; choisis l'option 2 = Mode Suppression

laisse travailler l'outil.

en fin de scan un rapport s'ouvre

&#9654; colle le contenu dans ta réponse

boubou2b · Answer

Ok, merci je lance l'opération.

boubou2b · Answer

Voici le rapport demandé après suppression.
Cela était particulièrement long.
Merci.
Kill'em by g3n-h@ckm@n 1.2.5.2 
 
User : aurelie (Administrateurs) 
Update on 16/02/2010 by g3n-h@ckm@n ::::: 13.30 
Start at: 13:04:11 | 19/02/2010
Contact : https://forums.commentcamarche.net/forum/virus-securite-7

              Intel(R) Pentium(R) D CPU 3.00GHz
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 2
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Disabled
AV : Anti-virus firewall 9.10 9.10 [ Enabled | Updated ]
FW : Anti-virus firewall 9.10[ Enabled ]9.10

C:\ -> Disque fixe local | 90,57 Go (4,08 Go free) [ACER] | NTFS
D:\ -> Disque fixe local | 91,82 Go (18,48 Go free) [ACERDATA] | FAT32
E:\ -> Disque CD-ROM
G:\ -> Disque amovible
H:\ -> Disque amovible
I:\ -> Disque amovible
J:\ -> Disque amovible
 

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running
 
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Orange\Antivirus Firewall\Anti-Virus\fsgk32st.exe
C:\Program Files\Orange\Antivirus Firewall\Common\FSMA32.EXE
C:\Program Files\Orange\Antivirus Firewall\Anti-Virus\FSGK32.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Orange\Antivirus Firewall\Common\FSHDLL32.EXE
C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\Program Files\Acer\Acer eMode Management\AspireService.exe
C:\Program Files\Acer\Acer eConsole\MediaSync.exe
C:\Program Files\lg_fwupdate\fwupdate.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Orange\Antivirus Firewall\Common\FSM32.EXE
C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
C:\Program Files\Orange\Antivirus Firewall\ORSP Client\fsorsp.exe
C:\Program Files\Orange\Antivirus Firewall\FWES\Program\fsdfwd.exe
C:\Program Files\Orange\Antivirus Firewall\Anti-Virus\fssm32.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\Orange\Antivirus Firewall\Anti-Virus\fsav32.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32undll32.exe
C:\Program Files\List_Kill'em\List_Kill'em.scr
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Documents and Settings\aurelie\Local Settings	emp\C.tmp\pv.exe
 
Detections : 
========== 
 

¤¤¤¤¤¤¤¤¤¤ Files/folders : 

Quarantined & Deleted !! : C:\Documents and Settings\All Users\Application Data\.zreglib 
Quarantined & Deleted !! : C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache 
Quarantined & Deleted !! : C:\Program Files\BitLord 
Quarantined & Deleted !! : C:\WINDOWS\mbr.exe 
Quarantined & Deleted !! : C:\WINDOWS\SlantAdj.dll 
 
Quarantined & Deleted !! : C:\Documents and Settings\aurelie\Application Data\pcouffin.inf 
Quarantined & Deleted !! : C:\Documents and Settings\aurelie\Application Data\Microsoft\Clip Organizer\mstore10.mgc 
Quarantined & Deleted !! : C:\Documents and Settings\aurelie\LOCAL Settings\Temp\preconfig.exe 
Quarantined & Deleted !! : C:\Documents and Settings\aurelie\LOCAL Settings\Temp\fsprod.dll 
Quarantined & Deleted !! : C:\Documents and Settings\aurelie\LOCAL Settings\Temp\fssfm.dll 
 
==============
host file OK !
==============

========
Registry
========

Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{0E5CBF21-D15F-11D0-8301-00AA005B4383}  
Deleted : HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDrives  
Deleted : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDrives  
Deleted : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Install.exe"  
Deleted : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Setup.exe"  
Deleted : "HKLM\Software\Trymedia Systems"  
Deleted : HKCR\CLSID\{248dd896-bb45-11cf-9abc-0080c7e7b78d}  
Deleted : HKCR\CLSID\{248dd897-bb45-11cf-9abc-0080c7e7b78d}  
Deleted : HKCR\Interface\{248dd892-bb45-11cf-9abc-0080c7e7b78d}  
Deleted : HKCR\Interface\{248dd893-bb45-11cf-9abc-0080c7e7b78d}  
Deleted : HKCR\TypeLib\{248dd890-bb45-11cf-9abc-0080c7e7b78d}  
========
Services
=========

 Ndisuio : Start = 3   
 Ip6Fw : Start = 2   
 SharedAccess : Start = 2   
 wuauserv : Start = 2   
 wscsvc : Start = 2   

============
Disk Cleaned
============
 
=================
anti-ver blaster : OK !! 
=================

================
Prefetch cleaned 
================
 
 
 
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

benurrr · Answer

ok comment va ton pc

boubou2b · Answer

Bonsoir, 
Apparement il va bien, j'arrive à tout ouvrir comme avant son coup de calgon.
Mais il avait quoi en fait ?
Encore MERCI pour le temps consacré à résoudre mon problème.

benurrr · Answer

ta due ouvrir un fichier télécharger via p2p qui était piéger

pour nettoyer les fix qui ont servit 


Ferme toutes les applications en cours, puis télécharge ToolsCleaner2 sur ton Bureau.
http://pc-system.fr/

Double clique sur ToolsCleaner2.exe >
puis Recherche
et sur Suppression
Note : ton bureau va disparaître, c'est normal. S'il n'apparaît pas à la fin du scan, fais la manip suivante :

CTRL+ALT+SUPP pour ouvrir le Gestionnaire des tâches.
Puis rends toi à l'onglet "Processus". Clique en haut à gauche sur Fichiers et choisis "Exécuter"

Tape explorer.exe et valide. Cela fera re-apparaître le Bureau

tu poste le rapport générer après suppression

boubou2b · Answer

Bonjour,
Désolée ne pas avoir répondu avant. Voici le rapport demandé.
Encore et toujours MERCI pour l'aide apporté.
[ Rapport ToolsCleaner version 2.3.11 (par A.Rothstein & dj QUIOU) ]

--> Recherche: 

C:\Combofix.txt: trouvé !
C:\cleannavi.txt: trouvé !
C:apport_clean.txt: trouvé !
C:\Combofix: trouvé !
C:\Qoobox: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\aurelie\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\aurelie\Bureau\Navilog1.lnk: trouvé !
C:\Documents and Settings\aurelie\Bureau\ComboFix.exe: trouvé !
C:\Documents and Settings\aurelie\Bureau\HJTInstall.exe: trouvé !
C:\Documents and Settings\aurelie\Bureau\Rsit.exe: trouvé !
C:\Documents and Settings\aurelie\Local Settings	emp\5.tmp\catchme.exe: trouvé !
C:\Documents and Settings\aurelie\Local Settings	emp\5.tmp\mbr.exe: trouvé !
C:\Documents and Settings\aurelie\Local Settings	emp\7.tmp\catchme.exe: trouvé !
C:\Documents and Settings\aurelie\Local Settings	emp\7.tmp\mbr.exe: trouvé !
C:\Documents and Settings\aurelie\Local Settings	emp\9D.tmp\catchme.exe: trouvé !
C:\Documents and Settings\aurelie\Local Settings	emp\9D.tmp\mbr.exe: trouvé !
C:\Documents and Settings\aurelie\Local Settings	emp\C.tmp\catchme.exe: trouvé !
C:\Documents and Settings\aurelie\Local Settings	emp\C.tmp\mbr.exe: trouvé !
C:\Documents and Settings\aurelie\Menu Démarrer\Programmes\Navilog1: trouvé !
C:\Documents and Settings\aurelie\Mes documents\aurelfranc\Navilog1.exe: trouvé !
C:\Documents and Settings\aurelie\Mes documents\PcSetup\fixnavi.txt: trouvé !
C:\Documents and Settings\aurelie\Mes documents\PcSetup\cleannavi.txt: trouvé !
C:\Documents and Settings\aurelie\Mes documents\PcSetupapport_clean.txt: trouvé !
C:\Program Files\Navilog1: trouvé !
C:\Program Files\Hijackthis Version Française\hijackthis.log: trouvé !
C:\Program Files\Navilog1\Navilog1.bat: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !
C:\Qoobox\Quarantine\catchme.log: trouvé !

---------------------------------
--> Suppression: 

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\aurelie\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\aurelie\Bureau\Navilog1.lnk: supprimé !
C:\Documents and Settings\aurelie\Bureau\ComboFix.exe: ERREUR DE SUPPRESSION !!
C:\Documents and Settings\aurelie\Bureau\HJTInstall.exe: supprimé !
C:\Documents and Settings\aurelie\Local Settings	emp\5.tmp\catchme.exe: supprimé !
C:\Documents and Settings\aurelie\Local Settings	emp\7.tmp\catchme.exe: supprimé !
C:\Documents and Settings\aurelie\Local Settings	emp\9D.tmp\catchme.exe: supprimé !
C:\Documents and Settings\aurelie\Local Settings	emp\C.tmp\catchme.exe: supprimé !
C:\Documents and Settings\aurelie\Mes documents\aurelfranc\Navilog1.exe: supprimé !
C:\Program Files\Navilog1\Navilog1.bat: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\Combofix.txt: supprimé !
C:\cleannavi.txt: supprimé !
C:apport_clean.txt: supprimé !
C:\Documents and Settings\aurelie\Bureau\Rsit.exe: supprimé !
C:\Documents and Settings\aurelie\Local Settings	emp\5.tmp\mbr.exe: supprimé !
C:\Documents and Settings\aurelie\Local Settings	emp\7.tmp\mbr.exe: supprimé !
C:\Documents and Settings\aurelie\Local Settings	emp\9D.tmp\mbr.exe: supprimé !
C:\Documents and Settings\aurelie\Local Settings	emp\C.tmp\mbr.exe: supprimé !
C:\Documents and Settings\aurelie\Mes documents\PcSetup\fixnavi.txt: supprimé !
C:\Documents and Settings\aurelie\Mes documents\PcSetup\cleannavi.txt: supprimé !
C:\Documents and Settings\aurelie\Mes documents\PcSetupapport_clean.txt: supprimé !
C:\Program Files\Hijackthis Version Française\hijackthis.log: supprimé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\Qoobox\Quarantine\catchme.log: supprimé !
C:\Combofix: supprimé !
C:\Qoobox: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Documents and Settings\aurelie\Menu Démarrer\Programmes\Navilog1: supprimé !
C:\Program Files\Navilog1: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !

benurrr · Answer

Ok ccleaner et malwarbyte tu les garde et tu supprime manuellement via ajout et suppression listKill'em

combofix et toolscleaner avec un clic droitet suprimer 

tu va télécharger Ccleaner http://dl.commentcamarche.net/www.commentcamarche.net/download/files/ccsetup227_slim.exe

ouvre "Ccleaner" vas dans l'onglet "Option" puis "Avancé" puis décoches "Effacer uniquement les fichiers, du dossier temp de Windows, plus vieux que 48 heures."

. Puis vas dans l'onglet "Nettoyeur" fais "Analyse" puis "Lancer le nettoyage".
 Puis vas dans l'onglet "Registre" puis fait "Chercher des erreurs" puis "Réparer les erreurs sélectionnée"
. Tu refais tous ca 4-5 fois (le nettoyage et le registre). 

Puis reste dans "Ccleaner" puis va dans "Option" puis "Propriété" puis coches "Nettoyer automatiquement l'ordinateur au démarrage". 

içi mode d'emploi pour ccleaner

https://www.malekal.com/tutoriel-ccleaner/

boubou2b · Answer

Boujour, 
J'ai fait ce qui etait demandée, je pense que le problème est résolu. 
Encore MERCI pour tout. 
Dois-je encore faire quelque chose ?

benurrr · Answer

tu a d'autre soucie ?

boubou2b · Answer

Bonsoir,
Non, je n'ai plus de soucis avec l'ordi.
Je sais que je répète mais MERCI BEAUCOUP. C'est vraiment super de savoir que des gens sont là pour nous aider à résoudre nos problèmes.
Alors bonne soirée et je suppose que je peux mettre RESOLU ?

benurrr · Answer

yes content pour toi bonne soirée et bon surf

Impossible d'ouvrir quoi que ce soit

38 réponses

Discussions similaires

Newsletters