ta tof sur ce site Résolu

Question

Bonjour,
je viens de tomber dans la piege de "ta tof sur ce site", et maintenant plus de connexion et un gros bordel, merci de m'aider

ric025 · Answer

Salut!

Commence par ceci:

Télécharge MSNFix.zip (de !aur3n7) sur ton bureau:

http://sosvirus.changelog.fr/MSNFix.zip

Décompresse-le (clic droit >> Extraire ici) et double clique sur le fichier MSNFix.bat.

-- Exécute l'option R.
-- Si l'infection est détectée, exécute l'option N.
-- Un rapport sera généré.
-- Sauvegarde ce rapport puis fais un copier/coller de ce rapport dans ta prochaine réponse.

94250gus · Answer

je fini la verif au demarage de avast, et je t'envoi sa, merci de prendre le temps

94250gus · Answer

en mode sans echec je suppose??

ric025 · Answer

Non...

94250gus · Answer

apparement sa bloque sur "scanning hidden files"

shanna97one · Answer

http://telenovelas97One.skyrock.com

94250gus · Answer

ininteressant merci

ric025 · Answer

Tu es sûr que c'est le rapport MSNFix? Il a détecté une infection?

--> Exemple de rapport: http://www.commentcamarche.net/forum/affich 10586065 rapport msn fix demandant avis

94250gus · Answer

ben ouai, fo que je lance quel onglet??

ric025 · Answer

Tuto: https://www.malekal.com/supprimer-virus-desinfecter-pc/

94250gus · Answer

je fais bien "A" mais il ne m'affiche pas de rapport

ric025 · Answer

je fais bien "A" mais il ne m'affiche pas de rapport

--> "A" ?? Dans le même dossier que MSNFix, tu as le rapport qui se présente sous la forme: date_heure.txt

94250gus · Answer

oui "a" pour afficher le rapport, mais il l'affiche pas

je viens de le refaire, et rien ne s'affiche dans le dossier

ric025 · Answer

Ok! 

Fais ceci:

Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.

http://downloads.andymanchesta.com/RemovalTools/SDFix.exe

Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec comme ceci!! :

• Redémarre ton ordinateur
• Tout de suite après le bip de démarrage, tapote la touche F8 (une pression par seconde).
• A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
• Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
• Choisis ton compte.

• Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
• Appuie sur une touche pour commencer le processus de nettoyage.
• Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.

• Appuie sur une touche pour redémarrer le PC.

• Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
• Après le chargement du Bureau, l'outil terminera son travail et affichera "Finished".
• Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
• Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.

• Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse.

94250gus · Answer

le voila; 


[b]SDFix: Version 1.240 [/b]
Run by jultonus on 06/02/2009 at 17:38

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

[b]Checking Services [/b]:


Restoring Default Security Values
Restoring Default Hosts File

Rebooting


[b]Checking Files [/b]: 

Trojan Files Found:

C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP10.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP11.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP12.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP13.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP14.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP15.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP16.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP17.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP18.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP19.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP1A.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP1B.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP1C.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP1D.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP1E.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP1F.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP2.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP20.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP21.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP22.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP23.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP24.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP25.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP26.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP27.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP28.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP29.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP2A.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP2B.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP2C.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP2D.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP2E.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP2F.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP3.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP30.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP31.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP32.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP33.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP34.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP35.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP36.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP37.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP38.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP39.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP3A.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP3B.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP3C.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP3D.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP3E.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP3F.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP4.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP40.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP41.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP42.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP43.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP44.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP45.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP46.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP47.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP48.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP49.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP4A.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP4B.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP4C.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP4D.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP4E.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP4F.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP5.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP50.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP51.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP52.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP53.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP54.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP55.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP56.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP57.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP58.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP59.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP5A.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP5B.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP5C.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP5D.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP5E.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP5F.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP6.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP60.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP61.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP62.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP63.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP64.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP65.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP66.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP67.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP68.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP69.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP6A.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP6B.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP6C.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP6D.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP6E.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP6F.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP7.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP8.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMP9.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMPA.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMPB.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMPC.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMPD.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMPE.tmp - Deleted
C:\DOCUME~1\jultonus\LOCALS~1\Temp\TMPF.tmp - Deleted





Removing Temp Files

[b]ADS Check [/b]:
 


                                 [b]Final Check [/b]:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-06 17:40:29
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\ESENT]
"EventMessageFile"=str(2):"c:\windows\system32\ESENT.dll"
"CategoryMessageFile"=str(2):"c:\windows\system32\ESENT.dll"

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


[b]Remaining Services [/b]:




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\CyberLink\PowerDVD8\PowerDVD8.exe"="C:\Program Files\CyberLink\PowerDVD8\PowerDVD8.exe:*:Enabled:CyberLink PowerDVD 8.0"
"C:\Program Files\ma-config.com\maconfservice.exe"="C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\WINDOWS\system32\Isass.exe"="C:\WINDOWS\system32\Isass.exe:*:Disabled:Isass"
"C:\WINDOWS\system32\explorer.exe"="C:\WINDOWS\system32\explorer.exe:*:Disabled:explorer"
"C:\WINDOWS\system32\csrs.exe"="C:\WINDOWS\system32\csrs.exe:*:Enabled:csrs"
"C:\WINDOWS\system32\winamp.exe"="C:\WINDOWS\system32\winamp.exe:*:Disabled:winamp"
"C:\WINDOWS\system32\lssas.exe"="C:\WINDOWS\system32\lssas.exe:*:Enabled:lssas"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\CyberLink\PowerDVD8\PowerDVD8.exe"="C:\Program Files\CyberLink\PowerDVD8\PowerDVD8.exe:*:Enabled:CyberLink PowerDVD 8.0"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

[b]Remaining Files [/b]:


File Backups: - C:\SDFix\backups\backups.zip

[b]Files with Hidden Attributes [/b]:

Wed  4 Feb 2009        49,202 ..SHR --- "C:\WINDOWS\wswc.exe"
Thu  5 Feb 2009            56 ..SHR --- "C:\WINDOWS\system32\B8AEFE78D0.sys"
Thu  5 Feb 2009        10,022 A.SH. --- "C:\WINDOWS\system32\KGyGaAvL.sys"

[b]Finished![/b]

ric025 · Answer

Ok! 

La suite:

Télécharge Malwarebytes Anti-Malware (MBAM):

MBAM

Installe-le en vérifiant que la case de mise à jour soit bien cochée en fin d'installation.

Après la mise à jour, lance-le et coche "Examen Rapide". Puis "Rechercher".

Si MBAM trouve quelque chose: fais "Voir les résultats" puis "Supprimer la sélection".

Poste le rapport généré.

A++ ;)

94250gus · Answer

voici le rapport il a redemarer car deux n'ont pu etre effacé apparement;

Malwarebytes' Anti-Malware 1.33
Version de la base de données: 1735
Windows 5.1.2600 Service Pack 3

06/02/2009 17:57:19
mbam-log-2009-02-06 (17-57-19).txt

Type de recherche: Examen rapide
Eléments examinés: 52973
Temps écoulé: 2 minute(s), 8 second(s)

Processus mémoire infecté(s): 2
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 6

Processus mémoire infecté(s):
C:\WINDOWS\wswc.exe (Backdoor.Bot) -> Failed to unload process.
C:\WINDOWS\system32\winIogon.exe (Backdoor.Bot) -> Failed to unload process.

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\windows logon application (Backdoor.Bot) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\wswc.exe (Backdoor.Bot) -> Delete on reboot.
C:\WINDOWS\system32\winamp.MSNFix (Backdoor.Bot) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\explorer.MSNFix (Backdoor.Bot) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\csrs.MSNFix (Backdoor.Bot) -> Quarantined and deleted successfully.
C:\RECYCLER\S-1-5-21-1454471165-746137067-1801674531-500\Dc1.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\winIogon.exe (Backdoor.Bot) -> Delete on reboot.

ric025 · Answer

Re!

Alors, tu vas essayer de repasser MBAM en examen rapidel, comme tu viens de le faire, mais en mode sans échec cette fois.

/!\ Pour ce faire, ne passe pas par le msconfig: 

* Redémarre ton pc.

* Au bip, tapote la touche F8 (ou F5 sur certains pc) jusqu'à arriver à un menu de sélection des différents démarrages.

* A l'aide des touches de direction de ton clavier, monte sur "mode sans échec" et valide par ENTRER.

* Choisis ta session habituelle.

Reviens ensuite en normal pour poster le rapport stp.

A+

94250gus · Answer

voici, il n'a rien trouver;

Malwarebytes' Anti-Malware 1.33
Version de la base de données: 1735
Windows 5.1.2600 Service Pack 3

06/02/2009 18:15:03
mbam-log-2009-02-06 (18-15-03).txt

Type de recherche: Examen rapide
Eléments examinés: 51674
Temps écoulé: 2 minute(s), 50 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

ric025 · Answer

Bien!

Fais ceci pour vérifier la suppression des infections:


Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.

http://images.malwareremoval.com/random/RSIT.exe

Double-clique sur RSIT.exe.

Clique sur Continue à l'écran Disclaimer.

Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

A noter: Les rapports se trouvent également ici: C:\rsit.

/!\ Poste les deux rapports (log + info) dans deux messages séparés, merci /!\

94250gus · Answer

voici le log;


Logfile of random's system information tool 1.05 (written by random/random)
Run by jultonus at 2009-02-06 18:21:04
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 10 GB (40%) free of 25 GB
Total RAM: 3070 MB (85% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:21:13, on 06/02/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe
C:\Program Files\Cyberlink\Shared Files\brs.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
C:\Program Files\Adobe\Reader 8.0\Readereader_sl.exe
C:\Documents and Settings\jultonus\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
C:\Documents and Settings\jultonus\Application Data\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\WINDOWS\system32\wuauclt.exe
\?\C:\WINDOWS\system32\WBEM\WMIADAP.EXE
I:\scat pc\RSIT.exe
C:\Program Files	rend micro\jultonus.exe
C:\Program Files\Alwil Software\Avast4\setup\avast.setup

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (file missing)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [RemoteControl8] "C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe"
O4 - HKLM\..\Run: [PDVD8LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe"
O4 - HKLM\..\Run: [BDRegion] C:\Program Files\Cyberlink\Shared Files\brs.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [Windows UDP's Control Service] wswc.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [UberIcon] "C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-18 Startup: Outil de notification Live Search.lnk = C:\Documents and Settings\jultonus\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe (User 'SYSTEM')
O4 - S-1-5-18 Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe (User 'SYSTEM')
O4 - S-1-5-18 Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe (User 'SYSTEM')
O4 - S-1-5-18 Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe (User 'SYSTEM')
O4 - S-1-5-18 Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: Outil de notification Live Search.lnk = C:\Documents and Settings\jultonus\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe (User 'Default user')
O4 - .DEFAULT Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe (User 'Default user')
O4 - .DEFAULT Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe (User 'Default user')
O4 - .DEFAULT Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe (User 'Default user')
O4 - .DEFAULT Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe (User 'Default user')
O4 - Startup: Outil de notification Live Search.lnk = C:\Documents and Settings\jultonus\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe
O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
O4 - Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Readereader_sl.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (file missing)
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://ma-config.com/activex/hardwaredetection_3_1_1_0.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

ric025 · Answer

Log.txt est trop long, le message est coupé. Tu peux me remettre log.txt en deux fois, s'il te plaît. 

Merci.

94250gus · Answer

Logfile of random's system information tool 1.05 (written by random/random)
Run by jultonus at 2009-02-06 18:21:04
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 10 GB (40%) free of 25 GB
Total RAM: 3070 MB (85% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:21:13, on 06/02/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe
C:\Program Files\Cyberlink\Shared Files\brs.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
C:\Program Files\Adobe\Reader 8.0\Readereader_sl.exe
C:\Documents and Settings\jultonus\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
C:\Documents and Settings\jultonus\Application Data\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\WINDOWS\system32\wuauclt.exe
\?\C:\WINDOWS\system32\WBEM\WMIADAP.EXE
I:\scat pc\RSIT.exe
C:\Program Files	rend micro\jultonus.exe
C:\Program Files\Alwil Software\Avast4\setup\avast.setup

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (file missing)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [RemoteControl8] "C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe"
O4 - HKLM\..\Run: [PDVD8LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe"
O4 - HKLM\..\Run: [BDRegion] C:\Program Files\Cyberlink\Shared Files\brs.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [Windows UDP's Control Service] wswc.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [UberIcon] "C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-18 Startup: Outil de notification Live Search.lnk = C:\Documents and Settings\jultonus\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe (User 'SYSTEM')
O4 - S-1-5-18 Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe (User 'SYSTEM')
O4 - S-1-5-18 Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe (User 'SYSTEM')
O4 - S-1-5-18 Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe (User 'SYSTEM')
O4 - S-1-5-18 Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: Outil de notification Live Search.lnk = C:\Documents and Settings\jultonus\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe (User 'Default user')
O4 - .DEFAULT Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe (User 'Default user')
O4 - .DEFAULT Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe (User 'Default user')
O4 - .DEFAULT Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe (User 'Default user')
O4 - .DEFAULT Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe (User 'Default user')
O4 - Startup: Outil de notification Live Search.lnk = C:\Documents and Settings\jultonus\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe
O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
O4 - Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Readereader_sl.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (file missing)
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://ma-config.com/activex/hardwaredetection_3_1_1_0.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

94250gus · Answer

c'est bien reçu??

94250gus · Answer

voici la suite, excusez moi

End of file - 10073 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2008-12-04 92504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2008-11-18 408952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2009-01-28 770048]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll [2009-01-28 770048]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2008-10-17 13578240]
"nwiz"=nwiz.exe /install []
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2008-11-26 81000]
"RemoteControl8"=C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe [2008-03-20 83240]
"PDVD8LanguageShortcut"=C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe [2007-12-14 50472]
"BDRegion"=C:\Program Files\Cyberlink\Shared Files\brs.exe [2008-05-19 91432]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-09-12 16264192]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2008-10-17 86016]
"PCSuiteTrayApplication"=C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe [2007-06-18 271360]
"Windows UDP's Control Service"=wswc.exe []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"UberIcon"=C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe [2006-05-21 180224]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Adobe Reader Synchronizer.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Reader 8.0\Readereader_sl.exe

C:\Documents and Settings\jultonus\Menu Démarrer\Programmes\Démarrage
Outil de notification Live Search.lnk - C:\Documents and Settings\jultonus\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
RocketDock.lnk - C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
TransBar.lnk - C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe
UberIcon.lnk - C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
Y'z Shadow.lnk - C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-05-09 52224]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot
etwork\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\CyberLink\PowerDVD8\PowerDVD8.exe"="C:\Program Files\CyberLink\PowerDVD8\PowerDVD8.exe:*:Enabled:CyberLink PowerDVD 8.0"
"C:\Program Files\ma-config.com\maconfservice.exe"="C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\WINDOWS\system32\Isass.exe"="C:\WINDOWS\system32\Isass.exe:*:Disabled:Isass"
"C:\WINDOWS\system32\explorer.exe"="C:\WINDOWS\system32\explorer.exe:*:Disabled:explorer"
"C:\WINDOWS\system32\csrs.exe"="C:\WINDOWS\system32\csrs.exe:*:Enabled:csrs"
"C:\WINDOWS\system32\winamp.exe"="C:\WINDOWS\system32\winamp.exe:*:Disabled:winamp"
"C:\WINDOWS\system32\lssas.exe"="C:\WINDOWS\system32\lssas.exe:*:Enabled:lssas"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\CyberLink\PowerDVD8\PowerDVD8.exe"="C:\Program Files\CyberLink\PowerDVD8\PowerDVD8.exe:*:Enabled:CyberLink PowerDVD 8.0"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{982d528d-ed6a-11dd-b096-001fe23a8f5d}]
shell\AutoRun\command - I:\AutoTransfer.exe


======List of files/folders created in the last 1 months======

2009-02-06 18:21:04 ----D---- C:sit
2009-02-06 18:21:04 ----D---- C:\Program Files	rend micro
2009-02-06 17:54:27 ----D---- C:\Documents and Settings\jultonus\Application Data\Malwarebytes
2009-02-06 17:54:21 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-02-06 17:54:21 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-02-06 17:04:20 ----SHD---- C:\Config.Msi
2009-02-06 13:22:29 ----D---- C:\Documents and Settings\All Users\Application Data\ESET
2009-02-06 13:06:49 ----A---- C:\WINDOWS\system32\hidserv.dll
2009-02-05 19:45:30 ----D---- C:\Program Files\Windows Live
2009-02-05 01:13:12 ----D---- C:\Documents and Settings\All Users\Application Data\WLInstaller
2009-02-05 01:02:29 ----A---- C:\WINDOWS\system32\pgpl.exe
2009-02-05 00:44:28 ----A---- C:\WINDOWS\system32\vbeut.exe
2009-02-05 00:35:13 ----A---- C:\WINDOWS\system32\wmfh.exe
2009-02-05 00:30:04 ----D---- C:\WINDOWS\ERUNT
2009-02-05 00:26:52 ----A---- C:\WINDOWS\system32\hvxgvn.exe
2009-02-05 00:21:43 ----A---- C:\WINDOWS\system32\yome.exe
2009-02-05 00:16:02 ----A---- C:\WINDOWS\system32\epjn.exe
2009-02-04 23:45:20 ----D---- C:\Documents and Settings\jultonus\Application Data\MSNInstaller
2009-02-04 23:44:34 ----A---- C:\WINDOWS\system32\mhwplt.exe
2009-02-04 23:19:45 ----D---- C:\SDFix
2009-02-04 23:16:18 ----A---- C:\WINDOWS\system32	vnx.exe
2009-02-04 23:09:59 ----A---- C:\WINDOWS
tbtlog.txt
2009-02-04 23:03:31 ----A---- C:\WINDOWS\system32\yixqibh.exe
2009-02-04 22:57:51 ----A---- C:\WINDOWS\msnfix.txt
2009-02-04 22:57:29 ----D---- C:\Program Files\MSNFix
2009-02-04 21:38:18 ----A---- C:\WINDOWS\system32\ksmvvszw.exe
2009-02-04 20:51:55 ----A---- C:\WINDOWS\system32\gumrneb.exe
2009-02-04 20:40:31 ----A---- C:\WINDOWS\system32
ghzc.exe
2009-02-04 20:31:02 ----A---- C:\WINDOWS\system32\zeoey.exe
2009-02-04 19:53:29 ----D---- C:\WINDOWS\Minidump
2009-01-31 03:02:06 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2009-01-31 03:01:13 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2009-01-31 03:00:46 ----D---- C:\Program Files\MSXML 4.0
2009-01-30 10:27:32 ----A---- C:\WINDOWS\system32\muweb.dll
2009-01-30 10:27:32 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2009-01-30 10:27:32 ----A---- C:\WINDOWS\system32\mucltui.dll
2009-01-30 01:39:06 ----RSD---- C:\WINDOWS\assembly
2009-01-30 01:38:39 ----D---- C:\WINDOWS\Microsoft.NET
2009-01-30 01:37:38 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2009-01-30 01:14:49 ----D---- C:\Program Files\Microsoft Silverlight
2009-01-30 01:14:38 ----D---- C:\Program Files\Microsoft Office Outlook Connector
2009-01-30 01:14:20 ----D---- C:\Program Files\Microsoft Sync Framework
2009-01-30 01:13:58 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2009-01-30 01:13:19 ----D---- C:\Program Files\Microsoft
2009-01-30 00:55:05 ----D---- C:\Program Files\Fichiers communs\Windows Live
2009-01-29 20:00:24 ----D---- C:\Documents and Settings\jultonus\Application Data\U3
2009-01-28 21:09:53 ----D---- C:\Program Files\PKR
2009-01-28 20:35:17 ----D---- C:\WINDOWS\system32\LogFiles
2009-01-28 20:35:11 ----HDC---- C:\WINDOWS\$NtUninstallWudf01005$
2009-01-28 20:35:11 ----D---- C:\Documents and Settings\jultonus\Application Data\Nokia Multimedia Player
2009-01-28 20:23:42 ----D---- C:\Documents and Settings\All Users\Application Data\PC Suite
2009-01-28 20:23:30 ----D---- C:\Documents and Settings\jultonus\Application Data\Nokia
2009-01-28 20:23:18 ----D---- C:\Program Files\Fichiers communs\PCSuite
2009-01-28 20:23:18 ----D---- C:\Program Files\Fichiers communs\Nokia
2009-01-28 20:23:12 ----D---- C:\Program Files\DIFX
2009-01-28 20:23:11 ----D---- C:\Documents and Settings\jultonus\Application Data\PC Suite
2009-01-28 20:23:07 ----D---- C:\Program Files\PC Connectivity Solution
2009-01-28 20:23:04 ----A---- C:\WINDOWS\system32
mwcdcocls.dll
2009-01-28 20:23:03 ----D---- C:\Program Files\Nokia
2009-01-28 20:23:03 ----A---- C:\WINDOWS\system32
mwcdcls.dll
2009-01-28 20:22:10 ----D---- C:\Documents and Settings\All Users\Application Data\Installations
2009-01-28 20:19:26 ----D---- C:\Documents and Settings\jultonus\Application Data\Macromedia
2009-01-28 19:48:13 ----D---- C:\Documents and Settings\jultonus\Application Data\Nero
2009-01-28 19:41:26 ----D---- C:\Program Files\Nero
2009-01-28 19:41:00 ----D---- C:\Documents and Settings\All Users\Application Data\Nero
2009-01-28 19:40:59 ----D---- C:\Program Files\Fichiers communs\Nero
2009-01-28 19:30:26 ----A---- C:\WINDOWS\BricoPackFoldersDelete.cmd
2009-01-28 19:20:41 ----D---- C:\Program Files\eMule
2009-01-28 19:20:12 ----D---- C:\progs telecharger
2009-01-28 19:14:32 ----D---- C:\WINDOWS\ie7updates
2009-01-28 19:14:15 ----D---- C:\WINDOWS\WBEM
2009-01-28 19:13:35 ----HDC---- C:\WINDOWS\ie7
2009-01-28 19:13:29 ----HDC---- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
2009-01-28 19:13:18 ----HDC---- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
2009-01-28 19:10:36 ----A---- C:\WINDOWS\system32\MRT.exe
2009-01-28 19:07:09 ----D---- C:\WINDOWS\Prefetch
2009-01-28 19:04:03 ----HDC---- C:\WINDOWS\$NtUninstallKB960714$
2009-01-28 19:03:59 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-01-28 19:03:55 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-01-28 19:03:49 ----HDC---- C:\WINDOWS\$NtUninstallKB958215$
2009-01-28 19:03:45 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-01-28 19:03:40 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
2009-01-28 19:03:36 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-01-28 19:03:32 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2009-01-28 19:03:25 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2009-01-28 19:03:21 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2009-01-28 19:03:17 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
2009-01-28 19:03:13 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2009-01-28 19:03:09 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2009-01-28 19:03:05 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2009-01-28 19:03:00 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
2009-01-28 19:02:56 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2009-01-28 19:02:52 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2009-01-28 19:02:48 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2009-01-28 19:02:44 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2009-01-28 19:02:40 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2009-01-28 19:02:37 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
2009-01-28 19:00:44 ----D---- C:\WINDOWS\system32\fr-fr
2009-01-28 19:00:44 ----D---- C:\WINDOWS\system32\fr
2009-01-28 19:00:44 ----D---- C:\WINDOWS\system32\bits
2009-01-28 19:00:44 ----D---- C:\WINDOWS\l2schemas
2009-01-28 18:59:47 ----D---- C:\WINDOWS\ServicePackFiles
2009-01-28 18:58:27 ----D---- C:\WINDOWS
etwork diagnostic
2009-01-28 18:56:33 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2009-01-28 18:56:32 ----D---- C:\WINDOWS\EHome
2009-01-28 18:49:37 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2009-01-28 18:45:45 ----A---- C:\WINDOWS\system32\wpa.bak
2009-01-28 18:29:05 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2_0$
2009-01-28 18:29:01 ----HDC---- C:\WINDOWS\$NtUninstallKB952954_0$
2009-01-28 18:28:57 ----HDC---- C:\WINDOWS\$NtUninstallKB946648_0$
2009-01-28 18:28:54 ----HDC---- C:\WINDOWS\$NtUninstallKB956803_0$
2009-01-28 18:28:50 ----HDC---- C:\WINDOWS\$NtUninstallKB935448$
2009-01-28 18:28:46 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$
2009-01-28 18:28:42 ----HDC---- C:\WINDOWS\$NtUninstallKB956391$
2009-01-28 18:28:32 ----HDC---- C:\WINDOWS\$NtUninstallKB958215_0$
2009-01-28 18:28:28 ----HDC---- C:\WINDOWS\$NtUninstallKB950974_0$
2009-01-28 18:28:24 ----HDC---- C:\WINDOWS\$NtUninstallKB951698_0$
2009-01-28 18:28:20 ----HDC---- C:\WINDOWS\$NtUninstallKB954211_0$
2009-01-28 18:28:13 ----HDC---- C:\WINDOWS\$NtUninstallKB956841_0$
2009-01-28 18:28:08 ----HDC---- C:\WINDOWS\$NtUninstallKB960714_0$
2009-01-28 18:28:04 ----HDC---- C:\WINDOWS\$NtUninstallKB950762_0$
2009-01-28 18:28:00 ----HDC---- C:\WINDOWS\$NtUninstallKB957097_0$
2009-01-28 18:27:56 ----HDC---- C:\WINDOWS\$NtUninstallKB958687_0$
2009-01-28 18:27:53 ----HDC---- C:\WINDOWS\$NtUninstallKB952287_0$
2009-01-28 18:27:48 ----HDC---- C:\WINDOWS\$NtUninstallKB951066_0$
2009-01-28 18:27:43 ----HDC---- C:\WINDOWS\$NtUninstallKB951748_0$
2009-01-28 18:27:41 ----HDC---- C:\WINDOWS\$NtUninstallKB938464_0$
2009-01-28 18:27:37 ----HDC---- C:\WINDOWS\$NtUninstallKB954600_0$
2009-01-28 18:27:33 ----HDC---- C:\WINDOWS\$NtUninstallKB958644_0$
2009-01-28 18:27:28 ----HDC---- C:\WINDOWS\$NtUninstallKB955069_0$
2009-01-28 18:27:24 ----HDC---- C:\WINDOWS\$NtUninstallKB956802_0$
2009-01-28 18:27:15 ----HDC---- C:\WINDOWS\$NtUninstallKB944338-v2$
2009-01-28 18:25:17 ----A---- C:\WINDOWS\system32
vunrm.exe
2009-01-28 18:07:01 ----D---- C:\Program Files\Unibrain
2009-01-28 18:03:46 ----HD---- C:\WINDOWS\PIF
2009-01-28 17:59:40 ----D---- C:\WINDOWS\AC54E5443E42443CA91DA00A6974C592.TMP
2009-01-28 17:42:05 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-01-28 17:42:05 ----D---- C:\WINDOWS\system32\PreInstall
2009-01-28 17:42:04 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2009-01-28 17:42:03 ----HD---- C:\WINDOWS\$hf_mig$
2009-01-28 17:40:07 ----D---- C:\Program Files\ma-config.com
2009-01-28 17:40:07 ----D---- C:\Documents and Settings\All Users\Application Data\ma-config.com
2009-01-28 17:38:03 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-01-28 12:20:48 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-01-28 12:20:19 ----D---- C:\NVIDIA
2009-01-28 11:46:13 ----D---- C:\WINDOWS\system32\Lang
2009-01-28 11:07:56 ----A---- C:\WINDOWS\system32\ksuser.dll
2009-01-28 10:44:43 ----D---- C:\Documents and Settings\jultonus\Application Data\vlc
2009-01-28 10:38:12 ----RA---- C:\WINDOWS\system32\vorbisenc.dll
2009-01-28 10:38:12 ----RA---- C:\WINDOWS\system32\vorbis.dll
2009-01-28 10:38:12 ----RA---- C:\WINDOWS\system32\unrar.dll
2009-01-28 10:38:12 ----RA---- C:\WINDOWS\system32\OggDS.dll
2009-01-28 10:38:12 ----RA---- C:\WINDOWS\system32\ogg.dll
2009-01-28 10:38:12 ----A---- C:\WINDOWS\system32\VSFilter.dll
2009-01-28 10:38:11 ----A---- C:\WINDOWS\system32\xvid.dll
2009-01-28 10:38:10 ----D---- C:\Program Files\ACE Mega CoDecS Pack
2009-01-28 10:36:59 ----D---- C:\Documents and Settings\jultonus\Application Data\Adobe
2009-01-28 10:36:39 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2009-01-28 10:36:30 ----D---- C:\Program Files\Fichiers communs\Adobe
2009-01-28 10:36:30 ----D---- C:\Program Files\Adobe
2009-01-28 10:34:58 ----D---- C:\Documents and Settings\jultonus\Application Data\CyberLink
2009-01-28 10:33:31 ----D---- C:\Documents and Settings\All Users\Application Data\CyberLink
2009-01-28 10:33:24 ----D---- C:\Program Files\Fichiers communs\CyberLink
2009-01-28 10:32:59 ----D---- C:\Program Files\CyberLink
2009-01-28 10:32:49 ----A---- C:\WINDOWS\system32\msxml3a.dll
2009-01-28 10:31:31 ----D---- C:\Program Files\Microsoft Works
2009-01-28 10:31:26 ----D---- C:\Program Files\MSBuild
2009-01-28 10:31:19 ----D---- C:\Program Files\Microsoft Visual Studio
2009-01-28 10:31:19 ----D---- C:\Program Files\Fichiers communs\DESIGNER
2009-01-28 10:29:07 ----D---- C:\WINDOWS\SHELLNEW
2009-01-28 10:28:57 ----D---- C:\Program Files\Microsoft Office
2009-01-28 10:28:57 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2009-01-28 10:28:46 ----RHD---- C:\MSOCache
2009-01-28 10:28:12 ----D---- C:\Program Files\Google
2009-01-28 10:28:08 ----D---- C:\Program Files\DivX
2009-01-28 10:26:45 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-01-28 10:26:09 ----D---- C:\Program Files\VDCodecPack1.5
2009-01-28 10:25:39 ----D---- C:\Program Files\VideoLAN
2009-01-28 10:25:21 ----D---- C:\Program Files\WinRAR
2009-01-28 10:24:55 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2009-01-28 10:24:28 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2009-01-28 10:13:29 ----D---- C:\WINDOWS\OPTIONS
2009-01-28 10:12:52 ----RA---- C:\WINDOWS\alcwzrd.exe
2009-01-28 10:12:52 ----RA---- C:\WINDOWS\Alcmtr.exe
2009-01-28 10:12:51 ----RA---- C:\WINDOWS\RTHDCPL.exe
2009-01-28 10:12:50 ----RA---- C:\WINDOWS\system32\ChCfg.exe
2009-01-28 10:12:50 ----RA---- C:\WINDOWS\SoundMan.exe
2009-01-28 10:12:50 ----RA---- C:\WINDOWS\SkyTel.exe
2009-01-28 10:12:50 ----RA---- C:\WINDOWS\RtlUpd.exe
2009-01-28 10:12:50 ----RA---- C:\WINDOWS\RTLCPL.exe
2009-01-28 10:12:50 ----RA---- C:\WINDOWS\MicCal.exe
2009-01-28 10:12:50 ----D---- C:\WINDOWS\system32\RTCOM
2009-01-28 10:12:27 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-01-28 10:12:26 ----HDC---- C:\WINDOWS\$NtUninstallKB888111WXPSP2$
2009-01-28 10:12:18 ----D---- C:\Program Files\Realtek
2009-01-28 10:12:17 ----HD---- C:\Program Files\InstallShield Installation Information
2009-01-28 10:12:14 ----RA---- C:\WINDOWS\RtlExUpd.dll
2009-01-28 10:12:11 ----D---- C:\Program Files\Fichiers communs\InstallShield
2009-01-28 10:02:40 ----A---- C:\WINDOWS\system32\h323log.txt
2009-01-28 10:01:06 ----A---- C:\WINDOWS\system32\usbui.dll
2009-01-28 10:01:05 ----A---- C:\WINDOWS\system32\MSVCR71.dll
2009-01-28 10:01:05 ----A---- C:\WINDOWS\system32\MSVCP71.dll
2009-01-28 10:01:05 ----A---- C:\WINDOWS\system32\MFC71.dll
2009-01-28 10:01:05 ----A---- C:\WINDOWS\system32\aswBoot.exe
2009-01-28 10:01:04 ----D---- C:\Program Files\Alwil Software
2009-01-28 10:00:28 ----A---- C:\WINDOWS\imsins.BAK
2009-01-28 10:00:26 ----SHD---- C:\WINDOWS\Installer
2009-01-28 10:00:26 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-01-28 10:00:25 ----D---- C:\Program Files\Fichiers communs\ODBC
2009-01-28 10:00:25 ----A---- C:\WINDOWS\ODBCINST.INI
2009-01-28 10:00:23 ----RD---- C:\Program Files
2009-01-28 10:00:23 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
2009-01-28 10:00:23 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-01-28 10:00:23 ----D---- C:\Program Files\Fichiers communs
2009-01-28 10:00:21 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2009-01-28 10:00:20 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2009-01-28 10:00:20 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2009-01-28 10:00:19 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2009-01-28 10:00:19 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2009-01-28 10:00:19 ----RA---- C:\WINDOWS\system32\kbdur.dll
2009-01-28 10:00:19 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2009-01-28 10:00:19 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2009-01-28 10:00:19 ----RA---- C:\WINDOWS\system32\kbdru.dll
2009-01-28 10:00:19 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2009-01-28 10:00:19 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2009-01-28 10:00:19 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2009-01-28 10:00:19 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2009-01-28 10:00:19 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2009-01-28 10:00:19 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2009-01-28 10:00:17 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2009-01-28 10:00:17 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2009-01-28 10:00:17 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2009-01-28 10:00:17 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2009-01-28 10:00:17 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2009-01-28 10:00:17 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2009-01-28 10:00:17 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2009-01-28 10:00:16 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2009-01-28 10:00:16 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2009-01-28 10:00:16 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2009-01-28 10:00:16 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2009-01-28 10:00:16 ----RA---- C:\WINDOWS\system32\kbdest.dll
2009-01-28 10:00:14 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2009-01-28 10:00:14 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2009-01-28 10:00:14 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2009-01-28 10:00:14 ----RA---- C:\WINDOWS\system32\kbdro.dll
2009-01-28 10:00:14 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2009-01-28 10:00:14 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2009-01-28 10:00:14 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2009-01-28 10:00:14 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2009-01-28 10:00:14 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2009-01-28 10:00:14 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2009-01-28 10:00:14 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2009-01-28 10:00:14 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2009-01-28 10:00:14 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2009-01-28 10:00:12 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-01-28 10:00:12 ----A---- C:\WINDOWS\system32\irclass.dll
2009-01-28 10:00:12 ----A---- C:\WINDOWS\system32\dgsetup.dll
2009-01-28 10:00:12 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2009-01-28 10:00:11 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2009-01-28 10:00:10 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2009-01-28 10:00:10 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-01-28 10:00:09 ----A---- C:\WINDOWS\system32\batt.dll
2009-01-28 10:00:09 ----A---- C:\WINDOWS
otepad.exe
2009-01-28 10:00:08 ----A---- C:\WINDOWS\system32\storprop.dll
2009-01-28 10:00:03 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2009-01-28 10:00:00 ----RA---- C:\WINDOWS\SET8.tmp
2009-01-28 09:59:59 ----RA---- C:\WINDOWS\SET4.tmp
2009-01-28 09:59:58 ----RA---- C:\WINDOWS\SET3.tmp
2009-01-28 09:59:53 ----D---- C:\WINDOWS\system32\CatRoot2
2009-01-28 09:59:53 ----D---- C:\WINDOWS\system32\CatRoot
2009-01-28 09:59:48 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-01-28 09:59:32 ----A---- C:\WINDOWS\setuplog.txt
2009-01-28 09:59:30 ----D---- C:\Documents and Settings
2009-01-28 09:59:29 ----SHD---- C:\System Volume Information
2009-01-28 09:58:20 ----A---- C:\WINDOWS\BricoPackUninst.cmd
2009-01-28 09:58:19 ----SHD---- C:\RECYCLER
2009-01-28 09:57:58 ----SH---- C:\boot.ini
2009-01-28 09:57:29 ----A---- C:\WINDOWS\BricoPackUninst.txt
2009-01-28 09:57:10 ----D---- C:\WINDOWS\BricoPacks
2009-01-28 09:53:33 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-01-28 09:53:33 ----RSD---- C:\WINDOWS\Fonts
2009-01-28 09:53:33 ----RD---- C:\WINDOWS\Web
2009-01-28 09:53:33 ----HD---- C:\WINDOWS\inf
2009-01-28 09:53:33 ----D---- C:\WINDOWS\WinSxS
2009-01-28 09:53:33 ----D---- C:\WINDOWS	wain_32
2009-01-28 09:53:33 ----D---- C:\WINDOWS\Temp
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32\wins
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32\wbem
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32\usmt
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32\spool
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32\ShellExt
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32\Setup
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32as
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32\oobe
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32
pp
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32\mui
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32\inetsrv
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32\IME
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32\icsxml
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32\ias
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32\export
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32\drivers
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32\dhcp
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32\config
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32\3com_dmi
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32\3076
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32\2052
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32\1054
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32\1042
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32\1041
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32\1037
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32\1036
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32\1033
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32\1031
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32\1028
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32\1025
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system32
2009-01-28 09:53:33 ----D---- C:\WINDOWS\system
2009-01-28 09:53:33 ----D---- C:\WINDOWS\security
2009-01-28 09:53:33 ----D---- C:\WINDOWS\Resources
2009-01-28 09:53:33 ----D---- C:\WINDOWSepair
2009-01-28 09:53:33 ----D---- C:\WINDOWS\Provisioning
2009-01-28 09:53:33 ----D---- C:\WINDOWS\PeerNet
2009-01-28 09:53:33 ----D---- C:\WINDOWS\pchealth
2009-01-28 09:53:33 ----D---- C:\WINDOWS\mui
2009-01-28 09:53:33 ----D---- C:\WINDOWS\msapps
2009-01-28 09:53:33 ----D---- C:\WINDOWS\msagent
2009-01-28 09:53:33 ----D---- C:\WINDOWS\Media
2009-01-28 09:53:33 ----D---- C:\WINDOWS\java
2009-01-28 09:53:33 ----D---- C:\WINDOWS\ime
2009-01-28 09:53:33 ----D---- C:\WINDOWS\Help
2009-01-28 09:53:33 ----D---- C:\WINDOWS\Driver Cache
2009-01-28 09:53:33 ----D---- C:\WINDOWS\Debug
2009-01-28 09:53:33 ----D---- C:\WINDOWS\Cursors
2009-01-28 09:53:33 ----D---- C:\WINDOWS\Connection Wizard
2009-01-28 09:53:33 ----D---- C:\WINDOWS\Config
2009-01-28 09:53:33 ----D---- C:\WINDOWS\AppPatch
2009-01-28 09:53:33 ----D---- C:\WINDOWS\addins
2009-01-28 09:53:33 ----D---- C:\WINDOWS
2009-01-28 09:17:31 ----A---- C:\WINDOWS\system32
vusmb.exe
2009-01-28 09:17:21 ----D---- C:\Documents and Settings\jultonus\Application Data\InstallShield
2009-01-28 09:14:42 ----D---- C:\WINDOWS\system32\AGEIA
2009-01-28 09:14:42 ----D---- C:\Program Files\AGEIA Technologies
2009-01-28 09:14:38 ----D---- C:\Program Files\Fichiers communs\Wise Installation Wizard
2009-01-28 09:14:17 ----D---- C:\WINDOWS
view
2009-01-28 09:14:17 ----A---- C:\WINDOWS\system32
vudisp.exe
2009-01-28 09:14:07 ----A---- C:\WINDOWS\system32\NVUNINST.EXE
2009-01-28 09:10:24 ----D---- C:\Documents and Settings\jultonus\Application Data\Identities
2009-01-28 09:10:23 ----HD---- C:\Program Files\Uninstall Information
2009-01-28 09:10:19 ----ASH---- C:\Documents and Settings\jultonus\Application Data\desktop.ini
2009-01-28 09:10:18 ----SD---- C:\Documents and Settings\jultonus\Application Data\Microsoft
2009-01-28 09:09:04 ----D---- C:\WINDOWS\SoftwareDistribution
2009-01-28 09:09:02 ----SD---- C:\WINDOWS\system32\Microsoft
2009-01-28 09:09:02 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-01-28 09:07:10 ----D---- C:\WINDOWS\system32\xircom
2009-01-28 09:07:10 ----D---- C:\Program Files\xerox
2009-01-28 09:07:10 ----D---- C:\Program Files\microsoft frontpage
2009-01-28 09:07:06 ----A---- C:\WINDOWS\control.ini
2009-01-28 09:07:06 ----A---- C:\AUTOEXEC.BAT
2009-01-28 09:06:59 ----A---- C:\WINDOWS\OEWABLog.txt
2009-01-28 09:06:56 ----A---- C:\WINDOWS\system32\mapi32.dll
2009-01-28 09:06:25 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-01-28 09:06:25 ----RD---- C:\WINDOWS\Offline Web Pages
2009-01-28 09:06:25 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2009-01-28 09:06:21 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2009-01-28 09:06:18 ----HD---- C:\Program Files\WindowsUpdate
2009-01-28 09:06:16 ----D---- C:\Program Files\Services en ligne
2009-01-28 09:06:05 ----D---- C:\WINDOWS\system32\DirectX
2009-01-28 09:05:48 ----A---- C:\WINDOWS\system32\atrace.dll
2009-01-28 09:05:46 ----A---- C:\WINDOWS\system32\desktop.ini
2009-01-28 09:05:46 ----A---- C:\WINDOWS\desktop.ini
2009-01-28 09:05:40 ----A---- C:\WINDOWS\system32
mevtmsg.dll
2009-01-28 09:05:39 ----D---- C:\Program Files\Fichiers communs\Services
2009-01-28 09:05:39 ----A---- C:\WINDOWS\system32\acctres.dll
2009-01-28 09:05:36 ----SD---- C:\WINDOWS\Tasks
2009-01-28 09:05:36 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2009-01-28 09:05:35 ----D---- C:\Program Files\Fichiers communs\MSSoap
2009-01-28 09:05:33 ----D---- C:\WINDOWS\srchasst
2009-01-28 09:05:32 ----D---- C:\WINDOWS\system32\Macromed
2009-01-28 09:05:30 ----A---- C:\WINDOWS\system32\wuweb.dll
2009-01-28 09:05:30 ----A---- C:\WINDOWS\system32\wups.dll
2009-01-28 09:05:30 ----A---- C:\WINDOWS\system32\wucltui.dll
2009-01-28 09:05:30 ----A---- C:\WINDOWS\system32\wuauserv.dll
2009-01-28 09:05:30 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2009-01-28 09:05:30 ----A---- C:\WINDOWS\system32\wuaueng.dll
2009-01-28 09:05:30 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2009-01-28 09:05:30 ----A---- C:\WINDOWS\system32\wuauclt.exe
2009-01-28 09:05:30 ----A---- C:\WINDOWS\system32\wuapi.dll
2009-01-28 09:05:29 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2009-01-28 09:05:29 ----A---- C:\WINDOWS\system32\qmgr.dll
2009-01-28 09:05:29 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2009-01-28 09:05:29 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2009-01-28 09:05:27 ----D---- C:\Program Files\Movie Maker
2009-01-28 09:05:23 ----A---- C:\WINDOWS\system32\safrslv.dll
2009-01-28 09:05:23 ----A---- C:\WINDOWS\system32\safrdm.dll
2009-01-28 09:05:23 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2009-01-28 09:05:23 ----A---- C:\WINDOWS\system32acpldlg.dll
2009-01-28 09:05:21 ----A---- C:\WINDOWS\system32\fltmc.exe
2009-01-28 09:05:21 ----A---- C:\WINDOWS\system32\fltlib.dll
2009-01-28 09:05:20 ----D---- C:\WINDOWS\system32\Restore
2009-01-28 09:05:20 ----A---- C:\WINDOWS\system32\srsvc.dll
2009-01-28 09:05:20 ----A---- C:\WINDOWS\system32\srrstr.dll
2009-01-28 09:05:20 ----A---- C:\WINDOWS\system32\srclient.dll
2009-01-28 09:05:20 ----A---- C:\WINDOWS\system32\mnmdd.dll
2009-01-28 09:05:20 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2009-01-28 09:05:20 ----A---- C:\WINDOWS\system32\ils.dll
2009-01-28 09:05:19 ----A---- C:\WINDOWS\system32
mmkcert.dll
2009-01-28 09:05:19 ----A---- C:\WINDOWS\system32\msconf.dll
2009-01-28 09:05:19 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2009-01-28 09:05:17 ----D---- C:\Program Files\NetMeeting
2009-01-28 09:05:17 ----A---- C:\WINDOWS\system32\msoert2.dll
2009-01-28 09:05:17 ----A---- C:\WINDOWS\system32\msoeacct.dll
2009-01-28 09:05:16 ----A---- C:\WINDOWS\system32\inetres.dll
2009-01-28 09:05:16 ----A---- C:\WINDOWS\system32\inetcomm.dll
2009-01-28 09:05:15 ----D---- C:\Program Files\Outlook Express
2009-01-28 09:05:15 ----A---- C:\WINDOWS\system32\schedsvc.dll
2009-01-28 09:05:15 ----A---- C:\WINDOWS\system32\mstinit.exe
2009-01-28 09:05:15 ----A---- C:\WINDOWS\system32\mstask.dll
2009-01-28 09:05:14 ----A---- C:\WINDOWS\system32\isign32.dll
2009-01-28 09:05:14 ----A---- C:\WINDOWS\system32\inetcfg.dll
2009-01-28 09:05:14 ----A---- C:\WINDOWS\system32\icwphbk.dll
2009-01-28 09:05:14 ----A---- C:\WINDOWS\system32\icwdial.dll
2009-01-28 09:05:10 ----D---- C:\Program Files\Fichiers communs\System
2009-01-28 09:05:07 ----D---- C:\Program Files\Internet Explorer
2009-01-28 09:05:00 ----D---- C:\Program Files\ComPlus Applications
2009-01-28 09:04:58 ----A---- C:\WINDOWS\vbaddin.ini
2009-01-28 09:04:58 ----A---- C:\WINDOWS\vb.ini
2009-01-28 09:04:55 ----D---- C:\WINDOWS\Registration
2009-01-28 09:04:35 ----D---- C:\Program Files\Windows Media Player
2009-01-28 09:04:35 ----D---- C:\Program Files\Online Services
2009-01-28 09:04:32 ----D---- C:\Program Files\Messenger
2009-01-28 09:04:29 ----D---- C:\Program Files\MSN Gaming Zone
2009-01-28 09:04:29 ----A---- C:\WINDOWS\system32\write.exe
2009-01-28 09:04:21 ----A---- C:\WINDOWS\system32\sndvol32.exe
2009-01-28 09:04:21 ----A---- C:\WINDOWS\system32\hticons.dll
2009-01-28 09:04:20 ----A---- C:\WINDOWS\system32\winchat.exe
2009-01-28 09:04:20 ----A---- C:\WINDOWS\system32\avwav.dll
2009-01-28 09:04:20 ----A---- C:\WINDOWS\system32\avtapi.dll
2009-01-28 09:04:20 ----A---- C:\WINDOWS\system32\avmeter.dll
2009-01-28 09:04:14 ----A---- C:\WINDOWS\system32\getuname.dll
2009-01-28 09:04:14 ----A---- C:\WINDOWS\system32\charmap.exe
2009-01-28 09:04:14 ----A---- C:\WINDOWS\system32\calc.exe
2009-01-28 09:04:13 ----A---- C:\WINDOWS\system32\winmine.exe
2009-01-28 09:04:13 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2009-01-28 09:04:13 ----A---- C:\WINDOWS\system32	skill.exe
2009-01-28 09:04:13 ----A---- C:\WINDOWS\system32\sol.exe
2009-01-28 09:04:13 ----A---- C:\WINDOWS\system32eset.exe
2009-01-28 09:04:13 ----A---- C:\WINDOWS\system32\mshearts.exe
2009-01-28 09:04:13 ----A---- C:\WINDOWS\system32\freecell.exe
2009-01-28 09:04:12 ----A---- C:\WINDOWS\system32	sshutdn.exe
2009-01-28 09:04:12 ----A---- C:\WINDOWS\system32	slabels.ini
2009-01-28 09:04:12 ----A---- C:\WINDOWS\system32	sdiscon.exe
2009-01-28 09:04:12 ----A---- C:\WINDOWS\system32	scon.exe
2009-01-28 09:04:12 ----A---- C:\WINDOWS\system32\shadow.exe
2009-01-28 09:04:12 ----A---- C:\WINDOWS\system32winsta.exe
2009-01-28 09:04:12 ----A---- C:\WINDOWS\system32egini.exe
2009-01-28 09:04:12 ----A---- C:\WINDOWS\system32dpcfgex.dll
2009-01-28 09:04:12 ----A---- C:\WINDOWS\system32\qwinsta.exe
2009-01-28 09:04:12 ----A---- C:\WINDOWS\system32\qappsrv.exe
2009-01-28 09:04:12 ----A---- C:\WINDOWS\system32\msg.exe
2009-01-28 09:04:12 ----A---- C:\WINDOWS\system32\logoff.exe
2009-01-28 09:04:12 ----A---- C:\WINDOWS\system32\cdmodem.dll
2009-01-28 09:04:11 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2009-01-28 09:04:11 ----A---- C:\WINDOWS\system32\mtxex.dll
2009-01-28 09:04:11 ----A---- C:\WINDOWS\system32\mtxdm.dll
2009-01-28 09:04:11 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2009-01-28 09:04:11 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2009-01-28 09:04:11 ----A---- C:\WINDOWS\system32\comrepl.dll
2009-01-28 09:04:11 ----A---- C:\WINDOWS\system32\comaddin.dll
2009-01-28 09:04:10 ----A---- C:\WINDOWS\system32\stclient.dll
2009-01-28 09:04:10 ----A---- C:\WINDOWS\system32\comsnap.dll
2009-01-28 09:04:06 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2009-01-28 09:04:00 ----D---- C:\Program Files\MSN
2009-01-28 09:04:00 ----A---- C:\WINDOWS\system32\accwiz.exe
2009-01-28 09:03:59 ----D---- C:\Program Files\Windows NT
2009-01-28 09:03:59 ----A---- C:\WINDOWS\system32\sndrec32.exe
2009-01-28 09:03:59 ----A---- C:\WINDOWS\system32\mspaint.exe
2009-01-28 09:03:59 ----A---- C:\WINDOWS\system32\mplay32.exe
2009-01-28 09:03:59 ----A---- C:\WINDOWS\system32\hypertrm.dll
2009-01-28 09:03:59 ----A---- C:\WINDOWS\system32\clipbrd.exe
2009-01-28 09:03:58 ----A---- C:\WINDOWS\system32	scfgwmi.dll
2009-01-28 09:03:58 ----A---- C:\WINDOWS\system32\spider.exe
2009-01-28 09:03:58 ----A---- C:\WINDOWS\system32\mstscax.dll
2009-01-28 09:03:58 ----A---- C:\WINDOWS\system32\mstsc.exe
2009-01-28 09:03:57 ----A---- C:\WINDOWS\system32	scupgrd.exe
2009-01-28 09:03:57 ----A---- C:\WINDOWS\system32	ermsrv.dll
2009-01-28 09:03:57 ----A---- C:\WINDOWS\system32\sessmgr.exe
2009-01-28 09:03:57 ----A---- C:\WINDOWS\system32emotepg.dll
2009-01-28 09:03:57 ----A---- C:\WINDOWS\system32dshost.exe
2009-01-28 09:03:57 ----A---- C:\WINDOWS\system32dsaddin.exe
2009-01-28 09:03:57 ----A---- C:\WINDOWS\system32dpwsx.dll
2009-01-28 09:03:57 ----A---- C:\WINDOWS\system32dpsnd.dll
2009-01-28 09:03:57 ----A---- C:\WINDOWS\system32dpclip.exe
2009-01-28 09:03:57 ----A---- C:\WINDOWS\system32dchost.dll
2009-01-28 09:03:57 ----A---- C:\WINDOWS\system32\qprocess.exe
2009-01-28 09:03:57 ----A---- C:\WINDOWS\system32\icaapi.dll
2009-01-28 09:03:57 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2009-01-28 09:03:56 ----D---- C:\WINDOWS\system32\MsDtc
2009-01-28 09:03:56 ----A---- C:\WINDOWS\system32\xolehlp.dll
2009-01-28 09:03:56 ----A---- C:\WINDOWS\system32\mtxoci.dll
2009-01-28 09:03:56 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2009-01-28 09:03:56 ----A---- C:\WINDOWS\system32\msdtctm.dll
2009-01-28 09:03:56 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2009-01-28 09:03:56 ----A---- C:\WINDOWS\system32\msdtclog.dll
2009-01-28 09:03:56 ----A---- C:\WINDOWS\system32\msdtc.exe
2009-01-28 09:03:55 ----D---- C:\WINDOWS\system32\Com
2009-01-28 09:03:55 ----A---- C:\WINDOWS\system32\colbact.dll
2009-01-28 09:03:55 ----A---- C:\WINDOWS\system32\clbcatex.dll
2009-01-28 09:03:55 ----A---- C:\WINDOWS\system32\catsrvut.dll
2009-01-28 09:03:55 ----A---- C:\WINDOWS\system32\catsrvps.dll
2009-01-28 09:03:55 ----A---- C:\WINDOWS\system32\catsrv.dll
2009-01-28 09:03:54 ----A---- C:\WINDOWS\system32\comuid.dll
2009-01-28 09:03:54 ----A---- C:\WINDOWS\system32\comsvcs.dll
2009-01-28 09:03:54 ----A---- C:\WINDOWS\system32\clbcatq.dll
2009-01-28 09:03:51 ----A---- C:\WINDOWS\system32\servdeps.dll
2009-01-28 09:03:50 ----A---- C:\WINDOWS\system32\mmfutil.dll
2009-01-28 09:03:50 ----A---- C:\WINDOWS\system32\licwmi.dll
2009-01-28 09:03:50 ----A---- C:\WINDOWS\system32\cmprops.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
wiz.exe
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwssr.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwss.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwrszht.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwrszhc.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwrstr.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwrsth.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwrssv.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwrssl.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwrssk.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwrsru.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwrsptb.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwrspt.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwrspl.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwrsno.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwrsnl.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwrsko.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwrsja.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwrsit.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwrshu.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwrshe.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwrsfr.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwrsfi.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwrsesm.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwrses.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwrseng.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwrsel.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwrsde.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwrsda.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwrscs.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwrsar.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwimg.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwdmcpl.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vwddi.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vvitvsr.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vvitvs.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vsvc32.exe
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vshell.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vrszht.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vrszhc.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vrstr.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vrsth.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vrssv.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vrssl.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vrssk.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vrsru.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vrsptb.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vrspt.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vrspl.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vrsno.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vrsnl.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vrsko.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vrsja.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vrsit.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vrshu.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vrshe.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vrsfr.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vrsfi.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vrsesm.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vrses.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vrseng.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vrsel.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vrsde.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vrsda.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vrscs.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vrsar.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
voglnt.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vmoblsr.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vmobls.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vmctray.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vmccssr.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vmccss.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vmccsrs.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vmccs.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
view.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vgamesr.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vgames.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vdspsch.exe
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vdispsr.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vdisps.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vcuda.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vcpluir.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vcplui.exe
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vcpl.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vcolor.exe
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vcodins.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vcod.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vappbar.exe
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
vapi.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32
v4_disp.dll
2009-01-15 08:19:00 ----A---- C:\WINDOWS\system32\keystone.exe

======List of files/folders modified in the last 1 months======

2009-02-01 03:03:08 ----A---- C:\WINDOWS\win.ini
2009-01-28 19:31:36 ----A---- C:\WINDOWS\system32\uxtheme.dll
2009-01-28 10:38:13 ----A---- C:\WINDOWS\system.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2008-11-26 26944]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2008-11-26 111184]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2008-11-26 50864]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 WmiAcpi;Interface de gestion Microsoft Windows pour ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}; \??\C:\Program Files\CyberLink\PowerDVD8\000.fcl []
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-11-26 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2008-11-26 94032]
R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2008-12-08 55136]
R2 ubumapi;Unibrain 1394 FireAPI Driver; C:\WINDOWS\system32\DRIVERS\ubumapi.sys [2004-12-21 29824]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2008-11-26 23152]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-09-12 4381184]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS
v4_mini.sys [2008-10-17 6134240]
R3 NVENETFD;NVIDIA nForce 10/100 Mbps Ethernet ; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2008-08-01 54784]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS
vnetbus.sys [2008-08-01 22016]
R3 ubohci;Unibrain 1394 OHCI Driver; C:\WINDOWS\system32\DRIVERS\ubohci.sys [2004-12-21 72320]
R3 ubsbp2;Unibrain SBP2 Bus Driver; C:\WINDOWS\system32\DRIVERS\ubsbp2.sys [2004-12-21 32768]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
S3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 catchme;catchme; \??\C:\DOCUME~1\jultonus\LOCALS~1\Temp\catchme.sys []
S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys []
S3 fbxusb;Carte réseau virtuelle FreeBox USB (32 bits); C:\WINDOWS\system32\DRIVERS\fbxusb32.sys [2007-08-27 31128]
S3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
S3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS
ic1394.sys [2008-04-13 61824]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers
mwcd.sys [2007-02-22 137216]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers
mwcdc.sys [2007-02-22 8320]
S3 nmwcdcj;Nokia USB Port; C:\WINDOWS\system32\drivers
mwcdcj.sys [2007-02-22 12288]
S3 nmwcdcm;Nokia USB Modem; C:\WINDOWS\system32\drivers
mwcdcm.sys [2007-02-22 12288]
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-15 82688]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2008-11-26 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2008-11-26 155160]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe [2008-12-05 935208]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32
vsvc32.exe [2008-10-17 163908]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2008-12-04 226640]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2008-11-26 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2008-11-26 352920]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2007-06-15 300544]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 fsssvc;Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2008-12-08 533344]
S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2009-01-24 216232]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-05-10 827392]

-----------------EOF-----------------

ric025 · Answer

Non!! 

Upload le fichier, cela ira plus vite:

Uploader un fichier sur mediafire :

    * Rends-toi sur ce lien : https://www.mediafire.com/
    * Clique en haut sur "Upload files To Media fire". Choisis ensuite "I want to upload without an account"
    * Une fenêtre de ton explorateur windows va s'ouvrir. Navigue jusqu'au rapport que je te demande d'uploader, sélectionne-le puis clique sur "ouvrir".
    * Clique ensuite sur "Upload".
    * A droite de l'écran, choisis : "upload to a new folder". Laisse le nom par défaut ( = la date )
    * Valide et laisse l'upload se faire.
    * Clique sur "Vieuw uploaded file" et copie-moi l'url ( = le lien ) du nouvel onglet ou de la nouvelle fenêtre qui va s'ouvrir dans ton prochain message. Ainsi, je pourrais télécharger le rapport demandé.

94250gus · Answer

voici, sans erreur je pense;


https://www.mediafire.com/?sharekey=dde21dc6faec6d491f8e0fff488e27e03993c911f505d1f6b8eada0a1ae8665a

ric025 · Answer

Nickel!

Je regarde ça! 

A++

94250gus · Answer

en tout qua, ma connexion est revenu et fonctionne pour l'instant

ric025 · Answer

Ok! C'est reparti!! :)

    *  Télécharge OtmoveIT (de Old_Timer) sur ton Bureau

http://oldtimer.geekstogo.com/OTMoveIt3.exe

    * Double-clique sur OTMoveIt.exe pour le lancer.

    * Assure toi que la case Unregister Dll's and Ocx's soit bien cochée.

    * Copie la liste qui se trouve en gras dans la citation ci-dessous et colle-la dans le cadre de gauche de OTMoveIt sous Paste List of Files/Folders to move.


-----------------------------

:processes
explorer.exe
wswc.exe

:files
C:\WINDOWS\system32\pgpl.exe
C:\WINDOWS\system32\vbeut.exe
C:\WINDOWS\system32\wmfh.exe
C:\WINDOWS\system32\hvxgvn.exe
C:\WINDOWS\system32\yome.exe
C:\WINDOWS\system32\epjn.exe
C:\WINDOWS\system32\mhwplt.exe
C:\WINDOWS\system32	vnx.exe
C:\WINDOWS\system32\yixqibh.exe
C:\WINDOWS\system32\ksmvvszw.exe
C:\WINDOWS\system32\gumrneb.exe
C:\WINDOWS\system32
ghzc.exe
C:\WINDOWS\system32\zeoey.exe 
C:\WINDOWS\wswc.exe

:reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersio­n\Run]
"Windows UDP's Control Service"=- 
"C:\WINDOWS\system32\Isass.exe"=-
"C:\WINDOWS\system32\csrs.exe"=-
"C:\WINDOWS\system32\winamp.exe"=-
"C:\WINDOWS\system32\lssas.exe"=- 
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] 

:commands
[emptytemp]
[start explorer]
[reboot]

-----------------------------


    * Clique sur MoveIt! pour lancer la suppression.

    * Le résultat apparaitra dans le cadre "Results".

    * Clique sur Exit pour fermer.

    * Poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

    * Il te sera peut-être demandé de redémarrer le pc pour achever la suppression. Si c'est le cas accepte par Yes.

Ensuite redémarre le pc et refais un nouveau rapport RSIT stp que tu me posteras.

A++ ;)

94250gus · Answer

bonjour,merci de t'etre casser la tete pour moi, yout tourne nikel, apres tes astuces et reparations, mais j'ai du formater tout car des dossier systeme avait disparus, alors c'est fait, tout est reinstallé, et parfait, merci encore pour tout

ric025 · Answer

:'(

Bah! Bon surf!

A++

Ta tof sur ce site

32 réponses

Votre réponse

Discussions similaires

Newsletters