Spy.agent variante de win32

merci à tous ce qui mon aidé sur ce problème. En éspérant ne pas revenir sur le forum de ci tôt , cela voudra dire que je n'ai pas de problème.
Encore merci.
Mask.

et voilà le rapport de malware bytes

Malwarebytes' Anti-Malware 1.34
Version de la base de données: 1778
Windows 5.1.2600 Service Pack 2

19/02/2009 19:28:55
mbam-log-2009-02-19 (19-28-55).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 141460
Temps écoulé: 34 minute(s), 4 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 8
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 13
Fichier(s) infecté(s): 27

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\acm.acmfactory (Adware.WhenUSave) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{df901432-1b9f-4f5b-9e56-301c553f9095} (Adware.WhenUSave) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{43382522-a846-46f4-ac57-1f71ae6e1086} (Adware.WhenUSave) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{572fb162-c0ba-4edf-8cff-e3846153b9b0} (Adware.WhenUSave) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{72a836d1-bc00-43c0-a941-17960e4fb842} (Adware.WhenUSave) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{a9aae1ab-9688-42c5-86f5-c12f6b9015ad} (Adware.WhenUSave) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\acm.acmfactory.1 (Adware.WhenUSave) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\{127df9b4-d75d-44a6-af78-8c3a8ceb03db} (Adware.WhenUSave) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\WINDOWS\websvr (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\addIns (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\addIns\Php (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\addIns\Php\dlls (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\addIns\Php\sessiondata (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\addIns\Php\uploadtemp (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\htdocs (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\htdocs\myAdmin (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\htdocs\system (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\htdocs\upload (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\htdocs\user (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\htdocs\user\admin (Malware.Trace) -> Quarantined and deleted successfully.
C:\Program Files\Save (Adware.WhenUSave) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\Program Files\Save\ACM.dll (Adware.WhenUSave) -> Quarantined and deleted successfully.
C:\Program Files\EvID4226Patch.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\addIns\Php\php.exe (Spyware.Pakes) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\map.txt (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\addIns\Php\php.ini (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\addIns\Php\php4ts.dll (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\addIns\Php\dlls\php_sockets.dll (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\addIns\Php\dlls\readme.txt (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\htdocs\!HDD by HTTP.html (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\htdocs\phpinfo.php (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\htdocs\myAdmin\Download phpmyadmin from sourceforge into this dir.txt (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\htdocs\system\BACK.gif (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\htdocs\system\BLANK.gif (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\htdocs\system\COMPRESSED.gif (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\htdocs\system\dnserror.htm (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\htdocs\system\dnserror_de.htm (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\htdocs\system\FILE.gif (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\htdocs\system\FOLDER.gif (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\htdocs\system\HTML.gif (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\htdocs\system\PAGERROR.gif (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\htdocs\system\PHP.gif (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\htdocs\system\PICTURE.gif (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\htdocs\system\REFRESH.gif (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\htdocs\system\UPFOLDER.gif (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\htdocs\user\test.htm (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\websvr\htdocs\user\admin\htaccess.txt (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\cina.ini (Malware.Trace) -> Quarantined and deleted successfully.

oui mais pas toutes pour internet explorer il me dit qu'il ne peut pas mettre les java ou quelque chose comme çà . je vais le refaire et te faire un copier coller de la phrase en angl:ais.
voilà le rapport

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:41:16, on 19/02/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Systran40premi.IEPlugIn - {D3919E1A-D6A5-11D6-AC3E-00B0D094B576} - C:\Program Files\Systran\4_0\Premium\IEPlugIn.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [UVS10 Preload] C:\Program Files\Ulead Systems\Ulead VideoStudio 10\uvPL.exe
O4 - HKLM\..\Run: [EPSON Stylus DX6000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBIE.EXE /FU "C:\WINDOWS\TEMP\E_S26C.tmp" /EF "HKLM"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [1&1 EasyLogin] C:\Program Files\1&1\1&1 EasyLogin\EasyLogin.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://express.foto.com/ImageUploader5.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} (AdVerifierADPCtrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.1.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{71A35E05-EFCA-4981-BED0-DC1B20331594}: NameServer = 212.27.40.240,212.27.40.241
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Windows Logon Process Service (MSWinLogonProcService) - Unknown owner - C:\WINDOWS\winlogon.exe (file missing)
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: Remote Administrator Service (r_server) - Unknown owner - C:\Documents and Settings\maskagaz\Bureau\r_server.exe (file missing)
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O24 - Desktop Component 0: (no name) - http://artfiles.art.com/images/-/Pope-John-Paul-II-1920---2005-Photograph-C11812676.jpeg

voilà je qu'il me dit
There might be problems loading the Java Applet in your browser

le lien ne fonctionne pas tu en as un autre stp.

voilà ce que me dis windows update et je suis sous une version pas originale si tu vois ce que je veux dire. je ne sais pas si ça peux faire quelque chose.je fait le reste

le rapport1


Dans CCleaner, clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures".
Par la suite, laisse-le avec ses réglages par défaut. C'est tout.


# Etape 1/ Télécharge :

- Lop S&D https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2 (Eric 71 & Angeldark) sur ton Bureau.

- Toolbar-S&D https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2 (Team IDN) sur ton Bureau.


Redémarre en mode sans échec comme indiqué ici https://www.wekyo.com/demarrer-le-pc-en-mode-sans-echec-windows-7-et-8/ ; pour retrouver le rapport, clique sur le raccourci "GenProc" sur ton bureau. Choisis ta session courante *** maskagaz ***


# Etape 2/

Lance Toolbar-S&D situé sur le Bureau.
Tape sur "2" puis valide en appuyant sur "Entrée". Ne ferme pas la fenêtre lors de la suppression.

# Etape 3/

Double-clique sur Lop S&D pour lancer l'installation, séléctionne la langue souhaitée, puis choisis l'Option 2 - Suppression - et patiente jusqu'à ce qu'il ait terminé.

# Etape 4/

Lance CCleaner : "Nettoyeur"/"lancer le nettoyage" et c'est tout.

# Etape 5/

Redémarre normalement et poste, dans la même réponse :

- Le contenu du rapport C:\TB.txt ;
- Le contenu du rapport C:\lopR.txt ;
- Un nouveau rapport HijackThis http://forum.telecharger.01net.com/forum/high-tech/PRODUITS/Questions-techniques/hijackthis-version-install-sujet_199100_1.htm ;

Précise les difficultés que tu as eu (ce que tu n'as pas pu faire...) ainsi que l'évolution de la situation.

____________________________________________________________________________________________________________

Sites officiels GenProc : www.alt-shift-return.org et www.genproc.com


le rapport2 dans argument

~~ Arguments ~~

# Détections GenProc 2.374 19/02/2009 à 20:21:26,42
Lop:le 19/02/2009 à 20:21:28,56 "C:\Program Files\Multi_Media_France"
Toolbar:le 19/02/2009 à 20:21:29,79 "C:\Program Files\Multi_Media_France"

rapport toolbar

pour lop je fait "f" et puis je choix quoi je ne le vois pas sur le post

-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 1800+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : maskagaz ( Administrator )
BOOT : Fail-safe with network boot
Antivirus : NOD32 Antivirus System 2.51 2.51 (Activated)
Firewall : Sygate Personal Firewall 4.6 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:57 Go (Free:2 Go)
D:\ (Local Disk) - NTFS - Total:56 Go (Free:22 Go)
E:\ (CD or DVD)
F:\ (CD or DVD)
G:\ (USB)
H:\ (USB) - FAT32 - Total:3816 Mo (Free:0 Go)
I:\ (USB)
K:\ (USB)
L:\ (USB)
M:\ (USB)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 19/02/2009|20:36 )

-----------\\ SUPPRESSION

Supprime! - C:\Program Files\Multi_Media_France

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="https://www.google.fr/?gws_rd=ssl"
"Search Page"="https://www.google.com/?gws_rd=ssl"
"Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_Search_URL"="http://www.google.com/toolbar/ie8/sidebar.html"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="https://www.msn.com/fr-fr/"


--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\maskagaz\Mes documents\logiciels\Tuneup Utilities 2004 Keygenerator.exe



1 - "C:\ToolBar SD\TB_1.txt" - 19/02/2009|20:38 - Option : [2]

-----------\\ Fin du rapport a 20:38:14,68

rapport lopr avec le choix 1


--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 1800+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : maskagaz ( Administrator )
BOOT : Fail-safe with network boot
Antivirus : NOD32 Antivirus System 2.51 2.51 (Activated)
Firewall : Sygate Personal Firewall 4.6 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:57 Go (Free:2 Go)
D:\ (Local Disk) - NTFS - Total:56 Go (Free:22 Go)
E:\ (CD or DVD)
F:\ (CD or DVD)
G:\ (USB)
H:\ (USB) - FAT32 - Total:3816 Mo (Free:0 Go)
I:\ (USB)
K:\ (USB)
L:\ (USB)
M:\ (USB)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 19/02/2009|20:49 )

--------------------\\ Listing des dossiers dans APPLIC~1

[26/10/2007|11:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[29/09/2006|20:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[29/04/2006|09:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Autodesk
[04/08/2005|13:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EarthBrowser
[21/09/2008|16:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\espionServerData
[12/11/2008|15:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[16/02/2009|23:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[06/01/2008|20:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GRETECH
[27/01/2007|11:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[19/02/2009|18:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[18/09/2007|17:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[10/02/2005|20:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[23/03/2008|10:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[04/12/2006|15:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[17/03/2006|00:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[19/02/2005|10:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TuneUp Software
[05/06/2007|19:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
[27/07/2007|18:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[15/02/2006|18:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[18/09/2007|17:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar

[10/02/2005|00:15] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[19/03/2006|10:38] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[07/05/2008|15:37] C:\DOCUME~1\maskagaz\APPLIC~1\1&1
[23/04/2008|20:41] C:\DOCUME~1\maskagaz\APPLIC~1\Adobe
[13/02/2009|18:50] C:\DOCUME~1\maskagaz\APPLIC~1\AdobeUM
[29/09/2006|22:01] C:\DOCUME~1\maskagaz\APPLIC~1\Apple Computer
[06/10/2005|17:32] C:\DOCUME~1\maskagaz\APPLIC~1\Autodesk
[02/03/2007|01:04] C:\DOCUME~1\maskagaz\APPLIC~1\BSplayer
[17/05/2007|00:19] C:\DOCUME~1\maskagaz\APPLIC~1\BSplayer Pro
[17/02/2005|14:31] C:\DOCUME~1\maskagaz\APPLIC~1\Common Files
[23/04/2008|16:06] C:\DOCUME~1\maskagaz\APPLIC~1\Cortland Line
[31/01/2007|19:07] C:\DOCUME~1\maskagaz\APPLIC~1\dvdcss
[04/08/2005|13:46] C:\DOCUME~1\maskagaz\APPLIC~1\EarthBrowser
[10/11/2007|11:41] C:\DOCUME~1\maskagaz\APPLIC~1\EPSON
[15/09/2006|09:56] C:\DOCUME~1\maskagaz\APPLIC~1\Google
[06/01/2008|20:46] C:\DOCUME~1\maskagaz\APPLIC~1\GRETECH
[23/12/2007|15:01] C:\DOCUME~1\maskagaz\APPLIC~1\Help
[17/02/2005|14:31] C:\DOCUME~1\maskagaz\APPLIC~1\HP
[10/02/2005|00:23] C:\DOCUME~1\maskagaz\APPLIC~1\Identities
[23/12/2007|14:22] C:\DOCUME~1\maskagaz\APPLIC~1\ImgBurn
[24/04/2008|09:23] C:\DOCUME~1\maskagaz\APPLIC~1\InstallShield
[19/06/2008|22:08] C:\DOCUME~1\maskagaz\APPLIC~1\KompoZer
[23/05/2005|19:50] C:\DOCUME~1\maskagaz\APPLIC~1\Leadertech
[11/02/2005|14:20] C:\DOCUME~1\maskagaz\APPLIC~1\Macromedia
[19/02/2009|18:38] C:\DOCUME~1\maskagaz\APPLIC~1\Malwarebytes
[30/07/2008|16:02] C:\DOCUME~1\maskagaz\APPLIC~1\Microsoft
[21/01/2008|17:07] C:\DOCUME~1\maskagaz\APPLIC~1\Mozilla
[10/02/2005|20:04] C:\DOCUME~1\maskagaz\APPLIC~1\MSN6
[21/01/2008|17:07] C:\DOCUME~1\maskagaz\APPLIC~1\Nvu
[29/01/2009|15:41] C:\DOCUME~1\maskagaz\APPLIC~1\OpenOffice.org2
[27/10/2007|15:29] C:\DOCUME~1\maskagaz\APPLIC~1\Opera
[14/05/2005|15:48] C:\DOCUME~1\maskagaz\APPLIC~1\Real
[18/02/2009|00:35] C:\DOCUME~1\maskagaz\APPLIC~1\Skype
[17/02/2009|08:05] C:\DOCUME~1\maskagaz\APPLIC~1\skypePM
[19/08/2008|16:25] C:\DOCUME~1\maskagaz\APPLIC~1\Snapfish
[24/04/2008|09:56] C:\DOCUME~1\maskagaz\APPLIC~1\Sony Corporation
[04/12/2006|15:52] C:\DOCUME~1\maskagaz\APPLIC~1\Spybot - Search & Destroy
[07/09/2005|17:32] C:\DOCUME~1\maskagaz\APPLIC~1\Sun
[10/02/2005|00:37] C:\DOCUME~1\maskagaz\APPLIC~1\Symantec
[19/02/2005|10:50] C:\DOCUME~1\maskagaz\APPLIC~1\TuneUp Software
[19/09/2008|15:45] C:\DOCUME~1\maskagaz\APPLIC~1\U3
[27/01/2007|18:45] C:\DOCUME~1\maskagaz\APPLIC~1\Ulead Systems

[18/09/2007|21:58] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[16/03/2006|16:58] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[13/02/2009 21:59][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[13/02/2009 17:15][--a------] C:\WINDOWS\tasks\Maintenance en 1 clic.job
[19/02/2009 16:51][--ah-----] C:\WINDOWS\tasks\SA.DAT
[28/08/2001 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[07/05/2008|15:37] C:\Program Files\1&1
[11/01/2007|18:22] C:\Program Files\7-Zip
[02/11/2005|23:07] C:\Program Files\Activision Value
[26/10/2007|11:27] C:\Program Files\Adobe
[14/03/2006|20:17] C:\Program Files\Agnitum
[05/02/2006|13:27] C:\Program Files\Ahead
[05/01/2007|22:10] C:\Program Files\Apple Software Update
[10/02/2005|14:53] C:\Program Files\ATI Technologies
[25/10/2006|16:20] C:\Program Files\Audacity
[18/02/2009|20:08] C:\Program Files\backups
[23/12/2007|15:59] C:\Program Files\Bayo
[23/04/2005|13:22] C:\Program Files\Bluetack
[06/01/2008|13:01] C:\Program Files\CartoExploreur
[27/07/2007|18:51] C:\Program Files\CCleaner
[27/07/2007|18:51] C:\Program Files\CCleaner(2)
[16/12/2006|14:07] C:\Program Files\codec
[20/11/2005|12:14] C:\Program Files\codec 2
[02/08/2005|17:28] C:\Program Files\Dictionnaire
[11/01/2007|18:16] C:\Program Files\DivX
[11/02/2005|15:53] C:\Program Files\drivers scanner
[16/01/2009|09:01] C:\Program Files\emule
[30/09/2007|09:56] C:\Program Files\epson
[11/02/2008|08:24] C:\Program Files\ESET
[23/02/2005|17:51] C:\Program Files\excel word
[08/04/2005|21:44] C:\Program Files\fdjeux
[16/12/2006|14:07] C:\Program Files\ffdshow
[23/03/2008|10:57] C:\Program Files\Fichiers communs
[03/01/2008|17:55] C:\Program Files\Free
[10/02/2005|17:40] C:\Program Files\Free.fr
[11/01/2007|18:19] C:\Program Files\Gabest
[12/11/2008|15:58] C:\Program Files\Google
[06/01/2008|20:45] C:\Program Files\GRETECH
[20/11/2006|23:24] C:\Program Files\Grisoft
[14/03/2005|18:11] C:\Program Files\HighGrow.4.0.Multigrow.Language.Fran‡ais.v.1.1
[16/05/2005|09:21] C:\Program Files\HP
[23/12/2007|14:18] C:\Program Files\ImgBurn
[24/04/2008|09:34] C:\Program Files\InstallShield Installation Information
[27/01/2007|11:09] C:\Program Files\Intel
[14/12/2008|03:02] C:\Program Files\Internet Explorer
[04/09/2008|00:10] C:\Program Files\KompoZer
[22/02/2005|23:34] C:\Program Files\KONAMI
[18/02/2009|20:08] C:\Program Files\Konvertor
[24/04/2005|18:55] C:\Program Files\Logitech
[19/02/2009|18:37] C:\Program Files\Malwarebytes' Anti-Malware
[18/08/2008|02:04] C:\Program Files\Messenger
[10/02/2005|00:16] C:\Program Files\microsoft frontpage
[01/03/2006|17:49] C:\Program Files\Microsoft Office
[01/03/2007|23:12] C:\Program Files\MIKSOFT
[05/01/2007|21:56] C:\Program Files\monAlbumPhoto
[24/01/2007|13:48] C:\Program Files\Movie Maker
[19/04/2006|17:27] C:\Program Files\MP3Gain
[14/05/2008|22:13] C:\Program Files\MSBuild
[10/02/2005|00:12] C:\Program Files\MSN
[10/02/2005|00:12] C:\Program Files\MSN Gaming Zone
[18/09/2007|17:39] C:\Program Files\MSN Messenger
[12/11/2008|03:00] C:\Program Files\MSXML 4.0
[14/05/2008|22:07] C:\Program Files\MSXML 6.0
[14/03/2005|18:12] C:\Program Files\nero
[11/02/2005|18:54] C:\Program Files\NetMeeting
[19/06/2008|22:20] C:\Program Files\Nvu
[26/02/2008|23:31] C:\Program Files\nvu-1.0-pc-linux2.6.10-fr
[30/01/2009|00:39] C:\Program Files\OpenOffice.org 2.2
[23/04/2007|23:10] C:\Program Files\openoffice2.2
[18/09/2007|22:01] C:\Program Files\Outlook Express
[13/05/2005|22:11] C:\Program Files\Real
[14/05/2008|22:13] C:\Program Files\Reference Assemblies
[24/10/2005|16:43] C:\Program Files\Samsung
[10/02/2005|18:01] C:\Program Files\Services en ligne
[23/03/2008|10:57] C:\Program Files\Skype
[23/12/2007|14:08] C:\Program Files\SlySoft
[16/03/2006|18:34] C:\Program Files\SmitfraudFix
[24/04/2008|09:25] C:\Program Files\Sony
[16/12/2006|14:07] C:\Program Files\Spybot - Search & Destroy
[14/03/2006|23:32] C:\Program Files\Sygate
[11/01/2007|18:18] C:\Program Files\Symantec
[11/02/2005|13:08] C:\Program Files\SymNetDrv
[17/06/2008|16:05] C:\Program Files\Systran
[11/02/2005|13:46] C:\Program Files\Temp
[26/07/2008|00:13] C:\Program Files\TuneUp Utilities 2004
[27/07/2007|18:50] C:\Program Files\Ulead Systems
[06/10/2005|17:25] C:\Program Files\Uninstall Information
[21/01/2008|22:47] C:\Program Files\VideoLAN
[24/10/2005|16:08] C:\Program Files\WIDCOMM
[11/01/2007|18:21] C:\Program Files\WinASPI
[30/09/2007|09:57] C:\Program Files\Windows Live Toolbar
[27/01/2007|11:07] C:\Program Files\Windows Media Components
[10/12/2006|01:22] C:\Program Files\Windows Media Connect 2
[18/09/2007|21:55] C:\Program Files\Windows Media Player
[11/02/2005|18:54] C:\Program Files\Windows NT
[04/09/2008|00:10] C:\Program Files\WinRAR
[11/02/2005|16:20] C:\Program Files\WinRAR 3.20 French + Crack
[24/04/2006|18:10] C:\Program Files\x264
[10/02/2005|00:16] C:\Program Files\xerox
[11/01/2007|18:20] C:\Program Files\XviD

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[26/10/2007|11:28] C:\Program Files\Fichiers communs\Adobe
[08/03/2005|19:29] C:\Program Files\Fichiers communs\Ahead
[29/04/2006|09:54] C:\Program Files\Fichiers communs\Designer
[11/02/2005|15:27] C:\Program Files\Fichiers communs\HP
[27/01/2007|11:06] C:\Program Files\Fichiers communs\InstallShield
[07/09/2005|17:10] C:\Program Files\Fichiers communs\Java
[29/04/2005|15:13] C:\Program Files\Fichiers communs\Logitech
[09/10/2007|19:13] C:\Program Files\Fichiers communs\Microsoft Shared
[10/02/2005|00:13] C:\Program Files\Fichiers communs\MSSoap
[18/12/2006|16:52] C:\Program Files\Fichiers communs\ODBC
[09/01/2008|11:35] C:\Program Files\Fichiers communs\Previews
[10/02/2005|00:13] C:\Program Files\Fichiers communs\Services
[23/03/2008|10:57] C:\Program Files\Fichiers communs\Skype
[10/02/2005|00:01] C:\Program Files\Fichiers communs\SpeechEngines
[11/01/2007|18:18] C:\Program Files\Fichiers communs\Symantec Shared
[18/09/2007|22:01] C:\Program Files\Fichiers communs\System
[27/07/2007|18:50] C:\Program Files\Fichiers communs\Ulead Systems
[13/03/2006|20:56] C:\Program Files\Fichiers communs\Wise Installation Wizard

--------------------\\ Process

( 15 Processes )

iexplore.exe ~ [PID:1396]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\ALLUSE~1\APPLIC~1\espionServerData
C:\DOCUME~1\ALLUSE~1\APPLIC~1\espionServerData\globData.mk4
C:\DOCUME~1\maskagaz\Cookies\maskagaz@advertising[2].txt

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-19 20:51:04
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 209

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\maskagaz\Mes documents\logiciels\Tuneup Utilities 2004 Keygenerator.exe


[F:1226][D:74]-> C:\DOCUME~1\maskagaz\LOCALS~1\Temp
[F:46][D:0]-> C:\DOCUME~1\maskagaz\Cookies
[F:1618][D:4]-> C:\DOCUME~1\maskagaz\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 19/02/2009|20:51 - Option : [1]

--------------------\\ Fin du rapport a 20:51:52

ok je vais faire ce que tu viens de me poster mais quanj'ai redémarrer mon ordi ça à refait pareil et là je suis toujours en mode sans echec

oui j'ai le même problème logo windows avec la barre de progession et puis écran noir avec juste la souris que je peux déplacer. voilà.

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 1800+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : maskagaz ( Administrator )
BOOT : Fail-safe with network boot
Antivirus : NOD32 Antivirus System 2.51 2.51 (Activated)
Firewall : Sygate Personal Firewall 4.6 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:57 Go (Free:2 Go)
D:\ (Local Disk) - NTFS - Total:56 Go (Free:22 Go)
E:\ (CD or DVD)
F:\ (CD or DVD)
G:\ (USB)
H:\ (USB) - FAT32 - Total:3816 Mo (Free:0 Go)
I:\ (USB)
K:\ (USB)
L:\ (USB)
M:\ (USB)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 19/02/2009|21:04 )


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\espionServerData\globData.mk4
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\espionServerData

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans APPLIC~1

[26/10/2007|11:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[29/09/2006|20:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[29/04/2006|09:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Autodesk
[04/08/2005|13:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EarthBrowser
[12/11/2008|15:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[16/02/2009|23:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[06/01/2008|20:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GRETECH
[27/01/2007|11:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[19/02/2009|18:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[18/09/2007|17:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[10/02/2005|20:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[23/03/2008|10:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[04/12/2006|15:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[17/03/2006|00:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[19/02/2005|10:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TuneUp Software
[05/06/2007|19:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
[27/07/2007|18:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[15/02/2006|18:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[18/09/2007|17:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar

[10/02/2005|00:15] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[19/03/2006|10:38] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[07/05/2008|15:37] C:\DOCUME~1\maskagaz\APPLIC~1\1&1
[23/04/2008|20:41] C:\DOCUME~1\maskagaz\APPLIC~1\Adobe
[13/02/2009|18:50] C:\DOCUME~1\maskagaz\APPLIC~1\AdobeUM
[29/09/2006|22:01] C:\DOCUME~1\maskagaz\APPLIC~1\Apple Computer
[06/10/2005|17:32] C:\DOCUME~1\maskagaz\APPLIC~1\Autodesk
[02/03/2007|01:04] C:\DOCUME~1\maskagaz\APPLIC~1\BSplayer
[17/05/2007|00:19] C:\DOCUME~1\maskagaz\APPLIC~1\BSplayer Pro
[17/02/2005|14:31] C:\DOCUME~1\maskagaz\APPLIC~1\Common Files
[23/04/2008|16:06] C:\DOCUME~1\maskagaz\APPLIC~1\Cortland Line
[31/01/2007|19:07] C:\DOCUME~1\maskagaz\APPLIC~1\dvdcss
[04/08/2005|13:46] C:\DOCUME~1\maskagaz\APPLIC~1\EarthBrowser
[10/11/2007|11:41] C:\DOCUME~1\maskagaz\APPLIC~1\EPSON
[15/09/2006|09:56] C:\DOCUME~1\maskagaz\APPLIC~1\Google
[06/01/2008|20:46] C:\DOCUME~1\maskagaz\APPLIC~1\GRETECH
[23/12/2007|15:01] C:\DOCUME~1\maskagaz\APPLIC~1\Help
[17/02/2005|14:31] C:\DOCUME~1\maskagaz\APPLIC~1\HP
[10/02/2005|00:23] C:\DOCUME~1\maskagaz\APPLIC~1\Identities
[23/12/2007|14:22] C:\DOCUME~1\maskagaz\APPLIC~1\ImgBurn
[24/04/2008|09:23] C:\DOCUME~1\maskagaz\APPLIC~1\InstallShield
[19/06/2008|22:08] C:\DOCUME~1\maskagaz\APPLIC~1\KompoZer
[23/05/2005|19:50] C:\DOCUME~1\maskagaz\APPLIC~1\Leadertech
[11/02/2005|14:20] C:\DOCUME~1\maskagaz\APPLIC~1\Macromedia
[19/02/2009|18:38] C:\DOCUME~1\maskagaz\APPLIC~1\Malwarebytes
[30/07/2008|16:02] C:\DOCUME~1\maskagaz\APPLIC~1\Microsoft
[21/01/2008|17:07] C:\DOCUME~1\maskagaz\APPLIC~1\Mozilla
[10/02/2005|20:04] C:\DOCUME~1\maskagaz\APPLIC~1\MSN6
[21/01/2008|17:07] C:\DOCUME~1\maskagaz\APPLIC~1\Nvu
[29/01/2009|15:41] C:\DOCUME~1\maskagaz\APPLIC~1\OpenOffice.org2
[27/10/2007|15:29] C:\DOCUME~1\maskagaz\APPLIC~1\Opera
[14/05/2005|15:48] C:\DOCUME~1\maskagaz\APPLIC~1\Real
[18/02/2009|00:35] C:\DOCUME~1\maskagaz\APPLIC~1\Skype
[17/02/2009|08:05] C:\DOCUME~1\maskagaz\APPLIC~1\skypePM
[19/08/2008|16:25] C:\DOCUME~1\maskagaz\APPLIC~1\Snapfish
[24/04/2008|09:56] C:\DOCUME~1\maskagaz\APPLIC~1\Sony Corporation
[04/12/2006|15:52] C:\DOCUME~1\maskagaz\APPLIC~1\Spybot - Search & Destroy
[07/09/2005|17:32] C:\DOCUME~1\maskagaz\APPLIC~1\Sun
[10/02/2005|00:37] C:\DOCUME~1\maskagaz\APPLIC~1\Symantec
[19/02/2005|10:50] C:\DOCUME~1\maskagaz\APPLIC~1\TuneUp Software
[19/09/2008|15:45] C:\DOCUME~1\maskagaz\APPLIC~1\U3
[27/01/2007|18:45] C:\DOCUME~1\maskagaz\APPLIC~1\Ulead Systems

[18/09/2007|21:58] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[16/03/2006|16:58] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[13/02/2009 21:59][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[13/02/2009 17:15][--a------] C:\WINDOWS\tasks\Maintenance en 1 clic.job
[19/02/2009 20:59][--ah-----] C:\WINDOWS\tasks\SA.DAT
[28/08/2001 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[07/05/2008|15:37] C:\Program Files\1&1
[11/01/2007|18:22] C:\Program Files\7-Zip
[02/11/2005|23:07] C:\Program Files\Activision Value
[26/10/2007|11:27] C:\Program Files\Adobe
[14/03/2006|20:17] C:\Program Files\Agnitum
[05/02/2006|13:27] C:\Program Files\Ahead
[05/01/2007|22:10] C:\Program Files\Apple Software Update
[10/02/2005|14:53] C:\Program Files\ATI Technologies
[25/10/2006|16:20] C:\Program Files\Audacity
[18/02/2009|20:08] C:\Program Files\backups
[23/12/2007|15:59] C:\Program Files\Bayo
[23/04/2005|13:22] C:\Program Files\Bluetack
[06/01/2008|13:01] C:\Program Files\CartoExploreur
[27/07/2007|18:51] C:\Program Files\CCleaner
[27/07/2007|18:51] C:\Program Files\CCleaner(2)
[16/12/2006|14:07] C:\Program Files\codec
[20/11/2005|12:14] C:\Program Files\codec 2
[02/08/2005|17:28] C:\Program Files\Dictionnaire
[11/01/2007|18:16] C:\Program Files\DivX
[11/02/2005|15:53] C:\Program Files\drivers scanner
[16/01/2009|09:01] C:\Program Files\emule
[30/09/2007|09:56] C:\Program Files\epson
[11/02/2008|08:24] C:\Program Files\ESET
[23/02/2005|17:51] C:\Program Files\excel word
[08/04/2005|21:44] C:\Program Files\fdjeux
[16/12/2006|14:07] C:\Program Files\ffdshow
[23/03/2008|10:57] C:\Program Files\Fichiers communs
[03/01/2008|17:55] C:\Program Files\Free
[10/02/2005|17:40] C:\Program Files\Free.fr
[11/01/2007|18:19] C:\Program Files\Gabest
[12/11/2008|15:58] C:\Program Files\Google
[06/01/2008|20:45] C:\Program Files\GRETECH
[20/11/2006|23:24] C:\Program Files\Grisoft
[14/03/2005|18:11] C:\Program Files\HighGrow.4.0.Multigrow.Language.Fran‡ais.v.1.1
[16/05/2005|09:21] C:\Program Files\HP
[23/12/2007|14:18] C:\Program Files\ImgBurn
[24/04/2008|09:34] C:\Program Files\InstallShield Installation Information
[27/01/2007|11:09] C:\Program Files\Intel
[14/12/2008|03:02] C:\Program Files\Internet Explorer
[04/09/2008|00:10] C:\Program Files\KompoZer
[22/02/2005|23:34] C:\Program Files\KONAMI
[18/02/2009|20:08] C:\Program Files\Konvertor
[24/04/2005|18:55] C:\Program Files\Logitech
[19/02/2009|18:37] C:\Program Files\Malwarebytes' Anti-Malware
[18/08/2008|02:04] C:\Program Files\Messenger
[10/02/2005|00:16] C:\Program Files\microsoft frontpage
[01/03/2006|17:49] C:\Program Files\Microsoft Office
[01/03/2007|23:12] C:\Program Files\MIKSOFT
[05/01/2007|21:56] C:\Program Files\monAlbumPhoto
[24/01/2007|13:48] C:\Program Files\Movie Maker
[19/04/2006|17:27] C:\Program Files\MP3Gain
[14/05/2008|22:13] C:\Program Files\MSBuild
[10/02/2005|00:12] C:\Program Files\MSN
[10/02/2005|00:12] C:\Program Files\MSN Gaming Zone
[18/09/2007|17:39] C:\Program Files\MSN Messenger
[12/11/2008|03:00] C:\Program Files\MSXML 4.0
[14/05/2008|22:07] C:\Program Files\MSXML 6.0
[14/03/2005|18:12] C:\Program Files\nero
[11/02/2005|18:54] C:\Program Files\NetMeeting
[19/06/2008|22:20] C:\Program Files\Nvu
[26/02/2008|23:31] C:\Program Files\nvu-1.0-pc-linux2.6.10-fr
[30/01/2009|00:39] C:\Program Files\OpenOffice.org 2.2
[23/04/2007|23:10] C:\Program Files\openoffice2.2
[18/09/2007|22:01] C:\Program Files\Outlook Express
[13/05/2005|22:11] C:\Program Files\Real
[14/05/2008|22:13] C:\Program Files\Reference Assemblies
[24/10/2005|16:43] C:\Program Files\Samsung
[10/02/2005|18:01] C:\Program Files\Services en ligne
[23/03/2008|10:57] C:\Program Files\Skype
[23/12/2007|14:08] C:\Program Files\SlySoft
[16/03/2006|18:34] C:\Program Files\SmitfraudFix
[24/04/2008|09:25] C:\Program Files\Sony
[16/12/2006|14:07] C:\Program Files\Spybot - Search & Destroy
[14/03/2006|23:32] C:\Program Files\Sygate
[11/01/2007|18:18] C:\Program Files\Symantec
[11/02/2005|13:08] C:\Program Files\SymNetDrv
[17/06/2008|16:05] C:\Program Files\Systran
[11/02/2005|13:46] C:\Program Files\Temp
[26/07/2008|00:13] C:\Program Files\TuneUp Utilities 2004
[27/07/2007|18:50] C:\Program Files\Ulead Systems
[06/10/2005|17:25] C:\Program Files\Uninstall Information
[21/01/2008|22:47] C:\Program Files\VideoLAN
[24/10/2005|16:08] C:\Program Files\WIDCOMM
[11/01/2007|18:21] C:\Program Files\WinASPI
[30/09/2007|09:57] C:\Program Files\Windows Live Toolbar
[27/01/2007|11:07] C:\Program Files\Windows Media Components
[10/12/2006|01:22] C:\Program Files\Windows Media Connect 2
[18/09/2007|21:55] C:\Program Files\Windows Media Player
[11/02/2005|18:54] C:\Program Files\Windows NT
[04/09/2008|00:10] C:\Program Files\WinRAR
[11/02/2005|16:20] C:\Program Files\WinRAR 3.20 French + Crack
[24/04/2006|18:10] C:\Program Files\x264
[10/02/2005|00:16] C:\Program Files\xerox
[11/01/2007|18:20] C:\Program Files\XviD

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[26/10/2007|11:28] C:\Program Files\Fichiers communs\Adobe
[08/03/2005|19:29] C:\Program Files\Fichiers communs\Ahead
[29/04/2006|09:54] C:\Program Files\Fichiers communs\Designer
[11/02/2005|15:27] C:\Program Files\Fichiers communs\HP
[27/01/2007|11:06] C:\Program Files\Fichiers communs\InstallShield
[07/09/2005|17:10] C:\Program Files\Fichiers communs\Java
[29/04/2005|15:13] C:\Program Files\Fichiers communs\Logitech
[09/10/2007|19:13] C:\Program Files\Fichiers communs\Microsoft Shared
[10/02/2005|00:13] C:\Program Files\Fichiers communs\MSSoap
[18/12/2006|16:52] C:\Program Files\Fichiers communs\ODBC
[09/01/2008|11:35] C:\Program Files\Fichiers communs\Previews
[10/02/2005|00:13] C:\Program Files\Fichiers communs\Services
[23/03/2008|10:57] C:\Program Files\Fichiers communs\Skype
[10/02/2005|00:01] C:\Program Files\Fichiers communs\SpeechEngines
[11/01/2007|18:18] C:\Program Files\Fichiers communs\Symantec Shared
[18/09/2007|22:01] C:\Program Files\Fichiers communs\System
[27/07/2007|18:50] C:\Program Files\Fichiers communs\Ulead Systems
[13/03/2006|20:56] C:\Program Files\Fichiers communs\Wise Installation Wizard

--------------------\\ Process

( 12 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\maskagaz\Cookies\maskagaz@advertising[1].txt

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-19 21:05:28
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 209

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\maskagaz\Mes documents\logiciels\Tuneup Utilities 2004 Keygenerator.exe


[F:8][D:0]-> C:\DOCUME~1\maskagaz\Cookies
[F:124][D:6]-> C:\DOCUME~1\maskagaz\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 19/02/2009|20:51 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 19/02/2009|21:06 - Option : [2]

--------------------\\ Fin du rapport a 21:06:2

rapport hisjack


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:09:07, on 19/02/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Systran40premi.IEPlugIn - {D3919E1A-D6A5-11D6-AC3E-00B0D094B576} - C:\Program Files\Systran\4_0\Premium\IEPlugIn.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [UVS10 Preload] C:\Program Files\Ulead Systems\Ulead VideoStudio 10\uvPL.exe
O4 - HKLM\..\Run: [EPSON Stylus DX6000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBIE.EXE /FU "C:\WINDOWS\TEMP\E_S26C.tmp" /EF "HKLM"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [1&1 EasyLogin] C:\Program Files\1&1\1&1 EasyLogin\EasyLogin.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://express.foto.com/ImageUploader5.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} (AdVerifierADPCtrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.1.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{71A35E05-EFCA-4981-BED0-DC1B20331594}: NameServer = 212.27.40.240,212.27.40.241
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Windows Logon Process Service (MSWinLogonProcService) - Unknown owner - C:\WINDOWS\winlogon.exe (file missing)
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: Remote Administrator Service (r_server) - Unknown owner - C:\Documents and Settings\maskagaz\Bureau\r_server.exe (file missing)
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O24 - Desktop Component 0: (no name) - http://artfiles.art.com/images/-/Pope-John-Paul-II-1920---2005-Photograph-C11812676.jpeg

ca y ai c fait, ok pour de nouvelles manip.

premier rapport

Run by maskagaz at 2009-02-19 21:37:07
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 3 GB (5%) free of 59 GB
Total RAM: 511 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:37:32, on 19/02/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HijackThis.exe
C:\Documents and Settings\maskagaz\Bureau\random.exe
C:\Program Files\maskagaz.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Systran40premi.IEPlugIn - {D3919E1A-D6A5-11D6-AC3E-00B0D094B576} - C:\Program Files\Systran\4_0\Premium\IEPlugIn.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [UVS10 Preload] C:\Program Files\Ulead Systems\Ulead VideoStudio 10\uvPL.exe
O4 - HKLM\..\Run: [EPSON Stylus DX6000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBIE.EXE /FU "C:\WINDOWS\TEMP\E_S26C.tmp" /EF "HKLM"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe"
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [1&1 EasyLogin] C:\Program Files\1&1\1&1 EasyLogin\EasyLogin.exe
O4 - HKUS\S-1-5-18\..\Run: [Symantec NetDriver Warning] C:\PROGRA~1\SYMNET~1\SNDWarn.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Symantec NetDriver Warning] C:\PROGRA~1\SYMNET~1\SNDWarn.exe (User 'Default user')
O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} - http://www3.snapfish.fr/SnapfishActivia.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://express.foto.com/ImageUploader5.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} (AdVerifierADPCtrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.1.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{71A35E05-EFCA-4981-BED0-DC1B20331594}: NameServer = 212.27.40.240,212.27.40.241
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Windows Logon Process Service (MSWinLogonProcService) - Unknown owner - C:\WINDOWS\winlogon.exe (file missing)
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: Remote Administrator Service (r_server) - Unknown owner - C:\Documents and Settings\maskagaz\Bureau\r_server.exe (file missing)
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

deuxième

nfo.txt logfile of random's system information tool 1.05 2009-02-19 21:37:33

======Uninstall list======

-->C:\Program Files\InstallShield Installation Information\{22EB2FA7-1BA0-4FFB-972F-353EC6ABA9D5}\setup.exe -runfromtemp -l0x040c -removeonly
-->C:\Program Files\InstallShield Installation Information\{28B97CAB-828F-49D8-A30A-675476F9BA92}\setup.exe -runfromtemp -l0x040c/cont -removeonly
-->C:\Program Files\InstallShield Installation Information\{4E7DC12A-3597-4A94-9429-F6C6987361B1}\setup.exe -runfromtemp -l0x040c -removeonly
-->C:\Program Files\InstallShield Installation Information\{6813C983-427E-4511-8456-E98FCAA1A125}\setup.exe -runfromtemp -l0x040c -removeonly
-->C:\Program Files\InstallShield Installation Information\{7DADB304-AF20-48C3-A780-4B4133A08817}\setup.exe -runfromtemp -l0x040c -removeonly
-->C:\Program Files\InstallShield Installation Information\{9C423CF6-2DAA-4A37-94B8-59D7ECC7DB13}\setup.exe -runfromtemp -l0x040c -removeonly
-->C:\Program Files\InstallShield Installation Information\{ACE66099-E18E-4037-83C8-9D182E5B9FA8}\setup.exe -runfromtemp -l0x040c -removeonly
-->C:\Program Files\InstallShield Installation Information\{B34B6E67-FCDD-4E03-8742-B5701427FAFB}\setup.exe -runfromtemp -l0x040c -removeonly
-->C:\Program Files\InstallShield Installation Information\{FA6CC4B4-7741-4F8D-8E81-15C4BAB9869B}\setup.exe -runfromtemp -l0x040c -removeonly
-->MsiExec.exe /I{C98E5F1B-5C2B-4FD1-BDF9-F3779DCAAA16}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
1&1 Connexion directe-->C:\Program Files\1&1\1&1 EasyLogin\Uninstall.exe
Adobe Flash Player 9 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\FlashUtil9b.exe -uninstallDelete
Adobe Help Center 2.0-->MsiExec.exe /I{8FFC924C-ED06-44CB-8867-3CA778ECE903}
Adobe Photoshop Album 2.0 Edition Découverte-->MsiExec.exe /I{11B569C2-4BF6-4ED0-9D17-A4273943CB24}
Adobe Photoshop Elements 4.0-->msiexec /I {EBB7C1C1-D439-4D9B-9FDC-954C10F266B0}
Adobe Reader 7.0.5 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70000000000}
Apple Software Update-->MsiExec.exe /I{A50C25D7-62E9-4511-AD70-8E2DA5E79B7D}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
ATI Control Panel-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
ATI Display Driver-->rundll32 C:\WINDOWS\System32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
ATI HydraVision-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3EA9D975-BFDC-4E8E-B88B-0446FBC8CA66}\setup.exe"
Audacity 1.2.4-->"C:\Program Files\Audacity\unins000.exe"
Bluetooth Software-->MsiExec.exe /X{FE90E9E7-A158-4687-8853-DF677A939A61}
BUM-->MsiExec.exe /I{55937F00-A69B-4049-8D3A-1C7729742B6F}
CartoExploreur 3 3.02-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\8\INTEL3~1\IDriver.exe /M{1A0FF86F-2BF6-48B7-B7CE-1937F1727B2D}
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Correctif Windows XP - KB867282-->C:\WINDOWS\$NtUninstallKB867282$\spuninst\spuninst.exe
Correctif Windows XP - KB873333-->C:\WINDOWS\$NtUninstallKB873333$\spuninst\spuninst.exe
Correctif Windows XP - KB873339-->C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
Correctif Windows XP - KB885250-->C:\WINDOWS\$NtUninstallKB885250$\spuninst\spuninst.exe
Correctif Windows XP - KB885835-->C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
Correctif Windows XP - KB885836-->C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
Correctif Windows XP - KB885884-->C:\WINDOWS\$NtUninstallKB885884$\spuninst\spuninst.exe
Correctif Windows XP - KB886185-->C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe
Correctif Windows XP - KB887472-->C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe
Correctif Windows XP - KB887742-->C:\WINDOWS\$NtUninstallKB887742$\spuninst\spuninst.exe
Correctif Windows XP - KB888113-->C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe
Correctif Windows XP - KB888302-->C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
Correctif Windows XP - KB890047-->C:\WINDOWS\$NtUninstallKB890047$\spuninst\spuninst.exe
Correctif Windows XP - KB890175-->C:\WINDOWS\$NtUninstallKB890175$\spuninst\spuninst.exe
Correctif Windows XP - KB890859-->"C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
Correctif Windows XP - KB890923-->"C:\WINDOWS\$NtUninstallKB890923$\spuninst\spuninst.exe"
Correctif Windows XP - KB891781-->C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
Correctif Windows XP - KB893066-->"C:\WINDOWS\$NtUninstallKB893066$\spuninst\spuninst.exe"
Correctif Windows XP - KB893086-->"C:\WINDOWS\$NtUninstallKB893086$\spuninst\spuninst.exe"
eMule-->"C:\Program Files\eMule\Uninstall.exe"
EPSON Attach To Email-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{20C45B32-5AB6-46A4-94EF-58950CAF05E5} /l1033 ADDREMOVEDLG
EPSON Copy Utility 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67EDD823-135A-4D59-87BD-950616D6E857}\SETUP.EXE" -l0x40c -UnInstall
EPSON Easy Photo Print-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BC69DDB8-4840-4D9B-BB31-0D4DB2BA1312}\SETUP.EXE" -l0x40c UNINST
EPSON File Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E86BC406-944E-41F6-ADE6-2C136734C96B}\Setup.exe" -l0x40c UNINST
EPSON Logiciel imprimante-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
EPSON Scan Assistant-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}\Setup.exe" -l0x40c -u
EPSON Scan-->C:\Program Files\epson\escndv\setup\setup.exe /r
EPSON Web-To-Page-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}\SETUP.EXE" -l0x40c -anything
ESDX6000_CX5900 Guide util.-->C:\Program Files\EPSON\TPMANUAL\ESDX6000_CX5900\USE_G\DOCUNINS.EXE
ffdshow (remove only)-->"C:\Program Files\ffdshow\uninstall.exe"
Free - Kit de connexion-->C:\Program Files\Free.fr\uninstall.exe
GOM Player-->"C:\Program Files\GRETECH\GomPlayer\Uninstall.exe"
Google Earth-->MsiExec.exe /I{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_11CB06797F2F038A.exe" /uninstall
HijackThis 2.0.2-->"C:\Program Files\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB926239)-->"C:\WINDOWS\$NtUninstallKB926239$\spuninst\spuninst.exe"
ImgBurn (Remove Only)-->"C:\Program Files\ImgBurn\uninstall.exe"
Indeo® software-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Intel\Indeo\Uninst.isu" -c"C:\Program Files\Intel\Indeo\SavedSystemFiles\indounin.dll"
J2SE Runtime Environment 5.0 Update 4-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150040}
KompoZer 0.7.10 (supprimer uniquement)-->C:\Program Files\KompoZer\uninstall.exe
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Logitech Gaming Software-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B9242864-2841-4ADE-86E0-8F90F91B04DD}\setup.exe" -l0x40c
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Memories Disc Creator 2.0-->MsiExec.exe /X{2E132061-C78A-48D4-A899-1D13B9D189FA}
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft .NET Framework 3.0 Service Pack 1-->MsiExec.exe /I{2BA00471-0328-3743-93BD-FA813353A783}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Office PowerPoint Viewer 2003-->MsiExec.exe /X{90AF040C-6000-11D3-8CFE-0150048383C9}
Microsoft Office XP Professional avec FrontPage-->MsiExec.exe /I{9028040C-6000-11D3-8CFE-0050048383C9}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB911564)-->"C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398)-->"C:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB883939)-->"C:\WINDOWS\$NtUninstallKB883939$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB890046)-->"C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB893756)-->"C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896358)-->"C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896422)-->"C:\WINDOWS\$NtUninstallKB896422$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896423)-->"C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896424)-->"C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896428)-->"C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896688)-->"C:\WINDOWS\$NtUninstallKB896688$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB899587)-->"C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB899588)-->"C:\WINDOWS\$NtUninstallKB899588$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB899589)-->"C:\WINDOWS\$NtUninstallKB899589$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB899591)-->"C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB900725)-->"C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB901017)-->"C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB901190)-->"C:\WINDOWS\$NtUninstallKB901190$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB901214)-->"C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB902400)-->"C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB903235)-->"C:\WINDOWS\$NtUninstallKB903235$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB904706)-->"C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB905414)-->"C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB905749)-->"C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB905915)-->"C:\WINDOWS\$NtUninstallKB905915$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB908519)-->"C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB908531)-->"C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB911280)-->"C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB911562)-->"C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB911567)-->"C:\WINDOWS\$NtUninstallKB911567$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB911927)-->"C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB912812)-->"C:\WINDOWS\$NtUninstallKB912812$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB912919)-->"C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB913446)-->"C:\WINDOWS\$NtUninstallKB913446$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB913580)-->"C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB914388)-->"C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB914389)-->"C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB916281)-->"C:\WINDOWS\$NtUninstallKB916281$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB917159)-->"C:\WINDOWS\$NtUninstallKB917159$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB917344)-->"C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB917422)-->"C:\WINDOWS\$NtUninstallKB917422$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB917953)-->"C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB918118)-->"C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB918439)-->"C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB918899)-->"C:\WINDOWS\$NtUninstallKB918899$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB919007)-->"C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920213)-->"C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920214)-->"C:\WINDOWS\$NtUninstallKB920214$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920670)-->"C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920683)-->"C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920685)-->"C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB921398)-->"C:\WINDOWS\$NtUninstallKB921398$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB921503)-->"C:\WINDOWS\$NtUninstallKB921503$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB921883)-->"C:\WINDOWS\$NtUninstallKB921883$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB922616)-->"C:\WINDOWS\$NtUninstallKB922616$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB922819)-->"C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923191)-->"C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923414)-->"C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923980)-->"C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924270)-->"C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924496)-->"C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924667)-->"C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB925902)-->"C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB926255)-->"C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB926436)-->"C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB927779)-->"C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB927802)-->"C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB928255)-->"C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB928843)-->"C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB929123)-->"C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB930178)-->"C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB931261)-->"C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB931784)-->"C:\WINDOWS\$NtUninstallKB931784$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB932168)-->"C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB933729)-->"C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB935839)-->"C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB935840)-->"C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB936021)-->"C:\WINDOWS\$NtUninstallKB936021$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB937143)-->"C:\WINDOWS\$NtUninstallKB937143$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB937894)-->"C:\WINDOWS\$NtUninstallKB937894$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938127)-->"C:\WINDOWS\$NtUninstallKB938127$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938829)-->"C:\WINDOWS\$NtUninstallKB938829$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB939653)-->"C:\WINDOWS\$NtUninstallKB939653$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941202)-->"C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941568)-->"C:\WINDOWS\$NtUninstallKB941568$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941644)-->"C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941693)-->"C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB942615)-->"C:\WINDOWS\$NtUninstallKB942615$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB943055)-->"C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB943460)-->"C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB943485)-->"C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB944338)-->"C:\WINDOWS\$NtUninstallKB944338$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB944533)-->"C:\WINDOWS\$NtUninstallKB944533$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB944653)-->"C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB945553)-->"C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946026)-->"C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB947864)-->"C:\WINDOWS\$NtUninstallKB947864$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB948590)-->"C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB948881)-->"C:\WINDOWS\$NtUninstallKB948881$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950749)-->"C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956390)-->"C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958215)-->"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960714)-->"C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB894391)-->"C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB896727)-->"C:\WINDOWS\$NtUninstallKB896727$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB900485)-->"C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB910437)-->"C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB916595)-->"C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB920872)-->"C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB922582)-->"C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB925720)-->"C:\WINDOWS\$NtUninstallKB925720$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB927891)-->"C:\WINDOWS\$NtUninstallKB927891$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB930916)-->"C:\WINDOWS\$NtUninstallKB930916$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB933360)-->"C:\WINDOWS\$NtUninstallKB933360$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB938828)-->"C:\WINDOWS\$NtUninstallKB938828$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB942763)-->"C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB942840)-->"C:\WINDOWS\$NtUninstallKB942840$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB946627)-->"C:\WINDOWS\$NtUninstallKB946627$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 6 Service Pack 2 (KB954459)-->MsiExec.exe /I{1A528690-6A2D-4BC5-B143-8C4AE8D19D96}
Nero 6 Demo-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
NOD32 Antivirus System-->C:\Program Files\Eset\Setup\setup.exe /UNINSTALL
NOD32 FiX v2.1-->"C:\Program Files\Eset\unins000.exe"
NVIDIA nForce Utilities-->C:\WINDOWS\System32\rundll32.exe setupapi,InstallHinfSection Remove_SSUtilsNT 132 C:\WINDOWS\INF\nvautlml.inf
Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
Picture Package Music Transfer-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CE2121C6-C94D-4A73-8EA4-6943F33EE335}\setup.exe" -l0x40c -removeonly
Pilotes NVIDIA nForce pour Windows 2000/XP-->rundll32.exe C:\WINDOWS\System32\NVNFINST.DLL,NvUninstallCrush
Réseau France Bayo 0003-Q0-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\8\INTEL3~1\IDriver.exe /M{B4C69248-E01C-4C6D-9C0B-A02505625F96}
Réseau France BdAlti 2003-Q1-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\8\INTEL3~1\IDriver.exe /M{B13FE5B5-A0DF-4700-9AB4-8C94C38BCFF3}
Réseau France BdNyme 2003-Q1-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\8\INTEL3~1\IDriver.exe /M{3250D35A-F0C7-44E4-A12C-2D810F468090}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Skype™ 3.6-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
Sony Picture Utility-->C:\Program Files\InstallShield Installation Information\{D5068583-D569-468B-9755-5FBF5848F46F}\setup.exe -runfromtemp -l0x040c /removeonly uninstall -removeonly
Sygate Personal Firewall-->MsiExec.exe /I{F34D9A5F-484A-4E31-A9D3-908CB265B289}
Systran Professional Premium 4.0-->C:\WINDOWS\unvise32.exe C:\Program Files\Systran\4_0\Premium\uninstal.log
The Blocklist Manager-->C:\Program Files\Bluetack\Blocklist Manager\UnInstall_19942.exe
TuneUp Utilities 2004-->MsiExec.exe /I{2C3738C9-56FA-410A-BCB5-79C5DFD238F0}
Ulead VideoStudio 10-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E188D820-1218-4E28-8BCA-91134C3664C2}\setup.exe" -l0x40c
Windows Genuine Advantage v1.3.0254.0-->MsiExec.exe /I{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Installer 3.1 (KB893803)-->"C:\WINDOWS\$MSI31Uninstall_KB893803$\spuninst\spuninst.exe"
Windows Installer 3.1 (KB893803)-->"C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
Windows Live Messenger-->MsiExec.exe /I{F6326B60-1B1D-4ABF-BFCD-7B7404F44411}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Windows XP Service Pack 2-->C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe
x264 Revision 468 x264.nl (remove only)-->"C:\Program Files\x264\x264-uninstall.exe"

=====HijackThis Backups=====

O4 - HKLM\..\Run: [Microsoft Windows Session Manager Subsystem] C:\WINDOWS\smss.exe
O4 - HKLM\..\Run: [Microsoft Windows Logon Process] C:\WINDOWS\winlogon.exe
O2 - BHO: (no name) - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - (no file)
O23 - Service: Windows Logon Process Service (MSWinLogonProcService) - Unknown owner - C:\WINDOWS\winlogon.exe" -service (file missing)
O23 - Service: Windows Logon Process Service (MSWinLogonProcService) - Unknown owner - C:\WINDOWS\winlogon.exe" -service (file missing)
O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
O3 - Toolbar: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - (no file)
O2 - BHO: (no name) - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - (no file)
O4 - HKCU\..\Run: [WhenUSave] "C:\Program Files\Save\Save.exe"
O3 - Toolbar: (no name) - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - (no file)
O23 - Service: Remote Administrator Service (r_server) - Unknown owner - C:\Documents and Settings\maskagaz\Bureau\r_server.exe" /service (file missing)
O2 - BHO: (no name) - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - (no file)
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file)
O3 - Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
O23 - Service: Remote Administrator Service (r_server) - Unknown owner - C:\Documents and Settings\maskagaz\Bureau\r_server.exe" /service (file missing)
O23 - Service: Remote Administrator Service (r_server) - Unknown owner - C:\Documents and Settings\maskagaz\Bureau\r_server.exe" /service (file missing)
O4 - HKCU\..\Run: [WhenUSave] "C:\Program Files\Save\Save.exe"
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O4 - HKCU\..\Run: [WhenUSave] "C:\Program Files\Save\Save.exe"
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Remote Administrator Service (r_server) - Unknown owner - C:\Documents and Settings\maskagaz\Bureau\r_server.exe" /service (file missing)
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O23 - Service: Remote Administrator Service (r_server) - Unknown owner - C:\Documents and Settings\maskagaz\Bureau\r_server.exe" /service (file missing)
O23 - Service: Remote Administrator Service (r_server) - Unknown owner - C:\Documents and Settings\maskagaz\Bureau\r_server.exe" /service (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O16 - DPF: teleir_cert -
O16 - DPF: {FB90BA05-66E6-4C56-BCD3-D65B0F7EBA39} (Foto.com SpeedUploader 1.0 Control) - http://express.foto.com/FUploader/SpeedUploader.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://express.foto.com/Newuploader/ImageUploader4.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1108126243390
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O4 - Global Startup: BTTray.lnk = ?
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O23 - Service: Remote Administrator Service (r_server) - Unknown owner - C:\Documents and Settings\maskagaz\Bureau\r_server.exe" /service (file missing)
O16 - DPF: fdjeux - https://www.fdjeux.net/classes/fdjeux.cab
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O23 - Service: Windows Logon Process Service (MSWinLogonProcService) - Unknown owner - C:\WINDOWS\winlogon.exe (file missing)
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O24 - Desktop Component 0: (no name) - http://artfiles.art.com/images/-/Pope-John-Paul-II-1920---2005-Photograph-C11812676.jpeg
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
R3 - Default URLSearchHook is missing
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE

Hosts File Missing
======Security center information======

AV: NOD32 Antivirus System 2.51
FW: Sygate Personal Firewall

System event log

Computer Name: MASKAGAS-D7TKIX
Event Code: 26
Message: Application popup :  : Machine Check:

Record Number: 43418
Source Name: Application Popup
Time Written: 20080831112837.000000+120
Event Type: Informations
User:

Computer Name: MASKAGAS-D7TKIX
Event Code: 26
Message: Application popup :  : Machine Check: Regs

Record Number: 43417
Source Name: Application Popup
Time Written: 20080831112837.000000+120
Event Type: Informations
User:

Computer Name: MASKAGAS-D7TKIX
Event Code: 26
Message: Application popup :  : Machine Check:

Record Number: 43416
Source Name: Application Popup
Time Written: 20080831112837.000000+120
Event Type: Informations
User:

Computer Name: MASKAGAS-D7TKIX
Event Code: 26
Message: Application popup :  : Machine Check: Regs

Record Number: 43415
Source Name: Application Popup
Time Written: 20080831112837.000000+120
Event Type: Informations
User:

Computer Name: MASKAGAS-D7TKIX
Event Code: 26
Message: Application popup :  : Machine Check:

Record Number: 43414
Source Name: Application Popup
Time Written: 20080831112837.000000+120
Event Type: Informations
User:

Application event log

Computer Name: MASKAGAS-D7TKIX
Event Code: 700
Message: MsnMsgr (2224) La défragmentation en ligne commence un passage complet dans la base de données '\\.\C:\Documents and Settings\maskagaz\Local Settings\Application Data\Microsoft\Messenger\maskagas@yahoo.fr\SharingMetadata\Working\database_5438_DEEA_38DE_C9DE\dfsr.db'.

Record Number: 24114
Source Name: ESENT
Time Written: 20090120015530.000000+060
Event Type: Informations
User:

Computer Name: MASKAGAS-D7TKIX
Event Code: 701
Message: MsnMsgr (2224) La défragmentation en ligne a terminé un passage complet dans la base de données '\\.\C:\Documents and Settings\maskagaz\Local Settings\Application Data\Microsoft\Messenger\maskagas@yahoo.fr\SharingMetadata\Working\database_5438_DEEA_38DE_C9DE\dfsr.db'.

Record Number: 24113
Source Name: ESENT
Time Written: 20090120005530.000000+060
Event Type: Informations
User:

Computer Name: MASKAGAS-D7TKIX
Event Code: 700
Message: MsnMsgr (2224) La défragmentation en ligne commence un passage complet dans la base de données '\\.\C:\Documents and Settings\maskagaz\Local Settings\Application Data\Microsoft\Messenger\maskagas@yahoo.fr\SharingMetadata\Working\database_5438_DEEA_38DE_C9DE\dfsr.db'.

Record Number: 24112
Source Name: ESENT
Time Written: 20090120005530.000000+060
Event Type: Informations
User:

Computer Name: MASKAGAS-D7TKIX
Event Code: 701
Message: MsnMsgr (2224) La défragmentation en ligne a terminé un passage complet dans la base de données '\\.\C:\Documents and Settings\maskagaz\Local Settings\Application Data\Microsoft\Messenger\maskagas@yahoo.fr\SharingMetadata\Working\database_5438_DEEA_38DE_C9DE\dfsr.db'.

Record Number: 24111
Source Name: ESENT
Time Written: 20090119235530.000000+060
Event Type: Informations
User:

Computer Name: MASKAGAS-D7TKIX
Event Code: 700
Message: MsnMsgr (2224) La défragmentation en ligne commence un passage complet dans la base de données '\\.\C:\Documents and Settings\maskagaz\Local Settings\Application Data\Microsoft\Messenger\maskagas@yahoo.fr\SharingMetadata\Working\database_5438_DEEA_38DE_C9DE\dfsr.db'.

Record Number: 24110
Source Name: ESENT
Time Written: 20090119235530.000000+060
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI Control Panel;C:\Program Files\Fichiers communs\Ulead Systems\MPEG
"windir"=%SystemRoot%
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 8 Stepping 1, AuthenticAMD
"PROCESSOR_REVISION"=0801
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"FP_NO_HOST_CHECK"=NO
"VERSION"=3.0.5.001
"SESSIONID"=1116129990271htx6931a59727:103de8781f6:14f2
"COLLECTIONID"=COL8143
"ITEMID"=dj-22741-15
"UPDATEDIR"=C:\DOCUME~1\maskagaz\LOCALS~1\Temp\rad1368A.tmp
"TOOLPATH"=/C:\Program%20Files\HP\HP%20Software%20Update\install.htm
"HMSERVER"=https://wwss1pro.cce.hp.com/wuss/servlet/WUSSServlet
"SWUTVER"=1.0.22.20030804
"OSVER"=winXPP
"LANG"=1036
"TIMEOUT"=0
"SAFEBOOT_OPTION"=NETWORK

-----------------EOF-----------------

non il ne l'est pas il est craqué mais ça fait plus de deux ans que je l'ai ;

rapport maskagas

Antivirus Version Dernière mise à jour Résultat
a-squared 4.0.0.93 2009.02.19 -
AhnLab-V3 2009.2.19.0 2009.02.19 -
AntiVir 7.9.0.83 2009.02.19 -
Authentium 5.1.0.4 2009.02.19 -
Avast 4.8.1335.0 2009.02.18 -
AVG 8.0.0.237 2009.02.19 -
BitDefender 7.2 2009.02.19 -
CAT-QuickHeal 10.00 2009.02.19 -
ClamAV 0.94.1 2009.02.19 -
Comodo 983 2009.02.19 -
DrWeb 4.44.0.09170 2009.02.19 -
eSafe 7.0.17.0 2009.02.18 Suspicious File
eTrust-Vet 31.6.6365 2009.02.19 -
F-Prot 4.4.4.56 2009.02.19 -
F-Secure 8.0.14470.0 2009.02.19 -
Fortinet 3.117.0.0 2009.02.19 -
GData 19 2009.02.19 -
Ikarus T3.1.1.45.0 2009.02.19 -
K7AntiVirus 7.10.630 2009.02.18 -
Kaspersky 7.0.0.125 2009.02.19 -
McAfee 5529 2009.02.17 -
McAfee+Artemis 5529 2009.02.17 -
Microsoft 1.4306 2009.02.19 -
NOD32 3867 2009.02.19 -
Norman 6.00.06 2009.02.19 -
nProtect 2009.1.8.0 2009.02.19 -
Panda 10.0.0.10 2009.02.19 -
PCTools 4.4.2.0 2009.02.19 -
Prevx1 V2 2009.02.19 -
Rising 21.17.32.00 2009.02.19 -
SecureWeb-Gateway 6.7.6 2009.02.19 -
Sophos 4.38.0 2009.02.19 -
Sunbelt 3.2.1855.2 2009.02.17 -
Symantec 10 2009.02.19 -
TheHacker 6.3.2.2.259 2009.02.18 -
TrendMicro 8.700.0.1004 2009.02.19 -
VBA32 3.12.10.0 2009.02.18 -
ViRobot 2009.2.19.1615 2009.02.19 -
VirusBuster 4.5.11.0 2009.02.19 -
Information additionnelle
File size: 401720 bytes
MD5...: e8269245566be948f6a219135b434160
SHA1..: 1ac255b76ef692ea6c09d4840dcd28c67c5d6bfe
SHA256: 3c253bfd385c7f245f3c6131e58cbe22c0d03073a828b9938f923f00562d7c2d
SHA512: bed5aa905b0b940e99489c19835c1c199878ab7455bff84748b94a0577db8d8e
ebd66c96a3fc6db110bb6fde95947837860eb701c01cb65cb73488c7a464bae8
ssdeep: 6144:KCjUfQ7DbE66sVHdkyUkEYn+nVewn+ob/xIytqi20dcUSGreicGGSzMZY:K
CjUSbEAVG95YnNsr2ytL2cc3Gr1

PEiD..: UPX 2.90 [LZMA] -> Markus Oberhumer, Laszlo Molnar & John Reiser
TrID..: File type identification
UPX compressed Win32 Executable (39.5%)
Win32 EXE Yoda's Crypter (34.3%)
Win32 Executable Generic (11.0%)
Win32 Dynamic Link Library (generic) (9.8%)
Generic Win/DOS Executable (2.5%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x542830
timedatestamp.....: 0x466838c1 (Thu Jun 07 16:56:33 2007)
machinetype.......: 0x14c (I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
UPX0 0x1000 0xfc000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
UPX1 0xfd000 0x46000 0x45a00 7.93 8764d7eac0301131e6c79e4aa30317bf
.rsrc 0x143000 0x1b000 0x1ae00 4.69 5f1a0873640fcdb4a281dbf91049814f

( 2 imports )
> KERNEL32.DLL: LoadLibraryA, GetProcAddress, VirtualProtect, ExitProcess
> MSVBVM60.DLL: -

( 0 exports )

ThreatExpert info: https://www.symantec.com?md5=e8269245566be948f6a219135b434160
packers (Kaspersky): PE_Patch.UPX, UPX
packers (F-Prot): UPX


ATTENTION: VirusTotal est un service gratuit offert par Hispasec Sistemas. Il n'y a aucune garantie quant à la disponibilité et la continuité de ce service. Bien que le taux de détection permis par l'utilisation de multiples moteurs antivirus soit bien supérieur à celui offert par seulement un produit, ces résultats NE garantissent PAS qu'un fichier est sans danger. Il n'y a actuellement aucune solution qui offre un taux d'efficacité de 100% pour la détection des virus et malwares.

rapport2

0 bytes size received / Se ha recibido un archivo vacio

oui je l'ai cocher et même plusieur fois et il revient a chaque fois.
pour les 4 logiciel ok mais tu veux dire quoi quand tu dis "a garder".