PC qui rame de plus en plusFermé

Question

Bonjour tout le monde, l'ordinateur de mon beau pere rame de plus en plus, et impossible de se connecter à msn, j'ai vraiment l'impression que l'ordinateur contient beaucoup de virus et autres malwares. je demande donc de l'aide pour m'aider à soigner tout ça.
Merci d'avance

V-X · Answer

Salut ,

commence par sa;


&#x25B6 Télécharge hijackthis

&#x25B6 Enregistre la cible sous .... "le bureau" 

&#x25B6 Fais un double-clic sur "HJTInstall.exe" afin de lancer l'installation

&#x25B6 Clique sur Install ensuite sur "I Accept"

&#x25B6 Clique sur" Do a scan system and save log file"

&#x25B6 Le bloc-notes s'ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse 

&#x25B6 Tuto hijackthis(Merci à Balltrap34)

Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.

noshelter · Answer

voila le rapport:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:04:52, on 27/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
C:\Program Files\Pack Securite\Common\FSMA32.EXE
C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Pack Securite\Common\FSMB32.EXE
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Pack Securite\Common\FCH32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Pack Securite\Common\FAMEH32.EXE
C:\Program Files\Pack Securite\Anti-Virus\fsqh.exe
C:\Program Files\Pack Securite\FSPC\fspc.exe
C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe
C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
C:\Program Files\Pack Securite\FSAUA\program\fsus.exe
C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\RTHDCPL.EXE
C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
C:\apps\ABoard\ABoard.exe
C:\Program Files\Pack Securite\Common\FSM32.EXE
C:\apps\ABoard\AOSD.exe
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Pack Securite\FSGUI\fsguidll.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\WINDOWS\system32\dwwin.exe
C:\PROGRA~1\Yahoo!\Common\unyt.exe
D:\DOCUME~1\MICHEL\LOCALS~1\Temp\GLB3A3.tmp
C:\WINDOWS\system32\msiexec.exe
D:\DOCUME~1\MICHEL\LOCALS~1\Temp\UNYT_P~1.EXE
C:\Program Files\CCleaner\CCleaner.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\dumprep.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ATIPTA] "C:\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32"
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [close surf mail dupe] D:\Documents and Settings\All Users\Application Data\Tick Find Close Surf\mags save.exe
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKCU\..\Run: [Ping Remote] D:\DOCUME~1\MICHEL\APPLIC~1\GPLACT~1\Burn Bone View.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Pack Securite\Common\FSMA32.EXE
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: MysqlInventime - Unknown owner - C:\Apps\INVENT~1\mysql\bin\mysqld-nt.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

noshelter · Answer

Quequ'un peut il m'aider?

V-X · Answer

Re,,tu fait pas ce que gadget le nul te dit.

V-X · Answer

Re,

Passe LOP.

Télécharge Lop S&D

option 1

noshelter · Answer

lol il dit des betises gadjet?

V-X · Answer

Re,

Fait LOP 

Télécharge Lop S&D
 

&#x25B6 Double-clique dessus pour lancer l'installation

&#x25B6 Puis double-clique sur le raccourci Lop S&D présent sur ton bureau

&#x25B6 Séléctionne la langue souhaitée 

&#x25B6 Puis choisis l'Option 1 ( Recherche )

&#x25B6 Patiente jusqu'à la fin du scan

&#x25B6 Poste le rapport généré ( C:lopR.txt )

Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.

noshelter · Answer

Voila le rapport de lop:


   --------------------\  Lop S&D 4.2.5-0   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Multiprocessor Free :               Intel(R) Pentium(R) 4 CPU 2.93GHz )
   BIOS : Award Medallion BIOS v6.00PG
   USER : MICHEL ( Administrator )
   BOOT : Normal boot
   Antivirus : Pack Securite Plus 7.00 7.00 (Activated)
   Firewall  : Pack Securite Plus 7.00 7.00 (Activated)
   A:\ (USB)
   C:\ (Local Disk) - NTFS - Total:29 Go (Free:19 Go)
   D:\ (Local Disk) - NTFS - Total:148 Go (Free:128 Go)
   E:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
   G:\ (USB)
   H:\ (USB)
   I:\ (USB)
   J:\ (USB)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [1] ( 27/12/2008|18:21 )
 
   --------------------\  Listing des dossiers dans APPLIC~1

   [20/11/2008|21:23] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [11/11/2005|09:55] D:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
   [22/05/2007|16:47] D:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL Downloads
   [16/11/2008|10:07] D:\DOCUME~1\ALLUSE~1\APPLIC~1\BigFishGamesCache
   [12/10/2008|18:01] D:\DOCUME~1\ALLUSE~1\APPLIC~1\blg
   [15/09/2008|10:07] D:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
   [13/05/2006|20:00] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Byte Real Aim Type
   [15/09/2008|21:03] D:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
   [17/12/2008|20:06] D:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonIJPLM
   [31/12/2005|12:08] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Ciel
   [11/11/2005|10:07] D:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
   [31/05/2008|07:42] D:\DOCUME~1\ALLUSE~1\APPLIC~1\ENJOY Plus!
   [02/07/2008|20:01] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Flood Light Games
   [05/07/2008|12:38] D:\DOCUME~1\ALLUSE~1\APPLIC~1\FloodLightGames
   [23/05/2008|15:47] D:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure
   [25/05/2008|16:49] D:\DOCUME~1\ALLUSE~1\APPLIC~1\fssg
   [29/03/2007|18:25] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [18/09/2007|13:13] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Logishrd
   [17/08/2007|21:19] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Logitech
   [14/04/2007|15:11] D:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee.com
   [27/12/2008|18:21] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [13/04/2006|16:30] D:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN Search Toolbar
   [20/09/2008|13:40] D:\DOCUME~1\ALLUSE~1\APPLIC~1\NannyMania
   [07/09/2008|17:14] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Oberon Games
   [11/11/2005|09:55] D:\DOCUME~1\ALLUSE~1\APPLIC~1\OD2
   [05/10/2008|01:06] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Pinnacle
   [05/10/2008|01:25] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Pinnacle VideoSpin
   [08/09/2008|20:50] D:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
   [11/11/2005|09:56] D:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
   [14/09/2008|15:57] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Sandlot Games
   [11/11/2005|18:37] D:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
   [03/09/2008|12:43] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
   [27/12/2008|17:55] D:\DOCUME~1\ALLUSE~1\APPLIC~1\SweetIM
   [11/11/2008|12:34] D:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
   [01/08/2008|16:19] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Tick Find Close Surf
   [11/11/2005|10:06] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
   [05/10/2008|01:18] D:\DOCUME~1\ALLUSE~1\APPLIC~1\VideoSpin
   [11/11/2005|09:56] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
   [29/03/2006|15:34] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [12/10/2008|18:02] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
   [25/05/2008|18:35] D:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
   [26/10/2008|19:01] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

   [26/05/2008|00:14] D:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [26/05/2008|00:14] D:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
   [26/05/2008|00:14] D:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
   [26/05/2008|00:14] D:\DOCUME~1\DEFAUL~1\APPLIC~1\Real
   [11/11/2005|09:59] D:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec
   [11/11/2005|09:56] D:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver

   [14/11/2005|18:19] D:\DOCUME~1\DEFTEMP\APPLIC~1\Identities
   [14/11/2005|18:19] D:\DOCUME~1\DEFTEMP\APPLIC~1\Macromedia
   [14/11/2005|18:19] D:\DOCUME~1\DEFTEMP\APPLIC~1\Microsoft
   [14/11/2005|18:19] D:\DOCUME~1\DEFTEMP\APPLIC~1\Real
   [11/11/2005|09:59] D:\DOCUME~1\DEFTEMP\APPLIC~1\Symantec
   [14/11/2005|18:19] D:\DOCUME~1\DEFTEMP\APPLIC~1\You've Got Pictures Screensaver

   [13/09/2006|15:01] D:\DOCUME~1\Elodie\APPLIC~1\Adobe
   [23/03/2008|15:21] D:\DOCUME~1\Elodie\APPLIC~1\AdobeUM
   [02/01/2006|13:44] D:\DOCUME~1\Elodie\APPLIC~1\AOL
   [19/01/2006|20:57] D:\DOCUME~1\Elodie\APPLIC~1\CyberLink
   [23/03/2008|15:22] D:\DOCUME~1\Elodie\APPLIC~1\F-Secure
   [23/03/2008|15:23] D:\DOCUME~1\Elodie\APPLIC~1\Google
   [29/03/2006|15:36] D:\DOCUME~1\Elodie\APPLIC~1\GTek
   [19/01/2006|11:03] D:\DOCUME~1\Elodie\APPLIC~1\Help
   [14/11/2005|18:19] D:\DOCUME~1\Elodie\APPLIC~1\Identities
   [13/09/2006|13:38] D:\DOCUME~1\Elodie\APPLIC~1\Leadertech
   [02/01/2006|14:34] D:\DOCUME~1\Elodie\APPLIC~1\Macromedia
   [12/02/2006|21:58] D:\DOCUME~1\Elodie\APPLIC~1\Microsoft
   [14/04/2006|18:31] D:\DOCUME~1\Elodie\APPLIC~1\MSN Search Toolbar
   [12/02/2006|22:01] D:\DOCUME~1\Elodie\APPLIC~1\MSNInstaller
   [19/01/2006|21:00] D:\DOCUME~1\Elodie\APPLIC~1\OD2
   [23/03/2008|15:21] D:\DOCUME~1\Elodie\APPLIC~1\OpenOffice.org2
   [11/02/2006|17:41] D:\DOCUME~1\Elodie\APPLIC~1\Real
   [18/09/2006|09:57] D:\DOCUME~1\Elodie\APPLIC~1\Skype
   [13/09/2006|13:39] D:\DOCUME~1\Elodie\APPLIC~1\Sonic
   [10/02/2006|18:42] D:\DOCUME~1\Elodie\APPLIC~1\Sun
   [11/11/2005|09:59] D:\DOCUME~1\Elodie\APPLIC~1\Symantec
   [18/09/2006|09:36] D:\DOCUME~1\Elodie\APPLIC~1\Ulead Systems
   [23/03/2008|15:27] D:\DOCUME~1\Elodie\APPLIC~1\VMNTOOLBAR
   [14/11/2005|18:19] D:\DOCUME~1\Elodie\APPLIC~1\You've Got Pictures Screensaver

   [26/05/2008|00:14] D:\DOCUME~1\ELODIE~1.107\APPLIC~1\Identities
   [26/05/2008|00:14] D:\DOCUME~1\ELODIE~1.107\APPLIC~1\Macromedia
   [26/05/2008|00:14] D:\DOCUME~1\ELODIE~1.107\APPLIC~1\Microsoft
   [26/05/2008|00:14] D:\DOCUME~1\ELODIE~1.107\APPLIC~1\Real
   [11/11/2005|09:59] D:\DOCUME~1\ELODIE~1.107\APPLIC~1\Symantec
   [11/11/2005|09:56] D:\DOCUME~1\ELODIE~1.107\APPLIC~1\You've Got Pictures Screensaver

   [26/05/2008|00:14] D:\DOCUME~1\INVITe\APPLIC~1\Identities
   [26/05/2008|00:14] D:\DOCUME~1\INVITe\APPLIC~1\Macromedia
   [26/05/2008|00:14] D:\DOCUME~1\INVITe\APPLIC~1\Microsoft
   [26/05/2008|00:14] D:\DOCUME~1\INVITe\APPLIC~1\Real
   [11/11/2005|09:59] D:\DOCUME~1\INVITe\APPLIC~1\Symantec
   [11/11/2005|09:56] D:\DOCUME~1\INVITe\APPLIC~1\You've Got Pictures Screensaver

   [28/12/2006|11:41] D:\DOCUME~1\INVITS~1\APPLIC~1\Adobe
   [09/01/2007|09:19] D:\DOCUME~1\INVITS~1\APPLIC~1\AdobeUM
   [02/01/2006|14:57] D:\DOCUME~1\INVITS~1\APPLIC~1\AOL
   [09/01/2007|09:19] D:\DOCUME~1\INVITS~1\APPLIC~1\CyberLink
   [02/07/2007|13:51] D:\DOCUME~1\INVITS~1\APPLIC~1\Google
   [14/11/2005|18:19] D:\DOCUME~1\INVITS~1\APPLIC~1\Identities
   [25/05/2006|15:47] D:\DOCUME~1\INVITS~1\APPLIC~1\Macromedia
   [25/05/2006|15:48] D:\DOCUME~1\INVITS~1\APPLIC~1\Microsoft
   [02/07/2007|11:18] D:\DOCUME~1\INVITS~1\APPLIC~1\Mozilla
   [29/12/2006|13:28] D:\DOCUME~1\INVITS~1\APPLIC~1\OD2
   [09/01/2007|09:19] D:\DOCUME~1\INVITS~1\APPLIC~1\Real
   [28/12/2006|13:08] D:\DOCUME~1\INVITS~1\APPLIC~1\Sun
   [11/11/2005|09:59] D:\DOCUME~1\INVITS~1\APPLIC~1\Symantec
   [14/11/2005|18:19] D:\DOCUME~1\INVITS~1\APPLIC~1\You've Got Pictures Screensaver

   [31/12/2005|10:39] D:\DOCUME~1\JULIE\APPLIC~1\Adobe
   [01/02/2006|18:34] D:\DOCUME~1\JULIE\APPLIC~1\AdobeUM
   [28/12/2005|19:07] D:\DOCUME~1\JULIE\APPLIC~1\AOL
   [15/01/2006|16:52] D:\DOCUME~1\JULIE\APPLIC~1\CyberLink
   [09/01/2007|09:06] D:\DOCUME~1\JULIE\APPLIC~1\EoRezo
   [17/04/2007|13:55] D:\DOCUME~1\JULIE\APPLIC~1\F-Secure
   [04/04/2007|13:19] D:\DOCUME~1\JULIE\APPLIC~1\Google
   [20/07/2006|14:22] D:\DOCUME~1\JULIE\APPLIC~1\Help
   [14/11/2005|18:19] D:\DOCUME~1\JULIE\APPLIC~1\Identities
   [14/11/2005|18:19] D:\DOCUME~1\JULIE\APPLIC~1\Macromedia
   [14/05/2006|20:26] D:\DOCUME~1\JULIE\APPLIC~1\mess junk eggs
   [30/04/2007|15:03] D:\DOCUME~1\JULIE\APPLIC~1\MessengerSkinner
   [24/02/2006|12:23] D:\DOCUME~1\JULIE\APPLIC~1\Microsoft
   [17/04/2007|13:53] D:\DOCUME~1\JULIE\APPLIC~1\Mozilla
   [02/01/2006|14:47] D:\DOCUME~1\JULIE\APPLIC~1\OD2
   [14/05/2006|20:26] D:\DOCUME~1\JULIE\APPLIC~1\okaytrustbolt
   [06/02/2006|20:07] D:\DOCUME~1\JULIE\APPLIC~1\Real
   [28/09/2006|12:10] D:\DOCUME~1\JULIE\APPLIC~1\Skype
   [29/01/2006|13:53] D:\DOCUME~1\JULIE\APPLIC~1\Sun
   [01/03/2006|12:55] D:\DOCUME~1\JULIE\APPLIC~1\Symantec
   [15/01/2006|16:52] D:\DOCUME~1\JULIE\APPLIC~1\Ulead Systems
   [14/11/2005|18:19] D:\DOCUME~1\JULIE\APPLIC~1\You've Got Pictures Screensaver

   [26/05/2008|00:14] D:\DOCUME~1\JULIE~1.107\APPLIC~1\Identities
   [26/05/2008|00:14] D:\DOCUME~1\JULIE~1.107\APPLIC~1\Macromedia
   [26/05/2008|00:14] D:\DOCUME~1\JULIE~1.107\APPLIC~1\Microsoft
   [26/05/2008|00:14] D:\DOCUME~1\JULIE~1.107\APPLIC~1\Real
   [11/11/2005|09:59] D:\DOCUME~1\JULIE~1.107\APPLIC~1\Symantec
   [11/11/2005|09:56] D:\DOCUME~1\JULIE~1.107\APPLIC~1\You've Got Pictures Screensaver

   [06/04/2006|15:03] D:\DOCUME~1\LOCALS~1\APPLIC~1\Macromedia
   [04/07/2008|10:21] D:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
   [14/05/2006|20:26] D:\DOCUME~1\LOCALS~1\APPLIC~1\okaytrustbolt

   [26/06/2006|14:12] D:\DOCUME~1\LOCALS~1.AUT\APPLIC~1\Microsoft

   [05/08/2006|15:56] D:\DOCUME~1\LOCALS~1.000\APPLIC~1\Microsoft

   [09/01/2007|09:18] D:\DOCUME~1\LOCALS~1.001\APPLIC~1\Microsoft

   [09/01/2007|09:18] D:\DOCUME~1\LOCALS~1.002\APPLIC~1\Microsoft

   [25/03/2007|12:55] D:\DOCUME~1\LOCALS~1.003\APPLIC~1\Microsoft

   [23/04/2007|17:34] D:\DOCUME~1\LOCALS~1.004\APPLIC~1\Microsoft

   [03/06/2007|11:13] D:\DOCUME~1\LOCALS~1.005\APPLIC~1\Microsoft

   [02/09/2007|22:42] D:\DOCUME~1\LOCALS~1.006\APPLIC~1\Microsoft

   [23/05/2006|19:50] D:\DOCUME~1\MARYSE\APPLIC~1\Adobe
   [30/12/2005|18:21] D:\DOCUME~1\MARYSE\APPLIC~1\AOL
   [14/11/2005|18:19] D:\DOCUME~1\MARYSE\APPLIC~1\Identities
   [30/12/2005|18:24] D:\DOCUME~1\MARYSE\APPLIC~1\Macromedia
   [14/11/2005|18:19] D:\DOCUME~1\MARYSE\APPLIC~1\Microsoft
   [09/05/2006|20:14] D:\DOCUME~1\MARYSE\APPLIC~1\MSN Search Toolbar
   [01/06/2006|15:54] D:\DOCUME~1\MARYSE\APPLIC~1\OD2
   [14/11/2005|18:19] D:\DOCUME~1\MARYSE\APPLIC~1\Real
   [30/12/2005|18:24] D:\DOCUME~1\MARYSE\APPLIC~1\Sun
   [30/12/2005|18:23] D:\DOCUME~1\MARYSE\APPLIC~1\Symantec
   [30/10/2006|16:19] D:\DOCUME~1\MARYSE\APPLIC~1\Ulead Systems
   [14/11/2005|18:19] D:\DOCUME~1\MARYSE\APPLIC~1\You've Got Pictures Screensaver

   [26/05/2008|00:14] D:\DOCUME~1\MARYSE~1.107\APPLIC~1\Identities
   [26/05/2008|00:14] D:\DOCUME~1\MARYSE~1.107\APPLIC~1\Macromedia
   [26/05/2008|00:14] D:\DOCUME~1\MARYSE~1.107\APPLIC~1\Microsoft
   [26/05/2008|00:14] D:\DOCUME~1\MARYSE~1.107\APPLIC~1\Real
   [11/11/2005|09:59] D:\DOCUME~1\MARYSE~1.107\APPLIC~1\Symantec
   [11/11/2005|09:56] D:\DOCUME~1\MARYSE~1.107\APPLIC~1\You've Got Pictures Screensaver

   [25/12/2008|18:03] D:\DOCUME~1\MICHEL\APPLIC~1\Adobe
   [26/05/2008|07:54] D:\DOCUME~1\MICHEL\APPLIC~1\AdobeUM
   [12/10/2008|18:02] D:\DOCUME~1\MICHEL\APPLIC~1\BeachPartyCraze
   [03/07/2008|18:30] D:\DOCUME~1\MICHEL\APPLIC~1\Big Fish Games
   [25/09/2008|16:12] D:\DOCUME~1\MICHEL\APPLIC~1\blg
   [17/09/2008|18:15] D:\DOCUME~1\MICHEL\APPLIC~1\Canon
   [20/09/2008|08:08] D:\DOCUME~1\MICHEL\APPLIC~1\CD-LabelPrint
   [07/11/2008|22:21] D:\DOCUME~1\MICHEL\APPLIC~1\CyberLink
   [31/05/2008|07:42] D:\DOCUME~1\MICHEL\APPLIC~1\ENJOY Plus!
   [08/10/2008|20:49] D:\DOCUME~1\MICHEL\APPLIC~1\FarmerJane
   [02/07/2008|20:01] D:\DOCUME~1\MICHEL\APPLIC~1\Flood Light Games
   [05/07/2008|12:38] D:\DOCUME~1\MICHEL\APPLIC~1\FloodLightGames
   [02/07/2008|14:55] D:\DOCUME~1\MICHEL\APPLIC~1\F-Secure
   [17/12/2008|21:00] D:\DOCUME~1\MICHEL\APPLIC~1\Google
   [27/10/2008|18:03] D:\DOCUME~1\MICHEL\APPLIC~1\GPLACTIVE
   [26/12/2008|17:30] D:\DOCUME~1\MICHEL\APPLIC~1\gtk-2.0
   [24/07/2008|17:52] D:\DOCUME~1\MICHEL\APPLIC~1\Help
   [26/05/2008|00:14] D:\DOCUME~1\MICHEL\APPLIC~1\Identities
   [19/06/2008|16:31] D:\DOCUME~1\MICHEL\APPLIC~1\Leadertech
   [25/05/2008|16:42] D:\DOCUME~1\MICHEL\APPLIC~1\Macromedia
   [26/12/2008|19:17] D:\DOCUME~1\MICHEL\APPLIC~1\Microsoft
   [03/09/2008|16:50] D:\DOCUME~1\MICHEL\APPLIC~1\Mozilla
   [27/12/2008|18:06] D:\DOCUME~1\MICHEL\APPLIC~1\MSNInstaller
   [01/06/2008|13:54] D:\DOCUME~1\MICHEL\APPLIC~1\OD2
   [08/09/2008|20:50] D:\DOCUME~1\MICHEL\APPLIC~1\PlayFirst
   [07/09/2008|22:49] D:\DOCUME~1\MICHEL\APPLIC~1\Playrix Entertainment
   [26/08/2008|16:24] D:\DOCUME~1\MICHEL\APPLIC~1\Real
   [12/10/2008|18:01] D:\DOCUME~1\MICHEL\APPLIC~1\Skype
   [05/10/2008|10:20] D:\DOCUME~1\MICHEL\APPLIC~1\skypePM
   [19/06/2008|16:35] D:\DOCUME~1\MICHEL\APPLIC~1\Sonic
   [07/09/2008|21:44] D:\DOCUME~1\MICHEL\APPLIC~1\SultansLabyrinth
   [05/06/2008|12:48] D:\DOCUME~1\MICHEL\APPLIC~1\Sun
   [11/11/2005|09:59] D:\DOCUME~1\MICHEL\APPLIC~1\Symantec
   [26/10/2008|11:04] D:\DOCUME~1\MICHEL\APPLIC~1\Ulead Systems
   [18/06/2008|06:42] D:\DOCUME~1\MICHEL\APPLIC~1\Viewpoint
   [27/08/2008|17:26] D:\DOCUME~1\MICHEL\APPLIC~1\ViquaSoft
   [11/11/2005|09:56] D:\DOCUME~1\MICHEL\APPLIC~1\You've Got Pictures Screensaver

   [11/11/2005|18:37] D:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
   [30/12/2005|18:40] D:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec

   [26/06/2006|14:12] D:\DOCUME~1\NETWOR~1.AUT\APPLIC~1\Microsoft

   [05/08/2006|15:56] D:\DOCUME~1\NETWOR~1.000\APPLIC~1\Microsoft

   [09/01/2007|09:18] D:\DOCUME~1\NETWOR~1.001\APPLIC~1\Microsoft

   [09/01/2007|09:18] D:\DOCUME~1\NETWOR~1.002\APPLIC~1\Microsoft

   [25/03/2007|12:55] D:\DOCUME~1\NETWOR~1.003\APPLIC~1\Microsoft

   [23/04/2007|17:34] D:\DOCUME~1\NETWOR~1.004\APPLIC~1\Microsoft

   [14/11/2005|18:19] D:\DOCUME~1\NETWOR~1.005\APPLIC~1\Microsoft

   [14/11/2005|18:19] D:\DOCUME~1\NETWOR~1.006\APPLIC~1\Microsoft

   [26/04/2008|13:05] D:\DOCUME~1\TMPACC~1\APPLIC~1\Adobe
   [23/05/2008|06:53] D:\DOCUME~1\TMPACC~1\APPLIC~1\AdobeUM
   [27/12/2005|21:19] D:\DOCUME~1\TMPACC~1\APPLIC~1\AOL
   [29/01/2006|09:16] D:\DOCUME~1\TMPACC~1\APPLIC~1\CyberLink
   [28/04/2007|00:30] D:\DOCUME~1\TMPACC~1\APPLIC~1\EoRezo
   [23/04/2007|16:19] D:\DOCUME~1\TMPACC~1\APPLIC~1\F-Secure
   [07/08/2007|21:23] D:\DOCUME~1\TMPACC~1\APPLIC~1\FUJIFILM
   [07/04/2007|14:43] D:\DOCUME~1\TMPACC~1\APPLIC~1\Google
   [27/12/2005|21:28] D:\DOCUME~1\TMPACC~1\APPLIC~1\Help
   [14/11/2005|18:19] D:\DOCUME~1\TMPACC~1\APPLIC~1\Identities
   [06/01/2006|11:19] D:\DOCUME~1\TMPACC~1\APPLIC~1\Leadertech
   [14/11/2005|18:19] D:\DOCUME~1\TMPACC~1\APPLIC~1\Macromedia
   [13/05/2006|19:20] D:\DOCUME~1\TMPACC~1\APPLIC~1\mess junk eggs
   [23/02/2008|01:48] D:\DOCUME~1\TMPACC~1\APPLIC~1\Microsoft
   [14/04/2007|14:50] D:\DOCUME~1\TMPACC~1\APPLIC~1\Mozilla
   [02/01/2006|16:38] D:\DOCUME~1\TMPACC~1\APPLIC~1\OD2
   [26/05/2008|00:02] D:\DOCUME~1\TMPACC~1\APPLIC~1\OFFICE One v6
   [14/05/2006|20:26] D:\DOCUME~1\TMPACC~1\APPLIC~1\okaytrustbolt
   [12/05/2008|21:54] D:\DOCUME~1\TMPACC~1\APPLIC~1\OpenOffice.org2
   [28/01/2006|09:05] D:\DOCUME~1\TMPACC~1\APPLIC~1\Real
   [08/01/2007|08:07] D:\DOCUME~1\TMPACC~1\APPLIC~1\Skype
   [06/01/2006|11:24] D:\DOCUME~1\TMPACC~1\APPLIC~1\Sonic
   [28/12/2005|18:30] D:\DOCUME~1\TMPACC~1\APPLIC~1\Sun
   [27/12/2005|20:58] D:\DOCUME~1\TMPACC~1\APPLIC~1\Symantec
   [23/07/2006|10:50] D:\DOCUME~1\TMPACC~1\APPLIC~1\Ulead Systems
   [05/08/2007|15:36] D:\DOCUME~1\TMPACC~1\APPLIC~1\vlc
   [23/05/2008|13:19] D:\DOCUME~1\TMPACC~1\APPLIC~1\vmntoolbar
   [14/11/2005|18:19] D:\DOCUME~1\TMPACC~1\APPLIC~1\You've Got Pictures Screensaver
 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [27/12/2008 18:00][--a------] C:\WINDOWS	asks\Configurer mon PC.job
   [27/12/2008 18:00][--ah-----] C:\WINDOWS	asks\BB2D817193DE32F1.job
   [27/12/2008 07:19][--ah-----] C:\WINDOWS	asks\SA.DAT
   [05/08/2004 14:00][-rah-----] C:\WINDOWS	asks\desktop.ini

   ( BB2D817193DE32F1.job )=( d:\docume~1\michel\applic~1\gplact~1\Grimplayload.exe )

   --------------------\  Listing des dossiers dans C:\Program Files

   [20/11/2008|21:23] C:\Program Files\Adobe
   [26/05/2008|00:16] C:\Program Files\AOL 9.0
   [26/05/2008|00:07] C:\Program Files\AOL Compagnon
   [11/11/2008|11:58] C:\Program Files\bfgclient
   [12/10/2008|17:55] C:\Program Files\Boonty
   [12/10/2008|17:56] C:\Program Files\BoontyGames
   [12/10/2008|17:56] C:\Program Files\Canon
   [17/09/2008|18:03] C:\Program Files\CanonBJ
   [27/12/2008|17:57] C:\Program Files\CCleaner
   [29/07/2008|08:52] C:\Program Files\Circle Developement
   [26/05/2008|00:07] C:\Program Files\ComPlus Applications
   [26/05/2008|00:07] C:\Program Files\CyberLink
   [05/06/2008|18:03] C:\Program Files\ENJOY Plus!
   [27/12/2008|16:18] C:\Program Files\Everest Poker
   [12/10/2008|17:58] C:\Program Files\Fichiers communs
   [24/12/2008|17:28] C:\Program Files\GIMP-2.0
   [26/05/2008|00:07] C:\Program Files\GMixon
   [17/12/2008|20:58] C:\Program Files\Google
   [22/07/2008|17:40] C:\Program Files\GPLACTIVE
   [25/05/2008|18:53] C:\Program Files\InstallShield Installation Information
   [10/12/2008|23:12] C:\Program Files\Internet Explorer
   [23/12/2008|12:01] C:\Program Files\Java
   [26/05/2008|00:07] C:\Program Files\Learn2.com
   [26/06/2008|12:27] C:\Program Files\Logitech
   [16/10/2008|17:24] C:\Program Files\Messenger
   [27/12/2008|18:12] C:\Program Files\Messenger Plus! Live
   [23/12/2008|09:55] C:\Program Files\Microsoft
   [25/05/2008|19:14] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [26/05/2008|00:07] C:\Program Files\microsoft frontpage
   [11/12/2008|20:32] C:\Program Files\Microsoft Office
   [23/12/2008|09:56] C:\Program Files\Microsoft Silverlight
   [16/10/2008|17:20] C:\Program Files\Movie Maker
   [27/12/2008|16:52] C:\Program Files\Mozilla Firefox
   [27/12/2008|17:54] C:\Program Files\MSECache
   [27/12/2008|18:06] C:\Program Files\MSN
   [26/05/2008|00:07] C:\Program Files\MSN Gaming Zone
   [25/05/2008|18:30] C:\Program Files\MSXML 4.0
   [27/12/2008|18:19] C:\Program Files\Navilog1
   [16/10/2008|17:17] C:\Program Files\NetMeeting
   [25/05/2008|16:40] C:\Program Files\Neuf
   [26/05/2008|00:07] C:\Program Files\Norman
   [26/05/2008|00:10] C:\Program Files\Online Services
   [16/10/2008|17:17] C:\Program Files\Outlook Express
   [21/10/2008|13:22] C:\Program Files\Pack Securite
   [26/08/2008|13:02] C:\Program Files\PhotoFiltre
   [12/10/2008|17:55] C:\Program Files\PhotoScape
   [24/10/2008|23:20] C:\Program Files\Picasa2
   [05/10/2008|01:18] C:\Program Files\Pinnacle
   [27/12/2008|18:19] C:\Program Files\Pogo FR
   [26/05/2008|00:10] C:\Program Files\QuickTime
   [26/05/2008|00:07] C:\Program Files\Real
   [26/05/2008|00:07] C:\Program Files\Realtek
   [14/09/2008|13:08] C:\Program Files\ReflexiveArcade
   [27/12/2008|18:05] C:\Program Files\Sallys Spa
   [26/05/2008|00:11] C:\Program Files\Services en ligne
   [26/05/2008|00:07] C:\Program Files\Sonic
   [27/12/2008|18:03] C:\Program Files\Trend Micro
   [26/05/2008|00:07] C:\Program Files\Ulead Systems
   [26/05/2008|00:07] C:\Program Files\Uninstall Information
   [05/10/2008|00:56] C:\Program Files\URUSoft
   [26/05/2008|00:07] C:\Program Files\Viewpoint
   [27/12/2008|18:18] C:\Program Files\Windows Live
   [23/12/2008|09:54] C:\Program Files\Windows Live Toolbar
   [26/05/2008|00:07] C:\Program Files\Windows Media Components
   [04/07/2008|09:46] C:\Program Files\Windows Media Connect 2
   [16/10/2008|17:17] C:\Program Files\Windows Media Player
   [16/10/2008|17:17] C:\Program Files\Windows NT
   [26/05/2008|00:07] C:\Program Files\WindowsUpdate
   [06/07/2008|18:17] C:\Program Files\Wondershare
   [26/05/2008|00:07] C:\Program Files\xerox
   [27/12/2008|17:54] C:\Program Files\Yahoo!

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [24/12/2008|17:15] C:\Program Files\Fichiers communs\Adobe
   [26/05/2008|00:07] C:\Program Files\Fichiers communs\AOL
   [26/05/2008|00:07] C:\Program Files\Fichiers communs\aolshare
   [12/10/2008|17:55] C:\Program Files\Fichiers communs\BOONTY Shared
   [17/09/2008|18:09] C:\Program Files\Fichiers communs\CANON
   [12/10/2008|17:56] C:\Program Files\Fichiers communs\Designer
   [26/05/2008|00:07] C:\Program Files\Fichiers communs\InstallShield
   [26/05/2008|00:07] C:\Program Files\Fichiers communs\Java
   [26/06/2008|12:34] C:\Program Files\Fichiers communs\LogiShrd
   [23/12/2008|09:50] C:\Program Files\Fichiers communs\Microsoft Shared
   [26/05/2008|00:07] C:\Program Files\Fichiers communs\MSSoap
   [26/05/2008|00:07] C:\Program Files\Fichiers communs\Nullsoft
   [26/05/2008|00:07] C:\Program Files\Fichiers communs\ODBC
   [26/08/2008|16:24] C:\Program Files\Fichiers communs\Real
   [26/05/2008|00:07] C:\Program Files\Fichiers communs\Services
   [12/10/2008|17:55] C:\Program Files\Fichiers communs\Skype
   [26/05/2008|00:07] C:\Program Files\Fichiers communs\Sonic Shared
   [26/05/2008|00:07] C:\Program Files\Fichiers communs\SpeechEngines
   [26/05/2008|00:07] C:\Program Files\Fichiers communs\SureThing Shared
   [16/10/2008|17:17] C:\Program Files\Fichiers communs\System
   [26/05/2008|00:07] C:\Program Files\Fichiers communs\Ulead Systems
   [12/10/2008|17:58] C:\Program Files\Fichiers communs\Windows Live
   [25/05/2008|18:37] C:\Program Files\Fichiers communs\WindowsLiveInstaller
   [05/10/2008|01:18] C:\Program Files\Fichiers communs\Yahoo!

   --------------------\  Process

   ( 65 Processes )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   D:\DOCUME~1\ALLUSE~1\APPLIC~1\Tick Find Close Surf
   D:\DOCUME~1\ALLUSE~1\APPLIC~1\Tick Find Close Surf\mags save.0xe
   D:\DOCUME~1\MICHEL\APPLIC~1\gplact~1
   D:\DOCUME~1\MICHEL\APPLIC~1\gplact~1\1 Base Mail Deaf.0xe
   D:\DOCUME~1\MICHEL\APPLIC~1\gplact~1\Burn Bone View.0xe
   D:\DOCUME~1\MICHEL\APPLIC~1\gplact~1\Grimplayload.0xe
   D:\DOCUME~1\MICHEL\APPLIC~1\gplact~1\huoaceje.0xe
   C:\Program Files\gplact~1
   D:\DOCUME~1\MICHEL\LOCALS~1\Temp
sa444.tmp
   D:\DOCUME~1\MICHEL\LOCALS~1\Temp
sb3F1.tmp
   D:\DOCUME~1\MICHEL\LOCALS~1\Temp
sg3D1.tmp
   D:\DOCUME~1\MICHEL\LOCALS~1\Temp
sh416.tmp
   D:\DOCUME~1\MICHEL\LOCALS~1\Temp
sk3D3.tmp
   D:\DOCUME~1\MICHEL\LOCALS~1\Temp
sx46A.tmp
   C:\Program Files\Circle Developement
   C:\Program Files\Circle Developement\Uninstall.0xe
   C:\WINDOWS\Tasks\BB2D817193DE32F1.job
 
   --------------------\  Verification du Registre

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
   "Ping Remote"="D:\DOCUME~1\MICHEL\APPLIC~1\GPLACT~1\Burn Bone View.exe"

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
   "close surf mail dupe"="D:\Documents and Settings\All Users\Application Data\Tick Find Close Surf\mags save.exe"

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-12-27 18:26:00
   Windows 5.1.2600 Service Pack 3 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   folder error: D:\DOCUME~1\MICHEL\LOCALS~1\APPLIC~1
 
   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !

   [F:303][D:53]-> D:\DOCUME~1\MICHEL\LOCALS~1\Temp
   [F:15][D:0]-> D:\DOCUME~1\MICHEL\Cookies
   [F:375][D:4]-> D:\DOCUME~1\MICHEL\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - 27/12/2008|18:27 - Option : [1]

   --------------------\  Fin du rapport a 18:27:28

V-X · Answer

Re,

&#x25B6 Relance Lop S&D

&#x25B6 Choisis cette fois ci l'Option 2 ( Suppression )

&#x25B6 Ne ferme pas la fenêtre lors de la suppression !

&#x25B6 Poste le rapport généré ( C:\lopR.txt )

( Si le Bureau ne réapparaît pas presse Ctrl + Alt + Suppr, Onglet Fichier,

Nouvelle tâche, tape explorer.exe et valide )

Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.

noshelter · Answer

La suppression est en cours, je post des que c'est fini

noshelter · Answer

voila seconde rapport :



   --------------------\  Lop S&D 4.2.5-0   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Multiprocessor Free :               Intel(R) Pentium(R) 4 CPU 2.93GHz )
   BIOS : Award Medallion BIOS v6.00PG
   USER : MICHEL ( Administrator )
   BOOT : Normal boot
   Antivirus : Pack Securite Plus 7.00 7.00 (Activated)
   Firewall  : Pack Securite Plus 7.00 7.00 (Activated)
   A:\ (USB)
   C:\ (Local Disk) - NTFS - Total:29 Go (Free:19 Go)
   D:\ (Local Disk) - NTFS - Total:148 Go (Free:128 Go)
   E:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
   G:\ (USB)
   H:\ (USB)
   I:\ (USB)
   J:\ (USB)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [2] ( 27/12/2008|18:41 )


   \\\\\\\\\\\\\\\ SUPPRESSION

   Supprime! - D:\DOCUME~1\ALLUSE~1\APPLIC~1\Tick Find Close Surf\mags save.0xe
   Supprime! - D:\DOCUME~1\MICHEL\APPLIC~1\gplact~1\1 Base Mail Deaf.0xe
   Supprime! - D:\DOCUME~1\MICHEL\APPLIC~1\gplact~1\Burn Bone View.0xe
   Supprime! - D:\DOCUME~1\MICHEL\APPLIC~1\gplact~1\Grimplayload.0xe
   Supprime! - D:\DOCUME~1\MICHEL\APPLIC~1\gplact~1\huoaceje.0xe
   Supprime! - C:\Program Files\Circle Developement\Uninstall.0xe
   Supprime! - C:\WINDOWS\Tasks\BB2D817193DE32F1.job 
   Supprime! - D:\DOCUME~1\ALLUSE~1\APPLIC~1\Tick Find Close Surf
   Supprime! - D:\DOCUME~1\MICHEL\APPLIC~1\gplact~1
   Supprime! - C:\Program Files\gplact~1
   Supprime! - C:\Program Files\Circle Developement
 
   \\\\\\\\\\\\\\\ 

   Supprime! - C:\Program Files\Viewpoint
   Supprime! - D:\DOCUME~1\MICHEL\APPLIC~1\Viewpoint
   Supprime! - D:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
 
   \\\\\\\\\\\\\\\

 
   --------------------\  Listing des dossiers dans APPLIC~1

   [20/11/2008|21:23] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [11/11/2005|09:55] D:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
   [22/05/2007|16:47] D:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL Downloads
   [16/11/2008|10:07] D:\DOCUME~1\ALLUSE~1\APPLIC~1\BigFishGamesCache
   [12/10/2008|18:01] D:\DOCUME~1\ALLUSE~1\APPLIC~1\blg
   [15/09/2008|10:07] D:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
   [13/05/2006|20:00] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Byte Real Aim Type
   [15/09/2008|21:03] D:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
   [17/12/2008|20:06] D:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonIJPLM
   [31/12/2005|12:08] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Ciel
   [11/11/2005|10:07] D:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
   [31/05/2008|07:42] D:\DOCUME~1\ALLUSE~1\APPLIC~1\ENJOY Plus!
   [02/07/2008|20:01] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Flood Light Games
   [05/07/2008|12:38] D:\DOCUME~1\ALLUSE~1\APPLIC~1\FloodLightGames
   [23/05/2008|15:47] D:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure
   [25/05/2008|16:49] D:\DOCUME~1\ALLUSE~1\APPLIC~1\fssg
   [29/03/2007|18:25] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [18/09/2007|13:13] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Logishrd
   [17/08/2007|21:19] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Logitech
   [14/04/2007|15:11] D:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee.com
   [27/12/2008|18:21] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [13/04/2006|16:30] D:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN Search Toolbar
   [20/09/2008|13:40] D:\DOCUME~1\ALLUSE~1\APPLIC~1\NannyMania
   [07/09/2008|17:14] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Oberon Games
   [11/11/2005|09:55] D:\DOCUME~1\ALLUSE~1\APPLIC~1\OD2
   [05/10/2008|01:06] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Pinnacle
   [05/10/2008|01:25] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Pinnacle VideoSpin
   [08/09/2008|20:50] D:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
   [11/11/2005|09:56] D:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
   [14/09/2008|15:57] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Sandlot Games
   [11/11/2005|18:37] D:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
   [03/09/2008|12:43] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
   [27/12/2008|17:55] D:\DOCUME~1\ALLUSE~1\APPLIC~1\SweetIM
   [11/11/2008|12:34] D:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
   [11/11/2005|10:06] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
   [05/10/2008|01:18] D:\DOCUME~1\ALLUSE~1\APPLIC~1\VideoSpin
   [29/03/2006|15:34] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [12/10/2008|18:02] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
   [25/05/2008|18:35] D:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
   [26/10/2008|19:01] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

   [26/05/2008|00:14] D:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [26/05/2008|00:14] D:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
   [26/05/2008|00:14] D:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
   [26/05/2008|00:14] D:\DOCUME~1\DEFAUL~1\APPLIC~1\Real
   [11/11/2005|09:59] D:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec
   [11/11/2005|09:56] D:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver

   [14/11/2005|18:19] D:\DOCUME~1\DEFTEMP\APPLIC~1\Identities
   [14/11/2005|18:19] D:\DOCUME~1\DEFTEMP\APPLIC~1\Macromedia
   [14/11/2005|18:19] D:\DOCUME~1\DEFTEMP\APPLIC~1\Microsoft
   [14/11/2005|18:19] D:\DOCUME~1\DEFTEMP\APPLIC~1\Real
   [11/11/2005|09:59] D:\DOCUME~1\DEFTEMP\APPLIC~1\Symantec
   [14/11/2005|18:19] D:\DOCUME~1\DEFTEMP\APPLIC~1\You've Got Pictures Screensaver

   [13/09/2006|15:01] D:\DOCUME~1\Elodie\APPLIC~1\Adobe
   [23/03/2008|15:21] D:\DOCUME~1\Elodie\APPLIC~1\AdobeUM
   [02/01/2006|13:44] D:\DOCUME~1\Elodie\APPLIC~1\AOL
   [19/01/2006|20:57] D:\DOCUME~1\Elodie\APPLIC~1\CyberLink
   [23/03/2008|15:22] D:\DOCUME~1\Elodie\APPLIC~1\F-Secure
   [23/03/2008|15:23] D:\DOCUME~1\Elodie\APPLIC~1\Google
   [29/03/2006|15:36] D:\DOCUME~1\Elodie\APPLIC~1\GTek
   [19/01/2006|11:03] D:\DOCUME~1\Elodie\APPLIC~1\Help
   [14/11/2005|18:19] D:\DOCUME~1\Elodie\APPLIC~1\Identities
   [13/09/2006|13:38] D:\DOCUME~1\Elodie\APPLIC~1\Leadertech
   [02/01/2006|14:34] D:\DOCUME~1\Elodie\APPLIC~1\Macromedia
   [12/02/2006|21:58] D:\DOCUME~1\Elodie\APPLIC~1\Microsoft
   [14/04/2006|18:31] D:\DOCUME~1\Elodie\APPLIC~1\MSN Search Toolbar
   [12/02/2006|22:01] D:\DOCUME~1\Elodie\APPLIC~1\MSNInstaller
   [19/01/2006|21:00] D:\DOCUME~1\Elodie\APPLIC~1\OD2
   [23/03/2008|15:21] D:\DOCUME~1\Elodie\APPLIC~1\OpenOffice.org2
   [11/02/2006|17:41] D:\DOCUME~1\Elodie\APPLIC~1\Real
   [18/09/2006|09:57] D:\DOCUME~1\Elodie\APPLIC~1\Skype
   [13/09/2006|13:39] D:\DOCUME~1\Elodie\APPLIC~1\Sonic
   [10/02/2006|18:42] D:\DOCUME~1\Elodie\APPLIC~1\Sun
   [11/11/2005|09:59] D:\DOCUME~1\Elodie\APPLIC~1\Symantec
   [18/09/2006|09:36] D:\DOCUME~1\Elodie\APPLIC~1\Ulead Systems
   [23/03/2008|15:27] D:\DOCUME~1\Elodie\APPLIC~1\VMNTOOLBAR
   [14/11/2005|18:19] D:\DOCUME~1\Elodie\APPLIC~1\You've Got Pictures Screensaver

   [26/05/2008|00:14] D:\DOCUME~1\ELODIE~1.107\APPLIC~1\Identities
   [26/05/2008|00:14] D:\DOCUME~1\ELODIE~1.107\APPLIC~1\Macromedia
   [26/05/2008|00:14] D:\DOCUME~1\ELODIE~1.107\APPLIC~1\Microsoft
   [26/05/2008|00:14] D:\DOCUME~1\ELODIE~1.107\APPLIC~1\Real
   [11/11/2005|09:59] D:\DOCUME~1\ELODIE~1.107\APPLIC~1\Symantec
   [11/11/2005|09:56] D:\DOCUME~1\ELODIE~1.107\APPLIC~1\You've Got Pictures Screensaver

   [26/05/2008|00:14] D:\DOCUME~1\INVITe\APPLIC~1\Identities
   [26/05/2008|00:14] D:\DOCUME~1\INVITe\APPLIC~1\Macromedia
   [26/05/2008|00:14] D:\DOCUME~1\INVITe\APPLIC~1\Microsoft
   [26/05/2008|00:14] D:\DOCUME~1\INVITe\APPLIC~1\Real
   [11/11/2005|09:59] D:\DOCUME~1\INVITe\APPLIC~1\Symantec
   [11/11/2005|09:56] D:\DOCUME~1\INVITe\APPLIC~1\You've Got Pictures Screensaver

   [28/12/2006|11:41] D:\DOCUME~1\INVITS~1\APPLIC~1\Adobe
   [09/01/2007|09:19] D:\DOCUME~1\INVITS~1\APPLIC~1\AdobeUM
   [02/01/2006|14:57] D:\DOCUME~1\INVITS~1\APPLIC~1\AOL
   [09/01/2007|09:19] D:\DOCUME~1\INVITS~1\APPLIC~1\CyberLink
   [02/07/2007|13:51] D:\DOCUME~1\INVITS~1\APPLIC~1\Google
   [14/11/2005|18:19] D:\DOCUME~1\INVITS~1\APPLIC~1\Identities
   [25/05/2006|15:47] D:\DOCUME~1\INVITS~1\APPLIC~1\Macromedia
   [25/05/2006|15:48] D:\DOCUME~1\INVITS~1\APPLIC~1\Microsoft
   [02/07/2007|11:18] D:\DOCUME~1\INVITS~1\APPLIC~1\Mozilla
   [29/12/2006|13:28] D:\DOCUME~1\INVITS~1\APPLIC~1\OD2
   [09/01/2007|09:19] D:\DOCUME~1\INVITS~1\APPLIC~1\Real
   [28/12/2006|13:08] D:\DOCUME~1\INVITS~1\APPLIC~1\Sun
   [11/11/2005|09:59] D:\DOCUME~1\INVITS~1\APPLIC~1\Symantec
   [14/11/2005|18:19] D:\DOCUME~1\INVITS~1\APPLIC~1\You've Got Pictures Screensaver

   [31/12/2005|10:39] D:\DOCUME~1\JULIE\APPLIC~1\Adobe
   [01/02/2006|18:34] D:\DOCUME~1\JULIE\APPLIC~1\AdobeUM
   [28/12/2005|19:07] D:\DOCUME~1\JULIE\APPLIC~1\AOL
   [15/01/2006|16:52] D:\DOCUME~1\JULIE\APPLIC~1\CyberLink
   [09/01/2007|09:06] D:\DOCUME~1\JULIE\APPLIC~1\EoRezo
   [17/04/2007|13:55] D:\DOCUME~1\JULIE\APPLIC~1\F-Secure
   [04/04/2007|13:19] D:\DOCUME~1\JULIE\APPLIC~1\Google
   [20/07/2006|14:22] D:\DOCUME~1\JULIE\APPLIC~1\Help
   [14/11/2005|18:19] D:\DOCUME~1\JULIE\APPLIC~1\Identities
   [14/11/2005|18:19] D:\DOCUME~1\JULIE\APPLIC~1\Macromedia
   [14/05/2006|20:26] D:\DOCUME~1\JULIE\APPLIC~1\mess junk eggs
   [30/04/2007|15:03] D:\DOCUME~1\JULIE\APPLIC~1\MessengerSkinner
   [24/02/2006|12:23] D:\DOCUME~1\JULIE\APPLIC~1\Microsoft
   [17/04/2007|13:53] D:\DOCUME~1\JULIE\APPLIC~1\Mozilla
   [02/01/2006|14:47] D:\DOCUME~1\JULIE\APPLIC~1\OD2
   [14/05/2006|20:26] D:\DOCUME~1\JULIE\APPLIC~1\okaytrustbolt
   [06/02/2006|20:07] D:\DOCUME~1\JULIE\APPLIC~1\Real
   [28/09/2006|12:10] D:\DOCUME~1\JULIE\APPLIC~1\Skype
   [29/01/2006|13:53] D:\DOCUME~1\JULIE\APPLIC~1\Sun
   [01/03/2006|12:55] D:\DOCUME~1\JULIE\APPLIC~1\Symantec
   [15/01/2006|16:52] D:\DOCUME~1\JULIE\APPLIC~1\Ulead Systems
   [14/11/2005|18:19] D:\DOCUME~1\JULIE\APPLIC~1\You've Got Pictures Screensaver

   [26/05/2008|00:14] D:\DOCUME~1\JULIE~1.107\APPLIC~1\Identities
   [26/05/2008|00:14] D:\DOCUME~1\JULIE~1.107\APPLIC~1\Macromedia
   [26/05/2008|00:14] D:\DOCUME~1\JULIE~1.107\APPLIC~1\Microsoft
   [26/05/2008|00:14] D:\DOCUME~1\JULIE~1.107\APPLIC~1\Real
   [11/11/2005|09:59] D:\DOCUME~1\JULIE~1.107\APPLIC~1\Symantec
   [11/11/2005|09:56] D:\DOCUME~1\JULIE~1.107\APPLIC~1\You've Got Pictures Screensaver

   [06/04/2006|15:03] D:\DOCUME~1\LOCALS~1\APPLIC~1\Macromedia
   [04/07/2008|10:21] D:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
   [14/05/2006|20:26] D:\DOCUME~1\LOCALS~1\APPLIC~1\okaytrustbolt

   [26/06/2006|14:12] D:\DOCUME~1\LOCALS~1.AUT\APPLIC~1\Microsoft

   [05/08/2006|15:56] D:\DOCUME~1\LOCALS~1.000\APPLIC~1\Microsoft

   [09/01/2007|09:18] D:\DOCUME~1\LOCALS~1.001\APPLIC~1\Microsoft

   [09/01/2007|09:18] D:\DOCUME~1\LOCALS~1.002\APPLIC~1\Microsoft

   [25/03/2007|12:55] D:\DOCUME~1\LOCALS~1.003\APPLIC~1\Microsoft

   [23/04/2007|17:34] D:\DOCUME~1\LOCALS~1.004\APPLIC~1\Microsoft

   [03/06/2007|11:13] D:\DOCUME~1\LOCALS~1.005\APPLIC~1\Microsoft

   [02/09/2007|22:42] D:\DOCUME~1\LOCALS~1.006\APPLIC~1\Microsoft

   [23/05/2006|19:50] D:\DOCUME~1\MARYSE\APPLIC~1\Adobe
   [30/12/2005|18:21] D:\DOCUME~1\MARYSE\APPLIC~1\AOL
   [14/11/2005|18:19] D:\DOCUME~1\MARYSE\APPLIC~1\Identities
   [30/12/2005|18:24] D:\DOCUME~1\MARYSE\APPLIC~1\Macromedia
   [14/11/2005|18:19] D:\DOCUME~1\MARYSE\APPLIC~1\Microsoft
   [09/05/2006|20:14] D:\DOCUME~1\MARYSE\APPLIC~1\MSN Search Toolbar
   [01/06/2006|15:54] D:\DOCUME~1\MARYSE\APPLIC~1\OD2
   [14/11/2005|18:19] D:\DOCUME~1\MARYSE\APPLIC~1\Real
   [30/12/2005|18:24] D:\DOCUME~1\MARYSE\APPLIC~1\Sun
   [30/12/2005|18:23] D:\DOCUME~1\MARYSE\APPLIC~1\Symantec
   [30/10/2006|16:19] D:\DOCUME~1\MARYSE\APPLIC~1\Ulead Systems
   [14/11/2005|18:19] D:\DOCUME~1\MARYSE\APPLIC~1\You've Got Pictures Screensaver

   [26/05/2008|00:14] D:\DOCUME~1\MARYSE~1.107\APPLIC~1\Identities
   [26/05/2008|00:14] D:\DOCUME~1\MARYSE~1.107\APPLIC~1\Macromedia
   [26/05/2008|00:14] D:\DOCUME~1\MARYSE~1.107\APPLIC~1\Microsoft
   [26/05/2008|00:14] D:\DOCUME~1\MARYSE~1.107\APPLIC~1\Real
   [11/11/2005|09:59] D:\DOCUME~1\MARYSE~1.107\APPLIC~1\Symantec
   [11/11/2005|09:56] D:\DOCUME~1\MARYSE~1.107\APPLIC~1\You've Got Pictures Screensaver

   [25/12/2008|18:03] D:\DOCUME~1\MICHEL\APPLIC~1\Adobe
   [26/05/2008|07:54] D:\DOCUME~1\MICHEL\APPLIC~1\AdobeUM
   [12/10/2008|18:02] D:\DOCUME~1\MICHEL\APPLIC~1\BeachPartyCraze
   [03/07/2008|18:30] D:\DOCUME~1\MICHEL\APPLIC~1\Big Fish Games
   [25/09/2008|16:12] D:\DOCUME~1\MICHEL\APPLIC~1\blg
   [17/09/2008|18:15] D:\DOCUME~1\MICHEL\APPLIC~1\Canon
   [20/09/2008|08:08] D:\DOCUME~1\MICHEL\APPLIC~1\CD-LabelPrint
   [07/11/2008|22:21] D:\DOCUME~1\MICHEL\APPLIC~1\CyberLink
   [31/05/2008|07:42] D:\DOCUME~1\MICHEL\APPLIC~1\ENJOY Plus!
   [08/10/2008|20:49] D:\DOCUME~1\MICHEL\APPLIC~1\FarmerJane
   [02/07/2008|20:01] D:\DOCUME~1\MICHEL\APPLIC~1\Flood Light Games
   [05/07/2008|12:38] D:\DOCUME~1\MICHEL\APPLIC~1\FloodLightGames
   [02/07/2008|14:55] D:\DOCUME~1\MICHEL\APPLIC~1\F-Secure
   [17/12/2008|21:00] D:\DOCUME~1\MICHEL\APPLIC~1\Google
   [26/12/2008|17:30] D:\DOCUME~1\MICHEL\APPLIC~1\gtk-2.0
   [24/07/2008|17:52] D:\DOCUME~1\MICHEL\APPLIC~1\Help
   [26/05/2008|00:14] D:\DOCUME~1\MICHEL\APPLIC~1\Identities
   [19/06/2008|16:31] D:\DOCUME~1\MICHEL\APPLIC~1\Leadertech
   [25/05/2008|16:42] D:\DOCUME~1\MICHEL\APPLIC~1\Macromedia
   [26/12/2008|19:17] D:\DOCUME~1\MICHEL\APPLIC~1\Microsoft
   [03/09/2008|16:50] D:\DOCUME~1\MICHEL\APPLIC~1\Mozilla
   [27/12/2008|18:06] D:\DOCUME~1\MICHEL\APPLIC~1\MSNInstaller
   [01/06/2008|13:54] D:\DOCUME~1\MICHEL\APPLIC~1\OD2
   [08/09/2008|20:50] D:\DOCUME~1\MICHEL\APPLIC~1\PlayFirst
   [07/09/2008|22:49] D:\DOCUME~1\MICHEL\APPLIC~1\Playrix Entertainment
   [26/08/2008|16:24] D:\DOCUME~1\MICHEL\APPLIC~1\Real
   [12/10/2008|18:01] D:\DOCUME~1\MICHEL\APPLIC~1\Skype
   [05/10/2008|10:20] D:\DOCUME~1\MICHEL\APPLIC~1\skypePM
   [19/06/2008|16:35] D:\DOCUME~1\MICHEL\APPLIC~1\Sonic
   [07/09/2008|21:44] D:\DOCUME~1\MICHEL\APPLIC~1\SultansLabyrinth
   [05/06/2008|12:48] D:\DOCUME~1\MICHEL\APPLIC~1\Sun
   [11/11/2005|09:59] D:\DOCUME~1\MICHEL\APPLIC~1\Symantec
   [26/10/2008|11:04] D:\DOCUME~1\MICHEL\APPLIC~1\Ulead Systems
   [27/08/2008|17:26] D:\DOCUME~1\MICHEL\APPLIC~1\ViquaSoft
   [11/11/2005|09:56] D:\DOCUME~1\MICHEL\APPLIC~1\You've Got Pictures Screensaver

   [11/11/2005|18:37] D:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
   [30/12/2005|18:40] D:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec

   [26/06/2006|14:12] D:\DOCUME~1\NETWOR~1.AUT\APPLIC~1\Microsoft

   [05/08/2006|15:56] D:\DOCUME~1\NETWOR~1.000\APPLIC~1\Microsoft

   [09/01/2007|09:18] D:\DOCUME~1\NETWOR~1.001\APPLIC~1\Microsoft

   [09/01/2007|09:18] D:\DOCUME~1\NETWOR~1.002\APPLIC~1\Microsoft

   [25/03/2007|12:55] D:\DOCUME~1\NETWOR~1.003\APPLIC~1\Microsoft

   [23/04/2007|17:34] D:\DOCUME~1\NETWOR~1.004\APPLIC~1\Microsoft

   [14/11/2005|18:19] D:\DOCUME~1\NETWOR~1.005\APPLIC~1\Microsoft

   [14/11/2005|18:19] D:\DOCUME~1\NETWOR~1.006\APPLIC~1\Microsoft

   [26/04/2008|13:05] D:\DOCUME~1\TMPACC~1\APPLIC~1\Adobe
   [23/05/2008|06:53] D:\DOCUME~1\TMPACC~1\APPLIC~1\AdobeUM
   [27/12/2005|21:19] D:\DOCUME~1\TMPACC~1\APPLIC~1\AOL
   [29/01/2006|09:16] D:\DOCUME~1\TMPACC~1\APPLIC~1\CyberLink
   [28/04/2007|00:30] D:\DOCUME~1\TMPACC~1\APPLIC~1\EoRezo
   [23/04/2007|16:19] D:\DOCUME~1\TMPACC~1\APPLIC~1\F-Secure
   [07/08/2007|21:23] D:\DOCUME~1\TMPACC~1\APPLIC~1\FUJIFILM
   [07/04/2007|14:43] D:\DOCUME~1\TMPACC~1\APPLIC~1\Google
   [27/12/2005|21:28] D:\DOCUME~1\TMPACC~1\APPLIC~1\Help
   [14/11/2005|18:19] D:\DOCUME~1\TMPACC~1\APPLIC~1\Identities
   [06/01/2006|11:19] D:\DOCUME~1\TMPACC~1\APPLIC~1\Leadertech
   [14/11/2005|18:19] D:\DOCUME~1\TMPACC~1\APPLIC~1\Macromedia
   [13/05/2006|19:20] D:\DOCUME~1\TMPACC~1\APPLIC~1\mess junk eggs
   [23/02/2008|01:48] D:\DOCUME~1\TMPACC~1\APPLIC~1\Microsoft
   [14/04/2007|14:50] D:\DOCUME~1\TMPACC~1\APPLIC~1\Mozilla
   [02/01/2006|16:38] D:\DOCUME~1\TMPACC~1\APPLIC~1\OD2
   [26/05/2008|00:02] D:\DOCUME~1\TMPACC~1\APPLIC~1\OFFICE One v6
   [14/05/2006|20:26] D:\DOCUME~1\TMPACC~1\APPLIC~1\okaytrustbolt
   [12/05/2008|21:54] D:\DOCUME~1\TMPACC~1\APPLIC~1\OpenOffice.org2
   [28/01/2006|09:05] D:\DOCUME~1\TMPACC~1\APPLIC~1\Real
   [08/01/2007|08:07] D:\DOCUME~1\TMPACC~1\APPLIC~1\Skype
   [06/01/2006|11:24] D:\DOCUME~1\TMPACC~1\APPLIC~1\Sonic
   [28/12/2005|18:30] D:\DOCUME~1\TMPACC~1\APPLIC~1\Sun
   [27/12/2005|20:58] D:\DOCUME~1\TMPACC~1\APPLIC~1\Symantec
   [23/07/2006|10:50] D:\DOCUME~1\TMPACC~1\APPLIC~1\Ulead Systems
   [05/08/2007|15:36] D:\DOCUME~1\TMPACC~1\APPLIC~1\vlc
   [23/05/2008|13:19] D:\DOCUME~1\TMPACC~1\APPLIC~1\vmntoolbar
   [14/11/2005|18:19] D:\DOCUME~1\TMPACC~1\APPLIC~1\You've Got Pictures Screensaver
 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [27/12/2008 18:30][--a------] C:\WINDOWS	asks\Configurer mon PC.job
   [27/12/2008 18:39][--ah-----] C:\WINDOWS	asks\SA.DAT
   [05/08/2004 14:00][-rah-----] C:\WINDOWS	asks\desktop.ini

   --------------------\  Listing des dossiers dans C:\Program Files

   [20/11/2008|21:23] C:\Program Files\Adobe
   [26/05/2008|00:16] C:\Program Files\AOL 9.0
   [26/05/2008|00:07] C:\Program Files\AOL Compagnon
   [11/11/2008|11:58] C:\Program Files\bfgclient
   [12/10/2008|17:55] C:\Program Files\Boonty
   [12/10/2008|17:56] C:\Program Files\BoontyGames
   [12/10/2008|17:56] C:\Program Files\Canon
   [17/09/2008|18:03] C:\Program Files\CanonBJ
   [27/12/2008|17:57] C:\Program Files\CCleaner
   [26/05/2008|00:07] C:\Program Files\ComPlus Applications
   [26/05/2008|00:07] C:\Program Files\CyberLink
   [05/06/2008|18:03] C:\Program Files\ENJOY Plus!
   [27/12/2008|16:18] C:\Program Files\Everest Poker
   [12/10/2008|17:58] C:\Program Files\Fichiers communs
   [24/12/2008|17:28] C:\Program Files\GIMP-2.0
   [26/05/2008|00:07] C:\Program Files\GMixon
   [17/12/2008|20:58] C:\Program Files\Google
   [25/05/2008|18:53] C:\Program Files\InstallShield Installation Information
   [10/12/2008|23:12] C:\Program Files\Internet Explorer
   [23/12/2008|12:01] C:\Program Files\Java
   [26/05/2008|00:07] C:\Program Files\Learn2.com
   [26/06/2008|12:27] C:\Program Files\Logitech
   [16/10/2008|17:24] C:\Program Files\Messenger
   [23/12/2008|09:55] C:\Program Files\Microsoft
   [25/05/2008|19:14] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [26/05/2008|00:07] C:\Program Files\microsoft frontpage
   [11/12/2008|20:32] C:\Program Files\Microsoft Office
   [23/12/2008|09:56] C:\Program Files\Microsoft Silverlight
   [16/10/2008|17:20] C:\Program Files\Movie Maker
   [27/12/2008|16:52] C:\Program Files\Mozilla Firefox
   [27/12/2008|17:54] C:\Program Files\MSECache
   [27/12/2008|18:06] C:\Program Files\MSN
   [26/05/2008|00:07] C:\Program Files\MSN Gaming Zone
   [25/05/2008|18:30] C:\Program Files\MSXML 4.0
   [27/12/2008|18:19] C:\Program Files\Navilog1
   [16/10/2008|17:17] C:\Program Files\NetMeeting
   [25/05/2008|16:40] C:\Program Files\Neuf
   [26/05/2008|00:07] C:\Program Files\Norman
   [26/05/2008|00:10] C:\Program Files\Online Services
   [16/10/2008|17:17] C:\Program Files\Outlook Express
   [21/10/2008|13:22] C:\Program Files\Pack Securite
   [26/08/2008|13:02] C:\Program Files\PhotoFiltre
   [12/10/2008|17:55] C:\Program Files\PhotoScape
   [24/10/2008|23:20] C:\Program Files\Picasa2
   [05/10/2008|01:18] C:\Program Files\Pinnacle
   [27/12/2008|18:19] C:\Program Files\Pogo FR
   [26/05/2008|00:10] C:\Program Files\QuickTime
   [26/05/2008|00:07] C:\Program Files\Real
   [26/05/2008|00:07] C:\Program Files\Realtek
   [14/09/2008|13:08] C:\Program Files\ReflexiveArcade
   [27/12/2008|18:05] C:\Program Files\Sallys Spa
   [26/05/2008|00:11] C:\Program Files\Services en ligne
   [26/05/2008|00:07] C:\Program Files\Sonic
   [27/12/2008|18:03] C:\Program Files\Trend Micro
   [26/05/2008|00:07] C:\Program Files\Ulead Systems
   [26/05/2008|00:07] C:\Program Files\Uninstall Information
   [05/10/2008|00:56] C:\Program Files\URUSoft
   [27/12/2008|18:18] C:\Program Files\Windows Live
   [23/12/2008|09:54] C:\Program Files\Windows Live Toolbar
   [26/05/2008|00:07] C:\Program Files\Windows Media Components
   [04/07/2008|09:46] C:\Program Files\Windows Media Connect 2
   [16/10/2008|17:17] C:\Program Files\Windows Media Player
   [16/10/2008|17:17] C:\Program Files\Windows NT
   [26/05/2008|00:07] C:\Program Files\WindowsUpdate
   [06/07/2008|18:17] C:\Program Files\Wondershare
   [26/05/2008|00:07] C:\Program Files\xerox
   [27/12/2008|17:54] C:\Program Files\Yahoo!

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [24/12/2008|17:15] C:\Program Files\Fichiers communs\Adobe
   [26/05/2008|00:07] C:\Program Files\Fichiers communs\AOL
   [26/05/2008|00:07] C:\Program Files\Fichiers communs\aolshare
   [12/10/2008|17:55] C:\Program Files\Fichiers communs\BOONTY Shared
   [17/09/2008|18:09] C:\Program Files\Fichiers communs\CANON
   [12/10/2008|17:56] C:\Program Files\Fichiers communs\Designer
   [26/05/2008|00:07] C:\Program Files\Fichiers communs\InstallShield
   [26/05/2008|00:07] C:\Program Files\Fichiers communs\Java
   [26/06/2008|12:34] C:\Program Files\Fichiers communs\LogiShrd
   [23/12/2008|09:50] C:\Program Files\Fichiers communs\Microsoft Shared
   [26/05/2008|00:07] C:\Program Files\Fichiers communs\MSSoap
   [26/05/2008|00:07] C:\Program Files\Fichiers communs\Nullsoft
   [26/05/2008|00:07] C:\Program Files\Fichiers communs\ODBC
   [26/08/2008|16:24] C:\Program Files\Fichiers communs\Real
   [26/05/2008|00:07] C:\Program Files\Fichiers communs\Services
   [12/10/2008|17:55] C:\Program Files\Fichiers communs\Skype
   [26/05/2008|00:07] C:\Program Files\Fichiers communs\Sonic Shared
   [26/05/2008|00:07] C:\Program Files\Fichiers communs\SpeechEngines
   [26/05/2008|00:07] C:\Program Files\Fichiers communs\SureThing Shared
   [16/10/2008|17:17] C:\Program Files\Fichiers communs\System
   [26/05/2008|00:07] C:\Program Files\Fichiers communs\Ulead Systems
   [12/10/2008|17:58] C:\Program Files\Fichiers communs\Windows Live
   [25/05/2008|18:37] C:\Program Files\Fichiers communs\WindowsLiveInstaller
   [05/10/2008|01:18] C:\Program Files\Fichiers communs\Yahoo!

   --------------------\  Process

   ( 61 Processes )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Verification du Registre
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-12-27 18:51:19
   Windows 5.1.2600 Service Pack 3 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   folder error: D:\DOCUME~1\MICHEL\LOCALS~1\APPLIC~1
 
   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !

   [F:306][D:50]-> D:\DOCUME~1\MICHEL\LOCALS~1\Temp
   [F:15][D:0]-> D:\DOCUME~1\MICHEL\Cookies
   [F:375][D:4]-> D:\DOCUME~1\MICHEL\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - 27/12/2008|18:27 - Option : [1]
   2 - "C:\Lop SD\LopR_2.txt" - 27/12/2008|18:52 - Option : [2]

   --------------------\  Fin du rapport a 18:52:54

V-X · Answer

Re,

Très bien.

Fait ce qui suit:

&#x25B6 Télécharge random's system information tool (RSIT) et enregistre le sur ton bureau.

&#x25B6 Double clique sur RSIT.exe pour lancer l'outil.

&#x25B6 Clique sur ' continue ' à l'écran Disclaimer.

&#x25B6 Si l'outil HIjackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera et tu devras accepter la licence.

&#x25B6 Une fois le scan fini , 2 rapports vont apparaitre. Poste le contenu des 2 rapports
( log.txt & info.txt )

(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.

noshelter · Answer

a part ca, ca avance ? t'en penses quoi de tout ca?

noshelter · Answer

info.txt logfile of random's system information tool 1.05 2008-12-27 18:57:26

======Uninstall list======

-->"C:\Program Files\Fichiers communs\aolshare\Coach\AolCInUn.exe" -lang="fr-fr"
-->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Spyware Scanner"
-->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Spyware"
-->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Virus Client Security Installer"
-->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Virus"
-->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Automatic Update Agent"
-->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure DAAS"
-->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Diagnostics"
-->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure E-mail Scanning"
-->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure FWES"
-->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure GateKeeper Interface"
-->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Gemini"
-->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure GUI"
-->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Help"
-->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure HIPS"
-->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Internet Shield"
-->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Localization API"
-->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Management Agent"
-->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Pegasus Engine"
-->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Protocol Scanner"
-->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Spam Control"
-->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Spam Scanner"
-->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure TNB"
-->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Uninstall"
-->"C:\Program Files\Pack Securite\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Web Filter"
-->C:\PROGRA~1\FICHIE~1\AOL\ACS\AcsUninstall.exe /c
-->C:\PROGRA~1\Norman\NORMAN~1\UNWISE.EXE C:\PROGRA~1\Norman\NORMAN~1\INSTALL.LOG
-->C:\Program Files\Fichiers communs\AOL\Screensaver\uninst_ygpss.exe
-->C:\Program Files\Fichiers communs\aolshare\Aolunins_fr.exe
-->C:\Program Files\Learn2.com\StRunner\stuninst.exe
-->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->C:\WINDOWS\system32\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}
-->C:\WINDOWS\unvise32qt.exe C:\WINDOWS\system32\QuickTime\Uninstall.log
-->msiexec.exe /I {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
-->MsiExec.exe /I{8B543A39-9401-44F4-B572-069E64C15189}
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.EXE"  -uninstall
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F9CFBD8-8F77-4DCD-8CB5-CDD5F653C872}\setup.exe" -l0x40c 
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4F1DA6BF-3614-48A1-9970-9E90F646789E}\setup.exe" -l0x40c 
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5A065EA0-0EEC-4E94-A2A0-40812576C122}\setup.exe" -l0x40c 
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5AFA4872-16B2-419E-ADCA-8E96E739115D}\setup.exe" -l0x40c 
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0A32C786-85DE-48F8-9E54-848B3E34A90C}\setup.exe" -l0x40c  -removeonly
-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 7.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70000000000}
Adobe Shockwave Player 11-->C:\WINDOWS\system32\adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log
Adobe® Photoshop® Album Edition Découverte 3.2-->MsiExec.exe /I{A654A805-41D9-40C7-AA46-4AF04F044D61}
Assistant de connexion Windows Live-->MsiExec.exe /I{D6E592B3-67DA-4BBB-9783-E1838FB253A2}
Barre d'outils Outlook de Windows Live (Windows Live Toolbar)-->MsiExec.exe /X{4002F73D-EBB3-4EA1-A2FF-DBCB4529759E}
Big Fish Games Client-->C:\Program Files\bfgclient\Uninstall.exe
Bloqueur de fenêtres pop-up (Windows Live Toolbar)-->MsiExec.exe /X{51F366F4-C2E4-429A-866A-59C885ED42FD}
Canon MP Navigator EX 1.0-->"C:\Program Files\Canon\MP Navigator EX 1.0\Maint.exe" /UninstallRemove C:\Program Files\Canon\MP Navigator EX 1.0\uninst.ini
Canon MP610 series-->"C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP610_series\DelDrv.exe" /U:{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP610_series /L0x000c
Canon My Printer-->C:\Program Files\Canon\MyPrinter\uninst.exe uninst.ini
Canon Utilities Easy-PhotoPrint EX-->C:\Program Files\Canon\Easy-PhotoPrint EX\uninst.exe uninst.ini
Canon Utilities Solution Menu-->C:\Program Files\Canon\SolutionMenu\uninst.exe uninst.ini
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
CD-LabelPrint-->"C:\Program Files\Canon\CD-LabelPrint\Uninstal.exe" Canon.CDLabelPrint.Application
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Codeur Windows Media Série 9-->MsiExec.exe /I{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
Coffret de pilotes Logitech Legacy USB Camera-->"C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\legacyqcam\10.51.2023\LgDrvInst.exe" -remove -instdir"C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\legacyqcam\" -enumdelay=2000 -enabledifx -forcedelete -usbhubsfirst -forceremove -cumulativeremove -promptuninstall -arpregkey"legacyqcam_10.51" /clone_wait /hide_progress
Coffret de pilotes Logitech QuickCam-->"C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\lvdrivers\11.50.1145\LgDrvInst.exe" -remove -instdir"C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\lvdrivers\" -enumdelay=2000 -enabledifx -forcedelete -usbhubsfirst -forceremove -cumulativeremove -promptuninstall -arpregkey"lvdrivers_11.50" /clone_wait /hide_progress
Compatibility Pack for the 2007 Office system-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Détecteur de flux Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{175B7C4A-CAF8-437A-B597-73E0D2D970FE}
ENJOY Plus!-->"C:\Program Files\ENJOY Plus!\UnInstall.exe"
Enregistrement utilisateur de Canon MP610 series-->C:\Program Files\Canon\IJEREG\MP610 series\UNINST.EXE
Everest Poker (Remove Only)-->C:\Program Files\Everest Poker\cstart.exe /uninstall
Extension de Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{D518AD32-C710-4616-BA0D-D4B1FA5F82E8}
GIMP 2.6.3-->"C:\Program Files\GIMP-2.0\setup\unins000.exe"
Google Earth-->MsiExec.exe /I{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}
High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
J2SE Runtime Environment 5.0 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150020}
Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
king.com (remove only)-->"C:\WINDOWS\king-uninstall.exe"
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Logitech Audio Echo Cancellation Component-->MsiExec.exe /X{BEF726DD-4037-4214-8C6A-E625C02D2870}
Logitech Desktop Messenger-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}\Setup.exe" -l0x40c UNINSTALL
Logitech QuickCam-->MsiExec.exe /X{945AC98B-3DC8-45BE-BAE0-22CEEE37A103}
Logitech Video Enumerator-->MsiExec.exe /X{EA516024-D84D-41F1-814F-83175A6188F2}
Macromedia Shockwave Player-->MsiExec.exe /X{7D1D6A24-65D4-454C-8815-4F08A5FFF12C}
Menus intelligents (Windows Live Toolbar)-->MsiExec.exe /X{3585ED1C-74C5-43B0-A232-831B96A12A2B}
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
Microsoft Office Word Viewer 2003-->MsiExec.exe /I{9085040C-6000-11D3-8CFE-0150048383C9}
Microsoft Office XP Professional-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0050048383C9}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Mise à jour de sécurité pour le Codeur Windows Media (KB954156)-->"C:\WINDOWS\$NtUninstallKB954156_WM9L$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB942763)-->"C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mozilla Firefox (3.0.5)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MVision-->MsiExec.exe /I{35725FBC-A136-4A46-9F29-091759D9BB93}
Navilog1 3.7.0-->"C:\Program Files\Navilog1\unins000.exe"
Neuf - Kit de connexion-->C:\Program Files\Neuf\Kit\uninstall.exe
OneCare Advisor (Windows Live Toolbar)-->MsiExec.exe /X{F242B06B-517F-4D62-B654-16B11564A912}
Pack Securite Plus-->"C:\Program Files\Pack Securite\FSGUI\PostInstall.exe"  /tUnInstall
Panneau de contrôle ATI-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe" 
PhotoFiltre-->"C:\Program Files\PhotoFiltre\Uninst.exe"
PhotoScape-->"C:\Program Files\PhotoScape\uninstall.exe"
Picasa 2-->"C:\Program Files\Picasa2\Uninstall.exe"
Pinnacle VideoSpin-->MsiExec.exe /X{4EDB1CA5-983F-4FC3-A8E3-E34981E05A60}
PIXMA Extended Survey Program-->C:\Program Files\Canon\IJPLM\SETUP.EXE -R
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x40c  -removeonly
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Skype™ 3.8-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
Sonic MyDVD-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
Sonic RecordNow!-->MsiExec.exe /I{9541FED0-327F-4DF0-8B96-EF57EF622F19}
Subtitle Workshop 2.51-->"C:\Program Files\URUSoft\Subtitle Workshop\uninstall.exe"
SweetIM Toolbar for Internet Explorer 3.1-->MsiExec.exe /X{59971D79-8111-42C2-9E40-883A0C277E78}
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
Wondershare Photo Collage Studio (V4.2.8) Trial Version-->"C:\Program Files\Wondershare\Photo Collage Studio\unins000.exe"
Yahoo! Install Manager-->C:\WINDOWS\system32egsvr32 /u C:\PROGRA~1\Yahoo!\Common\YINSTH~1.DLL

======Security center information======

AV: Pack Securite Plus 7.00
FW: Pack Securite Plus 7.00

System event log

Computer Name: 107055350316
Event Code: 7
Message: Le périphérique \Device\CdRom0 comporte un bloc défectueux.

Record Number: 17555
Source Name: Cdrom
Time Written: 20081210225446.000000+060
Event Type: erreur
User: 

Computer Name: 107055350316
Event Code: 7
Message: Le périphérique \Device\CdRom0 comporte un bloc défectueux.

Record Number: 17554
Source Name: Cdrom
Time Written: 20081210225444.000000+060
Event Type: erreur
User: 

Computer Name: 107055350316
Event Code: 7
Message: Le périphérique \Device\CdRom0 comporte un bloc défectueux.

Record Number: 17553
Source Name: Cdrom
Time Written: 20081210225442.000000+060
Event Type: erreur
User: 

Computer Name: 107055350316
Event Code: 7
Message: Le périphérique \Device\CdRom0 comporte un bloc défectueux.

Record Number: 17552
Source Name: Cdrom
Time Written: 20081210225440.000000+060
Event Type: erreur
User: 

Computer Name: 107055350316
Event Code: 7
Message: Le périphérique \Device\CdRom0 comporte un bloc défectueux.

Record Number: 17551
Source Name: Cdrom
Time Written: 20081210225437.000000+060
Event Type: erreur
User: 

Application event log

Computer Name: 107055350316
Event Code: 103
Message: msnmsgr (5784) \.\D:\Documents and Settings\MICHEL\Local Settings\Application Data\Microsoft\Messenger\layoulidu62@hotmail.fr\SharingMetadata\Working\database_6804_8846_488_18E8\dfsr.db: Le moteur de base de données a arrêté une instance (0).

Record Number: 17371
Source Name: ESENT
Time Written: 20081115135742.000000+060
Event Type: Informations
User: 

Computer Name: 107055350316
Event Code: 102
Message: msnmsgr (5784) \.\D:\Documents and Settings\MICHEL\Local Settings\Application Data\Microsoft\Messenger\layoulidu62@hotmail.fr\SharingMetadata\Working\database_6804_8846_488_18E8\dfsr.db: Le moteur de base de données a démarré une nouvelle instance (0).

Record Number: 17370
Source Name: ESENT
Time Written: 20081115104520.000000+060
Event Type: Informations
User: 

Computer Name: 107055350316
Event Code: 100
Message: msnmsgr (5784) Le moteur de base de données 5.01.2600.5512 est démarré.

Record Number: 17369
Source Name: ESENT
Time Written: 20081115104520.000000+060
Event Type: Informations
User: 

Computer Name: 107055350316
Event Code: 12001
Message: 
Record Number: 17368
Source Name: usnjsvc
Time Written: 20081115104517.000000+060
Event Type: 
User: 

Computer Name: 107055350316
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 17367
Source Name: SecurityCenter
Time Written: 20081115060316.000000+060
Event Type: Informations
User: 

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\ATI Technologies\ATI Control Panel;C:\Program Files\Fichiers communs\Ulead Systems\MPEG;C:\PROGRA~1\FICHIE~1\SONICS~1\;C:\Program Files\Pinnacle\Shared Files\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 1, GenuineIntel
"PROCESSOR_REVISION"=0401
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP

-----------------EOF-----------------








Logfile of random's system information tool 1.05 (written by random/random)
Run by MICHEL at 2008-12-27 18:56:53
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 19 GB (63%) free of 31 GB
Total RAM: 511 MB (47% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:57:22, on 27/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
C:\Program Files\Pack Securite\Common\FSMA32.EXE
C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Pack Securite\Common\FSMB32.EXE
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\RTHDCPL.EXE
C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
C:\apps\ABoard\ABoard.exe
C:\Program Files\Pack Securite\Common\FSM32.EXE
C:\Program Files\Pack Securite\Common\FCH32.EXE
C:\apps\ABoard\AOSD.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Pack Securite\Common\FAMEH32.EXE
C:\Program Files\Pack Securite\Anti-Virus\fsqh.exe
C:\Program Files\Pack Securite\FSPC\fspc.exe
C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe
C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
C:\Program Files\Pack Securite\FSGUI\fsguidll.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
C:\Program Files\Pack Securite\FSAUA\program\fsus.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
D:\Documents and Settings\MICHEL\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\MICHEL.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ATIPTA] "C:\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32"
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Pack Securite\Common\FSMA32.EXE
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: MysqlInventime - Unknown owner - C:\Apps\INVENT~1\mysql\bin\mysqld-nt.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

V-X · Answer

Re,

Fait RSIT et te dit quoi.

noshelter · Answer

ca y'est c'est posté ^^

V-X · Answer

Re,

&#x25B6 Télécharge UsbFix (de Chiquitine29) sur ton Bureau :

&#x25B6 Lance l'installation avec les paramètres par défaut.

&#x25B6 Branche tes sources de données externes à ton PC (clé USB, disque dur externe, etc...) sans les ouvrir.

&#x25B6 Double-clique sur le raccourci UsbFix sur ton Bureau.

&#x25B6 Choisit l'option 1

&#x25B6 Le PC va redémarrer.

&#x25B6 Après redémarrage, poste le rapport UsbFix.txt

Note : le rapport UsbFix.txt est sauvegardé à la racine du disque.

(Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet "Fichier", "Nouvelle tâche", tape explorer.exe et valide)

Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.

V-X · Answer

Re,

Fait le poste 22

noshelter · Answer

-------------- UsbFix V2.413.7 ---------------

* User : MICHEL - 107055350316
* Outils mis a jours le 24/12/2008 par Chiquitine29 et Chimay8
* Recherche effectuée à 19:03:58 le 27/12/2008
* Windows Xp - Internet Explorer 7.0.5730.13 
  
  
--------------- [ Processus actifs ] ----------------   
  
 
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\Explorer.EXE
  
--------------- [ Informations lecteurs ] ----------------   
  
C: - Lecteur fixe

D: - Lecteur fixe

E: - Lecteur de CD-ROM


--------------- [ Lecteur C ] ---------------- 

C: - Lecteur fixe


+- Listing des fichiers présents :

[05/08/2004 14:00][--a------] C:\NTDETECT.COM   
[25/05/2008 15:31][-rahs----] C:\BOOT.INI   
[11/11/2005 17:35][--a------] C:\DWNLOG.TXT   
[11/11/2005 17:35][--a------] C:\fixnavi.txt   
[11/11/2005 17:35][--a------] C:\log_lobby.txt   
[11/11/2005 17:35][--a------] C:\log_lobby_dumper.txt   
[11/11/2005 17:35][--a------] C:\lopR.txt   
[11/11/2005 17:35][--a------] C:\SAUDIT.TXT   
[11/11/2005 17:35][--a------] C:\UsbFix.txt   
[][] C:\hiberfil.sys   
[][] C:\IO.SYS   
[][] C:\MSDOS.SYS   
[][] C:\pagefile.sys   

--------------- [ Lecteur D ] ---------------- 

D: - Lecteur fixe


+- Listing des fichiers présents :


--------------- [ Lecteur E ] ---------------- 

E: - Lecteur de CD-ROM


+- Listing des fichiers présents :

  
--------------- [ Registre / Startup ] ----------------   
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 
"Userinit"="C:\WINDOWS\system32\userinit.exe,"
  
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] 
"Search Page"="https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
  
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersionun]
   ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe
   msnmsgr="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionun]
   PHIME2002ASync=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
   PHIME2002A=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
   High Definition Audio Property Page Shortcut=HDAShCut.exe
   AzMixerSel=C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
   RTHDCPL=RTHDCPL.EXE
   Alcmtr=ALCMTR.EXE
   ATIPTA="C:\ATI Technologies\ATI Control Panel\atiptaxx.exe"
   SunJavaUpdateSched="C:\Program Files\Java\jre6\bin\jusched.exe"
   Ulead AutoDetector v2=C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
   IMJPMIG8.1="C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32"
   ACTIVBOARD=c:\apps\ABoard\ABoard.exe
   F-Secure Manager="C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
   F-Secure TNB="C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
   CanonSolutionMenu=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
   CanonMyPrinter=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
   Adobe Photo Downloader="C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversionun\OptionalComponents=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversionun\OptionalComponents\IMAIL=
   Installed=1
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversionun\OptionalComponents\MAPI=
   Installed=1
   NoChange=1
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversionun\OptionalComponents\MSFS=
   Installed=1
  
--------------- [ Registre / Mountpoint2 ] ----------------   
  
Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{70a63f5d-d136-11dd-8c34-00038a000015}\Shell\AutoRun\command  
Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d3b2e01d-d1d5-11dd-8c35-00038a000015}\Shell\AutoRun\command  
  
--------------- [ Nettoyage des disques ] ----------------   
   
  
--------------- [ Resumé ] ----------------   
  
 -> /!\ Le resultat doit etre interprété par un spécialiste  /!\   
  
[05/08/2004 14:00][--a------] C:\NTDETECT.COM   
[25/05/2008 15:31][-rahs----] C:\BOOT.INI   
 
Joyeuses fetes a tous de la part de T'Chiki et Chimay ...et merci a toutes les personnes ayant,  
de pret ou de loin participé a UsbFix durant l annee 2008 , merci a eux !  
 
--------------- ! Fin du rapport ! ----------------

V-X · Answer

Re,

&#x25B6 Télécharges AD-Remover ( de Cyrildu17 / C_XX ) sur ton bureau :


/!\ Déconnectes toi et fermes toutes applications en cours/!\

&#9679; Double clique sur le programme d'installation , et installe le dans son emplacement par défaut. ( C:\Program files )
&#9679; Double clique sur l'icône Ad-removersituée sur ton bureau
&#9679; Au menu principal choisi l'option "A"
&#9679; Postes le rapport qui apparait à la fin .

( le rapport est sauvegardé aussi sous C:\Ad-report(date).log )

(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

Note :

"Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

noshelter · Answer

Le post 22?

V-X · Answer

Re,

Fait le post 25

noshelter · Answer

c'est quoi? le post 25? désolé de t'embeter mais on fait quoi depuis tout a l'heure?

V-X · Answer

Re,

On fait rien enfait tu lit pas les rapport ??

&#x25B6 Télécharges AD-Remover ( de Cyrildu17 / C_XX ) sur ton bureau :


/!\ Déconnectes toi et fermes toutes applications en cours/!\

&#9679; Double clique sur le programme d'installation , et installe le dans son emplacement par défaut. ( C:\Program files )
&#9679; Double clique sur l'icône Ad-removersituée sur ton bureau
&#9679; Au menu principal choisi l'option "A"
&#9679; Postes le rapport qui apparait à la fin .

( le rapport est sauvegardé aussi sous C:\Ad-report(date).log )

(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

Note :

"Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

V-X · Answer

Re,

Tu passe AD-REMOVER ou pas ?

noshelter · Answer

oui j'arrive

noshelter · Answer

ca marche pas, il dit que cmdow.exe est manquant

V-X · Answer

Re,

Essai ce lien

V-X · Answer

Re,

Si sa marche pas fait ce qui suit:

&#x25B6 Télécharge sur ton bureau

&#x25B6 Une fois sur le bureau, tu fais un clic droit sur ton fichier clean.zip et dans le menu déroulant, tu clics sur extrait tout ou extraire ici.

&#x25B6 Cela va créer un dossier clean.

&#x25B6 Double-clic sur ce dossier clean, tu y trouveras dedans plusieurs fichiers.

&#x25B6 Double-clic sur clean. Cela va ouvrir une fenêtre noire.

&#x25B6 Un menu va apparaître, choisis l'option 1 en appuyant sur la touche 1 de ton clavier.

&#x25B6 Clean va travailler.

&#x25B6 Un rapport Va etre généré, colle le contenu entier ici.

PC qui rame de plus en plus

29 réponses

Newsletters