gros gros probléme backdoor !!!! dans mon pc Résolu/Fermé

Question

Bonjour,tout le monde j'ai un gros probléme un pote ma envoiyer une musique et quand je les ouvert mon antivirus ces afoller j'ai donc fait un scan avec malware byte et maitenant j'ai plus de pare feu j'ai vue que le fichier service.exe etait infécté est-ce-que ces grave comment le suprimmer ??

jfkpresident · Answer

salut ;

1) télécharge hijackthis ici:hijackthis
ceci est un outil pour diagnostiquer ton pc .

*.Enregistre HJTInstall.exe sur ton bureau
*. Double-clique sur HJTInstall.exe pour lancer le programme
*. Par défaut, il s'installera là C:\Program Files\Trend Micro\HijackThis
*. Accepte la license en cliquant sur le bouton "I Accept"
*. Choisis l'option "Do a system scan and save a log file"
*. Clique sur "Save log" pour enregistrer le rapport qui s'ouvrira avec le bloc-note
*. Clique sur "Edition -> Sélectionner tout", puis sur "Edition -> Copier" pour copier tout le contenu du rapport
*. Colle le rapport que tu viens de copier sur ce forum
*. Ne fixe encore AUCUNE ligne, cela pourrait empêcher ton PC de fonctionner correctement 

tutoriel générer un rapport

mikoudu30 · Answer

mercipour votre réponse voici le rapport 
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:16:45, on 29/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18241)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Screamer Radio\screamer.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\internet explorer\iexplore.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Documents and Settings\Lucien\Bureau\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\system32\fservice.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\pchealth\helpctr\Binaries\MSCONFIG.EXE /auto
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKLM\..\Policies\Explorer\Run: [DirectX For Microsoft® Windows] C:\WINDOWS\system32\fservice.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://fichiers.touslesdrivers.com/...
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxmultijoueurs.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B2138BBF-E272-4F25-899A-25027F725427}: NameServer = 192.168.1.1
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Unknown owner - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe (file missing)
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Blue Coat K9 Web Protection (WebFilter) - Unknown owner - C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe

jfkpresident · Answer

re;

Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe 
Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :
• Redémarre ton ordinateur
• Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
• A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
• Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
• Choisis ton compte.
Déroule la liste des instructions ci-dessous :
• Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le scrïpt.
• Appuie sur Y pour commencer le processus de nettoyage.
• Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
• Appuie sur une touche pour redémarrer le PC.
• Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
• Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
• Appuie sur une touche pour finir l'exécution du scrïpt et charger les icônes de ton Bureau.
• Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
• Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum

mikoudu30 · Answer

voila mon rapport apré avoir fait se que vous m'avait dit
[b]SDFix: Version 1.240 [/b]
Run by Lucien on 29/01/2009 at 20:49

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

[b]Checking Services [/b]:


Restoring Default Security Values
Restoring Default Hosts File

Rebooting


[b]Checking Files [/b]: 

Trojan Files Found:

C:\WINDOWS\ktd32.atm - Deleted





Removing Temp Files

[b]ADS Check [/b]:
 


                                 [b]Final Check [/b]:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-29 20:54:18
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"khjeh"=hex:07,60,05,e6,38,d1,ae,54,5a,33,37,37,42,30,dd,04,86,11,e8,db,80,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,a9,31,39,84,a7,ac,2d,be,01,7b,ac,94,17,9c,76,22,9f,..
"khjeh"=hex:f4,a9,dd,c7,1e,49,cc,d4,48,66,93,29,06,ec,4f,2c,0e,6b,5f,d0,71,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:74,68,3c,9a,ca,5b,d9,53,8f,60,9a,0c,e2,cd,94,74,c7,6d,d5,98,ae,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"khjeh"=hex:07,60,05,e6,38,d1,ae,54,5a,33,37,37,42,30,dd,04,86,11,e8,db,80,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,a9,31,39,84,a7,ac,2d,be,01,7b,ac,94,17,9c,76,22,9f,..
"khjeh"=hex:f4,a9,dd,c7,1e,49,cc,d4,48,66,93,29,06,ec,4f,2c,0e,6b,5f,d0,71,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:74,68,3c,9a,ca,5b,d9,53,8f,60,9a,0c,e2,cd,94,74,c7,6d,d5,98,ae,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"khjeh"=hex:07,60,05,e6,38,d1,ae,54,5a,33,37,37,42,30,dd,04,86,11,e8,db,80,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,a9,31,39,84,a7,ac,2d,be,01,7b,ac,94,17,9c,76,22,9f,..
"khjeh"=hex:f4,a9,dd,c7,1e,49,cc,d4,48,66,93,29,06,ec,4f,2c,0e,6b,5f,d0,71,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:74,68,3c,9a,ca,5b,d9,53,8f,60,9a,0c,e2,cd,94,74,c7,6d,d5,98,ae,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:2df9c43f
"s2"=dword:110480d0
"h0"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"khjeh"=hex:07,60,05,e6,38,d1,ae,54,5a,33,37,37,42,30,dd,04,86,11,e8,db,80,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,a9,31,39,84,a7,ac,2d,be,01,7b,ac,94,17,9c,76,22,9f,..
"khjeh"=hex:f4,a9,dd,c7,1e,49,cc,d4,48,66,93,29,06,ec,4f,2c,0e,6b,5f,d0,71,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:74,68,3c,9a,ca,5b,d9,53,8f,60,9a,0c,e2,cd,94,74,c7,6d,d5,98,ae,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet005\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"khjeh"=hex:07,60,05,e6,38,d1,ae,54,5a,33,37,37,42,30,dd,04,86,11,e8,db,80,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet005\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,a9,31,39,84,a7,ac,2d,be,01,7b,ac,94,17,9c,76,22,9f,..
"khjeh"=hex:f4,a9,dd,c7,1e,49,cc,d4,48,66,93,29,06,ec,4f,2c,0e,6b,5f,d0,71,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet005\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:74,68,3c,9a,ca,5b,d9,53,8f,60,9a,0c,e2,cd,94,74,c7,6d,d5,98,ae,..

scanning hidden registry entries ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System]
"OODEFRAG08.00.00.01WORKSTATION"="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"

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


[b]Remaining Services [/b]:




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe"="C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM)"
"C:\Program Files\EA GAMES\Medal of Honor Batailles du Pacifique(tm)\mohpa.exe"="C:\Program Files\EA GAMES\Medal of Honor Batailles du Pacifique(tm)\mohpa.exe:*:Disabled:Medal of Honor Pacific Assault(tm)"
"C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe"="C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe:*:Disabled:Malwarebytes' Anti-Malware"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\Program Files\ma-config.com\maconfservice.exe"="C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Documents and Settings\Lucien\Mes documents\EA Games\BF1942.exe"="C:\Documents and Settings\Lucien\Mes documents\EA Games\BF1942.exe:*:Enabled:BF1942"
"C:\Documents and Settings\Lucien\Mes documents\EA Games\BF1942_w32ded.exe"="C:\Documents and Settings\Lucien\Mes documents\EA Games\BF1942_w32ded.exe:*:Enabled:BF1942_w32ded"
"C:\Program Files\GameSpy Arcade\Aphex.exe"="C:\Program Files\GameSpy Arcade\Aphex.exe:*:Enabled:GameSpy Arcade"
"C:\Program Files\Shareaza\Shareaza.exe"="C:\Program Files\Shareaza\Shareaza.exe:*:Enabled:Shareaza"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

[b]Remaining Files [/b]:


File Backups: - C:\SDFix\backups\backups.zip

[b]Files with Hidden Attributes [/b]:

Thu  7 Aug 2008         4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Tue  5 Aug 2008             0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Wed 17 Dec 2008             0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv02.tmp"
Sat 20 Dec 2008    67,498,308 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\d4d72431f03ae036f97ff3e79d5ad24f\BIT2.tmp"
Sun 24 Aug 2008           888 ...HR --- "C:\Documents and Settings\Lucien\Application Data\SecuROM\UserData\securom_v7_01.bak"

[b]Finished![/b]

ic

jfkpresident · Answer

Ouvre ce lien et télécharge ZHPDiag :

    https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html
    

    Une fois le téléchargement achevé, dézippe le fichier obtenu et place ZHPDiag.exe sur ton Bureau.

    Double-clique sur l'icône pour lancer le programme.

    Clique sur Tous pour cocher toutes les cases des options.

    Clique sur la loupe pour lancer l'analyse.

    A la fin de l'analyse, clique sur l'appareil photo et enregistre le rapport sur ton Bureau.

    Ouvre le fichier sauvegardé (ZHPDiag.txt)avec le Bloc-Notes et copie son contenu dans ta réponse.
    
    Postes le en deux fois s'il le faut (le log est assez long).

mikoudu30 · Answer

voila ovici le rapport  :
Rapport de ZHPDiag v1.16.5 par Nicolas Coolman
Enregistré le 30/01/2009 07:30:49
Platform : Microsoft Windows XP (5.1.2600) Service Pack 3
MSIE: Internet Explorer v8.0.6001.18241
MFIE: Mozilla Firefox (3.0.5)

---\ Processus lancés
SOUNDMAN.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\ati2sgag.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\services.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe
C:\WINDOWS\system32\SearchIndexer.exe

---\ Pages de démarrage d'Internet Explorer (R0)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp

---\ Pages de recherche d'Internet Explorer (R1)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm

---\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll

---\ Internet Explorer Toolbars (O3)
O3 - Toolbar: 1 - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll

---\ Applications démarrées automatiquement par le registre (O4)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKLM\..\policies\Explorer: [NoDriveAutoRun] Data="67108863"
O4 - HKLM\..\policies\Explorer: [NoDriveTypeAutoRun] Data="323"
O4 - HKLM\..\policies\Explorer: [NoDrives] Data="0"

---\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000

---\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

---\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxmultijoueurs.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

---\ Piratage de domaine (Lop.com) (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{B2138BBF-E272-4F25-899A-25027F725427}: 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{B2138BBF-E272-4F25-899A-25027F725427}: 192.168.1.1

---\ Protocole additionnel et piratage de protocole (O18)
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

---\ Valeur de registre AppInit_DLLs et sous-clés Winlogon Notify (O20)
O20 - Winlogon Notify: AtiStartupEvent - C:\WINDOWS\System32\Ati2evxx.dll
O20 - Winlogon Notify: WlDimsStartup - C:\WINDOWS\System32\%SystemRoot%\System32\dimsntfy.dll
O20 - Winlogon Notify: WLEventStartup - C:\WINDOWS\System32\WgaLogon.dll

---\ Services NT non Microsoft et non désactivés (O23)
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: ATI Smart (ATI Smart) - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: NMSAccessU (NMSAccessU) - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: O&O Defrag (O&O Defrag) - C:\WINDOWS\system32\oodag.exe
O23 - Service: PnkBstrA (PnkBstrA) - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Spouleur d'impression (Spooler) - C:\WINDOWS\system32\spoolsv.exe
O23 - Service: Blue Coat K9 Web Protection (WebFilter) - C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe
O23 - Service: Windows Search (WSearch) - C:\WINDOWS\system32\SearchIndexer.exe /Embedding

---\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: IE7 Uninstall Stub - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe
O40 - ASIC: Lecteur Windows Media - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP
O40 - ASIC: Internet Explorer - {26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig
O40 - ASIC: Browser Customizations - {60B49E34-C7CC-11D0-8953-00A0C90347FF} - RunDLL32 IEDKCS32.DLL,BrandIEActiveSetup SIGNUP
O40 - ASIC: Personnalisation du navigateur - {60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
O40 - ASIC: Outlook Express - {881dd1c5-3dcf-431b-b061-f3f88e8be88a} - C:\WINDOWS\system32\shmgrate.exe OCInstallUserConfigOE
O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - (not file)
O40 - ASIC: Rendu VML (Vector Graphics Rendering) - {10072CEC-8CC1-11D1-986E-00A0C955B42F} - (not file)
O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Lecteur Windows Media Microsoft 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Adobe Shockwave Director 10.4 - {233C1507-6A77-46A4-9443-F871F945D258} - C:\WINDOWS\system32\Adobe\Director\swdir.dll
O40 - ASIC: DirectAnimation - {283807B5-2C60-11D0-A31D-00AA00B92C03} - (not file)
O40 - ASIC: Adobe Shockwave Director 10.4 - {2A202491-F00D-11cf-87CC-0020AFEECF20} - (not file)
O40 - ASIC: Rendu VML (Vector Graphics Rendering) - {2BAF1686-DB1A-0886-F89C-3BE736A98FB3} - (not file)
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - C:\WINDOWS\system32egsvr32.exe /s /n /i:/UserInstall C:\WINDOWS\system32	hemeui.dll
O40 - ASIC: Liaison de données Dynamic HTML pour Java - {36f8ec70-c29a-11d1-b5c7-0000f8051515} - (not file)
O40 - ASIC: Offline Browsing Pack - {3af36230-a269-11d1-b5bf-0000f8051515} - (not file)
O40 - ASIC: Uniscribe - {3bf42070-b3b1-11d1-b5c5-0000f8051515} - (not file)
O40 - ASIC: Microsoft .NET Framework 1.1 Service Pack 1 (KB867460) - {411EDCF7-755D-414E-A74B-3DCD6583F589} - (not file)
O40 - ASIC: Création avancée - {4278c270-a269-11d1-b5bf-0000f8051515} - (not file)
O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
O40 - ASIC: DirectShow - {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - (not file)
O40 - ASIC: DirectDrawEx - {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - (not file)
O40 - ASIC: Internet Explorer Help - {45ea75a0-a269-11d1-b5bf-0000f8051515} - (not file)
O40 - ASIC: Classes Java DirectAnimation - {4f216970-c90c-11d1-b5c7-0000f8051515} - (not file)
O40 - ASIC: Microsoft Windows Script 5.8 - {4f645220-306d-11d2-995d-00c04f98bbc9} - (not file)
O40 - ASIC: Mise à jour de sécurité pour Windows XP (KB923789) - {5056b317-8d4c-43ee-8543-b9d1e234b8f4} - (not file)
O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
O40 - ASIC: (no name) - {5A8D6EE0-3E18-11D0-821E-444553540000} - (not file)
O40 - ASIC: Internet Explorer Setup Tools - {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - (not file)
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} - (not file)
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub
O40 - ASIC: MSN Site Access - {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - (not file)
O40 - ASIC: .NET Framework - {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - (not file)
O40 - ASIC: Web Folders - {73fa19d0-2d75-11d2-995d-00c04f98bbc9} - (not file)
O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} - c:\WINDOWS\system32\Rundll32.exe c:\WINDOWS\system32\mscories.dll,Install
O40 - ASIC: Microsoft .NET Framework 1.1 Hotfix (KB928366) - {8D1D0E9A-C799-4D28-9E29-0061D1E66E43} - (not file)
O40 - ASIC: Dynamic HTML Data Binding - {9381D8F2-0288-11D0-9501-00AA00B911A5} - (not file)
O40 - ASIC: Java (Sun) - {9CD8C6E6-EE48-1BA3-7E0E-5DD22E562C4D} - (not file)
O40 - ASIC: .NET Framework - {B508B3F1-A24A-32C0-B310-85786919EF28} - (not file)
O40 - ASIC: Personnalisation du navigateur - {C2B822F0-AFBF-6A5D-C82A-3E938ACD85C0} - (not file)
O40 - ASIC: Internet Explorer Core Fonts - {C9E9A340-D1F1-11D0-821E-444553540600} - (not file)
O40 - ASIC: .NET Framework - {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - (not file)
O40 - ASIC: Planificateur de tâches - {CC2A9BA0-3BDD-11D0-821E-444553540000} - (not file)
O40 - ASIC: (no name) - {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - (not file)
O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} - C:\WINDOWS\system32\Macromed\Flash\Flash10a.ocx
O40 - ASIC: HTML Help - {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - (not file)
O40 - ASIC: Active Directory Service Interface - {E92B03AB-B707-11d2-9CBD-0000F87A369E} - (not file)
O40 - ASIC: RootsUpdate - {EF289A85-8E57-408d-BE47-73B55609861A} - (not file)
O40 - ASIC: .NET Framework - {F196AC50-7C95-42E1-9947-BDAB18BF3C8C} - (not file)

---\ Pilotes lancés au démarrage (O41)
O41 - Driver: Service for AC'97 Driver (WDM) (AC97ALI) - C:\WINDOWS\system32\drivers\ali55wdm.sys
O41 - Driver: acedrv11 (acedrv11) - C:\WINDOWS\system32\drivers\acedrv11.sys
O41 - Driver: Suppresseur d'écho acoustique (Noyau Microsoft) (aec) - C:\WINDOWS\system32\drivers\aec.sys
O41 - Driver: Service for Realtek AC97 Audio (WDM) (ALCXWDM) - C:\WINDOWS\system32\drivers\ALCXWDM.SYS
O41 - Driver: Pilote WDM d'accélérateur audio ALi (aliadwdm) - C:\WINDOWS\system32\drivers\ac97ali.sys
O41 - Driver: Pilote de processeur AMD (AmdK8) - C:\WINDOWS\system32\DRIVERS\AmdK8.sys
O41 - Driver: Pilote de processeur AMD HwPState (AmdPPM) - C:\WINDOWS\system32\DRIVERS\AmdPPM.sys
O41 - Driver: Carte Fast Ethernet 10/100 Mbps ADMtek AN983/AN985/ADM951X (AN983) - C:\WINDOWS\system32\DRIVERS\AN983.sys
O41 - Driver: Protocole client ARP 1394 (Arp1394) - C:\WINDOWS\system32\DRIVERS\arp1394.sys
O41 - Driver: Pilote de média asynchrone RAS (AsyncMac) - C:\WINDOWS\system32\DRIVERS\asyncmac.sys
O41 - Driver: (no object) (ati2mtag) - C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
O41 - Driver: atksgt (atksgt) - C:\WINDOWS\system32\DRIVERS\atksgt.sys
O41 - Driver: Protocole client ATM ARP (Atmarpc) - C:\WINDOWS\system32\DRIVERS\atmarpc.sys
O41 - Driver: Pilote audio Stub (audstub) - C:\WINDOWS\system32\DRIVERS\audstub.sys
O41 - Driver: avgio (avgio) - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys
O41 - Driver: avgntflt (avgntflt) - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys
O41 - Driver: avipbb (avipbb) - C:\WINDOWS\system32\DRIVERS\avipbb.sys
O41 - Driver: BDFsDrv (BDFsDrv) - C:\Program Files\Softwin\BitDefender10\bdfsdrv.sys
O41 - Driver: BDRsDrv (BDRsDrv) - C:\Program Files\Softwin\BitDefender10\bdrsdrv.sys
O41 - Driver: Décodeur sous-titre fermé (CCDECODE) - C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
O41 - Driver: cwmtdi (cwmtdi) - C:\WINDOWS\system32\drivers\cwmtdi.sys
O41 - Driver: (no object) (dmboot) - C:\WINDOWS\System32\drivers\dmboot.sys
O41 - Driver: Pilote de Gestionnaire de disque logique (dmio) - C:\WINDOWS\System32\drivers\dmio.sys
O41 - Driver: (no object) (dmload) - C:\WINDOWS\System32\drivers\dmload.sys
O41 - Driver: Synthétiseur DLS du noyau Microsoft (DMusic) - C:\WINDOWS\system32\drivers\DMusic.sys
O41 - Driver: driverhardwarev2 (driverhardwarev2) - C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys
O41 - Driver: Filtre de décodeur DRM (Noyau Microsoft) (drmkaud) - C:\WINDOWS\system32\drivers\drmkaud.sys
O41 - Driver: EagleNT (EagleNT) - C:\WINDOWS\system32\drivers\EagleNT.sys
O41 - Driver: FltMgr (FltMgr) - C:\WINDOWS\system32\drivers\fltmgr.sys
O41 - Driver: Énumérateur de port jeu (gameenum) - C:\WINDOWS\system32\DRIVERS\gameenum.sys
O41 - Driver: Classificateur de paquets générique (Gpc) - C:\WINDOWS\system32\DRIVERS\msgpc.sys
O41 - Driver: Pilote de classe HID Microsoft (hidusb) - C:\WINDOWS\system32\DRIVERS\hidusb.sys
O41 - Driver: Pilote pour clavier i8042 et souris sur port PS/2 (i8042prt) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver: Pilote du pare-feu Windows IPv6 (Ip6Fw) - C:\WINDOWS\system32\drivers\ip6fw.sys
O41 - Driver: Pilote de filtre de trafic IP (IpFilterDriver) - C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
O41 - Driver: Pilote de tunnelage IP dans IP (IpInIp) - C:\WINDOWS\system32\DRIVERS\ipinip.sys
O41 - Driver: Pilote IPSEC (IPSec) - C:\WINDOWS\system32\DRIVERS\ipsec.sys
O41 - Driver: Service énumérateur IR (IRENUM) - C:\WINDOWS\system32\DRIVERS\irenum.sys
O41 - Driver: Pilote HID de clavier (kbdhid) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys
O41 - Driver: Mélangeur audio Wave de noyau Microsoft (kmixer) - C:\WINDOWS\system32\drivers\kmixer.sys
O41 - Driver: LibUsb-Win32 - Kernel Driver, Version 0.1.10.1 (libusb0) - C:\WINDOWS\system32\drivers\libusb0.sys
O41 - Driver: lirsgt (lirsgt) - C:\WINDOWS\system32\DRIVERS\lirsgt.sys
O41 - Driver: (no object) (m5289) - C:\WINDOWS\system32\DRIVERS\m5289.sys
O41 - Driver: Pilote HID de souris (mouhid) - C:\WINDOWS\system32\DRIVERS\mouhid.sys
O41 - Driver: Redirecteur client WebDav (MRxDAV) - C:\WINDOWS\system32\DRIVERS\mrxdav.sys
O41 - Driver: MRXSMB (MRxSmb) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
O41 - Driver: Proxy de service de répartition Microsoft (MSKSSRV) - C:\WINDOWS\system32\drivers\MSKSSRV.sys
O41 - Driver: Proxy d'horloge de répartition Microsoft (MSPCLOCK) - C:\WINDOWS\system32\drivers\MSPCLOCK.sys
O41 - Driver: Proxy de gestion de qualité de répartition Microsoft (MSPQM) - C:\WINDOWS\system32\drivers\MSPQM.sys
O41 - Driver: Pilote BIOS de gestion de systèmes Microsoft (mssmbios) - C:\WINDOWS\system32\DRIVERS\mssmbios.sys
O41 - Driver: Convertisseur en T/site-à-site de répartition Microsoft (MSTEE) - C:\WINDOWS\system32\drivers\MSTEE.sys
O41 - Driver: Pilote UART MIDI MPU-401 Microsoft (ms_mpu401) - C:\WINDOWS\system32\drivers\msmpu401.sys
O41 - Driver: ATK0110 ACPI UTILITY (MTsensor) - C:\WINDOWS\system32\DRIVERS\ASACPI.sys
O41 - Driver: Codec NABTS/FEC VBI (NABTSFEC) - C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
O41 - Driver: Connection TV/vidéo Microsoft (NdisIP) - C:\WINDOWS\system32\DRIVERS\NdisIP.sys
O41 - Driver: Pilote TAPI NDIS d'accès distant (NdisTapi) - C:\WINDOWS\system32\DRIVERS
distapi.sys
O41 - Driver: NDIS mode utilisateur E/S Protocole (Ndisuio) - C:\WINDOWS\system32\DRIVERS
disuio.sys
O41 - Driver: Pilote réseau étendu NDIS d'accès distant (NdisWan) - C:\WINDOWS\system32\DRIVERS
diswan.sys
O41 - Driver: Interface NetBIOS (NetBIOS) - C:\WINDOWS\system32\DRIVERS
etbios.sys
O41 - Driver: NetBIOS sur TCP/IP (NetBT) - C:\WINDOWS\system32\DRIVERS
etbt.sys
O41 - Driver: Pilote réseau 1394 (NIC1394) - C:\WINDOWS\system32\DRIVERS
ic1394.sys
O41 - Driver: (no object) (nv) - C:\WINDOWS\system32\DRIVERS
v4_mini.sys
O41 - Driver: NVIDIA nForce 10/100/1000 Mbps Ethernet  (NVENETFD) - C:\WINDOWS\system32\DRIVERS\NVENETFD.sys
O41 - Driver: (no object) (nvgts) - C:\WINDOWS\system32\DRIVERS
vgts.sys
O41 - Driver: NVIDIA Network Bus Enumerator (nvnetbus) - C:\WINDOWS\system32\DRIVERS
vnetbus.sys
O41 - Driver: Pilote de filtre de trafic IPX (NwlnkFlt) - C:\WINDOWS\system32\DRIVERS
wlnkflt.sys
O41 - Driver: Pilote de transfert de trafic IPX (NwlnkFwd) - C:\WINDOWS\system32\DRIVERS
wlnkfwd.sys
O41 - Driver: Contrôleur hôte Texas Instruments IEEE 1394 compatible OHCI (Open Host Controller Interface) (ohci1394) - C:\WINDOWS\system32\DRIVERS\ohci1394.sys
O41 - Driver: PCAMPR5 NDIS Protocol Driver (PCAMPR5) - C:\WINDOWS\system32\PCAMPR5.SYS
O41 - Driver: PCANDIS5 NDIS Protocol Driver (PCANDIS5) - C:\WINDOWS\system32\PCANDIS5.SYS
O41 - Driver: Miniport réseau étendu (PPTP) (PptpMiniport) - C:\WINDOWS\system32\DRIVERSaspptp.sys
O41 - Driver: Pilote processeur (Processor) - C:\WINDOWS\system32\DRIVERS\processr.sys
O41 - Driver: Planificateur de paquets QoS (PSched) - C:\WINDOWS\system32\DRIVERS\psched.sys
O41 - Driver: Pilote de liaison parallèle directe (Ptilink) - C:\WINDOWS\system32\DRIVERS\ptilink.sys
O41 - Driver: Pilote de connexion automatique d'accès distant (RasAcd) - C:\WINDOWS\system32\DRIVERSasacd.sys
O41 - Driver: Miniport réseau étendu (L2TP) (Rasl2tp) - C:\WINDOWS\system32\DRIVERSasl2tp.sys
O41 - Driver: Pilote PPPOE d'accès à distance (RasPppoe) - C:\WINDOWS\system32\DRIVERSaspppoe.sys
O41 - Driver: Parallèle direct (Raspti) - C:\WINDOWS\system32\DRIVERSaspti.sys
O41 - Driver: Rdbss (Rdbss) - C:\WINDOWS\system32\DRIVERSdbss.sys
O41 - Driver: Pilote de redirecteur de périphérique Terminal Server (rdpdr) - C:\WINDOWS\system32\DRIVERSdpdr.sys
O41 - Driver: Pilote de filtre de lecture digitale de CD audio (redbook) - C:\WINDOWS\system32\DRIVERSedbook.sys
O41 - Driver: Realtek 10/100/1000 PCI NIC Family NDIS XP Driver (RTL8023xp) - C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys
O41 - Driver: Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C) (rtl8139) - C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
O41 - Driver: Secdrv (Secdrv) - C:\WINDOWS\system32\DRIVERS\secdrv.sys
O41 - Driver: Pilote de filtre Serenum (serenum) - C:\WINDOWS\system32\DRIVERS\serenum.sys
O41 - Driver: StarForce Protection Environment Driver (version 1.x) (sfdrv01) - C:\WINDOWS\System32\drivers\sfdrv01.sys
O41 - Driver: StarForce Protection Helper Driver (version 2.x) (sfhlp02) - C:\WINDOWS\System32\drivers\sfhlp02.sys
O41 - Driver: StarForce Protection Synchronization Driver (version 4.x) (sfsync04) - C:\WINDOWS\System32\drivers\sfsync04.sys
O41 - Driver: StarForce Protection VFS Driver (version 2.x) (sfvfs02) - C:\WINDOWS\System32\drivers\sfvfs02.sys
O41 - Driver: Détrameur décalage BDA (SLIP) - C:\WINDOWS\system32\DRIVERS\SLIP.sys
O41 - Driver: USB PC Camera (SNPSTD3) (SNPSTD3) - C:\WINDOWS\system32\DRIVERS\snpstd3.sys
O41 - Driver: Splitter audio du noyau Microsoft (splitter) - C:\WINDOWS\system32\drivers\splitter.sys
O41 - Driver: (no object) (sptd) - C:\WINDOWS\System32\Drivers\sptd.sys
O41 - Driver: Pilote de filtre de restauration système (sr) - C:\WINDOWS\system32\DRIVERS\sr.sys
O41 - Driver: Srv (Srv) - C:\WINDOWS\system32\DRIVERS\srv.sys
O41 - Driver: ssmdrv (ssmdrv) - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys
O41 - Driver: BDA IPSink (streamip) - C:\WINDOWS\system32\DRIVERS\StreamIP.sys
O41 - Driver: Pilote de bus logiciel (swenum) - C:\WINDOWS\system32\DRIVERS\swenum.sys
O41 - Driver: Synthétiseur de table de sons GC noyau Microsoft (swmidi) - C:\WINDOWS\system32\drivers\swmidi.sys
O41 - Driver: Périphérique audio système du noyau Microsoft (sysaudio) - C:\WINDOWS\system32\drivers\sysaudio.sys
O41 - Driver: Pilote du protocole TCP/IP (Tcpip) - C:\WINDOWS\system32\DRIVERS	cpip.sys
O41 - Driver: ULi AGP Bus Filter Driver (uliagpkx) - C:\WINDOWS\system32\DRIVERS\agpkx.sys
O41 - Driver: Pilote de mise à jour microcode (Update) - C:\WINDOWS\system32\DRIVERS\update.sys
O41 - Driver: Pilote USB audio (WDM) (usbaudio) - C:\WINDOWS\system32\drivers\usbaudio.sys
O41 - Driver: Pilote parent générique USB Microsoft (usbccgp) - C:\WINDOWS\system32\DRIVERS\usbccgp.sys
O41 - Driver: Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0 (usbehci) - C:\WINDOWS\system32\DRIVERS\usbehci.sys
O41 - Driver: Pilote de concentrateur standard USB Microsoft (usbhub) - C:\WINDOWS\system32\DRIVERS\usbhub.sys
O41 - Driver: Pilote miniport de contrôleur hôte ouvert USB Microsoft (usbohci) - C:\WINDOWS\system32\DRIVERS\usbohci.sys
O41 - Driver: Classe d'imprimantes USB Microsoft (usbprint) - C:\WINDOWS\system32\DRIVERS\usbprint.sys
O41 - Driver: Pilote de scanneur USB (usbscan) - C:\WINDOWS\system32\DRIVERS\usbscan.sys
O41 - Driver: Pilote de stockage de masse USB (USBSTOR) - C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
O41 - Driver: Pilote ARP IP d'accès distant (Wanarp) - C:\WINDOWS\system32\DRIVERS\wanarp.sys
O41 - Driver: Pilote WINMM de compatibilité audio WDM Microsoft (wdmaud) - C:\WINDOWS\system32\drivers\wdmaud.sys
O41 - Driver: WpdUsb (WpdUsb) - C:\WINDOWS\system32\DRIVERS\wpdusb.sys
O41 - Driver: Codec Teletext standard (WSTCODEC) - C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
O41 - Driver: Windows Driver Foundation - User-mode Driver Framework Platform Driver (WudfPf) - C:\WINDOWS\system32\DRIVERS\WudfPf.sys
O41 - Driver: Windows Driver Foundation - User-mode Driver Framework Reflector (WudfRd) - C:\WINDOWS\system32\DRIVERS\wudfrd.sys
O41 - Driver: bdfdll (bdfdll) - C:\Program Files\Softwin\BitDefender10\bdfdll.sys
O41 - Driver: InCD File System (InCDfs) - C:\WINDOWS\system32\drivers\InCDFs.sys
O41 - Driver: InCD Reader (incdrm) - C:\WINDOWS\system32\drivers\InCDRm.sys
O41 - Driver: Acronis Snapshots Manager (Build 380) (snapman380) - C:\WINDOWS\system32\DRIVERS\snman380.sys
O41 - Driver: Acronis Try&Decide and Restore Points filter (build 140) (tdrpman140) - C:\WINDOWS\system32\DRIVERS	drpm140.sys
O41 - Driver: Acronis True Image FS Filter (tifsfilter) - C:\WINDOWS\system32\DRIVERS	ifsfilt.sys
O41 - Driver: Acronis True Image Backup Archive Explorer (timounter) - C:\WINDOWS\system32\DRIVERS	imntr.sys

---\ Logiciels installés (O42)
O42 - Logiciel: Adobe Acrobat 5.0
O42 - Logiciel: Adobe Flash Player 10 ActiveX
O42 - Logiciel: Adobe Flash Player Plugin
O42 - Logiciel: Adobe Shockwave Player
O42 - Logiciel: ATI - Software Uninstall Utility
O42 - Logiciel: Avira AntiVir Personal - Free Antivirus
O42 - Logiciel: AssaultCube v1.0
O42 - Logiciel: ATI Display Driver
O42 - Logiciel: AviSynth 2.5
O42 - Logiciel: Blue Coat® K9 Web Protection
O42 - Logiciel: CamStudio 2.0 Fr
O42 - Logiciel: CCleaner (remove only)
O42 - Logiciel: EVEREST Ultimate Edition v4.60
O42 - Logiciel: HijackThis 2.0.2
O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs
O42 - Logiciel: Windows Internet Explorer 8 Beta 2
O42 - Logiciel: Call of Duty(R) 4 - Modern Warfare(TM)
O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130)
O42 - Logiciel: Windows Search 4.0
O42 - Logiciel: Microsoft .NET Framework 1.1 Hotfix (KB928366)
O42 - Logiciel: Malwarebytes' Anti-Malware
O42 - Logiciel: Messenger Plus! Live
O42 - Logiciel: Microsoft .NET Framework 1.1
O42 - Logiciel: Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA
O42 - Logiciel: Mozilla Firefox (3.0.5)
O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP
O42 - Logiciel: Microsoft National Language Support Downlevel APIs
O42 - Logiciel: NVIDIA Drivers
O42 - Logiciel: OpenAL
O42 - Logiciel: PhotoFiltre Studio
O42 - Logiciel: PSP Video 9 1.74
O42 - Logiciel: PunkBuster Services
O42 - Logiciel: Shareaza 2.4.0.0
O42 - Logiciel: ULi AC'97 Audio Controller Driver
O42 - Logiciel: ULi M5289 SATA Controller Driver
O42 - Logiciel: ULi PCI to AGP Controller Driver
O42 - Logiciel: Virtual DJ - Atomix Productions
O42 - Logiciel: VLC media player 0.9.8a
O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474)
O42 - Logiciel: Windows Live OneCare safety scanner
O42 - Logiciel: Windows Media Format 11 runtime
O42 - Logiciel: Windows XP Service Pack 3
O42 - Logiciel: Archiveur WinRAR
O42 - Logiciel: Xilisoft 3GP Video Converter
O42 - Logiciel: ATI Catalyst Control Center
O42 - Logiciel: Google Toolbar for Internet Explorer
O42 - Logiciel: Java(TM) 6 Update 4
O42 - Logiciel: Java(TM) 6 Update 7
O42 - Logiciel: Windows Live Sign-in Assistant
O42 - Logiciel: O&O Defrag Professional Edition
O42 - Logiciel: Medal of Honor Batailles du Pacifique(tm)
O42 - Logiciel: Apple Software Update
O42 - Logiciel: Battlefield 1942
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable
O42 - Logiciel: Zune Desktop Theme
O42 - Logiciel: CDBurnerXP
O42 - Logiciel: Medal of Honor Pacific Assault(tm) Patch2
O42 - Logiciel: MSXML 4.0 SP2 (KB954430)
O42 - Logiciel: Microsoft Silverlight
O42 - Logiciel: REALTEK GbE & FE Ethernet PCI NIC Driver
O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 1
O42 - Logiciel: OpenOffice.org 2.4
O42 - Logiciel: MSXML 4.0 SP2 (KB936181)
O42 - Logiciel: AMD Processor Driver
O42 - Logiciel: Windows Live Mail
O42 - Logiciel: Need for Speed™ ProStreet Demo
O42 - Logiciel: VDownloader  0.74
O42 - Logiciel: War Rock
O42 - Logiciel: Ma-Config.com
O42 - Logiciel: Windows Live Messenger
O42 - Logiciel: Catalyst Control Center - Branding
O42 - Logiciel: Realtek AC'97 Audio
O42 - Logiciel: Windows Live installer
O42 - Logiciel: DiRT Demo

---\ Contenu des dossiers Fichiers Communs (O43)
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Adobe
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\AVSMedia
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Blizzard Entertainment
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\InstallShield
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Java
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Microsoft Shared
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\MSSoap
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\ODBC
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Real
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Services
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\Softwin
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\SpeechEngines
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\System
O43 - CFD:Common File Directory - C:\Program Files\Fichiers Communs\WindowsLiveInstaller

---\ Derniers fichiers modifiés ou crées sous System32 (O44)
O44 - LFC:Last File Created - C:\WINDOWS\System32\amcompat.tlb -->16/01/2009
O44 - LFC:Last File Created - C:\WINDOWS\System32\ativvaxx.cap -->19/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32\FNTCACHE.DAT -->24/01/2009
O44 - LFC:Last File Created - C:\WINDOWS\System32\keystone.exe -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32\lncom_.mp3 -->29/01/2009
O44 - LFC:Last File Created - C:\WINDOWS\System32\MRT.exe -->10/01/2009
O44 - LFC:Last File Created - C:\WINDOWS\System32\MRT.INI -->14/01/2009
O44 - LFC:Last File Created - C:\WINDOWS\System32\mshtml.dll -->14/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32\msvcp71.dll -->02/01/2009
O44 - LFC:Last File Created - C:\WINDOWS\System32\msvcr71.dll -->02/01/2009
O44 - LFC:Last File Created - C:\WINDOWS\System32
scompat.tlb -->16/01/2009
O44 - LFC:Last File Created - C:\WINDOWS\System32
v4_disp.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vapi.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vappbar.exe -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vapps.xml -->30/01/2009
O44 - LFC:Last File Created - C:\WINDOWS\System32
vcod.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vcodins.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vcolor.exe -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vcpl.cpl -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vcpl.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vcplui.exe -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vcpluir.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vcuda.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vdisp.nvu -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vdisps.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vdispsr.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vdspsch.exe -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vgames.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vgamesr.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
view.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vmccs.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vmccsrs.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vmccss.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vmccssr.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vmctray.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vmobls.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vmoblsr.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
voglnt.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32\NvPVEnc.ax -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vrsar.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vrscs.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vrsda.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vrsde.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vrsel.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vrseng.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vrses.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vrsesm.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vrsfi.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vrsfr.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vrshe.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vrshu.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vrsit.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vrsja.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vrsko.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vrsnl.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vrsno.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vrspl.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vrspt.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vrsptb.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vrsru.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vrssk.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vrssl.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vrssv.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vrsth.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vrstr.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vrszhc.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vrszht.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vshell.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vsvc32.exe -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vtuicpl.cpl -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vudisp.exe -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32\NVUNINST.EXE -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vvitvs.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vvitvsr.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwddi.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwdmcpl.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwimg.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwrsar.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwrscs.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwrsda.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwrsde.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwrsel.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwrseng.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwrses.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwrsesm.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwrsfi.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwrsfr.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwrshe.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwrshu.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwrsit.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwrsja.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwrsko.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwrsnl.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwrsno.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwrspl.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwrspt.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwrsptb.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwrsru.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwrssk.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwrssl.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwrssv.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwrsth.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwrstr.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwrszhc.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwrszht.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwss.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
vwssr.dll -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32
wiz.exe -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32\OODBS.lor -->30/01/2009
O44 - LFC:Last File Created - C:\WINDOWS\System32\OpenAL32.dll -->21/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32\pbsvc.exe -->24/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32\perfc009.dat -->20/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32\perfc00C.dat -->20/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32\perfh009.dat -->20/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32\perfh00C.dat -->20/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32\PerfStringBackup.INI -->20/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32\PnkBstrA.exe -->24/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32\PnkBstrB.exe -->17/01/2009
O44 - LFC:Last File Created - C:\WINDOWS\System32\TZLog.log -->17/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32\wpa.dbl -->30/01/2009
O44 - LFC:Last File Created - C:\WINDOWS\System32\wrap_oal.dll -->21/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers
v4_mini.sys -->02/12/2008
O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers\PnkBstrK.sys -->17/01/2009
O44 - LFC:Last File Created - C:\WINDOWS\System32\drivers\srv.sys -->11/12/2008

---\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ACRORD32.EXE-0781811F.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AGENT.EXE-06FC5CDE.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AUTOUP.EXE-288E2CF2.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AU_.EXE-2191731B.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVISYNTH_255.EXE-0E8EB4B8.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVNOTIFY.EXE-32FAE179.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\AVWSC.EXE-347FCF75.pf -->30/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\BNUPDATE.EXE-19DE897D.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\BRUTUSA2.EXE-0EDE2B83.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\BRUTUSA2.EXE-1AF1669E.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\BRUTUSA2.EXE-26452799.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\BRUTUSA2.EXE-2C14ADAA.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\BUILDER.EXE-349767E4.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\BURNING CRUSADE.EXE-17AD8A09.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\BU_.EXE-300A3044.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CCLEANER.EXE-0BCE437C.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CMD.EXE-087B4001.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CSC.EXE-01730C27.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\CVTRES.EXE-2329DCD5.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DBTRANSC.EXE-2AB70477.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DIRTDEMO.EXE-03F531D8.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DRWTSN32.EXE-2B4B52AC.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DWUSPLAY.EXE-10DBAE6D.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\DWWIN.EXE-30875ADC.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\FFMPEG.EXE-0CFAF0EB.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\FFMPEG.EXE-27413960.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\FIREFOX.EXE-28641590.pf -->30/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\FLASHGET.EXE-2073FE8C.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\FLASHGET20EN.EXE-0C074AC1.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\GOOGLETOOLBARNOTIFIER.EXE-022A647B.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\GOOGLEUPDATERSERVICE.EXE-3AB369BE.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\GT.EXE-301A03C0.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\GUARDGUI.EXE-2C20A958.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\GUS267.TMP-26034FEA.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\HSUPDATE.EXE-0457BDE0.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf -->30/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\IMAPI.EXE-0BF740A4.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\INSTALLER.EXE-00AED8AC.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\INSTALLER.EXE-032086E7.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\INSTALLER.EXE-03DF6875.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\INSTALLER.EXE-059091D3.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\INSTALLER.EXE-062A8690.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\INSTALLER.EXE-0C0FB7E9.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\INSTALLER.EXE-0CF7C168.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\INSTALLER.EXE-0E86E365.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\INSTALLER.EXE-15D02A80.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\INSTALLER.EXE-27DED0F5.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\INSTALLER.EXE-28D04E24.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\INSTALLER.EXE-2BDE3970.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\INSTALLER.EXE-3114A85D.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\INTERNET VIDEO CONVERTER.EXE-2A931305.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\ISSCH.EXE-34B2B8F8.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\LAUNCHER.EXE-32675156.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\Layout.ini -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MBAM.EXE-0BEE0439.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSFEEDSSYNC.EXE-25E13438.pf -->30/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSI266.TMP-02CFFEBC.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSIEXEC.EXE-2F8A8CAE.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSNMSGR.EXE-366A1A81.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSPASS.EXE-0C3FABA7.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSPASS.EXE-1541E315.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\MSPASS.EXE-3010D1A0.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf -->10/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PREUPD.EXE-0C5BC219.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PRO.EXE-3343A4FE.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PROTECT.EXE-0BAF42E9.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PSPVIDEO9.EXE-0B1302B1.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\PSPVIDEO9_INSTALL.EXE-11568ABF.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\REGSVR32.EXE-2F56B25F.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-1357CA32.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-146595F9.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-159306C6.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-174ABBD0.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-1B8E0AEB.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-1E636E22.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-1F20A0D1.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-1F59A385.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-2304626A.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-25AD8867.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-2A94BB85.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-2BF3472E.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-2C8B212B.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-2E5AF1D7.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-30431270.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-305339BD.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-3953858B.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-3D8EBD4A.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-3EE61D2C.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-41C55ED3.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-4372364B.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-44260FA8.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-451FC2C0.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-46C18F4F.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-481BAAAA.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-4C19B1BF.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-4C8705AB.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\RUNDLL32.EXE-4CF34992.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SCREAMER.EXE-162FE4B5.pf -->30/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SEARCHFILTERHOST.EXE-148579FB.pf -->30/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SEARCHPROTOCOLHOST.EXE-34E0253A.pf -->30/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SETUP.EXE-20BD8FFA.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SETUP.EXE-381AC6BE.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SOFFICE.BIN-242AA534.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SOFFICE.EXE-2C1A3A5B.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\STCLIENT_WRAPPER.EXE-0FBCE9FC.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SWG268.TMP-2D1E603A.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\SWRITER.EXE-28FDD71A.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\TELEPORT_PRO_INSTALLER.EXE-3A622D39.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UNINST.EXE-3AFBEECF.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UNINSTALL.EXE-079B7224.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\UPDATE.EXE-264167D5.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\USNSVC.EXE-373E4DBC.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\VERCLSID.EXE-3667BD89.pf -->30/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\VLC.EXE-22DF01AA.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WARROCK.EXE-157AAF49.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WINRAR.EXE-39C6DAD9.pf -->30/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WLLOGINPROXY.EXE-2D4B6027.pf -->30/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WMPLAYER.EXE-18DDEFA3.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WMPLAYER.EXE-18DDEFA6.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WORLD_OF_WARCRAFT_MISE_A_JOUR-02938FD1.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WORLD_OF_WARCRAFT_MISE_A_JOUR-330D390F.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WORLD_OF_WARCRAFT_PATCH_V2.3.-2FF6A197.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WOW-3.0.1-TO-3.0.2-FRFR-WIN-U-096FC335.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WOW-INSTALLER-2.X.X.X-TO-3.0.-00C55EFB.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WOW.EXE-02137854.pf -->28/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WRLAUNCHER.EXE-20835F81.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WRUPDATER.EXE-311EDDB5.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WSCNTFY.EXE-1B24F5EB.pf -->29/01/2009
O45 - LFCP:Last File Created Prefetch - C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf -->30/01/2009

---\ ShellExecuteHooks, Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll
O46 - SEH:ShellExecuteHooks - Windows Desktop Search Namespace Manager - {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll

---\ Export de clé d'application autorisée (O47)
O47 - AAKE:Key Export - "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
O47 - AAKE:Key Export - "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
O47 - AAKE:Key Export - "C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe"="C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM)"
O47 - AAKE:Key Export - "C:\Program Files\EA GAMES\Medal of Honor Batailles du Pacifique(tm)\mohpa.exe"="C:\Program Files\EA GAMES\Medal of Honor Batailles du Pacifique(tm)\mohpa.exe:*:Disabled:Medal of Honor Pacific Assault(tm)"
O47 - AAKE:Key Export - "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe"="C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe:*:Disabled:Malwarebytes' Anti-Malware"
O47 - AAKE:Key Export - "C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
O47 - AAKE:Key Export - "C:\Program Files\ma-config.com\maconfservice.exe"="C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice"
O47 - AAKE:Key Export - "C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
O47 - AAKE:Key Export - "C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
O47 - AAKE:Key Export - "C:\Documents and Settings\Lucien\Mes documents\EA Games\BF1942.exe"="C:\Documents and Settings\Lucien\Mes documents\EA Games\BF1942.exe:*:Enabled:BF1942"
O47 - AAKE:Key Export - "C:\Documents and Settings\Lucien\Mes documents\EA Games\BF1942_w32ded.exe"="C:\Documents and Settings\Lucien\Mes documents\EA Games\BF1942_w32ded.exe:*:Enabled:BF1942_w32ded"
O47 - AAKE:Key Export - "C:\Program Files\GameSpy Arcade\Aphex.exe"="C:\Program Files\GameSpy Arcade\Aphex.exe:*:Enabled:GameSpy Arcade"
O47 - AAKE:Key Export - "C:\Program Files\Shareaza\Shareaza.exe"="C:\Program Files\Shareaza\Shareaza.exe:*:Enabled:Shareaza"
O47 - AAKE:Key Export - "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
O47 - AAKE:Key Export - "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
O47 - AAKE:Key Export - "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
O47 - AAKE:Key Export - "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
O47 - AAKE:Key Export - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
O47 - AAKE:Key Export - "C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
O47 - AAKE:Key Export - "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
O47 - AAKE:Key Export - "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

---\ Déni du service Local Security Authority (LSA) (O48)
O48 - LSA:Local Security Authority Authentication Packages - C:\WINDOWS\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages - C:\WINDOWS\System32\scecli.dll

---\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Networkdpcdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Networkdpdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Networkdpwd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network	dpipe.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network	dtcp.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\vgasave.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\ip6fw.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Networkdpcdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Networkdpdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Networkdpwd.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network	dpipe.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network	dtcp

jfkpresident · Answer

télécharge GenProc http://www.alt-shift-return.org/Info/Fichiers/GenProc.zip sur ton bureau Pour Vista : Désactive l'UAC jusqu'à la résolution du problème http://forum.telecharger.01net.com/forum/high-tech/PRODUITS/Questions-techniques/desactiver-controle-utilisateurs-sujet_198996_1.htm dézippe le dossier, double-clique sur GenProc.bat http://forum.telecharger.01net.com/forum/jeanchretien1-3.gif et poste le contenu du rapport qui s'ouvre Aide en images : http://www.alt-shift-return.org/Info/GenProc-HowTo.html

mikoudu30 · Answer

j'ai fait se que vous m'avait dit mes un page internet ces ouverte et voici se qu'il me dit:

Dans CCleaner, clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures".
Par la suite, laisse-le avec ses réglages par défaut. C'est tout. 


Etape 1/ Télécharge :


FindyKill (Chiquitine29) sur le Bureau.



Note importante : l'infection bagle s'installant au moyen d'un crack/keygen, tu dois IMPERATIVEMENT supprimer ce type de fichier.



Etape 2/ 



 Lance l'installation avec les paramètres par défaut
- Double-clique sur le raccourci FindyKill sur le Bureau (sous Vista : clic droit sur le raccourci --> Exécuter en temps qu'Administrateur)
- Au menu principal, sélectionne l'option 1 (Recherche)
- Le rapport est sauvegardé à la racine du disque dur (C:\FindyKill.txt )
Avant de faire quoi que ce soit d'autre, il est fortement recommandé de poster le rapport sur le forum pour avoir l'avis d'un spécialiste.
Après confirmation par un intervenant qualifié du forum, passe au nettoyage 


Etape 3/ 



 Branche toutes tes sources de données externes au PC (clés USB, disques durs externes, lecteurs mp3, iPod...) sans les ouvrir- Relance FindyKill,
- Cette fois, sélectionne l'option 2 (Suppression) au menu principal.
- Il y aura 2 redémarrages, laisse travailler l'outil jusqu'à l'apparition du message "Nettoyage effectué !" 
- Ensuite poste le rapport C:\FindyKill.txt

mikoudu30 · Answer

ah oui et ceci et apparue sur mon bureau:

nitialisation GenProc 2.351 [30/01/2009] à [16:41:07,23]  
  
 *** Liste des composants GenProc ***  
  
C:\Documents and Settings\Lucien\Bureau\caisse d'epargne.url
C:\Documents and Settings\Lucien\Bureau\Debug.txt
C:\Documents and Settings\Lucien\Bureau\D‚mmarage
C:\Documents and Settings\Lucien\Bureau\Favoris r‚seau (2).lnk
C:\Documents and Settings\Lucien\Bureau\GenProc.zip
C:\Documents and Settings\Lucien\Bureau\jeux phone
C:\Documents and Settings\Lucien\Bureau\Malwarebytes' Anti-Malware.lnk
C:\Documents and Settings\Lucien\Bureau\Mes documents.lnk
C:\Documents and Settings\Lucien\Bureau\messagerie orange (2).url
C:\Documents and Settings\Lucien\Bureau\mozzilla firefox.lnk
C:\Documents and Settings\Lucien\Bureau\PhotoFiltre Studio.lnk
C:\Documents and Settings\Lucien\Bureau\Poste de travail.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau
C:\Documents and Settings\Lucien\Bureau\Screamer Radio.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Activision
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AssaultCube
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AVG Anti-Spyware 7.5
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AviSynth 2.5
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Call of Duty Single Player Demo
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Darluok-Server
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\DeepBurner
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\GameSpy Arcade
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\IVCsoft
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Lavalys
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\ma-config.com
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Malwarebytes' Anti-Malware
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\O&O Software
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Rockstar Games
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Shareaza
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Ubisoft
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Xilisoft
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Activision\Call of Duty(R) 4 - Modern Warfare(TM)
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Activision\Call of Duty(R) 4 - Modern Warfare(TM)\Call of Duty(R) 4 - Modern Warfare(TM) Multijoueur.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Activision\Call of Duty(R) 4 - Modern Warfare(TM)\Documentation
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Activision\Call of Duty(R) 4 - Modern Warfare(TM)\D‚sinstaller Call of Duty(R) 4 - Modern Warfare(TM).lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Activision\Call of Duty(R) 4 - Modern Warfare(TM)\Documentation\Assistance technique.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Activision\Call of Duty(R) 4 - Modern Warfare(TM)\Documentation\LisezMoi.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Activision\Call of Duty(R) 4 - Modern Warfare(TM)\Documentation\Manuel Call of Duty(R) 4 - Modern Warfare(TM).lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Activision\Call of Duty(R) 4 - Modern Warfare(TM)\Documentation\Support clientŠle.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AssaultCube\AssaultCube.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AssaultCube\README.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AssaultCube\Uninstall.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AVG Anti-Spyware 7.5\Service & Support.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AviSynth 2.5\AviSynth Online.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AviSynth 2.5\Download Plugins.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AviSynth 2.5\Plugin Directory.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Darluok-Server\Uninstall Patch Darluok.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\Aide.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\Battlefield 1942.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\Battlefield 1942.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\DirectX EULA.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\D‚sinstaller Battlefield 1942.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\EA GAMES.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\Enregistrer ce produit.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\Infos EA.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\Jouer … BF 1942 en ligne avec GameSpy Arcade !.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\Lancer le serveur d‚di‚.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\LisezMoi.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\GameSpy Arcade\GameSpy Arcade Help.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\GameSpy Arcade\GameSpy Arcade Website.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\GameSpy Arcade\GameSpy.com Gaming's Homepage.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\GameSpy Arcade\Register GameSpy Arcade.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\IVCsoft\Internet Video Converter 1.53 fr
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\IVCsoft\Internet Video Converter 1.53 fr\Desinstaller IVC 1.53 fr.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\IVCsoft\Internet Video Converter 1.53 fr\Internet Video Converter 1.53 fr.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\IVCsoft\Internet Video Converter 1.53 fr\LICENCE_Internet_Video_Converter.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Lavalys\EVEREST Ultimate Edition
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Lavalys\EVEREST Ultimate Edition\EVEREST Ultimate Edition Documentation.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Lavalys\EVEREST Ultimate Edition\EVEREST Ultimate Edition on the Web.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Lavalys\EVEREST Ultimate Edition\EVEREST Ultimate Edition.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Lavalys\EVEREST Ultimate Edition\Uninstall EVEREST Ultimate Edition.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\ma-config.com\Desinstaller.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\ma-config.com\Ma-Config.html.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\ma-config.com\Preferences.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Malwarebytes' Anti-Malware\D‚sinstaller Malwarebytes' Anti-Malware.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Malwarebytes' Anti-Malware\Malwarebytes' Anti-Malware Help.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Malwarebytes' Anti-Malware\Malwarebytes' Anti-Malware.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\O&O Software\O&O Defrag
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\O&O Software\O&O Defrag\Aide O&O Defrag .lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\O&O Software\O&O Defrag\O&O Defrag.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\OpenOffice.org 2.4\OpenOffice.org Base.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\OpenOffice.org 2.4\OpenOffice.org Calc.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\OpenOffice.org 2.4\OpenOffice.org Draw.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\OpenOffice.org 2.4\OpenOffice.org Impress.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\OpenOffice.org 2.4\OpenOffice.org Math.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\OpenOffice.org 2.4\OpenOffice.org Writer.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Rockstar Games\GTA San Andreas
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Rockstar Games\GTA San Andreas\D‚sinstaller GTA San Andreas.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Rockstar Games\GTA San Andreas\Enregistrer En Ligne.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Rockstar Games\GTA San Andreas\Rockstar Games.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Rockstar Games\GTA San Andreas\Rockstar North Ltd.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Shareaza\D‚sinstaller.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Shareaza\GUI Mode
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Shareaza\Licence.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Shareaza\Shareaza.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Shareaza\TorrentWizard.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Shareaza\GUI Mode\Shareaza (Mode fenˆtr‚).lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Shareaza\GUI Mode\Shareaza (Mode simple).lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Shareaza\GUI Mode\Shareaza (Mode tabul‚).lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Ubisoft\Far Cry
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Ubisoft\Far Cry\D‚sinstaller Far Cry.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Xilisoft\3GP Video Converter 3
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Xilisoft\3GP Video Converter 3\Buy.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Xilisoft\3GP Video Converter 3\Readme.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Xilisoft\3GP Video Converter 3\Uninstall.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Xilisoft\3GP Video Converter 3\Xilisoft 3GP Video Converter 3.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Xilisoft\3GP Video Converter 3\Xilisoft 3GP Video Converter Help.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Xilisoft\3GP Video Converter 3\Xilisoft 3GP Video Converter Wizard 3.lnk
C:\Documents and Settings\Lucien\Bureau\jeux phone\1945.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\3D Ferrari Experience.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\3D Toxic Racer.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\3DGolfxProK700.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\3D_AMF_Xtreme_Bowling_163.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\3D_CaponeCasino.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\3D_Formula_GP_Racing_100.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\3D_Rally.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\3D_Xtremeignition.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\3D_Yamaha_Unleashed_100.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Abaddon.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\AgeOfEmpires.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\AirForceAll.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\AlphaWing2.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Ancestral_Bird.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Aquiles Versus Troya.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Argon 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Asphalt2.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\asphalt3.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\B-man.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Baldurs Gate.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Banjo Kazooie Adventure 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Bight Interactive Slam Street 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Block Breaker Deluxe.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Bluetooth_Biplanes.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Bobby Carrot 2.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Brain Challenge™.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Breakout Bears.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Coffee Breakmedia PoolDreams 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\connectfour.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Counterstrike.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\dlver-super-mario-all-stars.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\DragonIsland.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\driver3.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\driver_vegas.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\F4_SilverSurfer.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Fatal Force.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Gameloft.Rainbow.Six.Lockdown.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Gameloft_Rayman_Raving_Rabbids.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Gangland.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\gangstar_crime_city_kr.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\gdh4.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\GemJam.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Ghost_Rider.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\GTA NA MOTORE.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\GulosTale_Triplets_UK_v1_1_9.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Hands_On_Mobile_Call_Of_Duty_3_J2me.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\I Robot.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\King Kong Pinball.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Kingdom Of Heaven.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Little_Ninja_King.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\macrospace_crashnburnturbo_sonye_k500_en_v1_0_0_full.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Mafia Wars.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\mediaplazza_questforalliance2_1.0.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\MetalSlug.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Microforum Grubby 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\MidnightBowling.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\MidnightPool.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Minefield.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Mini Golf Castles.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\MobileChess.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Monopoly.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\NateAdamsFMX_K500_EN.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Need For Speed Carbon.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Need For Speed Underground 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\NEED_FOR_SPEED_UNDERGROUND_3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\NFS_Carbon.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\NFS_most_wanted.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Pitfall_Glacier.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Pman.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\PowerInlineX3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Prince SOT.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\prince_of_persia_the_two_thrones_s700.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Rally Evolution 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Rally Pro Contest Red Devil 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Resident Evil_full-screen_by_giu.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\River Storm 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\SaintsRow.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\samuriajack.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\SC-Pandora-Tomorrow.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\SiberianStrike ep1.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\SimCity.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\sk8trix.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\SkyForce.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Slyder.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\SnakeEvolution.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\SOCOM_US_Navy_SEALS.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Sonic_the_hedgehog.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Sonic_The_Hedgehog_Part2.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Speedball 2.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\SpiderMan3.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\SplinterCellPandoraTomorrow.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Submarine 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Sudoku.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Super_Mario_Brothers_3.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone	etris.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\TetrisMania.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\THQ.Wireless.Rafa.Nadal.Tennis.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Tower Bloxx.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Toxic WAR.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\V3X Ducati 3D Extreme.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\warcraft_1_3_5.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\WarOfTheWorlds.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Worms.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Worms2 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\WormsCrazyGolf2007.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\XIIIUKV500.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Yeti Sports 3.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Yeti_Sports_1.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Zuma.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\… lire !!.txt
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\AssaultCube.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Battlefield 1942.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Blue Coat K9 Web Protection Admin.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Call of Duty(R) 4 Multijoueur.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\call of duty(R) solo.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\CamStudio.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\CCleaner.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\CDBurnerXP.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\COD Serverstarter.exe
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\EVEREST Ultimate Edition.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Internet Video Converter 1.53 fr.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\lg ku 800.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Medal of Honor Batailles du Pacifique(tm).lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\mp3DirectCut.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Norman edition cleaner v3.exe
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Nouveau Texte Open Office.odt
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\O&O Defrag.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\open office.odt
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\settings.ini
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Shareaza.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\VDownloader.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Virtual DJ Trial.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Windows Movie Maker.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Xilisoft 3GP Video Converter 3.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Xilisoft 3GP Video Converter Wizard 3.lnk

mikoudu30 · Answer

ah oui et ceci et apparue sur mon bureau:

nitialisation GenProc 2.351 [30/01/2009] à [16:41:07,23]  
  
 *** Liste des composants GenProc ***  
  
C:\Documents and Settings\Lucien\Bureau\caisse d'epargne.url
C:\Documents and Settings\Lucien\Bureau\Debug.txt
C:\Documents and Settings\Lucien\Bureau\D‚mmarage
C:\Documents and Settings\Lucien\Bureau\Favoris r‚seau (2).lnk
C:\Documents and Settings\Lucien\Bureau\GenProc.zip
C:\Documents and Settings\Lucien\Bureau\jeux phone
C:\Documents and Settings\Lucien\Bureau\Malwarebytes' Anti-Malware.lnk
C:\Documents and Settings\Lucien\Bureau\Mes documents.lnk
C:\Documents and Settings\Lucien\Bureau\messagerie orange (2).url
C:\Documents and Settings\Lucien\Bureau\mozzilla firefox.lnk
C:\Documents and Settings\Lucien\Bureau\PhotoFiltre Studio.lnk
C:\Documents and Settings\Lucien\Bureau\Poste de travail.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau
C:\Documents and Settings\Lucien\Bureau\Screamer Radio.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Activision
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AssaultCube
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AVG Anti-Spyware 7.5
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AviSynth 2.5
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Call of Duty Single Player Demo
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Darluok-Server
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\DeepBurner
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\GameSpy Arcade
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\IVCsoft
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Lavalys
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\ma-config.com
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Malwarebytes' Anti-Malware
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\O&O Software
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Rockstar Games
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Shareaza
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Ubisoft
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Xilisoft
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Activision\Call of Duty(R) 4 - Modern Warfare(TM)
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Activision\Call of Duty(R) 4 - Modern Warfare(TM)\Call of Duty(R) 4 - Modern Warfare(TM) Multijoueur.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Activision\Call of Duty(R) 4 - Modern Warfare(TM)\Documentation
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Activision\Call of Duty(R) 4 - Modern Warfare(TM)\D‚sinstaller Call of Duty(R) 4 - Modern Warfare(TM).lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Activision\Call of Duty(R) 4 - Modern Warfare(TM)\Documentation\Assistance technique.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Activision\Call of Duty(R) 4 - Modern Warfare(TM)\Documentation\LisezMoi.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Activision\Call of Duty(R) 4 - Modern Warfare(TM)\Documentation\Manuel Call of Duty(R) 4 - Modern Warfare(TM).lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Activision\Call of Duty(R) 4 - Modern Warfare(TM)\Documentation\Support clientŠle.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AssaultCube\AssaultCube.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AssaultCube\README.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AssaultCube\Uninstall.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AVG Anti-Spyware 7.5\Service & Support.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AviSynth 2.5\AviSynth Online.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AviSynth 2.5\Download Plugins.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AviSynth 2.5\Plugin Directory.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Darluok-Server\Uninstall Patch Darluok.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\Aide.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\Battlefield 1942.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\Battlefield 1942.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\DirectX EULA.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\D‚sinstaller Battlefield 1942.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\EA GAMES.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\Enregistrer ce produit.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\Infos EA.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\Jouer … BF 1942 en ligne avec GameSpy Arcade !.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\Lancer le serveur d‚di‚.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\LisezMoi.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\GameSpy Arcade\GameSpy Arcade Help.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\GameSpy Arcade\GameSpy Arcade Website.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\GameSpy Arcade\GameSpy.com Gaming's Homepage.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\GameSpy Arcade\Register GameSpy Arcade.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\IVCsoft\Internet Video Converter 1.53 fr
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\IVCsoft\Internet Video Converter 1.53 fr\Desinstaller IVC 1.53 fr.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\IVCsoft\Internet Video Converter 1.53 fr\Internet Video Converter 1.53 fr.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\IVCsoft\Internet Video Converter 1.53 fr\LICENCE_Internet_Video_Converter.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Lavalys\EVEREST Ultimate Edition
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Lavalys\EVEREST Ultimate Edition\EVEREST Ultimate Edition Documentation.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Lavalys\EVEREST Ultimate Edition\EVEREST Ultimate Edition on the Web.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Lavalys\EVEREST Ultimate Edition\EVEREST Ultimate Edition.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Lavalys\EVEREST Ultimate Edition\Uninstall EVEREST Ultimate Edition.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\ma-config.com\Desinstaller.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\ma-config.com\Ma-Config.html.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\ma-config.com\Preferences.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Malwarebytes' Anti-Malware\D‚sinstaller Malwarebytes' Anti-Malware.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Malwarebytes' Anti-Malware\Malwarebytes' Anti-Malware Help.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Malwarebytes' Anti-Malware\Malwarebytes' Anti-Malware.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\O&O Software\O&O Defrag
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\O&O Software\O&O Defrag\Aide O&O Defrag .lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\O&O Software\O&O Defrag\O&O Defrag.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\OpenOffice.org 2.4\OpenOffice.org Base.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\OpenOffice.org 2.4\OpenOffice.org Calc.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\OpenOffice.org 2.4\OpenOffice.org Draw.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\OpenOffice.org 2.4\OpenOffice.org Impress.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\OpenOffice.org 2.4\OpenOffice.org Math.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\OpenOffice.org 2.4\OpenOffice.org Writer.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Rockstar Games\GTA San Andreas
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Rockstar Games\GTA San Andreas\D‚sinstaller GTA San Andreas.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Rockstar Games\GTA San Andreas\Enregistrer En Ligne.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Rockstar Games\GTA San Andreas\Rockstar Games.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Rockstar Games\GTA San Andreas\Rockstar North Ltd.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Shareaza\D‚sinstaller.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Shareaza\GUI Mode
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Shareaza\Licence.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Shareaza\Shareaza.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Shareaza\TorrentWizard.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Shareaza\GUI Mode\Shareaza (Mode fenˆtr‚).lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Shareaza\GUI Mode\Shareaza (Mode simple).lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Shareaza\GUI Mode\Shareaza (Mode tabul‚).lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Ubisoft\Far Cry
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Ubisoft\Far Cry\D‚sinstaller Far Cry.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Xilisoft\3GP Video Converter 3
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Xilisoft\3GP Video Converter 3\Buy.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Xilisoft\3GP Video Converter 3\Readme.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Xilisoft\3GP Video Converter 3\Uninstall.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Xilisoft\3GP Video Converter 3\Xilisoft 3GP Video Converter 3.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Xilisoft\3GP Video Converter 3\Xilisoft 3GP Video Converter Help.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Xilisoft\3GP Video Converter 3\Xilisoft 3GP Video Converter Wizard 3.lnk
C:\Documents and Settings\Lucien\Bureau\jeux phone\1945.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\3D Ferrari Experience.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\3D Toxic Racer.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\3DGolfxProK700.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\3D_AMF_Xtreme_Bowling_163.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\3D_CaponeCasino.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\3D_Formula_GP_Racing_100.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\3D_Rally.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\3D_Xtremeignition.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\3D_Yamaha_Unleashed_100.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Abaddon.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\AgeOfEmpires.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\AirForceAll.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\AlphaWing2.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Ancestral_Bird.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Aquiles Versus Troya.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Argon 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Asphalt2.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\asphalt3.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\B-man.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Baldurs Gate.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Banjo Kazooie Adventure 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Bight Interactive Slam Street 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Block Breaker Deluxe.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Bluetooth_Biplanes.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Bobby Carrot 2.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Brain Challenge™.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Breakout Bears.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Coffee Breakmedia PoolDreams 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\connectfour.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Counterstrike.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\dlver-super-mario-all-stars.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\DragonIsland.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\driver3.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\driver_vegas.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\F4_SilverSurfer.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Fatal Force.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Gameloft.Rainbow.Six.Lockdown.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Gameloft_Rayman_Raving_Rabbids.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Gangland.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\gangstar_crime_city_kr.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\gdh4.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\GemJam.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Ghost_Rider.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\GTA NA MOTORE.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\GulosTale_Triplets_UK_v1_1_9.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Hands_On_Mobile_Call_Of_Duty_3_J2me.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\I Robot.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\King Kong Pinball.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Kingdom Of Heaven.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Little_Ninja_King.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\macrospace_crashnburnturbo_sonye_k500_en_v1_0_0_full.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Mafia Wars.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\mediaplazza_questforalliance2_1.0.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\MetalSlug.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Microforum Grubby 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\MidnightBowling.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\MidnightPool.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Minefield.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Mini Golf Castles.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\MobileChess.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Monopoly.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\NateAdamsFMX_K500_EN.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Need For Speed Carbon.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Need For Speed Underground 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\NEED_FOR_SPEED_UNDERGROUND_3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\NFS_Carbon.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\NFS_most_wanted.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Pitfall_Glacier.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Pman.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\PowerInlineX3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Prince SOT.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\prince_of_persia_the_two_thrones_s700.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Rally Evolution 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Rally Pro Contest Red Devil 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Resident Evil_full-screen_by_giu.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\River Storm 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\SaintsRow.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\samuriajack.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\SC-Pandora-Tomorrow.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\SiberianStrike ep1.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\SimCity.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\sk8trix.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\SkyForce.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Slyder.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\SnakeEvolution.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\SOCOM_US_Navy_SEALS.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Sonic_the_hedgehog.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Sonic_The_Hedgehog_Part2.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Speedball 2.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\SpiderMan3.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\SplinterCellPandoraTomorrow.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Submarine 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Sudoku.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Super_Mario_Brothers_3.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone	etris.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\TetrisMania.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\THQ.Wireless.Rafa.Nadal.Tennis.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Tower Bloxx.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Toxic WAR.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\V3X Ducati 3D Extreme.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\warcraft_1_3_5.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\WarOfTheWorlds.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Worms.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Worms2 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\WormsCrazyGolf2007.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\XIIIUKV500.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Yeti Sports 3.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Yeti_Sports_1.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Zuma.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\… lire !!.txt
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\AssaultCube.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Battlefield 1942.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Blue Coat K9 Web Protection Admin.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Call of Duty(R) 4 Multijoueur.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\call of duty(R) solo.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\CamStudio.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\CCleaner.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\CDBurnerXP.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\COD Serverstarter.exe
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\EVEREST Ultimate Edition.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Internet Video Converter 1.53 fr.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\lg ku 800.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Medal of Honor Batailles du Pacifique(tm).lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\mp3DirectCut.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Norman edition cleaner v3.exe
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Nouveau Texte Open Office.odt
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\O&O Defrag.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\open office.odt
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\settings.ini
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Shareaza.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\VDownloader.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Virtual DJ Trial.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Windows Movie Maker.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Xilisoft 3GP Video Converter 3.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Xilisoft 3GP Video Converter Wizard 3.lnk

mikoudu30 · Answer

ah oui et ceci et apparue sur mon bureau:

nitialisation GenProc 2.351 [30/01/2009] à [16:41:07,23]  
  
 *** Liste des composants GenProc ***  
  
C:\Documents and Settings\Lucien\Bureau\caisse d'epargne.url
C:\Documents and Settings\Lucien\Bureau\Debug.txt
C:\Documents and Settings\Lucien\Bureau\D‚mmarage
C:\Documents and Settings\Lucien\Bureau\Favoris r‚seau (2).lnk
C:\Documents and Settings\Lucien\Bureau\GenProc.zip
C:\Documents and Settings\Lucien\Bureau\jeux phone
C:\Documents and Settings\Lucien\Bureau\Malwarebytes' Anti-Malware.lnk
C:\Documents and Settings\Lucien\Bureau\Mes documents.lnk
C:\Documents and Settings\Lucien\Bureau\messagerie orange (2).url
C:\Documents and Settings\Lucien\Bureau\mozzilla firefox.lnk
C:\Documents and Settings\Lucien\Bureau\PhotoFiltre Studio.lnk
C:\Documents and Settings\Lucien\Bureau\Poste de travail.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau
C:\Documents and Settings\Lucien\Bureau\Screamer Radio.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Activision
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AssaultCube
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AVG Anti-Spyware 7.5
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AviSynth 2.5
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Call of Duty Single Player Demo
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Darluok-Server
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\DeepBurner
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\GameSpy Arcade
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\IVCsoft
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Lavalys
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\ma-config.com
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Malwarebytes' Anti-Malware
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\O&O Software
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Rockstar Games
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Shareaza
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Ubisoft
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Xilisoft
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Activision\Call of Duty(R) 4 - Modern Warfare(TM)
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Activision\Call of Duty(R) 4 - Modern Warfare(TM)\Call of Duty(R) 4 - Modern Warfare(TM) Multijoueur.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Activision\Call of Duty(R) 4 - Modern Warfare(TM)\Documentation
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Activision\Call of Duty(R) 4 - Modern Warfare(TM)\D‚sinstaller Call of Duty(R) 4 - Modern Warfare(TM).lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Activision\Call of Duty(R) 4 - Modern Warfare(TM)\Documentation\Assistance technique.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Activision\Call of Duty(R) 4 - Modern Warfare(TM)\Documentation\LisezMoi.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Activision\Call of Duty(R) 4 - Modern Warfare(TM)\Documentation\Manuel Call of Duty(R) 4 - Modern Warfare(TM).lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Activision\Call of Duty(R) 4 - Modern Warfare(TM)\Documentation\Support clientŠle.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AssaultCube\AssaultCube.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AssaultCube\README.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AssaultCube\Uninstall.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AVG Anti-Spyware 7.5\Service & Support.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AviSynth 2.5\AviSynth Online.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AviSynth 2.5\Download Plugins.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\AviSynth 2.5\Plugin Directory.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Darluok-Server\Uninstall Patch Darluok.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\Aide.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\Battlefield 1942.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\Battlefield 1942.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\DirectX EULA.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\D‚sinstaller Battlefield 1942.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\EA GAMES.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\Enregistrer ce produit.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\Infos EA.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\Jouer … BF 1942 en ligne avec GameSpy Arcade !.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\Lancer le serveur d‚di‚.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\EA GAMES\Battlefield 1942\LisezMoi.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\GameSpy Arcade\GameSpy Arcade Help.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\GameSpy Arcade\GameSpy Arcade Website.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\GameSpy Arcade\GameSpy.com Gaming's Homepage.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\GameSpy Arcade\Register GameSpy Arcade.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\IVCsoft\Internet Video Converter 1.53 fr
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\IVCsoft\Internet Video Converter 1.53 fr\Desinstaller IVC 1.53 fr.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\IVCsoft\Internet Video Converter 1.53 fr\Internet Video Converter 1.53 fr.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\IVCsoft\Internet Video Converter 1.53 fr\LICENCE_Internet_Video_Converter.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Lavalys\EVEREST Ultimate Edition
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Lavalys\EVEREST Ultimate Edition\EVEREST Ultimate Edition Documentation.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Lavalys\EVEREST Ultimate Edition\EVEREST Ultimate Edition on the Web.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Lavalys\EVEREST Ultimate Edition\EVEREST Ultimate Edition.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Lavalys\EVEREST Ultimate Edition\Uninstall EVEREST Ultimate Edition.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\ma-config.com\Desinstaller.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\ma-config.com\Ma-Config.html.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\ma-config.com\Preferences.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Malwarebytes' Anti-Malware\D‚sinstaller Malwarebytes' Anti-Malware.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Malwarebytes' Anti-Malware\Malwarebytes' Anti-Malware Help.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Malwarebytes' Anti-Malware\Malwarebytes' Anti-Malware.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\O&O Software\O&O Defrag
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\O&O Software\O&O Defrag\Aide O&O Defrag .lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\O&O Software\O&O Defrag\O&O Defrag.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\OpenOffice.org 2.4\OpenOffice.org Base.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\OpenOffice.org 2.4\OpenOffice.org Calc.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\OpenOffice.org 2.4\OpenOffice.org Draw.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\OpenOffice.org 2.4\OpenOffice.org Impress.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\OpenOffice.org 2.4\OpenOffice.org Math.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\OpenOffice.org 2.4\OpenOffice.org Writer.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Rockstar Games\GTA San Andreas
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Rockstar Games\GTA San Andreas\D‚sinstaller GTA San Andreas.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Rockstar Games\GTA San Andreas\Enregistrer En Ligne.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Rockstar Games\GTA San Andreas\Rockstar Games.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Rockstar Games\GTA San Andreas\Rockstar North Ltd.url
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Shareaza\D‚sinstaller.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Shareaza\GUI Mode
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Shareaza\Licence.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Shareaza\Shareaza.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Shareaza\TorrentWizard.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Shareaza\GUI Mode\Shareaza (Mode fenˆtr‚).lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Shareaza\GUI Mode\Shareaza (Mode simple).lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Shareaza\GUI Mode\Shareaza (Mode tabul‚).lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Ubisoft\Far Cry
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Ubisoft\Far Cry\D‚sinstaller Far Cry.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Xilisoft\3GP Video Converter 3
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Xilisoft\3GP Video Converter 3\Buy.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Xilisoft\3GP Video Converter 3\Readme.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Xilisoft\3GP Video Converter 3\Uninstall.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Xilisoft\3GP Video Converter 3\Xilisoft 3GP Video Converter 3.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Xilisoft\3GP Video Converter 3\Xilisoft 3GP Video Converter Help.lnk
C:\Documents and Settings\Lucien\Bureau\D‚mmarage\Xilisoft\3GP Video Converter 3\Xilisoft 3GP Video Converter Wizard 3.lnk
C:\Documents and Settings\Lucien\Bureau\jeux phone\1945.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\3D Ferrari Experience.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\3D Toxic Racer.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\3DGolfxProK700.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\3D_AMF_Xtreme_Bowling_163.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\3D_CaponeCasino.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\3D_Formula_GP_Racing_100.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\3D_Rally.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\3D_Xtremeignition.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\3D_Yamaha_Unleashed_100.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Abaddon.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\AgeOfEmpires.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\AirForceAll.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\AlphaWing2.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Ancestral_Bird.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Aquiles Versus Troya.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Argon 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Asphalt2.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\asphalt3.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\B-man.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Baldurs Gate.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Banjo Kazooie Adventure 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Bight Interactive Slam Street 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Block Breaker Deluxe.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Bluetooth_Biplanes.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Bobby Carrot 2.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Brain Challenge™.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Breakout Bears.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Coffee Breakmedia PoolDreams 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\connectfour.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Counterstrike.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\dlver-super-mario-all-stars.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\DragonIsland.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\driver3.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\driver_vegas.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\F4_SilverSurfer.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Fatal Force.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Gameloft.Rainbow.Six.Lockdown.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Gameloft_Rayman_Raving_Rabbids.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Gangland.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\gangstar_crime_city_kr.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\gdh4.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\GemJam.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Ghost_Rider.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\GTA NA MOTORE.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\GulosTale_Triplets_UK_v1_1_9.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Hands_On_Mobile_Call_Of_Duty_3_J2me.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\I Robot.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\King Kong Pinball.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Kingdom Of Heaven.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Little_Ninja_King.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\macrospace_crashnburnturbo_sonye_k500_en_v1_0_0_full.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Mafia Wars.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\mediaplazza_questforalliance2_1.0.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\MetalSlug.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Microforum Grubby 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\MidnightBowling.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\MidnightPool.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Minefield.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Mini Golf Castles.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\MobileChess.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Monopoly.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\NateAdamsFMX_K500_EN.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Need For Speed Carbon.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Need For Speed Underground 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\NEED_FOR_SPEED_UNDERGROUND_3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\NFS_Carbon.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\NFS_most_wanted.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Pitfall_Glacier.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Pman.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\PowerInlineX3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Prince SOT.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\prince_of_persia_the_two_thrones_s700.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Rally Evolution 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Rally Pro Contest Red Devil 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Resident Evil_full-screen_by_giu.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\River Storm 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\SaintsRow.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\samuriajack.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\SC-Pandora-Tomorrow.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\SiberianStrike ep1.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\SimCity.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\sk8trix.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\SkyForce.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Slyder.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\SnakeEvolution.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\SOCOM_US_Navy_SEALS.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Sonic_the_hedgehog.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Sonic_The_Hedgehog_Part2.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Speedball 2.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\SpiderMan3.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\SplinterCellPandoraTomorrow.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Submarine 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Sudoku.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Super_Mario_Brothers_3.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone	etris.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\TetrisMania.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\THQ.Wireless.Rafa.Nadal.Tennis.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Tower Bloxx.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Toxic WAR.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\V3X Ducati 3D Extreme.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\warcraft_1_3_5.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\WarOfTheWorlds.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Worms.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Worms2 3D.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\WormsCrazyGolf2007.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\XIIIUKV500.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Yeti Sports 3.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Yeti_Sports_1.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\Zuma.jar
C:\Documents and Settings\Lucien\Bureau\jeux phone\… lire !!.txt
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\AssaultCube.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Battlefield 1942.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Blue Coat K9 Web Protection Admin.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Call of Duty(R) 4 Multijoueur.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\call of duty(R) solo.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\CamStudio.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\CCleaner.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\CDBurnerXP.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\COD Serverstarter.exe
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\EVEREST Ultimate Edition.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Internet Video Converter 1.53 fr.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\lg ku 800.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Medal of Honor Batailles du Pacifique(tm).lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\mp3DirectCut.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Norman edition cleaner v3.exe
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Nouveau Texte Open Office.odt
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\O&O Defrag.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\open office.odt
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\settings.ini
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Shareaza.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\VDownloader.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Virtual DJ Trial.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Windows Movie Maker.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Xilisoft 3GP Video Converter 3.lnk
C:\Documents and Settings\Lucien\Bureau\Programme du bureau\Xilisoft 3GP Video Converter Wizard 3.lnk

jfkpresident · Answer

Telecharge FindyKill sur ton bureau : http://sd-1.archive-host.com/membres/up/116615172019703188/FindyKill.exe

--> Lance l installation avec les parametres par default

--> Double clic sur le raccourci FindyKill sur ton bureau

--> Au menu principal,choisi l option 1 (Recherche)

--> Post le rapport FindyKill.txt

Note : le rapport FindyKill.txt est sauvegardé a la racine du disque

mikoudu30 · Answer

voici le rapport:
###################### [ FindyKill V4.715 ]

# User : Lucien - MICKAEL
# Emplacement : C:\Program Files\FindyKill
# Outils Mis a jours 29/01/09 par Chiquitine29
# Recherche effectuée à 17:15:12 le 30/01/2009
# Windows XP - Internet Explorer 8.0.6001.18241
 
# [ FindyKill V4.715 - Scan ] ############## 
 
\\\\\\\\\\  [ Processus actifs ]  ///////////////////  
 

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\internet explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\system32\SearchFilterHost.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
 
\\\\\\\\\  [ Fichiers/Dossiers infectieux ]  ///////////////////  
 
 
################## [ C:\ ] 
 
 
################## [ C:\WINDOWS ] 
 
 
################## [ C:\WINDOWS\Prefetch ] 
 
Found ! - C:\WINDOWS\Prefetch\WORLD_OF_WARCRAFT_PATCH_V2.3.-2FF6A197.pf 
 
################## [ C:\WINDOWS\system32 ] 
 
 
################## [ C:\WINDOWS\system32\drivers ] 
 
 
################## [ C:\Documents and Settings\Lucien\Application Data ] 
 
Found ! [12/01/2009 07:35] - "C:\Documents and Settings\Lucien\Application Data\drivers" 
 
################## [ C:\DOCUME~1\Lucien\LOCALS~1\Temp ] 
 
 
\\\\\\\\\  [ Registre / Startup ]  ///////////////////  
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersionun]
   ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe
   msnmsgr="C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionun]
   NvCplDaemon=RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
   NvMediaCenter=RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
   SoundMan=SOUNDMAN.EXE
   avgnt="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
 
[HKEY_CURRENT_USER\software\local appwizard-generated applications\LG Contents Bank]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\msnmsgr]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\playplus]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\Registrar]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\setup]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\vscap]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\winupgro]
 
\\\\\\\\\  [ Registre / Clés infectieuses ] ///////////////////  
 
 
Found ! - HKEY_USERS\S-1-5-21-436374069-1214440339-839522115-1003\Software\Local AppWizard-Generated Applications\msnmsgr 
Found ! - HKEY_USERS\S-1-5-21-436374069-1214440339-839522115-1003\Software\Local AppWizard-Generated Applications\winupgro 
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\msnmsgr 
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winupgro 
 
 
\\\\\\\\\  [ Etat / Services ]  ///////////////////  
 

# Services : [ Auto=2 / Demande=3 / Désactivé=4 ] 

/!\ Ndisuio - # Type de démarrage = 4 
 
EapHost - # Type de démarrage = 3 
 
/!\ Ip6Fw - # Type de démarrage = 4 
 
SharedAccess - # Type de démarrage = 2 
 
wuauserv - # Type de démarrage = 2 
 
wscsvc - # Type de démarrage = 2 
 
 
\\\\\\\\\  [ Recherche dans supports amovibles]  ///////////////////  
 
 
# Informations : 

C: - Lecteur fixe

 
# presence des fichiers :  

 
 
\\\\\\\\\  [ Registre / Mountpoint2 ]  ///////////////////  
 
 
-> Not found ! 
 
 
################## [ ! Fin du rapport # FindyKill V4.715 ! ]

jfkpresident · Answer

Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d avoir été infectés sans les ouvrir


--> Double clic sur le raccourci FindyKill sur ton bureau

--> Au menu principal,choisi l option 2 (Suppression)


/!\ il y aura 2 redémarrage, laisse travailler l outils jusqu a l apparition du message "nettoyage effectué"

/!\ Ne te sert pas du pc durant la suppression , ton bureau ne sera pas accessible c est normal !

-------> ensuite post le rapport FindyKill.txt

Note : le rapport FindyKill.txt est sauvegardé a la racine du disque
Note : Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tapes explorer.exe et valides

Ensuite :

Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

* Lance l'installation du programme en exécutant le fichier téléchargé.
* Double-clique maintenant sur le raccourci de Toolbar-S&D.
* Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
* Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
* Poste le rapport généré. (C:\TB.txt)

mikoudu30 · Answer

voici le rapport FindyKil apré le nétoiyagge :



###################### [ FindyKill V4.715 ]

# User : Lucien - MICKAEL
# Executed from : C:\Program Files\FindyKill
# Update on 29/01/09Nby Chiquitine29
# Start at 17:27:03 the 30/01/2009
# Windows XP - Internet Explorer 8.0.6001.18241
 
# [ FindyKill V4.715 - Deleting ] ############### 
 
\\\\\\\\\  [ Active Processes ]  ///////////////////  
 

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avwsc.exe
 
\\\\\\\\\  [ Infected Files / Folders ]  ///////////////////  
 
 
################## [ C:\ ] 
 
 
################## [ C:\WINDOWS ] 
 
 
################## [ C:\WINDOWS\Prefetch ] 
 
Deleted ! - C:\WINDOWS\prefetch\WORLD_OF_WARCRAFT_PATCH_V2.3.-2FF6A197.pf 
 
################## [ C:\WINDOWS\system32 ] 
 
 
################## [ C:\WINDOWS\system32\drivers ] 
 
 
################## [ C:\Documents and Settings\Lucien\Application Data ] 
 
Deleted ! - "C:\Documents and Settings\Lucien\Application Data\drivers"  
 
################## [ C:\DOCUME~1\Lucien\LOCALS~1\Temp ] 
 
 
################## [ C:\Documents and Settings\Lucien\Local Settings\Temporary Internet Files\Content.IE5 ] 
 
 
\\\\\\\\\  [  Registry / Infected keys ]  ///////////////////  
 
Deleted ! - HKEY_USERS\S-1-5-21-436374069-1214440339-839522115-1003\Software\Local AppWizard-Generated Applications\msnmsgr   
Deleted ! - HKEY_USERS\S-1-5-21-436374069-1214440339-839522115-1003\Software\Local AppWizard-Generated Applications\winupgro   
 
\\\\\\\\\  [ States / Restarting of services ]  ///////////////////  
 

# Services : [ Auto=2 / Request=3 / Disable=4 ] 

Ndisuio - # Type of startup  = 3 
 
EapHost - # Type of startup  = 2 
 
Ip6Fw - # Type of startup  = 2 
 
SharedAccess - # Type of startup  = 2 
 
wuauserv - # Type of startup  = 2 
 
wscsvc - # Type of startup  = 2 
 
 
\\\\\\\\\  [ Cleaning Removable drives ]  ///////////////////  
 
# Informations : 

C: - Lecteur fixe

 
# deleting files : 
 
 
\\\\\\\\\  [ Registry / Mountpoint2 ]  ///////////////////  
 
 
 -> Not found ! 
 
 
\\\\\\\\\  [ Searching Other Infections ]  ///////////////////  
 
 
\\\\\\\\\  [ Searching Cracks / Keygen ]  ///////////////////  
 
C:\Documents and Settings\Lucien\Local Settings\Temporary Internet Files\Content.IE5\2MDH8DCQainbowcrack[1].html
C:\Documents and Settings\Lucien\Local Settings\Temporary Internet Files\Content.IE5\EBGAFSLZ\brutus-cracker-tous-les-mots-de-passe[1].htm
C:\Documents and Settings\Lucien\Recent\300 codes allopass gratuit r‚utilisable plus keygen pour cracker allopass, prizee, auditel, msn (divx, mp3, star warz, w.lnk
C:\Program Files\AssaultCube_v1.0\packages	extures\craig_fortune	errain\Rock_cracked.jpg
C:\Program Files\AssaultCube_v1.0\packages	extures\makke\cracked_mud.jpg
C:\Program Files\GamersFirst\War Rock\maps\Vitious\ObjectLightMap\v_crack_1661_4943.dds
C:\Program Files\GamersFirst\War Rock\maps\Vitious\ObjectLightMap\v_crack_2516_4941.dds
C:\Program Files\GamersFirst\War Rock\staticmesh\StandardMesh\v_crack.smf
C:\Program Files\GamersFirst\War Rock	exture\FM003\Decal_crack01_FM003.dds
C:\Program Files\GamersFirst\War Rock	exture\FM003\Decal_crack02_FM003.dds
C:\Program Files\GamersFirst\War Rock	exture\FM003\Decal_crack03_FM003.dds
C:\Program Files\GamersFirst\War Rock	exture\Santo\Decal_crack01_FM003.dds
 
################## [ ! End of report #   ! ]

mikoudu30 · Answer

et voici le rapport toolbar..:

 -----------\  ToolBar S&D 1.2.8   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3500+ )
   BIOS : Phoenix - AwardBIOS v6.00PG
   USER : Lucien ( Administrator )
   BOOT : Normal boot
   Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Activated)
   C:\ (Local Disk) - NTFS - Total:186 Go (Free:144 Go)
   D:\ (CD or DVD)

   "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
   Option : [1] ( 30/01/2009|17:35 )

   -----------\  Recherche de Fichiers / Dossiers ...


   -----------\  Extensions

   (Lucien) - {b9db16a4-6edc-47ec-a1f4-b86292ed211d} => dwhelper


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Search Page"="https://www.google.com/?gws_rd=ssl"
   "Start Page"="https://www.google.fr/?gws_rd=ssl"
   "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"


   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\Lucien\Local Settings\Temporary Internet Files\Content.IE5\2MDH8DCQainbowcrack[1].html



   1 - "C:\ToolBar SD\TB_1.txt" - 30/01/2009|17:35 - Option : [1]

   -----------\  Fin du rapport a 17:35:55,57

mikoudu30 · Answer

et voici le rapport toolbar..:

 -----------\  ToolBar S&D 1.2.8   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3500+ )
   BIOS : Phoenix - AwardBIOS v6.00PG
   USER : Lucien ( Administrator )
   BOOT : Normal boot
   Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Activated)
   C:\ (Local Disk) - NTFS - Total:186 Go (Free:144 Go)
   D:\ (CD or DVD)

   "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
   Option : [1] ( 30/01/2009|17:35 )

   -----------\  Recherche de Fichiers / Dossiers ...


   -----------\  Extensions

   (Lucien) - {b9db16a4-6edc-47ec-a1f4-b86292ed211d} => dwhelper


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Search Page"="https://www.google.com/?gws_rd=ssl"
   "Start Page"="https://www.google.fr/?gws_rd=ssl"
   "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"


   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\Lucien\Local Settings\Temporary Internet Files\Content.IE5\2MDH8DCQainbowcrack[1].html



   1 - "C:\ToolBar SD\TB_1.txt" - 30/01/2009|17:35 - Option : [1]

   -----------\  Fin du rapport a 17:35:55,57

jfkpresident · Answer

supprimes moi ces cracks de jeux video !! Sinon ton pc pourrait se réinfecter !

1) Imprime ces instructions car il faudra fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.

2) Télécharge Malwarebytes' Anti-Malware (MBAM) et enregistre le sur ton Bureau à partir de ce lien :

https://www.malwarebytes.com/

3) A la fin du téléchargement, ferme toutes les fenêtres et programmes, y compris celui-ci.

4) Double-clique sur l'icône Download_mbam-setup.exe sur ton bureau pour démarrer le programme d'installation.

5) Pendant l'installation, suis les indications (en particulier le choix de la langue et l'autorisation d'accession à Internet). N'apporte aucune modification aux réglages par défaut et, en fin d'installation, vérifie que les options Update Malwarebytes' Anti-Malware et Launch Malwarebytes' Anti-Malware sont cochées.

6) MBAM démarrera automatiquement et enverra un message demandant à mettre à jour le programme avant de lancer une analyse. Comme MBAM se met automatiquement à jour en fin d'installation, clique sur OK pour fermer la boîte de dialogue. La fenêtre principale de MBAM s'affiche :

7) Dans l'onglet analyse, vérifie que "Exécuter un examen complet" est coché et clique sur le bouton Rechercher pour démarrer l'analyse.

8) MBAM analyse ton ordinateur. L'analyse peut prendre un certain temps. Il suffit de vérifier de temps en temps son avancement.

9) A la fin de l'analyse, un message s'affiche indiquant la fin de l'analyse. Clique sur OK pour poursuivre.

10) Si des malwares ont été détectés, leur liste s'affiche.
En cliquant sur Suppression (?) , MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.

11) MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Ferme le Bloc-notes. (Le rapport peut être retrouvé sous l'onglet Rapports/logs)

12) Ferme MBAM en cliquant sur Quitter.

13) Poste le rapport dans ta réponse

miikoudu3015 · Answer

voici le rapport mes il n'y a eu aucun élément nuisible détécter :

Malwarebytes' Anti-Malware 1.28
Version de la base de données: 1243
Windows 5.1.2600 Service Pack 3

30/01/2009 20:33:13
mbam-log-2009-01-30 (20-33-13).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 110976
Temps écoulé: 25 minute(s), 11 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

jfkpresident · Answer

Télécharges ComboFix à partir d'un de ces liens :

http://download.bleepingcomputer.com/sUBs/ComboFix.exe
https://forospyware.com
http://www.geekstogo.com/forum/files/file/197-combofix-by-subs/

Et important, enregistre le sur le bureau.

Avant d'utiliser ComboFix :

? Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours.

? Désactive provisoirement et seulement le temps de l'utilisation de ComboFix,
la protection en temps réel de ton Antivirus et de tes Antispywares,
qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.


Une fois fait, sur ton bureau double-clic sur Combofix.exe.

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

/!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes.

- En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt,.
est automatiquement sauvegardé et rangé à C:\Combofix.txt)

? Réactive la protection en temps réel de ton Antivirus et de tes Antispywares,
avant de te reconnecter à internet.

? Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

mikoudu30 · Answer

voici le rapport : j'ai remarquer que mon ordi aller plus vite ComboFix 09-01-21.04 - Lucien 2009-01-31 9:49:24.2 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.1023.685 [GMT 1:00] Lancé depuis: c:\documents and settings\Lucien\Bureau\ComboFix.exe AV: Avira AntiVir PersonalEdition Classic *On-access scanning disabled* (Updated) * Un nouveau point de restauration a été créé . - Mode FONCTIONNALITES REDUITES - . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\program files\FlashGet Network c:\program files\FlashGet Network\FlashGet universal\dbtrans_verbose.log c:\program files\FlashGet Network\FlashGet universal\fgoption.ini c:\program files\FlashGet Network\FlashGet universal\P2PCfg.ini c:\program files\FlashGet Network\FlashGet universal\p2spmgr.ini c:\program files\FlashGet Network\FlashGet universal\p4spmgr.ini c:\program files\FlashGet Network\FlashGet universal\Profiles\config.dat c:\program files\FlashGet Network\FlashGet universal\Profiles\tasks.dat c:\program files\FlashGet Network\FlashGet universal\transaction.log . ((((((((((((((((((((((((((((( Fichiers créés du 2008-12-28 au 2009-01-31 )))))))))))))))))))))))))))))))))))) . 2009-01-30 21:39 . 2009-01-30 21:52 105,984 --a------ c:\windows\system32\c_dll.dll 2009-01-30 17:35 . 2009-01-30 17:35 d-------- C:\ToolBar SD 2009-01-30 17:15 . 2009-01-30 17:32 d-------- c:\program files\FindyKill 2009-01-29 20:49 . 2009-01-29 20:49 579,584 --a--c--- c:\windows\system32\dllcache\user32.dll 2009-01-29 20:47 . 2009-01-29 20:47 d-------- c:\windows\ERUNT 2009-01-29 20:45 . 2009-01-29 20:56 d-------- C:\SDFix 2009-01-29 18:36 . 2009-01-29 18:36 3,754,109 --a------ c:\windows\system32\lncom_.mp3 2009-01-29 13:15 . 2009-01-29 13:15 103 --a------ c:\windows\pro.INI 2009-01-28 20:16 . 2009-01-29 13:15 d-------- c:\program files\Teleport Pro 2009-01-28 20:08 . 2009-01-28 20:08 d-------- C:\Downloads 2009-01-28 20:07 . 2009-01-28 20:07 d-------- C:\profiles 2009-01-28 20:07 . 2009-01-28 20:09 d-------- c:\documents and settings\Lucien\Application Data\BITS 2009-01-28 13:34 . 2009-01-28 13:34 d-------- c:\program files\pspvideo9 2009-01-28 12:00 . 2009-01-29 09:38 d-------- c:\program files\Fichiers communs\Blizzard Entertainment 2009-01-28 07:33 . 2009-01-28 07:33 1,681 --a------ c:\windows\[u]0/u 2009-01-28 07:33 . 2009-01-28 07:33 220 --a------ c:\windows\Faux 2009-01-28 07:33 . 2009-01-28 07:33 102 --a------ c:\windows\Times New Roman 2009-01-27 20:12 . 2009-01-30 20:15 d-------- c:\program files\NetBus Pro 2009-01-27 20:12 . 1998-10-29 17:45 306,688 --a------ c:\windows\IsUninst.exe 2009-01-24 15:34 . 2009-01-24 15:34 d-------- c:\documents and settings\Lucien\Application Data\Canneverbe_Limited 2009-01-24 12:33 . 2009-01-24 12:33 d-------- c:\program files\Codemasters 2009-01-24 12:30 . 2009-01-24 12:30 d-------- c:\program files\MC2 2009-01-24 11:21 . 2009-01-24 11:21 d-------- c:\program files\Microsoft Games 2009-01-24 10:50 . 2009-01-24 12:59 d-------- c:\program files\Electronic Arts 2009-01-18 10:02 . 2009-01-18 10:02 d-------- c:\documents and settings\All Users\Application Data\AVS4YOU 2009-01-17 12:05 . 2009-01-17 12:05 d-------- c:\program files\GamersFirst 2009-01-16 07:50 . 2009-01-25 13:07 d-------- c:\documents and settings\Lucien\Application Data\vlc 2009-01-16 07:01 . 2009-01-16 07:01 23,392 --a------ c:\windows\system32\nscompat.tlb 2009-01-16 07:01 . 2009-01-16 07:01 16,832 --a------ c:\windows\system32\amcompat.tlb 2009-01-15 18:57 . 2009-01-15 18:57 d-------- c:\program files\VideoLAN 2009-01-15 18:57 . 2009-01-28 17:46 d-------- c:\documents and settings\Lucien\Application Data\dvdcss 2009-01-15 18:33 . 2009-01-15 18:33 d-------- c:\program files\CamStudio 2009-01-14 20:22 . 2009-01-14 20:22 d-------- c:\program files\VirtualDJ 2009-01-14 09:37 . 2009-01-14 09:37 118 --a------ c:\windows\system32\MRT.INI 2009-01-12 17:10 . 2009-01-23 17:32 d-------- c:\program files\MSN Messenger 2009-01-12 07:45 . 2009-01-12 07:45 d-------- c:\program files\Avira 2009-01-12 07:45 . 2009-01-12 07:45 d-------- c:\documents and settings\All Users\Application Data\Avira 2009-01-11 10:01 . 2008-10-22 08:41 81,920 --a------ c:\windows\system\cisvc.exe 2009-01-11 09:58 . 2009-01-11 09:58 d-------- c:\documents and settings\All Users\Application Data\Grisoft 2009-01-10 20:57 . 2009-01-12 07:32 d-------- c:\documents and settings\Lucien\.housecall6.6 2009-01-10 20:28 . 2008-10-22 08:41 81,920 --a------ c:\windows\cmstp.exe 2009-01-10 11:37 . 2009-01-10 11:37 d-------- c:\program files\Shareaza 2009-01-06 18:00 . 2009-01-18 11:45 d-------- c:\program files\Astonsoft 2009-01-06 18:00 . 2009-01-06 18:01 d-------- c:\documents and settings\Lucien\Application Data\DeepBurner 2009-01-05 18:54 . 2009-01-12 21:05 d-------- c:\program files\GameSpy Arcade 2009-01-02 10:18 . 2009-01-02 10:18 d-------- c:\program files\Real 2009-01-02 10:18 . 2009-01-02 10:26 d-------- c:\program files\Fichiers communs\Real 2009-01-02 10:16 . 2009-01-28 20:07 d-------- c:\program files\Google 2009-01-01 13:00 . 2009-01-01 13:00 d-------- c:\documents and settings\Lucien\Application Data\Gearbox Software 2009-01-01 12:59 . 2005-04-11 14:07 89,360 --a------ c:\windows\system32\VB5DB.DLL 2009-01-01 12:59 . 2005-04-11 14:07 69,632 --a------ c:\windows\system32\xmltok.dll 2009-01-01 12:59 . 2005-04-11 14:07 36,864 --a------ c:\windows\system32\xmlparse.dll 2009-01-01 12:59 . 2005-04-11 14:07 35,840 --a------ c:\windows\system32\comdlg32.oca 2009-01-01 12:59 . 2005-04-11 14:07 26,064 --a------ c:\windows\system32\xmlinst.exe 2008-12-30 19:10 . 2008-12-30 19:10 d-------- c:\documents and settings\Lucien\Application Data\Canon 2008-12-29 19:52 . 2009-01-12 17:18 d-------- c:\program files\Call of Duty Single Player Demo 2008-12-29 16:57 . 2008-12-29 16:57 d-------- c:\documents and settings\Lucien\Application Data\Blender Foundation 2008-12-28 15:07 . 2008-12-28 15:08 d-------- c:\documents and settings\Lucien\Application Data\GetRightToGo 2008-12-27 11:13 . 2005-03-09 20:50 46,592 --a------ c:\windows\system32\libusb0.dll 2008-12-27 11:13 . 2005-03-09 20:50 33,792 --a------ c:\windows\system32\drivers\libusb0.sys 2008-12-26 19:06 . 2009-01-02 10:22 d-------- c:\program files\Ubisoft 2008-12-26 18:04 . 2008-12-26 18:04 d-------- c:\documents and settings\All Users\Application Data\Blizzard 2008-12-25 16:22 . 2008-12-25 16:22 d-------- c:\windows\ie8updates 2008-12-25 16:08 . 2008-12-25 16:08 d-------- c:\program files\Trymedia 2008-12-24 16:12 . 2008-12-24 16:12 d--h----- c:\documents and settings\All Users\Application Data\CanonBJ 2008-12-24 16:11 . 2008-02-25 20:00 230,912 --a------ c:\windows\system32\CNMLM9I.DLL 2008-12-24 16:11 . 2008-04-13 20:45 15,104 --a------ c:\windows\system32\drivers\usbscan.sys 2008-12-24 16:11 . 2008-04-13 20:45 15,104 --a--c--- c:\windows\system32\dllcache\usbscan.sys 2008-12-24 16:09 . 2008-04-13 20:47 25,856 --a------ c:\windows\system32\drivers\usbprint.sys 2008-12-24 16:09 . 2008-04-13 20:47 25,856 --a--c--- c:\windows\system32\dllcache\usbprint.sys 2008-12-24 12:12 . 2008-12-24 12:12 682,280 --a------ c:\windows\system32\pbsvc.exe 2008-12-24 12:12 . 2008-12-24 12:12 22,328 --a------ c:\documents and settings\Lucien\Application Data\PnkBstrK.sys 2008-12-24 10:37 . 2008-12-24 10:37 d--hs---- c:\documents and settings\Lucien\PrivacIE 2008-12-24 10:33 . 2008-12-24 10:33 d--h-c--- c:\windows\ie8 2008-12-23 17:55 . 2009-01-02 10:27 d-------- c:\program files\EasySearch 2008-12-23 10:07 . 2008-12-23 12:57 d-------- c:\program files\Blue Coat K9 Web Protection 2008-12-23 09:20 . 2008-10-22 08:41 81,920 --a------ c:\windows\system\mstsc.exe 2008-12-23 09:20 . 2008-10-22 08:41 81,920 --a------ c:\windows\dllhst3g.exe 2008-12-22 13:43 . 2008-10-22 08:41 81,920 --a------ c:\windows\clipsrv.exe 2008-12-22 11:15 . 2009-01-17 11:25 139,152 --a------ c:\windows\system32\drivers\PnkBstrK.sys 2008-12-22 11:15 . 2009-01-17 11:25 111,928 --a------ c:\windows\system32\PnkBstrB.exe 2008-12-22 11:15 . 2008-12-24 12:12 66,872 --a------ c:\windows\system32\PnkBstrA.exe 2008-12-22 11:05 . 2009-01-10 21:03 d-------- c:\program files\Wolfenstein - Enemy Territory 2008-12-21 18:04 . 2008-12-24 12:27 d-------- c:\program files\Call of Duty United Offensive Single Player Demo 2008-12-21 16:11 . 2008-12-21 16:11 d-------- c:\program files\OpenAL 2008-12-21 16:11 . 2008-12-21 16:11 d-------- c:\program files\AssaultCube_v1.0 2008-12-21 08:52 . 2009-01-10 11:35 d-------- c:\program files\eMule 2008-12-20 21:34 . 2008-12-20 21:34 d-------- c:\documents and settings\Lucien\Application Data\OpenOffice.org 2008-12-20 21:33 . 2008-12-25 10:07 d-------- c:\program files\OpenOffice.org 3 2008-12-20 19:35 . 2008-12-20 19:35 d-------- c:\windows\Patch Darluok 2008-12-20 18:55 . 2008-12-20 18:55 d-------- c:\windows\system32\NtmsData 2008-12-20 18:55 . 2001-08-17 21:52 12,032 --a------ c:\windows\system32\drivers\amsint.sys 2008-12-20 18:55 . 2001-08-17 21:52 12,032 --a--c--- c:\windows\system32\dllcache\amsint.sys 2008-12-20 18:44 . 2009-01-31 09:17 50,925 --a------ c:\windows\system32\OODBS.lor 2008-12-20 18:42 . 2008-12-20 18:42 d-------- C:\NVIDIA 2008-12-20 18:42 . 2008-07-29 13:33 446,464 --a------ c:\windows\system32\nvunrm.exe 2008-12-20 18:42 . 2008-07-10 04:07 7,143 --a------ c:\windows\system32\nvide.nvu 2008-12-20 18:42 . 2008-07-29 13:30 6,045 --a------ c:\windows\system32\nvnrm.nvu 2008-12-20 18:42 . 2008-07-08 01:45 4,984 --a------ c:\windows\system32\drivers\nvphy.bin 2008-12-20 18:34 . 2004-08-14 02:56 5,810 --a------ c:\windows\system32\drivers\ASACPI.sys 2008-12-20 18:31 . 2008-12-20 18:31 d-------- c:\program files\AMD 2008-12-20 18:31 . 2006-07-01 22:42 43,520 --a------ c:\windows\system32\drivers\AmdK8.sys 2008-12-20 18:30 . 2008-12-20 18:30 d-------- c:\documents and settings\Lucien\Application Data\InstallShield 2008-12-20 18:16 . 2008-12-20 18:16 d-------- c:\program files\Realtek AC97 2008-12-20 17:19 . 2008-12-20 17:19 d-------- c:\program files\OO Software 2008-12-20 17:12 . 2009-01-31 09:17 205,483 --a------ c:\windows\system32\nvapps.xml 2008-12-20 17:11 . 2008-12-20 17:11 d-------- c:\windows\nview 2008-12-20 17:11 . 2008-12-02 10:13 453,152 --a------ c:\windows\system32\NVUNINST.EXE 2008-12-20 17:11 . 2008-12-02 23:11 453,152 --a------ c:\windows\system32\nvudisp.exe 2008-12-20 17:11 . 2008-12-02 23:11 18,696 --a------ c:\windows\system32\nvdisp.nvu 2008-12-20 17:06 . 2008-12-21 12:19 d-------- c:\program files\ma-config.com 2008-12-20 16:29 . 2008-04-13 20:46 61,696 --a------ c:\windows\system32\drivers\ohci1394.sys 2008-12-20 16:29 . 2008-04-13 20:46 61,696 --a--c--- c:\windows\system32\dllcache\ohci1394.sys 2008-12-20 16:29 . 2008-04-13 20:46 53,376 --a------ c:\windows\system32\drivers\1394bus.sys 2008-12-20 16:29 . 2008-04-13 20:46 53,376 --a--c--- c:\windows\system32\dllcache\1394bus.sys 2008-12-20 16:29 . 2001-08-17 21:46 6,400 --a------ c:\windows\system32\drivers\enum1394.sys 2008-12-20 16:29 . 2001-08-17 21:46 6,400 --a--c--- c:\windows\system32\dllcache\enum1394.sys 2008-12-20 16:22 . 2001-08-17 22:00 2,944 --a------ c:\windows\system32\drivers\msmpu401.sys 2008-12-20 16:22 . 2001-08-17 22:00 2,944 --a--c--- c:\windows\system32\dllcache\msmpu401.sys . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2009-01-30 19:44 --------- d-----w c:\program files\Windows Live Safety Center 2009-01-29 20:12 --------- d-----w c:\documents and settings\Lucien\Application Data\OpenOffice.org2 2009-01-29 08:38 --------- d--h--w c:\program files\InstallShield Installation Information 2009-01-28 12:34 --------- d-----w c:\program files\AviSynth 2.5 2009-01-24 14:34 --------- d-----w c:\program files\CDBurnerXP 2009-01-18 10:42 --------- d-----w c:\documents and settings\Lucien\Application Data\LimeWire 2009-01-18 09:07 --------- d-----w c:\program files\Fichiers communs\AVSMedia 2009-01-18 09:07 --------- d-----w c:\program files\AVS4YOU 2009-01-15 17:58 --------- d-----w c:\program files\Windows Media Connect 2 2009-01-10 10:37 --------- d-----w c:\documents and settings\Lucien\Application Data\Shareaza 2009-01-02 09:27 --------- d-----w c:\program files\Creative 2009-01-02 09:27 --------- d-----w c:\program files\CCleaner 2009-01-02 09:18 499,712 ----a-w c:\windows\system32\msvcp71.dll 2009-01-02 09:18 348,160 ----a-w c:\windows\system32\msvcr71.dll 2008-12-26 12:26 --------- d-----w c:\program files\PhotoFiltre Studio 2008-12-25 09:12 --------- d-----w c:\program files\OpenOffice.org 2.4 2008-12-24 11:26 --------- d-----w c:\program files\Activision 2008-12-22 17:55 --------- d-----w c:\program files\Pinnacle 2008-12-21 17:26 --------- d-----w c:\program files\Messenger Plus! Live 2008-12-21 15:11 413,696 ----a-w c:\windows\system32\wrap_oal.dll 2008-12-21 15:11 110,592 ----a-w c:\windows\system32\OpenAL32.dll 2008-12-21 11:19 --------- d-----w c:\documents and settings\All Users\Application Data\ma-config.com 2008-12-20 20:55 --------- d-----w c:\program files\Windows Live 2008-12-20 20:55 --------- d-----w c:\program files\Lavalys 2008-12-11 10:57 333,952 ----a-w c:\windows\system32\drivers\srv.sys 2008-10-23 12:36 286,720 ----a-w c:\windows\system32\gdi32.dll 2008-10-22 07:41 81,920 ----a-w c:\windows\cisvc.exe 2008-10-22 07:41 81,920 ----a-w c:\documents and settings\Lucien\Application Data\mstsc.exe 2008-10-16 13:13 202,776 ----a-w c:\windows\system32\wuweb.dll 2008-10-16 13:13 1,809,944 ----a-w c:\windows\system32\wuaueng.dll 2008-10-16 13:12 561,688 ----a-w c:\windows\system32\wuapi.dll 2008-10-16 13:12 323,608 ----a-w c:\windows\system32\wucltui.dll 2008-10-16 13:09 92,696 ----a-w c:\windows\system32\cdm.dll 2008-10-16 13:09 51,224 ----a-w c:\windows\system32\wuauclt.exe 2008-10-16 13:09 43,544 ----a-w c:\windows\system32\wups2.dll 2008-10-16 13:08 34,328 ----a-w c:\windows\system32\wups.dll 2008-10-16 13:06 268,648 ----a-w c:\windows\system32\mucltui.dll 2008-10-16 13:06 208,744 ----a-w c:\windows\system32\muweb.dll 2008-10-11 09:10 70,162 ----a-w c:\windows\BricoPackUninst.cmd 2008-10-11 09:10 5,419 ----a-w c:\windows\BricoPackFoldersDelete.cmd 2008-10-10 19:30 81,984 ----a-w c:\windows\system32\bdod.bin 2008-10-08 15:34 98,304 ----a-w c:\windows\DUMP4074.tmp 2008-10-08 15:32 98,304 ----a-w c:\windows\DUMP4025.tmp 2008-10-08 15:30 98,304 ----a-w c:\windows\DUMP3827.tmp 2008-10-08 15:24 90,112 ----a-w c:\windows\DUMP3f7a.tmp 2008-10-08 15:23 98,304 ----a-w c:\windows\DUMP3112.tmp 2008-10-08 15:22 98,304 ----a-w c:\windows\DUMP4084.tmp 2008-10-08 15:18 98,304 ----a-w c:\windows\DUMP4083.tmp 2008-10-08 15:17 98,304 ----a-w c:\windows\DUMP40a2.tmp 2008-10-08 15:16 98,304 ----a-w c:\windows\DUMP3efd.tmp 2008-10-08 13:54 98,304 ----a-w c:\windows\DUMP5052.tmp 2008-10-03 10:03 247,326 ----a-w c:\windows\system32\strmdll.dll 2008-10-02 23:46 81,920 ----a-w c:\windows\system32\frapsvid.dll 2008-10-19 09:58 49,152 ----a-w c:\program files\mozilla firefox\components\SiteVacuumXPCOM.dll 2008-10-08 12:30 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008092920081006\index.dat 2008-10-08 13:36 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008100820081009\index.dat . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] "msnmsgr"="c:\program files\MSN Messenger\MsnMsgr.Exe" [2007-01-19 5674352] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-12-02 13680640] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-12-02 86016] "avgnt"="c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497] "SoundMan"="SOUNDMAN.EXE" [2007-04-16 c:\windows\soundman.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks] "{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2008-05-26 304128] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.XFR1"= xfcodec.dll [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ autocheck autochk *\[u]0/uOODBS [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Windows Search.lnk] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Windows Search.lnk backup=c:\windows\pss\Windows Search.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^Lucien^Menu Démarrer^Programmes^Démarrage^Outil de notification Live Search.lnk] path=c:\documents and settings\Lucien\Menu Démarrer\Programmes\Démarrage\Outil de notification Live Search.lnk backup=c:\windows\pss\Outil de notification Live Search.lnkStartup [HKLM\~\startupfolder\C:^Documents and Settings^Lucien^Menu Démarrer^Programmes^Démarrage^Ubisoft register.lnk] path=c:\documents and settings\Lucien\Menu Démarrer\Programmes\Démarrage\Ubisoft register.lnk backup=c:\windows\pss\Ubisoft register.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck] c:\windows\system32\dumprep 0 -k [X] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE] --a------ 2008-04-14 03:33 15360 c:\windows\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup] --a------ 2004-04-17 12:41 196608 c:\progra~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler] --a------ 2006-03-20 15:34 86960 c:\program files\Fichiers communs\InstallShield\UpdateService\issch.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSConfig] --a------ 2008-04-14 03:34 172544 c:\windows\pchealth\helpctr\binaries\msconfig.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr] --a------ 2007-01-19 12:55 5674352 c:\program files\MSN Messenger\msnmsgr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\snpstd3] --a------ 2006-09-19 08:07 827392 c:\windows\vsnpstd3.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC] --a------ 2008-08-01 14:23 61440 c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] --a------ 2008-06-10 03:27 144784 c:\program files\Java\jre1.6.0_07\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] --a------ 2008-12-02 23:11 1657376 c:\windows\system32\nwiz.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan] --a------ 2007-04-16 15:28 577536 c:\windows\soundman.exe [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe"= "%windir%\Network Diagnostic\xpnetdiag.exe"= "c:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe"= "c:\Program Files\EA GAMES\Medal of Honor Batailles du Pacifique(tm)\mohpa.exe"= "c:\Program Files\Malwarebytes' Anti-Malware\mbam.exe"= "c:\WINDOWS\system32\PnkBstrA.exe"= "c:\WINDOWS\system32\PnkBstrB.exe"= "c:\Documents and Settings\Lucien\Mes documents\EA Games\BF1942.exe"= "c:\Documents and Settings\Lucien\Mes documents\EA Games\BF1942_w32ded.exe"= "c:\Program Files\Shareaza\Shareaza.exe"= "c:\Program Files\MSN Messenger\msnmsgr.exe"= "c:\Program Files\MSN Messenger\livecall.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "5900:TCP"= 5900:TCP:vnc5900 "5800:TCP"= 5800:TCP:vnc5800 "80:TCP"= 80:TCP:@xpsp2res.dll,-22004 "3724:TCP"= 3724:TCP:Blizzard Downloader: 3724 R0 m5289;m5289;c:\windows\system32\drivers\m5289.sys [2008-08-04 52480] R0 uliagpkx;ULi AGP Bus Filter Driver;c:\windows\system32\drivers\AGPKX.SYS [2008-08-04 45056] R1 cwmtdi;cwmtdi;c:\windows\system32\drivers\cwmtdi.sys [2007-05-15 48640] R4 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys [2008-07-30 277736] S3 AC97ALI;Service for AC'97 Driver (WDM);c:\windows\system32\drivers\ali55wdm.sys [2008-08-04 63488] S3 libusb0;LibUsb-Win32 - Kernel Driver, Version 0.1.10.1;c:\windows\system32\drivers\libusb0.sys [2008-12-27 33792] S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2008-12-19 195752] . Contenu du dossier 'Tâches planifiées' 2008-09-15 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [] 2009-01-31 c:\windows\Tasks\User_Feed_Synchronization-{C86FA902-D40C-4125-94E3-7D3878CEE2CE}.job - c:\windows\system32\msfeedssync.exe [2008-08-22 03:05] . - - - - ORPHELINS SUPPRIMES - - - - MSConfigStartUp-!AVG Anti-Spyware - c:\program files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe MSConfigStartUp-Load - c:\windows\System32\drivers\mqtgsvc.exe . ------- Examen supplémentaire ------- . uStart Page = hxxp://www.google.fr/ IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000 TCP: {B2138BBF-E272-4F25-899A-25027F725427} = 192.168.1.1 DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - hxxp://fichiers.touslesdrivers.com/fichiers/hardwaredetection/hardwaredetection_3_1_0_4.cab FF - ProfilePath - c:\documents and settings\Lucien\Application Data\Mozilla\Firefox\Profiles\[u]0/u6o0wotx.default\ FF - prefs.js: browser.search.selectedEngine - Google Search Community FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr FF - prefs.js: keyword.URL - hxxp://mystart.magentic.com/?loc=FF_Magentic_AddressBar&search= FF - component: c:\program files\Mozilla Firefox\components\SiteVacuumXPCOM.dll FF - plugin: c:\program files\ma-config.com\nphardwaredetection.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-01-31 09:49:50 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . --------------------- CLES DE REGISTRE BLOQUEES --------------------- [HKEY_USERS\S-1-5-21-436374069-1214440339-839522115-1003\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*] "??"=hex:b1,cf,75,23,46,79,9c,1c,32,d4,95,67,6a,ce,dd,fb,d4,1f,fb,f8,ee,8a,48, 30,de,18,d9,e8,c6,53,c1,6d,7e,ea,f6,2b,ea,74,2d,16,fd,41,b1,a5,f9,47,99,82,\ "??"=hex:f6,39,70,7c,32,af,c8,7a,5e,f3,e3,b8,3f,c5,4d,1c [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32*] "ThreadingModel"="Apartment" @="c:\WINDOWS\system32\OLE32.DLL" "cd042efbbd7f7af1647644e76e06692b"=hex:c8,28,51,af,b0,29,a3,98,c6,86,b7,91,22, 45,2f,9e,c8,28,51,af,b0,29,a3,98,2b,21,6c,d8,22,6a,8c,92,e2,63,26,f1,3f,c8,\ [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32*] "ThreadingModel"="Apartment" @="c:\WINDOWS\system32\OLE32.DLL" "bca643cdc5c2726b20d2ecedcc62c59b"=hex:6a,9c,d6,61,af,45,84,18,75,24,f7,25,2f, 71,a2,8a,71,3b,04,66,8b,46,0d,96,98,48,20,84,22,07,e6,c4,6a,9c,d6,61,af,45,\ [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32*] "ThreadingModel"="Apartment" @="c:\WINDOWS\system32\OLE32.DLL" "2c81e34222e8052573023a60d06dd016"=hex:25,da,ec,7e,55,20,c9,26,ec,48,07,7b,ae, f0,8b,55,25,da,ec,7e,55,20,c9,26,74,af,9b,02,87,b6,1f,a9,ff,7c,85,e0,43,d4,\ [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32*] "ThreadingModel"="Apartment" @="c:\WINDOWS\system32\OLE32.DLL" "2582ae41fb52324423be06337561aa48"=hex:86,8c,21,01,be,91,eb,e7,af,7b,e5,78,8f, 93,91,f3,3e,1e,9e,e0,57,5a,93,61,f1,a0,c8,07,95,58,39,35,86,8c,21,01,be,91,\ [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32*] "ThreadingModel"="Apartment" @="c:\WINDOWS\system32\OLE32.DLL" "caaeda5fd7a9ed7697d9686d4b818472"=hex:e9,02,6c,fa,fb,1d,47,57,1e,ea,12,74,15, 90,fa,4d,cd,44,cd,b9,a6,33,6c,cd,89,59,33,a2,4d,70,b5,79,f5,1d,4d,73,a8,13,\ [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32*] "ThreadingModel"="Apartment" @="c:\WINDOWS\system32\OLE32.DLL" "a4a1bcf2cc2b8bc3716b74b2b4522f5d"=hex:df,20,58,62,78,6b,cf,c8,61,cf,0d,e2,fa, d6,0c,7d,b0,18,ed,a7,3f,8d,37,a4,56,7a,cc,8d,8d,49,90,b0,df,20,58,62,78,6b,\ [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32*] "ThreadingModel"="Apartment" @="c:\WINDOWS\system32\OLE32.DLL" "4d370831d2c43cd13623e232fed27b7b"=hex:31,77,e1,ba,b1,f8,68,02,ab,db,cb,1f,d1, 35,7f,af,31,77,e1,ba,b1,f8,68,02,66,26,82,1e,2d,55,95,25,fb,a7,78,e6,12,2f,\ [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32*] "ThreadingModel"="Apartment" @="c:\WINDOWS\system32\OLE32.DLL" "1d68fe701cdea33e477eb204b76f993d"=hex:01,3a,48,fc,e8,04,4a,f1,19,b8,b4,ff,8b, 84,67,f9,83,6c,56,8b,a0,85,96,ab,fa,a4,29,b2,60,10,66,37,01,3a,48,fc,e8,04,\ [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32*] "ThreadingModel"="Apartment" @="c:\WINDOWS\system32\OLE32.DLL" "1fac81b91d8e3c5aa4b0a51804d844a3"=hex:f6,0f,4e,58,98,5b,89,c9,f3,ce,23,e8,06, ec,dd,e2,51,fa,6e,91,28,9e,14,cc,b0,7a,7d,98,74,f3,9f,12,f6,0f,4e,58,98,5b,\ [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32*] "ThreadingModel"="Apartment" @="c:\WINDOWS\system32\OLE32.DLL" "f5f62a6129303efb32fbe080bb27835b"=hex:b1,cd,45,5a,a8,c4,f8,b9,55,e9,0c,58,47, 3b,15,03,b1,cd,45,5a,a8,c4,f8,b9,4a,16,58,5b,6d,dc,57,c7,3d,ce,ea,26,2d,45,\ [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32*] "ThreadingModel"="Apartment" @="c:\WINDOWS\system32\OLE32.DLL" "fd4e2e1a3940b94dceb5a6a021f2e3c6"=hex:e3,0e,66,d5,eb,bc,2f,6b,1a,64,88,a6,57, 06,a6,6b,e3,0e,66,d5,eb,bc,2f,6b,c2,a4,8b,b7,bd,85,c3,ee,2a,b7,cc,b5,b9,7f,\ [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32*] "ThreadingModel"="Apartment" @="c:\WINDOWS\system32\OLE32.DLL" "8a8aec57dd6508a385616fbc86791ec2"=hex:fa,ea,66,7f,d4,3b,6b,70,e6,74,bf,b2,c5, 66,da,6f,fa,ea,66,7f,d4,3b,6b,70,cd,ba,b0,e6,c4,ff,65,e7,6c,43,2d,1e,aa,22,\ [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*] "OODEFRAG08.00.00.01WORKSTATION"="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" . --------------------- DLLs chargées dans les processus actifs --------------------- - - - - - - - > 'winlogon.exe'(708) c:\windows\system32\Ati2evxx.dll . Heure de fin: 2009-01-31 9:51:43 ComboFix-quarantined-files.txt 2009-01-31 08:51:33 Avant-CF: 155 489 615 872 octets libres Après-CF: 155,485,544,448 octets libres Current=4 Default=4 Failed=2 LastKnownGood=5 Sets=1,2,3,4,5 390 --- E O F --- 2009-01-14 08:37:27

jfkpresident · Answer

Il va falloir analyser un ou des fichier(s) suspect(s) !

Il se peut qu'il se trouvent dans les " dossiers cachés " du systeme.
Il faut donc les rendre visibles pour le scan.

Pour afficher les dossiers et fichiers cachés:

Panneau de configuration > Options des dossiers > onglet Affichage.

Coche Afficher les fichiers et dossiers cachés,
Décoche Masquer les extensions de fichiers connus
Décoche Masquer les fichiers protégés du Système.
Un message de mise en garde va apparaitre. Clique sur OK pour confirmer ton choix.
Les fichiers et dossiers cachés du système apparaitront alors dans l'explorateur Windows en transparence. 

Rends toi sur ce site :

https://www.virustotal.com/gui/

Clique sur parcourir et cherche ces fichiers : c:\windows\system\cisvc.exe 
                                                             c:\windows\system\mstsc.exe 
                                                             c:\windows\Faux 
Clique sur Send File.

Un rapport va s'élaborer ligne à ligne.

Attends la fin. Il doit comprendre la taille du fichier envoyé.

Sauvegarde le rapport avec le bloc-note.

Copie le dans ta réponse.

mikoudu30 · Answer

voici pour le fichier Cisvc: a-squared 4.0.0.93 2009.01.31 Trojan-Downloader.Win32.Calac!IK AhnLab-V3 5.0.0.2 2009.01.30 - AntiVir 7.9.0.60 2009.01.30 - Authentium 5.1.0.4 2009.01.31 - Avast 4.8.1281.0 2009.01.30 - AVG 8.0.0.229 2009.01.30 BackDoor.Generic_r.EK BitDefender 7.2 2009.01.31 - CAT-QuickHeal 10.00 2009.01.31 - ClamAV 0.94.1 2009.01.31 - Comodo 954 2009.01.30 - DrWeb 4.44.0.09170 2009.01.31 - eSafe 7.0.17.0 2009.01.29 - eTrust-Vet 31.6.6335 2009.01.29 - F-Prot 4.4.4.56 2009.01.30 W32/Horst.C.gen!Eldorado F-Secure 8.0.14470.0 2009.01.31 - Fortinet 3.117.0.0 2009.01.31 - GData 19 2009.01.31 - Ikarus T3.1.1.45.0 2009.01.31 Trojan-Downloader.Win32.Calac K7AntiVirus 7.10.611 2009.01.30 - Kaspersky 7.0.0.125 2009.01.31 Heur.Trojan.Generic McAfee 5511 2009.01.30 - McAfee+Artemis 5511 2009.01.30 - Microsoft 1.4306 2009.01.31 TrojanDownloader:Win32/Horst.Q NOD32 3815 2009.01.31 - Norman 6.00.02 2009.01.30 - nProtect 2009.1.8.0 2009.01.30 - Panda 9.5.1.2 2009.01.30 Suspicious file PCTools 4.4.2.0 2009.01.30 - Prevx1 V2 2009.01.31 Cloaked Malware Rising 21.13.42.00 2009.01.23 - SecureWeb-Gateway 6.7.6 2009.01.30 - Sophos 4.38.0 2009.01.31 - Sunbelt 3.2.1835.2 2009.01.16 BehavesLike.Win32.Malware (v) Symantec 10 2009.01.31 - TheHacker 6.3.1.5.241 2009.01.31 - TrendMicro 8.700.0.1004 2009.01.30 - VBA32 3.12.8.12 2009.01.30 - ViRobot 2009.1.31.1583 2009.01.31 - VirusBuster 4.5.11.0 2009.01.30 - Information additionnelle File size: 81920 bytes MD5...: 29aec66e897326ac28c614b957cfd6ff SHA1..: 12abab99f383b77e2032f5a16f7ddc4f2301de8c SHA256: 416560b6e05aecb6fe65ae5facb5a642148bda2e1d80cd1efe621da3a55b7166 SHA512: ebc5483f4c35b734b4f0f247896524467ea0c77799b7a3c38eda03bef92b0274 c4ca7be07149862526c6dc71b565071be6b0389d0c7f92dac9f58c58aaa05430 ssdeep: 1536:SqLe7EzJOLMlECKb5Obmhx0nj2/Y6T4RqLNGWdTZB7HAoTMt:SqLLlOLoKO Tnj2j4UHd1TMt PEiD..: - TrID..: File type identification Win32 Executable MS Visual C++ (generic) (65.2%) Win32 Executable Generic (14.7%) Win32 Dynamic Link Library (generic) (13.1%) Generic Win/DOS Executable (3.4%) DOS Executable Generic (3.4%) PEInfo: PE Structure information ( base data ) entrypointaddress.: 0xb216 timedatestamp.....: 0x48fed822 (Wed Oct 22 07:37:06 2008) machinetype.......: 0x14c (I386) ( 3 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x1000 0xfaaf 0x10000 6.27 b968980d6701047dd254bde13a7d9952 .rdata 0x11000 0x1fe2 0x2000 5.44 faa5b45ae1286c32f505d13a14c07c75 .data 0x13000 0x3798 0x1000 1.46 8cc6386fc7573d9d95a8530485d0fc16 ( 6 imports ) > USER32.dll: LoadImageA > ADVAPI32.dll: RegQueryValueExA, RegEnumValueA, RegOpenKeyExA, RegCreateKeyExA, RegSetValueExA, RegCloseKey, RegGetKeySecurity, LookupAccountSidA, GetTokenInformation, OpenProcessToken > WS2_32.dll: -, - > WININET.dll: InternetReadFile, HttpQueryInfoA, InternetCloseHandle, InternetOpenUrlA, InternetOpenA > NETAPI32.dll: NetUserGetInfo, NetApiBufferFree > KERNEL32.dll: SetEnvironmentVariableA, GetSystemInfo, VirtualProtect, GetLocaleInfoA, FlushFileBuffers, GetStringTypeW, GetStringTypeA, LCMapStringW, LCMapStringA, SetStdHandle, GetCPInfo, GetOEMCP, GetACP, CreateDirectoryA, GetProcessPriorityBoost, OpenProcess, GetFileType, GetSystemDirectoryA, GetFileTime, GetVolumeInformationA, OpenMutexA, CreateMutexA, CloseHandle, GetStartupInfoA, GetDriveTypeA, GetLogicalDriveStringsA, Sleep, GetLastError, GetLocalTime, GetShortPathNameA, GetEnvironmentVariableA, ExitProcess, SetFileAttributesA, CreateFileA, CreateProcessA, GlobalFree, CreateThread, GlobalAlloc, MultiByteToWideChar, GetModuleFileNameA, GetCurrentProcess, CopyFileA, WriteFile, RtlUnwind, GetSystemTimeAsFileTime, GetProcAddress, GetModuleHandleA, TerminateProcess, GetCommandLineA, GetVersionExA, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, HeapReAlloc, HeapAlloc, HeapSize, GetStdHandle, UnhandledExceptionFilter, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStringsW, SetHandleCount, HeapDestroy, HeapCreate, VirtualFree, HeapFree, LoadLibraryA, InterlockedExchange, VirtualQuery, SetFilePointer, SetUnhandledExceptionFilter, IsBadReadPtr, IsBadWritePtr, IsBadCodePtr, VirtualAlloc ( 0 exports ) Prevx info: http://info.prevx.com/aboutprogramtext.asp?PX5=1C78F9C4000C1B0A40FA016F4A2A6400FC123B5C

mikoudu30 · Answer

pour mstsc il me dit que je l'ai déja scanner alor que je ne l'ai pas fait mes voici le rapport pour c:/windows/faux: 

a-squared 4.0.0.93 2009.01.31 - 
AhnLab-V3 5.0.0.2 2009.01.30 - 
AntiVir 7.9.0.60 2009.01.30 - 
Authentium 5.1.0.4 2009.01.31 - 
Avast 4.8.1281.0 2009.01.30 - 
AVG 8.0.0.229 2009.01.30 - 
BitDefender 7.2 2009.01.31 - 
CAT-QuickHeal 10.00 2009.01.31 - 
ClamAV 0.94.1 2009.01.31 - 
Comodo 954 2009.01.30 - 
DrWeb 4.44.0.09170 2009.01.31 - 
eSafe 7.0.17.0 2009.01.29 - 
eTrust-Vet 31.6.6335 2009.01.29 - 
F-Prot 4.4.4.56 2009.01.30 - 
F-Secure 8.0.14470.0 2009.01.31 - 
Fortinet 3.117.0.0 2009.01.31 - 
GData 19 2009.01.31 - 
Ikarus T3.1.1.45.0 2009.01.31 - 
K7AntiVirus 7.10.611 2009.01.30 - 
Kaspersky 7.0.0.125 2009.01.31 - 
McAfee 5511 2009.01.30 - 
McAfee+Artemis 5511 2009.01.30 - 
Microsoft 1.4306 2009.01.31 - 
NOD32 3815 2009.01.31 - 
Norman 6.00.02 2009.01.30 - 
nProtect 2009.1.8.0 2009.01.30 - 
Panda 9.5.1.2 2009.01.30 - 
PCTools 4.4.2.0 2009.01.30 - 
Prevx1 V2 2009.01.31 - 
Rising 21.13.42.00 2009.01.23 - 
SecureWeb-Gateway 6.7.6 2009.01.30 - 
Sophos 4.38.0 2009.01.31 - 
Sunbelt 3.2.1835.2 2009.01.16 - 
Symantec 10 2009.01.31 - 
TheHacker 6.3.1.5.241 2009.01.31 - 
TrendMicro 8.700.0.1004 2009.01.30 - 
VBA32 3.12.8.12 2009.01.30 - 
ViRobot 2009.1.31.1583 2009.01.31 - 
VirusBuster 4.5.11.0 2009.01.30 - 
Information additionnelle 
File size: 220 bytes 
MD5...: 1aa447466699a89a9f3b34719421d372 
SHA1..: 6c0ac4085228b4c7ea2933043475977fc987a877 
SHA256: fc56d7a9f924f3143e4007342e86aae9359626c3bd68eb979ebc85775ed163f3 
SHA512: f73b7a65c2ad4df2147819b6f31b3f12906581184cdbc589ddf5924d2e2368da
7a1b2305428dd4f108f83d4f19abe958e623ed5fa609b74166cb699c2e15d3f7
 
ssdeep: 6:IJ9kyZ3wkF4zMasac4AS8wZ3wkF4zMasac41:IJh3t4ns7vLE3t4ns7u
 
PEiD..: - 
TrID..: File type identification
Generic INI configuration (100.0%)

jfkpresident · Answer

il me faudrait le rapport VT de c:\windows\system\mstsc.exe  afin d'etre sur qu'il ne soit pas infecté .

mikoudu30 · Answer

ah sayer excuzer moi : a-squared 4.0.0.93 2009.01.31 Trojan-Downloader.Win32.Calac!IK AhnLab-V3 5.0.0.2 2009.01.30 - AntiVir 7.9.0.60 2009.01.30 - Authentium 5.1.0.4 2009.01.31 - Avast 4.8.1281.0 2009.01.30 - AVG 8.0.0.229 2009.01.30 BackDoor.Generic_r.EK BitDefender 7.2 2009.01.31 - CAT-QuickHeal 10.00 2009.01.31 - ClamAV 0.94.1 2009.01.31 - Comodo 954 2009.01.30 - DrWeb 4.44.0.09170 2009.01.31 - eSafe 7.0.17.0 2009.01.29 - eTrust-Vet 31.6.6335 2009.01.29 - F-Prot 4.4.4.56 2009.01.30 W32/Horst.C.gen!Eldorado F-Secure 8.0.14470.0 2009.01.31 - Fortinet 3.117.0.0 2009.01.31 - GData 19 2009.01.31 - Ikarus T3.1.1.45.0 2009.01.31 Trojan-Downloader.Win32.Calac K7AntiVirus 7.10.611 2009.01.30 - Kaspersky 7.0.0.125 2009.01.31 Heur.Trojan.Generic McAfee 5511 2009.01.30 - McAfee+Artemis 5511 2009.01.30 - Microsoft 1.4306 2009.01.31 TrojanDownloader:Win32/Horst.Q NOD32 3815 2009.01.31 - Norman 6.00.02 2009.01.30 - nProtect 2009.1.8.0 2009.01.30 - Panda 9.5.1.2 2009.01.31 Suspicious file PCTools 4.4.2.0 2009.01.30 - Prevx1 V2 2009.01.31 Cloaked Malware Rising 21.13.42.00 2009.01.23 - SecureWeb-Gateway 6.7.6 2009.01.30 - Sophos 4.38.0 2009.01.31 - Sunbelt 3.2.1835.2 2009.01.16 BehavesLike.Win32.Malware (v) Symantec 10 2009.01.31 - TheHacker 6.3.1.5.241 2009.01.31 - TrendMicro 8.700.0.1004 2009.01.30 - ViRobot 2009.1.31.1583 2009.01.31 - VirusBuster 4.5.11.0 2009.01.30 - Information additionnelle File size: 81920 bytes MD5...: 29aec66e897326ac28c614b957cfd6ff SHA1..: 12abab99f383b77e2032f5a16f7ddc4f2301de8c SHA256: 416560b6e05aecb6fe65ae5facb5a642148bda2e1d80cd1efe621da3a55b7166 SHA512: ebc5483f4c35b734b4f0f247896524467ea0c77799b7a3c38eda03bef92b0274 c4ca7be07149862526c6dc71b565071be6b0389d0c7f92dac9f58c58aaa05430 ssdeep: 1536:SqLe7EzJOLMlECKb5Obmhx0nj2/Y6T4RqLNGWdTZB7HAoTMt:SqLLlOLoKO Tnj2j4UHd1TMt PEiD..: - TrID..: File type identification Win32 Executable MS Visual C++ (generic) (65.2%) Win32 Executable Generic (14.7%) Win32 Dynamic Link Library (generic) (13.1%) Generic Win/DOS Executable (3.4%) DOS Executable Generic (3.4%) PEInfo: PE Structure information ( base data ) entrypointaddress.: 0xb216 timedatestamp.....: 0x48fed822 (Wed Oct 22 07:37:06 2008) machinetype.......: 0x14c (I386) ( 3 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x1000 0xfaaf 0x10000 6.27 b968980d6701047dd254bde13a7d9952 .rdata 0x11000 0x1fe2 0x2000 5.44 faa5b45ae1286c32f505d13a14c07c75 .data 0x13000 0x3798 0x1000 1.46 8cc6386fc7573d9d95a8530485d0fc16 ( 6 imports ) > USER32.dll: LoadImageA > ADVAPI32.dll: RegQueryValueExA, RegEnumValueA, RegOpenKeyExA, RegCreateKeyExA, RegSetValueExA, RegCloseKey, RegGetKeySecurity, LookupAccountSidA, GetTokenInformation, OpenProcessToken > WS2_32.dll: -, - > WININET.dll: InternetReadFile, HttpQueryInfoA, InternetCloseHandle, InternetOpenUrlA, InternetOpenA > NETAPI32.dll: NetUserGetInfo, NetApiBufferFree > KERNEL32.dll: SetEnvironmentVariableA, GetSystemInfo, VirtualProtect, GetLocaleInfoA, FlushFileBuffers, GetStringTypeW, GetStringTypeA, LCMapStringW, LCMapStringA, SetStdHandle, GetCPInfo, GetOEMCP, GetACP, CreateDirectoryA, GetProcessPriorityBoost, OpenProcess, GetFileType, GetSystemDirectoryA, GetFileTime, GetVolumeInformationA, OpenMutexA, CreateMutexA, CloseHandle, GetStartupInfoA, GetDriveTypeA, GetLogicalDriveStringsA, Sleep, GetLastError, GetLocalTime, GetShortPathNameA, GetEnvironmentVariableA, ExitProcess, SetFileAttributesA, CreateFileA, CreateProcessA, GlobalFree, CreateThread, GlobalAlloc, MultiByteToWideChar, GetModuleFileNameA, GetCurrentProcess, CopyFileA, WriteFile, RtlUnwind, GetSystemTimeAsFileTime, GetProcAddress, GetModuleHandleA, TerminateProcess, GetCommandLineA, GetVersionExA, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, HeapReAlloc, HeapAlloc, HeapSize, GetStdHandle, UnhandledExceptionFilter, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStringsW, SetHandleCount, HeapDestroy, HeapCreate, VirtualFree, HeapFree, LoadLibraryA, InterlockedExchange, VirtualQuery, SetFilePointer, SetUnhandledExceptionFilter, IsBadReadPtr, IsBadWritePtr, IsBadCodePtr, VirtualAlloc ( 0 exports ) Prevx info: http://info.prevx.com/aboutprogramtext.asp?PX5=1C78F9C4000C1B0A40FA016F4A2A6400FC123B5C

jfkpresident · Answer

/!\La manip qui va suivre est srtictement réservé a mikoudu30/!\

> Ferme tout tes navigateurs (donc copie ou imprime les instructions avant)
- Crée un nouveau document texte : clic droit de souris sur le bureau > Nouveau > Document Texte, et copie/colle dedans les lignes suivantes :

           
Driver::

Folder::

File::
c:\windows\system\mstsc.exe
c:\windows\system\cisvc.exe 
c:\windows\cmstp.exe
c:\windows\clipsrv.exe
Reg::

- Enregistre ce fichier sous le nom CFScript
- Fait un glisser/déposer de ce fichier CFScrïpt sur le fichier ComboFix.exe comme sur cette image. (Clique sur le fichier CFScript, maintient le doigt enfoncé et glisse la souris pour que l'icône du CFScript vienne recouvrir l'icône de Combofix. Relache la souris.) Combofix va démarrer.
- Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.
- Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!
- Ne touche à rien tant que le scan n'est pas terminé sinon le PC peut planter !
- Une fois le scan achevé, un rapport va s'afficher: poste son contenu.
Note : Si le fichier ne s'ouvre pas, il se trouve ici > C:\ComboFix.txt

mikoudu30 · Answer

euh y a un petit probléme quand je vien de creé le fichier "cfsscript" et que ensuite je le metsur combo fix cela me dit combo fix et a arrivé a expiration cliquer sur oui pour lancer combo fix en fonctionaliter réduite ou non pour quitter je clique sur oui et apré se me dit erreur le fichier 32788r22fwjfw/nircmd.com et absent je fait ok et combo fix démmare comme d'habitude mes ne me demande pas 1ou2

jfkpresident · Answer

Supprime le dossier Qoobox. (il est à la racine de ton disque dur c:\)==>C:\Qoobox
Supprime l'application téléchargée sur le bureau (ComboFix.exe)
Fais Démarrer/Exécuter copie-colle la commande suivante puis OK
"%userprofile%\Bureau\combofix.exe" /u
Ca désinstallera ComboFix, supprimera les points de restauration système (qui sont infectés) et remettra les options de sécurité de Windows par défaut.]
... pour ensuite recommencer à zéro; à partir du tutoriel sur l'utilisation de ComboFix https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

Une fois réinstallé tu exécute le CFscript comme indiqué post#27 .

mikoudu30 · Answer

quan je tape la commande pour désinstaller combo fix cela mdit erreur "windows ne trouve pas document and setting"

jfkpresident · Answer

· Télécharge ToolsCleaner de A.Roshtein sur ton Bureau.
http://pc-system.fr/
· Clique sur Recherche et laisse le scan se terminer.
· Clique, sur Suppression pour finaliser.
· Tu peux, si tu le souhaites, te servir des Options facultatives.
· Clique sur Quitter, pour que le rapport puisse se créer.
· Poste moi le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur( C:\).

mikoudu30 · Answer

C:\Combofix.txt: trouvé !
C:\SDFIX: trouvé !
C:\Combofix: trouvé !
C:\Qoobox: trouvé !
C:\Toolbar SD: trouvé !
C:\Documents and Settings\Lucien\Bureau\ToolBarSD.exe: trouvé !
C:\Documents and Settings\Lucien\Menu Démarrer\Programmes\FindyKill: trouvé !
C:\Program Files\FindyKill: trouvé

jfkpresident · Answer

le rapport n'est pas complet ,la deuxieme partie concerne la suppression des outils .

mikoudu30 · Answer

mais cela ma marqué que sa

jfkpresident · Answer

Essaye de retélécharger combofix et réinstalle le ;ensuite tu fais le CFscript que je t'ai indiqué .

mikoudu30 · Answer

désoler je suis un peu chiant mes sa ne marche pas toujours pas combofix

jfkpresident · Answer

Télécharge OTMoveIt3 de OldTimer sur ton Bureau en cliquant sur ce lien :

http://oldtimer.geekstogo.com/OTMoveIt3.exe

Double-clique sur OTMoveIt3.exe pour le lancer.

Vérifie que la case devant "Unregister Dll's and Ocx's est bien cochée.

Copie la liste qui se trouve en gras ci-dessous,

et colle-la dans le cadre de gauche de OTMoveIt : "Paste instructions for item to be moved".


:processes
explorer.exe


:Reg


:files
c:\windows\system\mstsc.exe
c:\windows\system\cisvc.exe
c:\windows\cmstp.exe
c:\windows\clipsrv.exe 
:services

:commands
[purity]
[emptytemp]
[start explorer]
[reboot]



Clique sur "MoveIt!" pour lancer la suppression.

Le résultat apparaitra dans le cadre "Results".

Clique sur "Exit" pour fermer.

Poste le rapport situé dans C:\_OTMoveIt\MovedFiles sous le nom xxxxxx_xxxxxxxxxx.log .

Il te sera peut-être demander de redémarrer le pc pour achever la suppression. Si c'est le cas accepte par Yes.

mikoudu30 · Answer

voici le rapport mais est ce normal que y avait plus la barre du menu démmaré pendant a peu prét 5 minute


========== PROCESSES ==========
Process explorer.exe killed successfully.
========== REGISTRY ==========
========== FILES ==========
c:\windows\system\mstsc.exe moved successfully.
c:\windows\system\cisvc.exe moved successfully.
c:\windows\cmstp.exe moved successfully.
c:\windows\clipsrv.exe moved successfully.
========== SERVICES/DRIVERS ==========
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\Lucien\LOCALS~1\Temp\~DFD0FD.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Lucien\LOCALS~1\Temp\~DFD10F.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Lucien\LOCALS~1\Temp\~DFD794.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Lucien\LOCALS~1\Temp\~DFD7A6.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Lucien\LOCALS~1\Temp\~DFDF5A.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Lucien\LOCALS~1\Temp\~DFDFB0.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Lucien\LOCALS~1\Temp\~DFF674.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Lucien\LOCALS~1\Temp\~DFF689.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Java cache emptied.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully
 
OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 02012009_202011

jfkpresident · Answer

voici le rapport mais est ce normal que y avait plus la barre du menu démmaré pendant a peu prét 5 minute 
--

Il se peut que pendant la suppression le bureau disparaisse temporairement ..Pas de quoi s'affoler .

On va faire une petite vérif :

Fais un scan en ligne Kaspersky avec Internet Explorer : kaspersky on line
- Clique sur Démarrer Online-Scanner

- Clique maintenant sur J'accepte.
- Valide l'installation d'un ou de plusieurs ActiveX si c'est nécessaire.
- Patiente pendant l'installation des Mises à jour.
- Choisis par la suite l'analyse du Poste de travail.
- Sauvegarde puis colle le rapport généré en fin d'analyse.

AIDE : Configurer le contrôle des ActiveX

NOTE : Si tu reçois le message "La licence de Kaspersky On-line Scanner est périmée", va dans Ajout/Suppression de programmes puis désinstalle On-Line Scanner, reconnecte toi sur le site de Kaspersky pour retenter le scan en ligne. 
**si je ne réponds pas de suite, c'est que moi aussi j'ai un métier et une famille **

jfkpresident · Answer

voici le rapport mais est ce normal que y avait plus la barre du menu démmaré pendant a peu prét 5 minute 

Il se peut que pendant la suppression le bureau disparraisse ,pas de quoi s'affoler .

On va faire une petite vérif :

Fais un scan en ligne Kaspersky avec Internet Explorer : kaspersky on line
- Clique sur Démarrer Online-Scanner

- Clique maintenant sur J'accepte.
- Valide l'installation d'un ou de plusieurs ActiveX si c'est nécessaire.
- Patiente pendant l'installation des Mises à jour.
- Choisis par la suite l'analyse du Poste de travail.
- Sauvegarde puis colle le rapport généré en fin d'analyse.

AIDE : Configurer le contrôle des ActiveX

NOTE : Si tu reçois le message "La licence de Kaspersky On-line Scanner est périmée", va dans Ajout/Suppression de programmes puis désinstalle On-Line Scanner, reconnecte toi sur le site de Kaspersky pour retenter le scan en ligne.

mikoudu30 · Answer

voila je vien de faire l'analyse avec kasperky mes il n'y a rien de suspect ni de infecter mes aucun rapport ses ouvert

mikoudu30 · Answer

voila je vien de faire l'analyse avec kasperky mes il n'y a rien de suspect ni de infecter mes aucun rapport ses ouvert

jfkpresident · Answer

C'est tout bon alors .

Pour supprimer toutes les traces des logiciels qui ont servi à traiter les infections spécifiques : 

· Télécharge ToolsCleaner de A.Roshtein sur ton Bureau.
http://pc-system.fr/
· Clique sur Recherche et laisse le scan se terminer.
· Clique, sur Suppression pour finaliser.
· Tu peux, si tu le souhaites, te servir des Options facultatives.
· Clique sur Quitter, pour que le rapport puisse se créer.
· Poste moi le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur( C:\).
                             ===============================
Maintenant que ton PC n'est plus infecté, désactive ta "Restauration du système" puis réactive la afin de créer un point de restauration sain. 

* Désactivation : 
Cliquer droit sur le "Poste de travail" > Propriétés > onglet "Restauration du système" > cocher la case "Désactiver la Restauration du système sur tous les lecteurs" 
> Appliquer patiente jusqu a que cela soit marqué "désactivée" puis Ok. 

* Activation : 
Suivre le même chemin ; décocher la case "Désactiver la Restauration du système sur tous les lecteurs" 
> Appliquer attends que cela soit a nouveau sur "surveillance" puis Ok. Redémarrer l'ordinateur.. 
                          ===============================
Tu as deux antivirus Antivir et bitdefender ,désinstalles en un /!\

Met a jour ta console java et adobe Reader :

mettre à jour java
https://www.java.com/fr/download/manual.jsp

mettre à jour adobe reader
https://acrobat.adobe.com/fr/fr/acrobat/pdf-reader.html

                           ===============================
Je vois que tu utilises le P2p : danger du P2P et des cracks

un peu de lecture afin de ne pas revenir ici
                        
Tu peux mettre en résolu si tu n'as plus de soucis .

mikoudu30 · Answer

voici le rapport [ Rapport ToolsCleaner version 2.3.0 (par A.Rothstein & dj QUIOU) ]

-->- Recherche: 


---------------------------------
-->- Suppression: 


Fichiers temporaires nettoyés ! 

il y en a pas parce que je les avait suprimmer avant mes pour se qui et des  antivirus j'en et que un ces antivir bit defenders je l'ai enlever depuis au moin 1ans lol

jfkpresident · Answer

Pourtant il reste des traces de bitdefender .

désinstaller bitdefender

mikoudu30 · Answer

mes pourtant je les fait sa mes maitenant sayer plus plus dans la liste ajout supréssion de programme

jfkpresident · Answer

tu as télécharger l'utilitaire de désinstallation ?

jfkpresident · Answer

je ne parle pas de désinstallation direct via le panneau de config mais plutot de téléchargement de l'outil de désinstallation de bitdefender qui n'est pas du tout la meme chose .

mkoudu3015 · Answer

et je le télécharge ou ?

jfkpresident · Answer

http://www.bitdefender.fr/KB333-fr--Desinstaller-BitDefender.html

mikoudu3015 · Answer

voila je les desinstaller

jfkpresident · Answer

Nickel ,on peut donc cloturer ce topique .

Bon surf !

mikoudu3015 · Answer

ok pas de probléme merci beaucoups pour votre aide

Gros gros probléme backdoor !!!! dans mon pc

53 réponses