virus

Question

Bonjour,
j'ai 3 virus  et je ne suis pas capable de les sortir pouvez vous m'aidé
ils sont sur window system32 
trojan horse sheur2 slz

jlpjlp · Answer

slt,



Télécharge ici :

http://images.malwareremoval.com/random/RSIT.exe

random's system information tool (RSIT) par andom/random et sauvegarde-le sur le Bureau.

Double-clique sur RSIT.exe afin de lancer RSIT.

Clique Continue à l'écran Disclaimer.

Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront.

Poste le contenu de log.txt (<<qui sera affiché)
ainsi que de info.txt (<<qui sera réduit dans la Barre des Tâches).

NB : Les rapports sont sauvegardés dans le dossier C:\rsit

jlpjlp · Answer

tu fais simplement un copier/coller des rapports et tu les mets dans ton prochain message

sim123 · Answer

je le met tu dans mon outlook

jlpjlp · Answer

non tu fais copier du rapport puis tu ouvre ton navigateur , tu vas sur comment ca marche dans ton post et tu colle le rapport dans la partie REPONDRE

sim123 · Answer

j'aissai mais je ne suis pas capable est tu capable de le faire pour moi je te fais confiance

sim123 · Answer

est tu encore la

jlpjlp · Answer

non je peux pas ! il suffit de selectionner tout le texte du rapport puis tu clique dans une partie du texte avec le bouton droit de la souris et tu fais copier puis tu viens ici et tu fais coller!

jvtp · Answer

salut si ta 3 virus c'est que tu fait pa attentoin regarde le fichier d'abord

sim123 · Answer

je viens de  les envoiye j ai reussi les a tu eu

sim123 · Answer

ca tu marche peut tu me donné une reponse

jlpjlp · Answer

je ne vois aucun rapport!!!

sim123 · Answer

De: À: Objet: Forum virus/sécurité - virus - reponse de sim123 Date: 26 février 2009 13:37 info.txt logfile of random's system information tool 1.05 2009-02-26 13:27:44 ======Uninstall list====== -->"C:\Program Files\Creative\SBAudigy2\Program\Ctzapxx.EXE" /W /U /S /L:FRN -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1494984B-9AC5-4F16-B61A-C21D5EFCC1C4}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1494984B-9AC5-4F16-B61A-C21D5EFCC1C4}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{236FADD8-58FD-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{236FADD8-58FD-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{266F8C74-5DC6-4405-B79B-4EB82B2FC684}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{266F8C74-5DC6-4405-B79B-4EB82B2FC684}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{435E969D-867E-4364-8E74-3DC8A69C5BDB}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{435E969D-867E-4364-8E74-3DC8A69C5BDB}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5210ED6D-52A9-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5210ED6D-52A9-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5CDDF96A-BC34-4D72-9ABA-E1FFF0C39977}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7201B853-5833-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7201B853-5833-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{87499F38-FD69-4A2B-B41A-BAB8DE9B94FE}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9154ED7C-926E-49CC-B677-0CF3C5267457}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9154ED7C-926E-49CC-B677-0CF3C5267457}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A1185190-514F-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A1185190-514F-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DEBD7BF3-5856-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DEBD7BF3-5856-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB2292C6-1F0A-11D7-AB2D-0090271A23A2}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB2292C6-1F0A-11D7-AB2D-0090271A23A2}\setup.exe" -l0x40c /remove -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf ActivePerl 5.8.7 Build 815-->MsiExec.exe /I{5246151F-717A-4119-A592-85AFC71EB60D} Ad-Aware SE Personal-->C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG Adobe Acrobat 7.0 Professional-->msiexec /I {AC76BA86-1033-0000-7760-000000000002} Adobe Anchor Service CS3-->MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95} Adobe Asset Services CS3-->MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61} Adobe Bridge CS3-->MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394} Adobe Bridge Start Meeting-->MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23} Adobe Camera Raw 4.0-->MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C} Adobe CMaps-->MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C} Adobe Color Common Settings-->C:\Program Files\Fichiers communs\Adobe\Installers\6c8e2cb4fd241c55406016127a6ab2e\Setup.exe Adobe Color Common Settings-->MsiExec.exe /I{6D4AC5A4-4CF9-4F90-8111-B9B53CE257BF} Adobe Color EU Recommended Settings-->MsiExec.exe /I{73B5D990-04EA-4751-B10F-5534770B91F2} Adobe Color JA Extra Settings-->MsiExec.exe /I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029} Adobe Color NA Extra Settings-->MsiExec.exe /I{FF29A7E2-FF40-4D07-B7E4-2093DE59E10A} Adobe Common File Installer-->MsiExec.exe /I{8EDBA74D-0686-4C99-BFDD-F894678E5101} Adobe Device Central CS3-->MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD} Adobe ExtendScript Toolkit 2-->C:\Program Files\Fichiers communs\Adobe\Installers\3e054d2218e7aa282c2369d939e58ff\Setup.exe Adobe ExtendScript Toolkit 2-->MsiExec.exe /I{77D2A9D3-5800-43E3-B274-87841BC87DB2} Adobe Flash CS3 Professional-->C:\Program Files\Fichiers communs\Adobe\Installers\b2b4b1546e74314f8131ded43e4bd9d\Setup.exe Adobe Flash CS3-->MsiExec.exe /I{80FD3971-8482-49C8-BA8C-B6464A15882F} Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe Adobe Flash Player 9 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\FlashUtil9b.exe -uninstallDelete Adobe Flash Player Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe Adobe Help Center 1.0-->MsiExec.exe /I{E9787678-119F-4D52-B551-6739B2B22101} Adobe Help Viewer CS3-->MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245} Adobe Linguistics CS3-->MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078} Adobe PDF Library Files-->MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C} Adobe Photoshop CS2-->msiexec /I {236BB7C4-4419-42FD-040C-1E257A25E34D} Adobe Reader 8.1.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81200000003} Adobe Setup-->MsiExec.exe /I{64C1FA9A-FA94-4B6E-B3E4-8573738E4AD1} Adobe Setup-->MsiExec.exe /I{82503EA7-7E08-4AA8-90E9-BE4D0A6D453F} Adobe Setup-->MsiExec.exe /I{8AE03988-8C8C-40EE-BDC7-76781BEF1B1D} Adobe Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log Adobe Stock Photos 1.0-->MsiExec.exe /I{786C5747-0C40-4930-9AFE-113BCE553101} Adobe Type Support-->MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312} Adobe Update Manager CS3-->MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8} Adobe Version Cue CS3 Client-->MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5} Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6} Antidote RX v2-->MsiExec.exe /X{A474EA56-5DBD-4181-8230-806A4762EA7F} Apple Mobile Device Support-->MsiExec.exe /I{D8AB8F0C-CEEB-4A29-8EF5-219B064813F4} Apple Software Update-->MsiExec.exe /I{B74F042E-E1B9-4A5B-8D46-387BB172F0A4} Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe ArcSoft PhotoImpression 6-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9092875A-D6E1-4B76-84F5-F9C0C6E14D10}\Setup.exe" -l0x40c Ask Toolbar-->rundll32 C:\PROGRA~1\AskSBar\bar\1.bin\AskSBar.dll,O Assistant de connexion Windows Live-->MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986} Audacity 1.2.4-->"C:\Program Files\Audacity\unins000.exe" AutoFtp Pro (s)-->MsiExec.exe /I{27B695E0-18A8-4787-B8FA-848B21E48CE6} avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup AVG Free 8.0-->C:\Program Files\AVG\AVG8\setup.exe /UNINSTALL Canon MP Navigator 2.0-->"C:\Program Files\Canon\MP Navigator 2.0\Maint.exe" /UninstallRemove C:\Program Files\Canon\MP Navigator 2.0\uninst.ini Canon MP450-->"C:\WINDOWS\system32\CanonMP Uninstaller Information\{CF23AFD7-3078-4134-8823-EBF6D1FE6FAD}\DelDrv.exe" /U:{CF23AFD7-3078-4134-8823-EBF6D1FE6FAD} /L0x000c CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe" Codeur Windows Media Série 9-->msiexec.exe /I {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E} Codeur Windows Media Série 9-->MsiExec.exe /I{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E} Correctif n° 2 pour Windows XP Édition Media Center 2005-->C:\WINDOWS\$NtUninstallKB900325$\spuninst\spuninst.exe Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe" Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe" Creative System Information-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{87499F38-FD69-4A2B-B41A-BAB8DE9B94FE}\setup.exe" -l0x40c /remove Dictionnaire de traduction Anglais-Français-->"C:\Program Files\Fichiers communs\IdiomaX Uninstall\SetupDictEnFr.exe" /UNINSTALL /LOG=C:\Program Files\Fichiers communs\IdiomaX Uninstall\SetupDictEnFr.log DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN DVC5.1 Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0DCCE3F4-E888-40E8-8AE5-CF8058F25631}\Setup.exe" DVRMSToolbox-->MsiExec.exe /I{17AEEF9A-AA50-40EC-8615-A6B7227A4413} Extension HighMAT pour l'Assistant Graver un CD de Microsoft Windows XP-->MsiExec.exe /X{FCE65C4E-B0E8-4FBD-AD16-EDCBE6CD591F} FinePixViewer Ver.4.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{24ED4D80-8294-11D5-96CD-0040266301AD}\SETUP.EXE" Firebird SQL Server - MAGIX Edition (F)-->C:\MAGIX\Common\Database\uninstall.exe FUJIFILM USB Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5490882C-6961-11D5-BAE5-00E0188E010B}\SETUP.EXE" Garmin Communicator Plugin-->MsiExec.exe /X{F6970FBD-809A-4C51-BAB3-D94A04C6C8E7} Google Talk (remove only)-->"C:\Program Files\Google\Google Talk\uninstall.exe" Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_0531C63A913CC9D1.exe" /uninstall Hamachi 1.0.1.5-->C:\Program Files\Hamachi\uninstall.exe High Definition Audio Driver Package - KB835221-->C:\WINDOWS\$NtUninstallKB835221WXP$\spuninst\spuninst.exe HijackThis 2.0.2-->"C:\Program Files rend micro\HijackThis.exe" /uninstall Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe" Hotfix for Windows Media Player 10 (KB903157)-->"C:\WINDOWS\$NtUninstallKB903157$\spuninst\spuninst.exe" Image Resizer Powertoy for Windows XP-->MsiExec.exe /I{1CB92574-96F2-467B-B793-5CEB35C40C29} ImageMixer VCD2 for FinePix-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{934E9442-D305-4ACF-AD87-A6C11D677CB9}\setup.exe" Intel(R) PRO Network Adapters and Drivers-->Prounstl.exe InterVideo WinDVD-->"C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL ISO Recorder-->MsiExec.exe /I{DFC6573E-124D-4026-BFA4-B433C9D3FF21} iTunes-->MsiExec.exe /I{02DFB3FD-CF52-4183-8BCA-2A127D4888F4} J2SE Runtime Environment 5.0 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150030} J2SE Runtime Environment 5.0 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150050} J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060} J2SE Runtime Environment 5.0 Update 9-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150090} Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall Lexmark Z600 Series-->C:\WINDOWS\system32\spool\drivers\w32x86\3\LXBCUN5C.EXE -dLexmark Z600 Series LimeWire 4.9.37-->"C:\Program Files\LimeWire\uninstall.exe" Logitech Gaming Software-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{648F9C94-EC44-487B-9DA4-44ED72A082CC}\setup.exe" -l0x40c Logitech Gaming Software-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B9242864-2841-4ADE-86E0-8F90F91B04DD}\setup.exe" -l0x40c Macromedia Extension Manager-->MsiExec.exe /I{3C8C9FB3-5FDF-40B4-B314-EAD722728C76} Macromedia Extension Manager-->MsiExec.exe /I{5546CDB5-2CE2-498B-B059-5B3BF81FC41F} Macromedia Flash 8 Video Encoder-->MsiExec.exe /X{8BF2C401-02CE-424D-BC26-6C4F9FB446B6} Macromedia Flash 8-->MsiExec.exe /I{2BD5C305-1B27-4D41-B690-7A61172D2FEB} MaLHJMQ.com-->MsiExec.exe /I{AC1BE4EB-9565-4DAA-8F92-4018A3DAE674} Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700} Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp" Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28} Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe" Microsoft FrontPage Express-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\fpxpress.inf, Uninstall Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe" Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe" Microsoft Office 2000 Standard-->MsiExec.exe /I{0002040C-78E1-11D2-B60F-006097C998E7} Microsoft Silverlight-->MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe" Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} Microsoft Web Publishing Wizard 1.52-->RunDll32 ADVPACK.DLL,LaunchINFSection C:\WINDOWS\INF\wpie4x86.inf,WebPostUninstall Microsoft Works-->MsiExec.exe /I{A059DE09-1B49-4450-B340-7AE097EC3F04} MicroStaff WINASPI-->C:\MWASPI\uninst.exe Mise à jour de sécurité pour le Codeur Windows Media (KB954156)-->"C:\WINDOWS\$NtUninstallKB954156_WM9L$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe" Mise à jour pour Lecteur Windows Media 10 (KB913800)-->"C:\WINDOWS\$NtUninstallKB913800$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe" Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe Mozilla Firefox (3.0.1)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe MSN Polygamy 8.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{952DEE45-7C0B-4CDF-80B3-D14BE6B02678}\Setup.exe" MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F} MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF} MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} Nero Media Player-->C:\WINDOWS\UNNMP.exe /UNINSTALL Nero OEM-->C:\Program Files\Ahead ero\uninstall\UNNERO.exe /UNINSTALL NeroVision Express 2-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL NetBus Pro-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\NetBus Pro\Uninst.isu" -c"C:\Program Files\NetBus Pro\NBUninst.dll" Network Play System (Patching)-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Electronic Arts\Network Play System\NPSPatch.isu" NVIDIA Drivers-->C:\WINDOWS\system32 vudisp.exe UninstallGUI Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall Panasonic Office Add-in-->MsiExec.exe /I{C97AEFB5-E52F-49C8-AB51-D5F335AF8B7C} Panda ActiveScan 2.0-->C:\Program Files\Panda Security\ActiveScan 2.0\as2uninst.exe PDF Settings-->MsiExec.exe /I{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5} PhotoFiltre-->"C:\Program Files\PhotoFiltre\Uninst.exe" PrintMaster 7.00-->c:\PROGRA~1\MINDSC~1\PRINTM~1\uninst32.exe /IFirst QuickTime-->MsiExec.exe /I{BFD96B89-B769-4CD6-B11E-E79FFD46F067} RAW FILE CONVERTER LE-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D680C913-5955-469D-9D88-C1940F7506D6}\SETUP.EXE" -l0x40c RealSpeak_Solo_Common_for_Panasonic-->MsiExec.exe /I{C52BEBC0-4A0C-42FB-B7EC-FAD0A14DD64E} RealSpeak_Solo_English_for_Panasonic-->MsiExec.exe /I{DA12E3FF-60E1-43E0-8E64-C43890A596AE} RealSpeak_Solo_French_for_Panasonic-->MsiExec.exe /I{5004A142-87B7-4CD5-AF7B-C1E536407762} Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\setup.exe" REMOVE Samsung DVC Media 5.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{158BC6C5-5950-4FDD-BE33-0294668923F2}\Setup.exe" SAPI5_Common-->MsiExec.exe /I{50B631C6-6E91-4D7B-A4E0-81E7FA8D5B3D} Serials 2000 v6.0-->C:\PROGRA~1\SERIAL~1\UNWISE.EXE C:\PROGRA~1\SERIAL~1\INSTALL.LOG Serials 2000-->"C:\Program Files\Serials 2000\uninst-s2k.exe" SHOUTcast Source DSP 1.9.0 (remove only)-->C:\Program Files\Winamp\uninst-dsp.exe Skype™ 3.6-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82} Smart Defrag 1.10-->"C:\Program Files\IObit\IObit SmartDefrag\unins000.exe" Sony USB Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5C29CB8B-AC1E-4114-8D68-9CD080140D4A}\setup.exe" UNINSTALL Sound Blaster Audigy 2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CECB9B3D-E681-4458-85F8-8D182941AF1D}\SETUP.EXE" -l0x40c Spybot - Search & Destroy 1.4-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe" Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins001.exe" Titan Poker-->"C:\Documents and Settings\Ludger\Mes documents\Titan Poker\_SetupPoker[1].exe" /uninstall Traducteur d'Office IdiomaX-->"C:\Program Files\Fichiers communs\IdiomaX Uninstall\SetupOffice.exe" /UNINSTALL /LOG=C:\Program Files\Fichiers communs\IdiomaX Uninstall\SetupOffice.log Translation_iTrans_for_Panasonic-->MsiExec.exe /I{C0DA8486-6C3A-4A38-AAC3-543A31F9F889} Utilitaires Sierra-->C:\Program Files\Sierra On-Line\sutil32.exe uninstall Virtools 3D Life Player-->C:\Program Files\Virtools\3D Life Player\WebplayerConfig.exe -u Visionneuse Journal Windows Microsoft-->MsiExec.exe /X{43DCF766-6838-4F9A-8C91-D92DA586DFA7} VMN Toolbar-->C:\Program Files\vmntoolbar\uninstall.exe -uninstall -prompt Voice Editing-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{44CE6902-84EA-11D6-887E-00609721D519}\setup.exe" Windows Genuine Advantage v1.3.0254.0-->MsiExec.exe /I{63569CE9-FA00-469C-AF5C-E5D4D93ACF91} Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390} Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65} Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe" Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe" Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} Windows XP Édition Media Center 2005 KB888316-->C:\WINDOWS\$NtUninstallKB888316$\spuninst\spuninst.exe Windows XP Media Center Edition 2005 KB925766-->"C:\WINDOWS\$NtUninstallKB925766$\spuninst\spuninst.exe" Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe" ======Hosts File====== 127.0.0.1 007guard.com 127.0.0.1 www.007guard.com 127.0.0.1 008i.com 127.0.0.1 008k.com 127.0.0.1 www.008k.com 127.0.0.1 00hq.com 127.0.0.1 www.00hq.com 127.0.0.1 010402.com 127.0.0.1 032439.com 127.0.0.1 www.032439.com ======Security center information====== AV: AVG Anti-Virus Free AV: avast! antivirus 4.8.1335 [VPS 090225-1] System event log Computer Name: YOUR-4FE10E7BD0 Event Code: 7035 Message: Un contrôle Démarrer a correctement été envoyé au service Service de transfert intelligent en arrière-plan. Record Number: 6040 Source Name: Service Control Manager Time Written: 20081226132121.000000-300 Event Type: information User: AUTORITE NT\SYSTEM Computer Name: YOUR-4FE10E7BD0 Event Code: 7036 Message: Le service Gestionnaire de connexions d'accès distant est entré dans l'état : en cours d'exécution. Record Number: 6039 Source Name: Service Control Manager Time Written: 20081226131726.000000-300 Event Type: information User: Computer Name: YOUR-4FE10E7BD0 Event Code: 7036 Message: Le service Service de la passerelle de la couche Application est entré dans l'état : en cours d'exécution. Record Number: 6038 Source Name: Service Control Manager Time Written: 20081226131726.000000-300 Event Type: information User: Computer Name: YOUR-4FE10E7BD0 Event Code: 7035 Message: Un contrôle Démarrer a correctement été envoyé au service Service de la passerelle de la couche Application. Record Number: 6037 Source Name: Service Control Manager Time Written: 20081226131726.000000-300 Event Type: information User: AUTORITE NT\SYSTEM Computer Name: YOUR-4FE10E7BD0 Event Code: 7035 Message: Un contrôle Démarrer a correctement été envoyé au service Gestionnaire de connexions d'accès distant. Record Number: 6036 Source Name: Service Control Manager Time Written: 20081226131726.000000-300 Event Type: information User: YOUR-4FE10E7BD0\Ludger Application event log Computer Name: YOUR-4FE10E7BD0 Event Code: 101 Message: msnmsgr (3692) Le moteur de base de données est arrêté. Record Number: 31886 Source Name: ESENT Time Written: 20081217233603.000000-300 Event Type: information User: Computer Name: YOUR-4FE10E7BD0 Event Code: 103 Message: msnmsgr (3692) \.\C:\Documents and Settings\Ludger\Local Settings\Application Data\Microsoft\Messenger\saby_love_sexy@hotmail.com\SharingMetadata\Working\database_DEF0_D49_F00D_28FB\dfsr.db: Le moteur de base de données a arrêté une instance (0). Record Number: 31885 Source Name: ESENT Time Written: 20081217233603.000000-300 Event Type: information User: Computer Name: YOUR-4FE10E7BD0 Event Code: 302 Message: msnmsgr (3692) \.\C:\Documents and Settings\Ludger\Local Settings\Application Data\Microsoft\Messenger\saby_love_sexy@hotmail.com\SharingMetadata\Working\database_DEF0_D49_F00D_28FB\dfsr.db: Le moteur de base de données a exécuté la procédure de récupération avec succès. Record Number: 31884 Source Name: ESENTDe: À: Objet: Forum virus/sécurité - virus - reponse de sim123 Date: 26 février 2009 13:;37 De: À: Objet: Forum virus/sécurité - virus - reponse de sim123 Date: 26 février 2009 13:37 Logfile of random's system information tool 1.05 (written by random/random) Run by Ludger at 2009-02-26 13:26:58 Microsoft Windows XP Professionnel Service Pack 3 System drive C: has 159 GB (67%) free of 238 GB Total RAM: 1535 MB (59% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 13:27:38, on 2009-02-26 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16791) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\WINDOWS\Explorer.EXE C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\ALCWZRD.EXE C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe C:\WINDOWS\system32\CTHELPER.EXE C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe C:\Program Files\Microsoft IntelliType Pro ype32.exe C:\PROGRA~1\AVG\AVG8\avgtray.exe C:\Program Files\QuickTime\QTTask.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\system32\crypserv.exe c:\program files\dvrmstoolbox\dvrmsfilewatcherservice.exe C:\Program Files\Microsoft IntelliPoint\ipoint.exe C:\WINDOWS\system32 undll32.exe C:\WINDOWS\svw.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\system32\ctfmon.exe C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\PROGRA~1\Druide\Antidote\Gestionnaire Antidote.exe C:\Program Files\Windows Media Player\WMPNSCFG.exe C:\WINDOWS\eHome\ehRecvr.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Google\Google Talk\googletalk.exe C:\PROGRA~1\AVG\AVG8\avgnsx.exe C:\Program Files\FinePixViewer\QuickDCF.exe C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe C:\WINDOWS\system32 vsvc32.exe C:\WINDOWS\system32\slserv.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\PROGRA~1\AVG\AVG8\avgemc.exe C:\WINDOWS\ehome\mcrdsvc.exe C:\Program Files\AVG\AVG8\avgcsrvx.exe C:\Program Files\Windows Media Player\WMPNetwk.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\WINDOWS\System32\alg.exe C:\Program Files\Java\jre1.5.0_09\bin\jucheck.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe C:\Documents and Settings\Ludger\Local Settings\Temp\jkos-Ludger\binaries\ScanningProcess.exe C:\Documents and Settings\Ludger\Local Settings\Temp\jkos-Ludger\binaries\ScanningProcess.exe C:\WINDOWS\sv.exe C:\Program Files\Outlook Express\msimn.exe C:\WINDOWS\odb.exe C:\Documents and Settings\Ludger\Local Settings\Temporary Internet Files\Content.IE5\R0PUY27O\RSIT[1].exe C:\WINDOWS\system32\wbem\wmiprvse.exe C:\Program Files rend micro\Ludger.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fsympatico.msn.ca%2fdefaultf.aspx%2f%3f R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: (no name) - {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32 tos.exe, O2 - BHO: Ask Search Assistant BHO - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll O2 - BHO: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll O2 - BHO: (no name) - {D34F5D71-99E4-4D96-91CA-F4104F69B8AE} - (no file) O2 - BHO: (no name) - {E14DCE67-8FB7-4721-8149-179BAA4D792C} - (no file) O2 - BHO: Ask Toolbar BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL O3 - Toolbar: (no name) - {F0993251-2512-4710-AF6E-0A13EA199D02} - (no file) O3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAudPropShortcut.exe O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe /r O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE O4 - HKLM\..\Run: [SBDrvDet] C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe /r O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe" O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro ype32.exe" O4 - HKLM\..\Run: [IdiomaX Office] C:\Program Files\IdiomaX\Office Translator 4.0\IdxOffice.exe O4 - HKLM\..\Run: [IdiomaX Product Update] C:\Program Files\Fichiers communs\IdiomaX Shared\Cat 6.0\IdxLUpdate.exe /AUTOSTART O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe" O4 - HKLM\..\Run: [Bjoqurubohojaf] rundll32.exe "C:\WINDOWS\Bqucocuwusehihe.dll",e O4 - HKLM\..\Run: [odb] C:\WINDOWS\odb.exe O4 - HKLM\..\Run: [UpdateWin] C:\WINDOWS\system32\acluib.exe O4 - HKLM\..\Run: [netsv32] C:\WINDOWS\sv.exe O4 - HKLM\..\Run: [runsql] C:\WINDOWS unsql.exe O4 - HKLM\..\Run: [netzip] C:\WINDOWS\svzip.exe O4 - HKLM\..\Run: [netw] C:\WINDOWS\svw.exe O4 - HKLM\..\Run: [netx] C:\WINDOWS\svx.exe O4 - HKLM\..\Run: [vlc] C:\WINDOWS\vlc.exe O4 - HKLM\..\Run: [wdmon] C:\WINDOWS\wdmon.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\RunServices: [UpdateWin] C:\WINDOWS\system32\acluib.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Gestionnaire Antidote.exe] C:\PROGRA~1\Druide\Antidote\Gestionnaire Antidote.exe O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart O4 - HKCU\..\Run: [UpdateWin] C:\WINDOWS\system32\acluib.exe O4 - HKCU\..\Run: [userinit] C:\WINDOWS\system32 tos.exe O4 - HKCU\..\RunServices: [UpdateWin] C:\WINDOWS\system32\acluib.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Exif Launcher.lnk = ? O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1 O7 - HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1 O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZNxuk169YYCA O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Documents and Settings\Ludger\Mes documents\Titan Poker\casino.exe O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Documents and Settings\Ludger\Mes documents\Titan Poker\casino.exe O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing) O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing) O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32 wprovau.dll O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.cab O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll O22 - SharedTaskScheduler: IPC Configuration Utility - IPC Configuration Utility - (no file) O22 - SharedTaskScheduler: Windows Installer Class - {020487CC-FC04-4B1E-863F-D9801796230B} - C:\DOCUME~1\Ludger\LOCALS~1\Temp\wndutl32.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe O23 - Service: DVRMSFileWatcherService - - c:\program files\dvrmstoolbox\dvrmsfilewatcherservice.exe O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Imapi Helper - Alex Feinman - C:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32 vsvc32.exe O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe

sim123 · Answer

cé tu correct

sim123 · Answer

veut tu dire qu'IL MANQUE QUELQUE CHOSE

jlpjlp · Answer

il manque la fin...

pas grave mais dans le prochain mets tout!!!!!!

________________

tu es gavé!!!!! d'infections !!!!!!!!!!


__________________

il faut tout faire!


en premier vire avast car tu as aussi AVG8 antivirus!(sur un ordi il n'en faut qu'un!)
comme ceci

https://www.avast.com/fr-fr/uninstall-utility


_____________________


Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

* Lance l'installation du programme en exécutant le fichier téléchargé.
* Double-clique maintenant sur le raccourci de Toolbar-S&D.
* Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
* Choisis maintenant l'option 2. Patiente jusqu'à la fin de la recherche. 
* Poste le rapport généré. (C:\TB.txt)
______________________


Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :
• Redémarre ton ordinateur
• Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
• A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
• Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
• Choisis ton compte.
Déroule la liste des instructions ci-dessous :
• Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
• Appuie sur Y pour commencer le processus de nettoyage.
• Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
• Appuie sur une touche pour redémarrer le PC.
• Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
• Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
• Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
• Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
• Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum

____________________

telecharge malwarebyte, mets le a jour puis fais un scan rapide  et colle le rapport

http://www.commentcamarche.net/telecharger/telecharger 34055379 malwarebytes anti malware

manuel:
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

______________________

Remets un rapport RSIT complet cette fois

sim123 · Answer

De: À: Objet: Forum virus/sécurité - virus - reponse de sim123 Date: 26 février 2009 13:37 info.txt logfile of random's system information tool 1.05 2009-02-26 13:27:44 ======Uninstall list====== -->"C:\Program Files\Creative\SBAudigy2\Program\Ctzapxx.EXE" /W /U /S /L:FRN -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1494984B-9AC5-4F16-B61A-C21D5EFCC1C4}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1494984B-9AC5-4F16-B61A-C21D5EFCC1C4}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{236FADD8-58FD-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{236FADD8-58FD-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{266F8C74-5DC6-4405-B79B-4EB82B2FC684}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{266F8C74-5DC6-4405-B79B-4EB82B2FC684}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{435E969D-867E-4364-8E74-3DC8A69C5BDB}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{435E969D-867E-4364-8E74-3DC8A69C5BDB}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5210ED6D-52A9-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5210ED6D-52A9-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5CDDF96A-BC34-4D72-9ABA-E1FFF0C39977}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7201B853-5833-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7201B853-5833-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{87499F38-FD69-4A2B-B41A-BAB8DE9B94FE}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9154ED7C-926E-49CC-B677-0CF3C5267457}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9154ED7C-926E-49CC-B677-0CF3C5267457}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A1185190-514F-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A1185190-514F-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DEBD7BF3-5856-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DEBD7BF3-5856-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB2292C6-1F0A-11D7-AB2D-0090271A23A2}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB2292C6-1F0A-11D7-AB2D-0090271A23A2}\setup.exe" -l0x40c /remove -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf ActivePerl 5.8.7 Build 815-->MsiExec.exe /I{5246151F-717A-4119-A592-85AFC71EB60D} Ad-Aware SE Personal-->C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG Adobe Acrobat 7.0 Professional-->msiexec /I {AC76BA86-1033-0000-7760-000000000002} Adobe Anchor Service CS3-->MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95} Adobe Asset Services CS3-->MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61} Adobe Bridge CS3-->MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394} Adobe Bridge Start Meeting-->MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23} Adobe Camera Raw 4.0-->MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C} Adobe CMaps-->MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C} Adobe Color Common Settings-->C:\Program Files\Fichiers communs\Adobe\Installers\6c8e2cb4fd241c55406016127a6ab2e\Setup.exe Adobe Color Common Settings-->MsiExec.exe /I{6D4AC5A4-4CF9-4F90-8111-B9B53CE257BF} Adobe Color EU Recommended Settings-->MsiExec.exe /I{73B5D990-04EA-4751-B10F-5534770B91F2} Adobe Color JA Extra Settings-->MsiExec.exe /I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029} Adobe Color NA Extra Settings-->MsiExec.exe /I{FF29A7E2-FF40-4D07-B7E4-2093DE59E10A} Adobe Common File Installer-->MsiExec.exe /I{8EDBA74D-0686-4C99-BFDD-F894678E5101} Adobe Device Central CS3-->MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD} Adobe ExtendScript Toolkit 2-->C:\Program Files\Fichiers communs\Adobe\Installers\3e054d2218e7aa282c2369d939e58ff\Setup.exe Adobe ExtendScript Toolkit 2-->MsiExec.exe /I{77D2A9D3-5800-43E3-B274-87841BC87DB2} Adobe Flash CS3 Professional-->C:\Program Files\Fichiers communs\Adobe\Installers\b2b4b1546e74314f8131ded43e4bd9d\Setup.exe Adobe Flash CS3-->MsiExec.exe /I{80FD3971-8482-49C8-BA8C-B6464A15882F} Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe Adobe Flash Player 9 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\FlashUtil9b.exe -uninstallDelete Adobe Flash Player Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe Adobe Help Center 1.0-->MsiExec.exe /I{E9787678-119F-4D52-B551-6739B2B22101} Adobe Help Viewer CS3-->MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245} Adobe Linguistics CS3-->MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078} Adobe PDF Library Files-->MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C} Adobe Photoshop CS2-->msiexec /I {236BB7C4-4419-42FD-040C-1E257A25E34D} Adobe Reader 8.1.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81200000003} Adobe Setup-->MsiExec.exe /I{64C1FA9A-FA94-4B6E-B3E4-8573738E4AD1} Adobe Setup-->MsiExec.exe /I{82503EA7-7E08-4AA8-90E9-BE4D0A6D453F} Adobe Setup-->MsiExec.exe /I{8AE03988-8C8C-40EE-BDC7-76781BEF1B1D} Adobe Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log Adobe Stock Photos 1.0-->MsiExec.exe /I{786C5747-0C40-4930-9AFE-113BCE553101} Adobe Type Support-->MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312} Adobe Update Manager CS3-->MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8} Adobe Version Cue CS3 Client-->MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5} Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6} Antidote RX v2-->MsiExec.exe /X{A474EA56-5DBD-4181-8230-806A4762EA7F} Apple Mobile Device Support-->MsiExec.exe /I{D8AB8F0C-CEEB-4A29-8EF5-219B064813F4} Apple Software Update-->MsiExec.exe /I{B74F042E-E1B9-4A5B-8D46-387BB172F0A4} Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe ArcSoft PhotoImpression 6-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9092875A-D6E1-4B76-84F5-F9C0C6E14D10}\Setup.exe" -l0x40c Ask Toolbar-->rundll32 C:\PROGRA~1\AskSBar\bar\1.bin\AskSBar.dll,O Assistant de connexion Windows Live-->MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986} Audacity 1.2.4-->"C:\Program Files\Audacity\unins000.exe" AutoFtp Pro (s)-->MsiExec.exe /I{27B695E0-18A8-4787-B8FA-848B21E48CE6} avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup AVG Free 8.0-->C:\Program Files\AVG\AVG8\setup.exe /UNINSTALL Canon MP Navigator 2.0-->"C:\Program Files\Canon\MP Navigator 2.0\Maint.exe" /UninstallRemove C:\Program Files\Canon\MP Navigator 2.0\uninst.ini Canon MP450-->"C:\WINDOWS\system32\CanonMP Uninstaller Information\{CF23AFD7-3078-4134-8823-EBF6D1FE6FAD}\DelDrv.exe" /U:{CF23AFD7-3078-4134-8823-EBF6D1FE6FAD} /L0x000c CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe" Codeur Windows Media Série 9-->msiexec.exe /I {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E} Codeur Windows Media Série 9-->MsiExec.exe /I{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E} Correctif n° 2 pour Windows XP Édition Media Center 2005-->C:\WINDOWS\$NtUninstallKB900325$\spuninst\spuninst.exe Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe" Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe" Creative System Information-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{87499F38-FD69-4A2B-B41A-BAB8DE9B94FE}\setup.exe" -l0x40c /remove Dictionnaire de traduction Anglais-Français-->"C:\Program Files\Fichiers communs\IdiomaX Uninstall\SetupDictEnFr.exe" /UNINSTALL /LOG=C:\Program Files\Fichiers communs\IdiomaX Uninstall\SetupDictEnFr.log DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN DVC5.1 Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0DCCE3F4-E888-40E8-8AE5-CF8058F25631}\Setup.exe" DVRMSToolbox-->MsiExec.exe /I{17AEEF9A-AA50-40EC-8615-A6B7227A4413} Extension HighMAT pour l'Assistant Graver un CD de Microsoft Windows XP-->MsiExec.exe /X{FCE65C4E-B0E8-4FBD-AD16-EDCBE6CD591F} FinePixViewer Ver.4.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{24ED4D80-8294-11D5-96CD-0040266301AD}\SETUP.EXE" Firebird SQL Server - MAGIX Edition (F)-->C:\MAGIX\Common\Database\uninstall.exe FUJIFILM USB Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5490882C-6961-11D5-BAE5-00E0188E010B}\SETUP.EXE" Garmin Communicator Plugin-->MsiExec.exe /X{F6970FBD-809A-4C51-BAB3-D94A04C6C8E7} Google Talk (remove only)-->"C:\Program Files\Google\Google Talk\uninstall.exe" Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_0531C63A913CC9D1.exe" /uninstall Hamachi 1.0.1.5-->C:\Program Files\Hamachi\uninstall.exe High Definition Audio Driver Package - KB835221-->C:\WINDOWS\$NtUninstallKB835221WXP$\spuninst\spuninst.exe HijackThis 2.0.2-->"C:\Program Files rend micro\HijackThis.exe" /uninstall Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe" Hotfix for Windows Media Player 10 (KB903157)-->"C:\WINDOWS\$NtUninstallKB903157$\spuninst\spuninst.exe" Image Resizer Powertoy for Windows XP-->MsiExec.exe /I{1CB92574-96F2-467B-B793-5CEB35C40C29} ImageMixer VCD2 for FinePix-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{934E9442-D305-4ACF-AD87-A6C11D677CB9}\setup.exe" Intel(R) PRO Network Adapters and Drivers-->Prounstl.exe InterVideo WinDVD-->"C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL ISO Recorder-->MsiExec.exe /I{DFC6573E-124D-4026-BFA4-B433C9D3FF21} iTunes-->MsiExec.exe /I{02DFB3FD-CF52-4183-8BCA-2A127D4888F4} J2SE Runtime Environment 5.0 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150030} J2SE Runtime Environment 5.0 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150050} J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060} J2SE Runtime Environment 5.0 Update 9-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150090} Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall Lexmark Z600 Series-->C:\WINDOWS\system32\spool\drivers\w32x86\3\LXBCUN5C.EXE -dLexmark Z600 Series LimeWire 4.9.37-->"C:\Program Files\LimeWire\uninstall.exe" Logitech Gaming Software-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{648F9C94-EC44-487B-9DA4-44ED72A082CC}\setup.exe" -l0x40c Logitech Gaming Software-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B9242864-2841-4ADE-86E0-8F90F91B04DD}\setup.exe" -l0x40c Macromedia Extension Manager-->MsiExec.exe /I{3C8C9FB3-5FDF-40B4-B314-EAD722728C76} Macromedia Extension Manager-->MsiExec.exe /I{5546CDB5-2CE2-498B-B059-5B3BF81FC41F} Macromedia Flash 8 Video Encoder-->MsiExec.exe /X{8BF2C401-02CE-424D-BC26-6C4F9FB446B6} Macromedia Flash 8-->MsiExec.exe /I{2BD5C305-1B27-4D41-B690-7A61172D2FEB} MaLHJMQ.com-->MsiExec.exe /I{AC1BE4EB-9565-4DAA-8F92-4018A3DAE674} Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700} Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp" Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28} Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe" Microsoft FrontPage Express-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\fpxpress.inf, Uninstall Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe" Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe" Microsoft Office 2000 Standard-->MsiExec.exe /I{0002040C-78E1-11D2-B60F-006097C998E7} Microsoft Silverlight-->MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe" Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} Microsoft Web Publishing Wizard 1.52-->RunDll32 ADVPACK.DLL,LaunchINFSection C:\WINDOWS\INF\wpie4x86.inf,WebPostUninstall Microsoft Works-->MsiExec.exe /I{A059DE09-1B49-4450-B340-7AE097EC3F04} MicroStaff WINASPI-->C:\MWASPI\uninst.exe Mise à jour de sécurité pour le Codeur Windows Media (KB954156)-->"C:\WINDOWS\$NtUninstallKB954156_WM9L$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe" Mise à jour pour Lecteur Windows Media 10 (KB913800)-->"C:\WINDOWS\$NtUninstallKB913800$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe" Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe Mozilla Firefox (3.0.1)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe MSN Polygamy 8.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{952DEE45-7C0B-4CDF-80B3-D14BE6B02678}\Setup.exe" MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F} MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF} MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} Nero Media Player-->C:\WINDOWS\UNNMP.exe /UNINSTALL Nero OEM-->C:\Program Files\Ahead ero\uninstall\UNNERO.exe /UNINSTALL NeroVision Express 2-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL NetBus Pro-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\NetBus Pro\Uninst.isu" -c"C:\Program Files\NetBus Pro\NBUninst.dll" Network Play System (Patching)-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Electronic Arts\Network Play System\NPSPatch.isu" NVIDIA Drivers-->C:\WINDOWS\system32 vudisp.exe UninstallGUI Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall Panasonic Office Add-in-->MsiExec.exe /I{C97AEFB5-E52F-49C8-AB51-D5F335AF8B7C} Panda ActiveScan 2.0-->C:\Program Files\Panda Security\ActiveScan 2.0\as2uninst.exe PDF Settings-->MsiExec.exe /I{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5} PhotoFiltre-->"C:\Program Files\PhotoFiltre\Uninst.exe" PrintMaster 7.00-->c:\PROGRA~1\MINDSC~1\PRINTM~1\uninst32.exe /IFirst QuickTime-->MsiExec.exe /I{BFD96B89-B769-4CD6-B11E-E79FFD46F067} RAW FILE CONVERTER LE-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D680C913-5955-469D-9D88-C1940F7506D6}\SETUP.EXE" -l0x40c RealSpeak_Solo_Common_for_Panasonic-->MsiExec.exe /I{C52BEBC0-4A0C-42FB-B7EC-FAD0A14DD64E} RealSpeak_Solo_English_for_Panasonic-->MsiExec.exe /I{DA12E3FF-60E1-43E0-8E64-C43890A596AE} RealSpeak_Solo_French_for_Panasonic-->MsiExec.exe /I{5004A142-87B7-4CD5-AF7B-C1E536407762} Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\setup.exe" REMOVE Samsung DVC Media 5.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{158BC6C5-5950-4FDD-BE33-0294668923F2}\Setup.exe" SAPI5_Common-->MsiExec.exe /I{50B631C6-6E91-4D7B-A4E0-81E7FA8D5B3D} Serials 2000 v6.0-->C:\PROGRA~1\SERIAL~1\UNWISE.EXE C:\PROGRA~1\SERIAL~1\INSTALL.LOG Serials 2000-->"C:\Program Files\Serials 2000\uninst-s2k.exe" SHOUTcast Source DSP 1.9.0 (remove only)-->C:\Program Files\Winamp\uninst-dsp.exe Skype™ 3.6-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82} Smart Defrag 1.10-->"C:\Program Files\IObit\IObit SmartDefrag\unins000.exe" Sony USB Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5C29CB8B-AC1E-4114-8D68-9CD080140D4A}\setup.exe" UNINSTALL Sound Blaster Audigy 2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CECB9B3D-E681-4458-85F8-8D182941AF1D}\SETUP.EXE" -l0x40c Spybot - Search & Destroy 1.4-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe" Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins001.exe" Titan Poker-->"C:\Documents and Settings\Ludger\Mes documents\Titan Poker\_SetupPoker[1].exe" /uninstall Traducteur d'Office IdiomaX-->"C:\Program Files\Fichiers communs\IdiomaX Uninstall\SetupOffice.exe" /UNINSTALL /LOG=C:\Program Files\Fichiers communs\IdiomaX Uninstall\SetupOffice.log Translation_iTrans_for_Panasonic-->MsiExec.exe /I{C0DA8486-6C3A-4A38-AAC3-543A31F9F889} Utilitaires Sierra-->C:\Program Files\Sierra On-Line\sutil32.exe uninstall Virtools 3D Life Player-->C:\Program Files\Virtools\3D Life Player\WebplayerConfig.exe -u Visionneuse Journal Windows Microsoft-->MsiExec.exe /X{43DCF766-6838-4F9A-8C91-D92DA586DFA7} VMN Toolbar-->C:\Program Files\vmntoolbar\uninstall.exe -uninstall -prompt Voice Editing-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{44CE6902-84EA-11D6-887E-00609721D519}\setup.exe" Windows Genuine Advantage v1.3.0254.0-->MsiExec.exe /I{63569CE9-FA00-469C-AF5C-E5D4D93ACF91} Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390} Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65} Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe" Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe" Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} Windows XP Édition Media Center 2005 KB888316-->C:\WINDOWS\$NtUninstallKB888316$\spuninst\spuninst.exe Windows XP Media Center Edition 2005 KB925766-->"C:\WINDOWS\$NtUninstallKB925766$\spuninst\spuninst.exe" Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe" ======Hosts File====== 127.0.0.1 007guard.com 127.0.0.1 www.007guard.com 127.0.0.1 008i.com 127.0.0.1 008k.com 127.0.0.1 www.008k.com 127.0.0.1 00hq.com 127.0.0.1 www.00hq.com 127.0.0.1 010402.com 127.0.0.1 032439.com 127.0.0.1 www.032439.com ======Security center information====== AV: AVG Anti-Virus Free AV: avast! antivirus 4.8.1335 [VPS 090225-1] System event log Computer Name: YOUR-4FE10E7BD0 Event Code: 7035 Message: Un contrôle Démarrer a correctement été envoyé au service Service de transfert intelligent en arrière-plan. Record Number: 6040 Source Name: Service Control Manager Time Written: 20081226132121.000000-300 Event Type: information User: AUTORITE NT\SYSTEM Computer Name: YOUR-4FE10E7BD0 Event Code: 7036 Message: Le service Gestionnaire de connexions d'accès distant est entré dans l'état : en cours d'exécution. Record Number: 6039 Source Name: Service Control Manager Time Written: 20081226131726.000000-300 Event Type: information User: Computer Name: YOUR-4FE10E7BD0 Event Code: 7036 Message: Le service Service de la passerelle de la couche Application est entré dans l'état : en cours d'exécution. Record Number: 6038 Source Name: Service Control Manager Time Written: 20081226131726.000000-300 Event Type: information User: Computer Name: YOUR-4FE10E7BD0 Event Code: 7035 Message: Un contrôle Démarrer a correctement été envoyé au service Service de la passerelle de la couche Application. Record Number: 6037 Source Name: Service Control Manager Time Written: 20081226131726.000000-300 Event Type: information User: AUTORITE NT\SYSTEM Computer Name: YOUR-4FE10E7BD0 Event Code: 7035 Message: Un contrôle Démarrer a correctement été envoyé au service Gestionnaire de connexions d'accès distant. Record Number: 6036 Source Name: Service Control Manager Time Written: 20081226131726.000000-300 Event Type: information User: YOUR-4FE10E7BD0\Ludger Application event log Computer Name: YOUR-4FE10E7BD0 Event Code: 101 Message: msnmsgr (3692) Le moteur de base de données est arrêté. Record Number: 31886 Source Name: ESENT Time Written: 20081217233603.000000-300 Event Type: information User: Computer Name: YOUR-4FE10E7BD0 Event Code: 103 Message: msnmsgr (3692) \.\C:\Documents and Settings\Ludger\Local Settings\Application Data\Microsoft\Messenger\saby_love_sexy@hotmail.com\SharingMetadata\Working\database_DEF0_D49_F00D_28FB\dfsr.db: Le moteur de base de données a arrêté une instance (0). Record Number: 31885 Source Name: ESENT Time Written: 20081217233603.000000-300 Event Type: information User: Computer Name: YOUR-4FE10E7BD0 Event Code: 302 Message: msnmsgr (3692) \.\C:\Documents and Settings\Ludger\Local Settings\Application Data\Microsoft\Messenger\saby_love_sexy@hotmail.com\SharingMetadata\Working\database_DEF0_D49_F00D_28FB\dfsr.db: Le moteur de base de données a exécuté la procédure de récupération avec succès. Record Number: 31884 Source Name: ESENTDe: À: Objet: Forum virus/sécurité - virus - reponse de sim123 Date: 26 février 2009 13:;37 De: À: Objet: Forum virus/sécurité - virus - reponse de sim123 Date: 26 février 2009 13:37 Logfile of random's system information tool 1.05 (written by random/random) Run by Ludger at 2009-02-26 13:26:58 Microsoft Windows XP Professionnel Service Pack 3 System drive C: has 159 GB (67%) free of 238 GB Total RAM: 1535 MB (59% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 13:27:38, on 2009-02-26 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16791) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\WINDOWS\Explorer.EXE C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\ALCWZRD.EXE C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe C:\WINDOWS\system32\CTHELPER.EXE C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe C:\Program Files\Microsoft IntelliType Pro ype32.exe C:\PROGRA~1\AVG\AVG8\avgtray.exe C:\Program Files\QuickTime\QTTask.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\system32\crypserv.exe c:\program files\dvrmstoolbox\dvrmsfilewatcherservice.exe C:\Program Files\Microsoft IntelliPoint\ipoint.exe C:\WINDOWS\system32 undll32.exe C:\WINDOWS\svw.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\system32\ctfmon.exe C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\PROGRA~1\Druide\Antidote\Gestionnaire Antidote.exe C:\Program Files\Windows Media Player\WMPNSCFG.exe C:\WINDOWS\eHome\ehRecvr.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Google\Google Talk\googletalk.exe C:\PROGRA~1\AVG\AVG8\avgnsx.exe C:\Program Files\FinePixViewer\QuickDCF.exe C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe C:\WINDOWS\system32 vsvc32.exe C:\WINDOWS\system32\slserv.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\PROGRA~1\AVG\AVG8\avgemc.exe C:\WINDOWS\ehome\mcrdsvc.exe C:\Program Files\AVG\AVG8\avgcsrvx.exe C:\Program Files\Windows Media Player\WMPNetwk.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\WINDOWS\System32\alg.exe C:\Program Files\Java\jre1.5.0_09\bin\jucheck.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe C:\Documents and Settings\Ludger\Local Settings\Temp\jkos-Ludger\binaries\ScanningProcess.exe C:\Documents and Settings\Ludger\Local Settings\Temp\jkos-Ludger\binaries\ScanningProcess.exe C:\WINDOWS\sv.exe C:\Program Files\Outlook Express\msimn.exe C:\WINDOWS\odb.exe C:\Documents and Settings\Ludger\Local Settings\Temporary Internet Files\Content.IE5\R0PUY27O\RSIT[1].exe C:\WINDOWS\system32\wbem\wmiprvse.exe C:\Program Files rend micro\Ludger.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fsympatico.msn.ca%2fdefaultf.aspx%2f%3f R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: (no name) - {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32 tos.exe, O2 - BHO: Ask Search Assistant BHO - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll O2 - BHO: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll O2 - BHO: (no name) - {D34F5D71-99E4-4D96-91CA-F4104F69B8AE} - (no file) O2 - BHO: (no name) - {E14DCE67-8FB7-4721-8149-179BAA4D792C} - (no file) O2 - BHO: Ask Toolbar BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL O3 - Toolbar: (no name) - {F0993251-2512-4710-AF6E-0A13EA199D02} - (no file) O3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAudPropShortcut.exe O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe /r O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE O4 - HKLM\..\Run: [SBDrvDet] C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe /r O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe" O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro ype32.exe" O4 - HKLM\..\Run: [IdiomaX Office] C:\Program Files\IdiomaX\Office Translator 4.0\IdxOffice.exe O4 - HKLM\..\Run: [IdiomaX Product Update] C:\Program Files\Fichiers communs\IdiomaX Shared\Cat 6.0\IdxLUpdate.exe /AUTOSTART O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe" O4 - HKLM\..\Run: [Bjoqurubohojaf] rundll32.exe "C:\WINDOWS\Bqucocuwusehihe.dll",e O4 - HKLM\..\Run: [odb] C:\WINDOWS\odb.exe O4 - HKLM\..\Run: [UpdateWin] C:\WINDOWS\system32\acluib.exe O4 - HKLM\..\Run: [netsv32] C:\WINDOWS\sv.exe O4 - HKLM\..\Run: [runsql] C:\WINDOWS unsql.exe O4 - HKLM\..\Run: [netzip] C:\WINDOWS\svzip.exe O4 - HKLM\..\Run: [netw] C:\WINDOWS\svw.exe O4 - HKLM\..\Run: [netx] C:\WINDOWS\svx.exe O4 - HKLM\..\Run: [vlc] C:\WINDOWS\vlc.exe O4 - HKLM\..\Run: [wdmon] C:\WINDOWS\wdmon.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\RunServices: [UpdateWin] C:\WINDOWS\system32\acluib.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Gestionnaire Antidote.exe] C:\PROGRA~1\Druide\Antidote\Gestionnaire Antidote.exe O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart O4 - HKCU\..\Run: [UpdateWin] C:\WINDOWS\system32\acluib.exe O4 - HKCU\..\Run: [userinit] C:\WINDOWS\system32 tos.exe O4 - HKCU\..\RunServices: [UpdateWin] C:\WINDOWS\system32\acluib.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Exif Launcher.lnk = ? O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1 O7 - HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1 O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZNxuk169YYCA O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Documents and Settings\Ludger\Mes documents\Titan Poker\casino.exe O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Documents and Settings\Ludger\Mes documents\Titan Poker\casino.exe O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing) O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing) O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32 wprovau.dll O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.cab O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll O22 - SharedTaskScheduler: IPC Configuration Utility - IPC Configuration Utility - (no file) O22 - SharedTaskScheduler: Windows Installer Class - {020487CC-FC04-4B1E-863F-D9801796230B} - C:\DOCUME~1\Ludger\LOCALS~1\Temp\wndutl32.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe O23 - Service: DVRMSFileWatcherService - - c:\program files\dvrmstoolbox\dvrmsfilewatcherservice.exe O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Imapi Helper - Alex Feinman - C:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32 vsvc32.exe O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe

jlpjlp · Answer

fais le message 16

http://www.commentcamarche.net/forum/affich 11263138 virus?#16

sim123 · Answer

MERCI JE VAIS TE REDONNER DES NOUVELLES MERCI ENCORE DE TA PATIENCE

jlpjlp · Answer

ok et mets bien les rapport malwarebyte, sdfix, toolbar sd  

a plus 

car cela ne sera pas complètement finit je pense

jlpjlp · Answer

ok tu diras ce qu'il a fait

sim123 · Answer

-----------\  ToolBar S&D 1.2.8   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Multiprocessor Free :               Intel(R) Pentium(R) 4 CPU 3.40GHz )
   BIOS : BIOS Date: 02/23/05 14:12:59 Ver: 08.00.10
   USER : Ludger ( Administrator )
   BOOT : Normal boot
   Antivirus : avast! antivirus 4.8.1335 [VPS 090226-0] 4.8.1335 (Activated)
   A:\ (USB)
   C:\ (Local Disk) - NTFS - Total:232 Go (Free:154 Go)
   D:\ (CD or DVD)
   F:\ (CD or DVD)

   "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
   Option : [2] ( 2009-02-26|19:50 )
   C:\Program Files\Mozilla Firefox\plugins\NPAskSBr.dll

   -----------\ SUPPRESSION

   Echec   ! - C:\Program Files\AskSBar\bar
   Echec   ! - C:\Program Files\AskSBar\SrchAstt
   Echec   ! - C:\Program Files\AskSBar\bar\1.bin
   Echec   ! - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
   Echec   ! - C:\Program Files\AskSBar\SrchAstt\1.bin
   Echec   ! - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL
   Supprime! - C:\Program Files\BitLord\BitLord.xml
   Supprime! - C:\Program Files\BitLord\Downloads
   Supprime! - C:\Program Files\BitLord\Downloads.xml
   Supprime! - C:\Program Files\BitLord\lang
   Supprime! - C:\Program Files\BitLord\rules
   Supprime! - C:\Program Files\BitLord\Torrents
   Supprime! - C:\Program Files\VMNToolbar\Cache
   Supprime! - C:\Program Files\VMNToolbar\install.ico
   Supprime! - C:\Program Files\VMNToolbar\toolbar.ini
   Supprime! - C:\Program Files\VMNToolbar\uninstall.exe
   Supprime! - C:\Program Files\VMNToolbar\vmntoolbar.dll
   Supprime! - C:\Program Files\Mozilla Firefox\plugins\NPAskSBr.dll
   Echec   ! - C:\Program Files\AskSBar
   Supprime! - C:\Program Files\BitLord
   Supprime! - C:\Program Files\VMNToolbar

   -----------\ DEUXIEME PASSAGE
 
   Echec   ! - C:\Program Files\AskSBar\bar
   Echec   ! - C:\Program Files\AskSBar\SrchAstt
   Echec   ! - C:\Program Files\AskSBar\bar\1.bin
   Echec   ! - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
   Echec   ! - C:\Program Files\AskSBar\SrchAstt\1.bin
   Echec   ! - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL
   Echec   ! - C:\Program Files\AskSBar

   -----------\  Recherche de Fichiers / Dossiers ...

   C:\Program Files\AskSBar
   C:\Program Files\AskSBar\bar
   C:\Program Files\AskSBar\SrchAstt
   C:\Program Files\AskSBar\bar\1.bin
   C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
   C:\Program Files\AskSBar\SrchAstt\1.bin
   C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL

   -----------\  Extensions

   (All Users) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

   (Ludger) - {28716814-17E3-4de9-920F-1EF201979A4B} => Antidote_Mozilla_3
   (Ludger) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Start Page"="https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fsympatico.msn.ca%2fdefaultf.aspx%2f%3f"
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Search Bar"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
   "Url"="https://www.microsoft.com/fr-fr/?ref=go"
   "Url"="https://docs.microsoft.com/en-us/archive/blogs/"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Start Page"="https://www.msn.com/fr-fr/"


   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Druide_Antidote_RX_v5.0_Incl.Keygen_FRENCH-BS
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Druide_Antidote_RX_v5.0_Incl.Keygen_FRENCH-BS\AntidoteRX5
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Druide_Antidote_RX_v5.0_Incl.Keygen_FRENCH-BS\bs.nfo
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Druide_Antidote_RX_v5.0_Incl.Keygen_FRENCH-BS\AntidoteRX5\keygen.exe
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Druide_Antidote_RX_v5.0_Incl.Keygen_FRENCH-BS\AntidoteRX5\setup.msi
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Druide_Antidote_RX_v5.0_Incl.Keygen_FRENCH-BS\AntidoteRX5\update.exe
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional Keygen
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Important!.txt
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional\0x0404.ini
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional\0x0409.ini
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional\0x0411.ini
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional\0x0412.ini
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional\0x0804.ini
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional\Abcpy.ini
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional\AcroPro.itw
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional\AcroPro.msi
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional\Data1.cab
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional\instmsiw.exe
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional\setup.exe
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional\Setup.ini
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional Keygen\pdx-ac7p.exe
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\MAGIX_Video_Deluxe_2007_Plus_FRENCH_DVD-BSiSO\CRACK
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\MAGIX_Video_Deluxe_2007_Plus_FRENCH_DVD-BSiSO\CRACK\bs-crack
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\MAGIX_Video_Deluxe_2007_Plus_FRENCH_DVD-BSiSO\CRACK\bs-crack.rar
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\MAGIX_Video_Deluxe_2007_Plus_FRENCH_DVD-BSiSO\CRACK\bs-crack.sfv
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\MAGIX_Video_Deluxe_2007_Plus_FRENCH_DVD-BSiSO\CRACK\bs-crack\cracktro.exe
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\MAGIX_Video_Deluxe_2007_Plus_FRENCH_DVD-BSiSO\CRACK\bs-crack\videodeLuxe.exe
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\Adobe.Photoshop.and.ImageReady.CS2.v9.0.Keygen.only-PARADOX.par.eMule-Paradise.com
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\Adobe.Photoshop.and.ImageReady.CS2.v9.0.Keygen.only-PARADOX.par.eMule-Paradise.com.zip
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\Photoshop.CS3_beta.+.Crack.+.Patch.FR.-.[HwC] [myBittorrent.com].torrent
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\Raccourci vers Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu.rar.lnk
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\[isoHunt] Adobe Acrobat 7[1].0 Pro with Keygen[SquiggiE].torrent
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\[isoHunt] GOOGLE EARTH CRACK ONLY FOR PRO.zip.torrent
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\[isoHunt] Google Earth Pro   Crack.torrent
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\[isoHunt] GOOGLE EARTH PRO ' CRACK ONLY'.zip.torrent
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\[isoHunt] Nero Burning ROM 7[1].2.0.3+Keygen.torrent
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\[isoHunt] Risk_2_Crack[1].exe.3515144.TPB.torrent
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\[isoHunt] Swish 2[1].01 Complete Suite (SwiSHmax   Templates   Crack.rar.torrent
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\[isoHunt] Swish MAX crack.torrent
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\[isoHunt] The[1].Godfather.CRACK.ONLY-iND.torrent
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\Adobe.Photoshop.and.ImageReady.CS2.v9.0.Keygen.only-PARADOX.par.eMule-Paradise.com\Adobe_Photoshop_and_ImageReady_CS2_v9.0_KeyGen-PARADOX.nfo
   C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\Adobe.Photoshop.and.ImageReady.CS2.v9.0.Keygen.only-PARADOX.par.eMule-Paradise.com\keygen.exe
   C:\DOCUME~1\Ludger\Mes documents\Mes fichiers re‡us\Copie de Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu
   C:\DOCUME~1\Ludger\Mes documents\Mes fichiers re‡us\Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu
   C:\DOCUME~1\Ludger\Mes documents\Mes fichiers re‡us\Copie de Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu\ChingLiu.nfo
   C:\DOCUME~1\Ludger\Mes documents\Mes fichiers re‡us\Copie de Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu\Crack-FFF
   C:\DOCUME~1\Ludger\Mes documents\Mes fichiers re‡us\Copie de Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu\FFF.NFO
   C:\DOCUME~1\Ludger\Mes documents\Mes fichiers re‡us\Copie de Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu\FILE_ID.DIZ
   C:\DOCUME~1\Ludger\Mes documents\Mes fichiers re‡us\Copie de Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu\vsoConvertXtoDVD2_setup_2010b.exe
   C:\DOCUME~1\Ludger\Mes documents\Mes fichiers re‡us\Copie de Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu\Crack-FFF\FFF.NFO
   C:\DOCUME~1\Ludger\Mes documents\Mes fichiers re‡us\Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu\ChingLiu.nfo
   C:\DOCUME~1\Ludger\Mes documents\Mes fichiers re‡us\Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu\Crack-FFF
   C:\DOCUME~1\Ludger\Mes documents\Mes fichiers re‡us\Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu\FFF.NFO
   C:\DOCUME~1\Ludger\Mes documents\Mes fichiers re‡us\Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu\FILE_ID.DIZ
   C:\DOCUME~1\Ludger\Mes documents\Mes fichiers re‡us\Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu\vsoConvertXtoDVD2_setup_2010b.exe
   C:\DOCUME~1\Ludger\Mes documents\Mes fichiers re‡us\Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu\Crack-FFF\FFF.NFO



   1 - "C:\ToolBar SD\TB_1.txt" - 2009-02-26|19:56 - Option : [2]

   -----------\  Fin du rapport a 19:56:20,57

sim123 · Answer

[b]SDFix: Version 1.240 [/b]
Run by Ludger on 2009-02-26 at 20:42

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

[b]Checking Services [/b]:


Restoring Default Security Values
Restoring Default Hosts File

Rebooting


[b]Checking Files [/b]: 

Trojan Files Found:

C:\WINDOWS\system32\acluib.exe - Deleted
C:\DOCUME~1\Ludger\LOCALS~1\Temp\e.exe - Deleted
C:\DOCUME~1\Ludger\LOCALS~1\Temp	este1_p.exe - Deleted
C:\DOCUME~1\Ludger\LOCALS~1\Temp	este2_p.exe - Deleted
C:\DOCUME~1\Ludger\LOCALS~1\Temp	este3_p.exe - Deleted
C:\DOCUME~1\Ludger\LOCALS~1\Temp	este4_p.exe - Deleted
C:\DOCUME~1\Ludger\LOCALS~1\Temp\avto.exe - Deleted
C:\DOCUME~1\Ludger\LOCALS~1\Temp\avto1.exe - Deleted
C:\DOCUME~1\Ludger\LOCALS~1\Temp\avto2.exe - Deleted
C:\DOCUME~1\Ludger\LOCALS~1\Temp\pinnew.exe - Deleted
C:\WINDOWS\sv.exe - Deleted
C:\WINDOWS\svw.exe - Deleted
C:\WINDOWS\system32
tos.exe  - Deleted



Folder C:\Program Files\Video Add-on - Removed


Removing Temp Files

[b]ADS Check [/b]:
 


                                 [b]Final Check [/b]:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-26 21:03:27
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:dc72254a
"s2"=dword:e8e3e4fb
"h0"=dword:00000002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"p0"="C:\Program Files\Alcohol Soft\Alcohol 120\"
"h0"=dword:00000000
"ujdew"=hex:a8,21,bf,1d,07,0f,e3,9f,bf,70,5f,ad,f6,6f,68,8a,22,bb,37,fb,0e,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000001
"khjeh"=hex:ce,3d,48,c6,a4,f1,da,15,a8,ed,34,84,42,a0,3a,af,26,a2,9d,40,be,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"p0"="C:\Program Files\Alcohol Soft\Alcohol 120\"
"h0"=dword:00000000
"ujdew"=hex:a8,21,bf,1d,07,0f,e3,9f,bf,70,5f,ad,f6,6f,68,8a,22,bb,37,fb,0e,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000001
"khjeh"=hex:ce,3d,48,c6,a4,f1,da,15,a8,ed,34,84,42,a0,3a,af,26,a2,9d,40,be,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"p0"="C:\Program Files\Alcohol Soft\Alcohol 120\"
"h0"=dword:00000000
"ujdew"=hex:a8,21,bf,1d,07,0f,e3,9f,bf,70,5f,ad,f6,6f,68,8a,22,bb,37,fb,0e,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000001
"khjeh"=hex:ce,3d,48,c6,a4,f1,da,15,a8,ed,34,84,42,a0,3a,af,26,a2,9d,40,be,..

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


[b]Remaining Services [/b]:




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\qcSoft.exe"="D:\qcSoft.exe:*:Enabled:QC Testing Software"
"C:\WINDOWS\system32\usmt\migwiz.exe"="C:\WINDOWS\system32\usmt\migwiz.exe:*:Enabled:Assistant Transfert de fichiers et de paramŠtres"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\Grisoft\AVG Free\avginet.exe"="C:\Program Files\Grisoft\AVG Free\avginet.exe:*:Enabled:avginet.exe"
"C:\Program Files\Infogrames\Trophy Hunter 2003\TH2003.exe"="C:\Program Files\Infogrames\Trophy Hunter 2003\TH2003.exe:*:Disabled:TH2003"
"C:\WINDOWS\system32\dpnsvr.exe"="C:\WINDOWS\system32\dpnsvr.exe:*:Disabled:Microsoft DirectPlay8 Server"
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\Cyanide\GameCenter\GameCenter.exe"="C:\Program Files\Cyanide\GameCenter\GameCenter.exe:*:Enabled:GameCenter"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Grisoft\AVG Free\avgamsvr.exe"="C:\Program Files\Grisoft\AVG Free\avgamsvr.exe:*:Enabled:avgamsvr.exe"
"C:\Program Files\Grisoft\AVG Free\avgcc.exe"="C:\Program Files\Grisoft\AVG Free\avgcc.exe:*:Enabled:avgcc.exe"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"C:\Program Files\Internet Explorer\iexplore.exe"="C:\Program Files\Internet Explorer\iexplore.exe:*:Enabled:Internet Explorer"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\Teamspeak2_RC2\server_windows.exe"="C:\Program Files\Teamspeak2_RC2\server_windows.exe:*:Enabled:Server"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Google\Google Talk\googletalk.exe"="C:\Program Files\Google\Google Talk\googletalk.exe:*:Enabled:Google Talk"
"C:\Program Files\NetMeeting\conf.exe"="C:\Program Files\NetMeeting\conf.exe:*:Enabled:Windows© NetMeeting©"
"C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\AVG\AVG8\avgemc.exe"="C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe"="C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe:*:Enabled:Assistance … distance - Windows Messenger et voix"
"C:\Documents and Settings\Ludger\Local Settings\Temp\ImInstaller\incredimail_installer.exe"="C:\Documents and Settings\Ludger\Local Settings\Temp\ImInstaller\incredimail_installer.exe:*:Enabled:IncrediMail Installer"
"C:\DOCUME~1\Ludger\LOCALS~1\Temp\pinnew.exe"="C:\DOCUME~1\Ludger\LOCALS~1\Temp\pinnew.exe:*:Enabled:Enabled"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

[b]Remaining Files [/b]:


File Backups: - C:\SDFix\backups\backups.zip

[b]Files with Hidden Attributes [/b]:

Tue 14 Jun 2005         4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Tue  4 Apr 2006         3,830 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv10.bak"
Sat 22 Oct 2005           401 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv11.bak"
Thu 30 Mar 2006         1,544 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv12.bak"
Fri  7 Oct 2005         1,163 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv13.bak"
Wed 28 Jun 2006         2,306 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv14.bak"
Sat 20 May 2006         1,163 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv15.bak"
Sun 27 Nov 2005           782 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv16.bak"
Mon  5 Jun 2006         2,306 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv17.bak"
Sat 20 May 2006         1,163 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv18.bak"
Sun 19 Mar 2006         2,306 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv19.bak"
Sun 24 Sep 2006        92,160 ...H. --- "C:\Documents and Settings\Ludger\Mes documents\~WRL0202.tmp"
Sun 24 Sep 2006        72,192 ...H. --- "C:\Documents and Settings\Ludger\Mes documents\~WRL0323.tmp"
Sat 23 Sep 2006        92,160 ...H. --- "C:\Documents and Settings\Ludger\Mes documents\~WRL2832.tmp"
Mon 14 Mar 2005       299,008 A..H. --- "C:\Program Files\Canon\MP Navigator 2.0\Maint.exe"
Mon 25 Apr 2005        61,440 A..H. --- "C:\Program Files\Canon\MP Navigator 2.0\uinstrsc.dll"
Tue 22 Jan 2008            56 A.SH. --- "C:\Documents and Settings\All Users\Documents\TV enregistr‚e\MSDVRMM_4027394299_3538944_92836.tmp"
Tue 29 Jan 2008            56 A.SH. --- "C:\Documents and Settings\All Users\Documents\TV enregistr‚e\MSDVRMM_4027394299_6422528_70352.tmp"
Wed 20 Feb 2008         7,124 A.SH. --- "C:\Documents and Settings\All Users\Documents\TV enregistr‚e\MSDVRMM_4027394299_10354688_31679.tmp"
Wed 26 Sep 2007             0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Thu 26 Feb 2009         5,946 A.SH. --- "C:\Documents and Settings\All Users\Documents\TV enregistr‚e\TempRec\TempSBE\SBE2.tmp"
Sat  6 May 2006        26,609 A..H. --- "C:\Documents and Settings\Ludger\Bureau\Simon-Pier\T‚l‚chargement	statsV07\Qsort.exe"
Sat  6 May 2006           967 A..H. --- "C:\Documents and Settings\Ludger\Bureau\Simon-Pier\T‚l‚chargement	statsV07\QSORT.PIF"
Sat  6 May 2006        20,388 A..H. --- "C:\Documents and Settings\Ludger\Bureau\Simon-Pier\T‚l‚chargement	statsV07\SUMT.EXE"
Sat  6 May 2006           967 A..H. --- "C:\Documents and Settings\Ludger\Bureau\Simon-Pier\T‚l‚chargement	statsV07\SUMT.PIF"
Sat  6 May 2006       139,264 A..H. --- "C:\Documents and Settings\Ludger\Bureau\Simon-Pier\T‚l‚chargement	statsV07\TstatsV07.exe"
Mon 22 May 2006     1,256,448 A..H. --- "C:\Documents and Settings\Ludger\Bureau\Simon-Pier\Journal\Saison 1\dition 5\~WRL0091.tmp"
Sun 21 May 2006       972,800 A..H. --- "C:\Documents and Settings\Ludger\Bureau\Simon-Pier\Journal\Saison 1\dition 5\~WRL3327.tmp"
Mon 22 May 2006     1,465,856 A..H. --- "C:\Documents and Settings\Ludger\Bureau\Simon-Pier\Journal\Saison 1\dition 5\~WRL3965.tmp"
Mon 22 May 2006     1,410,560 A..H. --- "C:\Documents and Settings\Ludger\Bureau\Simon-Pier\Journal\Saison 1\dition 4\~WRL0627.tmp"
Mon 15 May 2006     1,410,048 A..H. --- "C:\Documents and Settings\Ludger\Bureau\Simon-Pier\Journal\Saison 1\dition 4\~WRL1394.tmp"

[b]Finished![/b]

sim123 · Answer

Malwarebytes' Anti-Malware 1.34
Version de la base de données: 1807
Windows 5.1.2600 Service Pack 3

2009-02-26 21:42:22
mbam-log-2009-02-26 (21-42-18).txt

Type de recherche: Examen rapide
Eléments examinés: 96995
Temps écoulé: 13 minute(s), 57 second(s)

Processus mémoire infecté(s): 1
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 6
Valeur(s) du Registre infectée(s): 6
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 7

Processus mémoire infecté(s):
C:\WINDOWS\odb.exe (Trojan.FakeAlert) -> No action taken.

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\{020487cc-fc04-4b1e-863f-d9801796230b} (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{e14dce67-8fb7-4721-8149-179baa4d792c} (Backdoor.Ciadoor) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{d34f5d71-99e4-4d96-91ca-f4104f69b8ae} (Trojan.Zlob) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{f0993251-2512-4710-af6e-0a13ea199d02} (Trojan.Zlob) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d34f5d71-99e4-4d96-91ca-f4104f69b8ae} (Trojan.Zlob) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Trymedia Systems (Adware.Trymedia) -> No action taken.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{f0993251-2512-4710-af6e-0a13ea199d02} (Trojan.Zlob) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{f0993251-2512-4710-af6e-0a13ea199d02} (Trojan.Zlob) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{020487cc-fc04-4b1e-863f-d9801796230b} (Trojan.FakeAlert) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\bjoqurubohojaf (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\odb (Backdoor.Bot) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network\UID (Malware.Trace) -> No action taken.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\WINDOWS\system32\wsnpoem (Trojan.Agent) -> No action taken.

Fichier(s) infecté(s):
C:\WINDOWS\system32\wsnpoem\audio.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\wsnpoem\video.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\Bqucocuwusehihe.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\odb.exe (Backdoor.Bot) -> No action taken.
C:\Documents and Settings\Ludger\Application Data\config.cfg (Malware.Trace) -> No action taken.
C:\Documents and Settings\Ludger\Application Data\~tmp.html (Malware.Trace) -> No action taken.
C:\Documents and Settings\Ludger\Favoris\Online Security Test.url (Rogue.Link) -> No action taken.

sim123 · Answer

Logfile of random's system information tool 1.05 (written by random/random)
Run by Ludger at 2009-02-26 21:46:05
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 159 GB (67%) free of 238 GB
Total RAM: 1535 MB (49% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:46:11, on 2009-02-26
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Microsoft IntelliType Pro	ype32.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\WINDOWS\system32undll32.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Druide\Antidote\Gestionnaire Antidote.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Google\Google Talk\googletalk.exe
C:\Program Files\FinePixViewer\QuickDCF.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\WINDOWS\system32\crypserv.exe
c:\program files\dvrmstoolbox\dvrmsfilewatcherservice.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Java\jre1.5.0_09\bin\jucheck.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\WINDOWS\odb.exe
C:\Documents and Settings\Ludger\Bureau\RSIT.exe
C:\Program Files	rend micro\Ludger.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://sympatico.msn.ca/defaultf.aspx
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: (no name) - {D34F5D71-99E4-4D96-91CA-F4104F69B8AE} - (no file)
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: (no name) - {F0993251-2512-4710-AF6E-0A13EA199D02} - (no file)
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [SBDrvDet] C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro	ype32.exe"
O4 - HKLM\..\Run: [IdiomaX Office] C:\Program Files\IdiomaX\Office Translator 4.0\IdxOffice.exe
O4 - HKLM\..\Run: [IdiomaX Product Update] C:\Program Files\Fichiers communs\IdiomaX Shared\Cat 6.0\IdxLUpdate.exe /AUTOSTART
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [Bjoqurubohojaf] rundll32.exe "C:\WINDOWS\Bqucocuwusehihe.dll",e
O4 - HKLM\..\Run: [odb] C:\WINDOWS\odb.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Gestionnaire Antidote.exe] C:\PROGRA~1\Druide\Antidote\Gestionnaire Antidote.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Exif Launcher.lnk = ?
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Documents and Settings\Ludger\Mes documents\Titan Poker\casino.exe
O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Documents and Settings\Ludger\Mes documents\Titan Poker\casino.exe
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32
wprovau.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://go.divx.com/plugin/DivXBrowserPlugin.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O22 - SharedTaskScheduler: IPC Configuration Utility - IPC Configuration Utility - (no file)
O22 - SharedTaskScheduler: Windows Installer Class - {020487CC-FC04-4B1E-863F-D9801796230B} - C:\DOCUME~1\Ludger\LOCALS~1\Temp\wndutl32.dll (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: DVRMSFileWatcherService -   - c:\program files\dvrmstoolbox\dvrmsfilewatcherservice.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Imapi Helper - Alex Feinman - C:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe

sim123 · Answer

Salut,

tu vas voir tous les rapports que tu m'as demandé hier plus haut.

Mon ordinateur fonctionne mieux, il n'y a plus de message d'erreur qui apparait.

Est-ce que tout est réglé?

Dois-je faire autre chose?

Merci

jlpjlp · Answer

refais malwarebyte et vire ce qui est trouvé cette fois!et coll le rapport . Pour tes antivirus il ne faut en garder qu'un alors vire avast (de préférence )ou avg 8

jlpjlp · Answer

alors refais malwarebyte et vire cette fois ce qui est trouvé!!!!!!!!!!!


__________________


vire un de tes deux antivirus sinon cela cré des failles et fait planter le pc!!!!

pour virer avast:
https://www.avast.com/fr-fr/uninstall-utility
__________________

télécharge OTMoveIt

http://oldtimer.geekstogo.com/OTMoveIt3.exe

(de Old_Timer) sur ton Bureau.
double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en citation ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.




:files
C:\Program Files\AskSBar
C:\Program Files\AskSBar\bar
C:\Program Files\AskSBar\SrchAstt
C:\Program Files\AskSBar\bar\1.bin
C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
C:\Program Files\AskSBar\SrchAstt\1.bin
C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL 
C:\WINDOWS\$NtUninstallKB967715$
C:\WINDOWS\system32\wsnpoem
C:\WINDOWS\odb.exe
C:\WINDOWS\Bqucocuwusehihe.dll 


clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.


___________________________


mettre à jour adobe reader
https://acrobat.adobe.com/fr/fr/acrobat/pdf-reader.html
____________________________


Mettre a jour java:

Télécharge JavaRa.zip de Paul 'Prm753' McLain et Fred de Vries.

https://javara.fr.malavida.com/

Décompresse le fichier sur ton bureau (clique droit > Extraire tout.)
Double-clique sur le répertoire JavaRa obtenu.
Puis double-clique sur le fichier JavaRa.exe (le .exe peut ne pas s'afficher)
Clique sur Search For Updates.
Sélectionne Update Using jucheck.exe puis clique sur Search.
Autorise le processus à se connecter s'il te le demande, clique sur Install et suis les instructions d'installation. Cela prendra quelques minutes.
Quand l'installation est terminée, revient à l'écran de JavaRa et clique sur Remove Older Versions.
Clique sur Oui pour confirmer. L'outil va travailler, clique ensuite sur Ok, puis une deuxième fois sur Ok.
Un rapport va s'ouvrir, copie-colle le dans ta prochaine réponse.
Note : le rapport se trouve aussi à la racine de la partition système, en général C:\ sous le nom JavaRa.log
(c:\JavaRa.log)
Ferme l'application.

si cela ne fonctionne pas

https://www.java.com/fr/download/windows_manual.jsp?locale=fr&host=www.java.com:80

tu peux désinstaller les vieilles versions.

_______________________


tous ces cracks ce n'est pas conseillé

C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Druide_Antidote_RX_v5.0_Incl.Keygen_FRENCH-BS
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Druide_Antidote_RX_v5.0_Incl.Keygen_FRENCH-BS\AntidoteRX5
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Druide_Antidote_RX_v5.0_Incl.Keygen_FRENCH-BS\bs.nfo
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Druide_Antidote_RX_v5.0_Incl.Keygen_FRENCH-BS\AntidoteRX5\keygen.exe
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Druide_Antidote_RX_v5.0_Incl.Keygen_FRENCH-BS\AntidoteRX5\setup.msi
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Druide_Antidote_RX_v5.0_Incl.Keygen_FRENCH-BS\AntidoteRX5\update.exe
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional Keygen
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Important!.txt
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional\0x0404.ini
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional\0x0409.ini
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional\0x0411.ini
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional\0x0412.ini
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional\0x0804.ini
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional\Abcpy.ini
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional\AcroPro.itw
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional\AcroPro.msi
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional\Data1.cab
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional\instmsiw.exe
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional\setup.exe
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional\Setup.ini
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\Adobe Acrobat 7.0 Pro with Keygen[SquiggiE]\Adobe Acrobat 7.0 Professional Keygen\pdx-ac7p.exe
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\MAGIX_Video_Deluxe_2007_Plus_FRENCH_DVD-BSiSO\CRACK
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\MAGIX_Video_Deluxe_2007_Plus_FRENCH_DVD-BSiSO\CRACK\bs-crack
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\MAGIX_Video_Deluxe_2007_Plus_FRENCH_DVD-BSiSO\CRACK\bs-crack.rar
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\MAGIX_Video_Deluxe_2007_Plus_FRENCH_DVD-BSiSO\CRACK\bs-crack.sfv
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\MAGIX_Video_Deluxe_2007_Plus_FRENCH_DVD-BSiSO\CRACK\bs-crack\cracktro.exe
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\Torrent\MAGIX_Video_Deluxe_2007_Plus_FRENCH_DVD-BSiSO\CRACK\bs-crack\videodeLuxe.exe
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\Adobe.Photoshop.and.ImageReady.CS2.v9.0.Keygen.only-PARADOX.par.eMule-Paradise.com
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\Adobe.Photoshop.and.ImageReady.CS2.v9.0.Keygen.only-PARADOX.par.eMule-Paradise.com.zip
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\Photoshop.CS3_beta.+.Crack.+.Patch.FR.-.[HwC] [myBittorrent.com].torrent
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\Raccourci vers Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu.rar.lnk
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\[isoHunt] Adobe Acrobat 7[1].0 Pro with Keygen[SquiggiE].torrent
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\[isoHunt] GOOGLE EARTH CRACK ONLY FOR PRO.zip.torrent
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\[isoHunt] Google Earth Pro Crack.torrent
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\[isoHunt] GOOGLE EARTH PRO ' CRACK ONLY'.zip.torrent
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\[isoHunt] Nero Burning ROM 7[1].2.0.3+Keygen.torrent
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\[isoHunt] Risk_2_Crack[1].exe.3515144.TPB.torrent
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\[isoHunt] Swish 2[1].01 Complete Suite (SwiSHmax Templates Crack.rar.torrent
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\[isoHunt] Swish MAX crack.torrent
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\[isoHunt] The[1].Godfather.CRACK.ONLY-iND.torrent
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\Adobe.Photoshop.and.ImageReady.CS2.v9.0.Keygen.only-PARADOX.par.eMule-Paradise.com\Adobe_Photoshop_and_ImageReady_CS2_v9.0_KeyGen-PARADOX.nfo
C:\DOCUME~1\Ludger\Bureau\Simon-Pier\T‚l‚chargement\Adobe.Photoshop.and.ImageReady.CS2.v9.0.Keygen.only-PARADOX.par.eMule-Paradise.com\keygen.exe
C:\DOCUME~1\Ludger\Mes documents\Mes fichiers re‡us\Copie de Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu
C:\DOCUME~1\Ludger\Mes documents\Mes fichiers re‡us\Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu
C:\DOCUME~1\Ludger\Mes documents\Mes fichiers re‡us\Copie de Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu\ChingLiu.nfo
C:\DOCUME~1\Ludger\Mes documents\Mes fichiers re‡us\Copie de Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu\Crack-FFF
C:\DOCUME~1\Ludger\Mes documents\Mes fichiers re‡us\Copie de Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu\FFF.NFO
C:\DOCUME~1\Ludger\Mes documents\Mes fichiers re‡us\Copie de Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu\FILE_ID.DIZ
C:\DOCUME~1\Ludger\Mes documents\Mes fichiers re‡us\Copie de Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu\vsoConvertXtoDVD2_setup_2010b.exe
C:\DOCUME~1\Ludger\Mes documents\Mes fichiers re‡us\Copie de Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu\Crack-FFF\FFF.NFO
C:\DOCUME~1\Ludger\Mes documents\Mes fichiers re‡us\Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu\ChingLiu.nfo
C:\DOCUME~1\Ludger\Mes documents\Mes fichiers re‡us\Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu\Crack-FFF
C:\DOCUME~1\Ludger\Mes documents\Mes fichiers re‡us\Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu\FFF.NFO
C:\DOCUME~1\Ludger\Mes documents\Mes fichiers re‡us\Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu\FILE_ID.DIZ
C:\DOCUME~1\Ludger\Mes documents\Mes fichiers re‡us\Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu\vsoConvertXtoDVD2_setup_2010b.exe
C:\DOCUME~1\Ludger\Mes documents\Mes fichiers re‡us\Vso.ConvertXToDVD.v2.0.10b.122.incl.crack-FFF.by.ChingLiu\Crack-FFF\FFF.NFO

__________________________

lance tool cleaner et colle le rapport

http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner

__________________________

nettoie les traces de ton ordi avec ccleaner:  https://www.malekal.com/tutoriel-ccleaner/

___________________________


colle un scan en ligne avec un des deux suivants:

bitdefender en ligne :
http://www.bitdefender.fr/scan_fr/scan8/ie.html


Panda en ligne :
http://pandasoftware.fr

sim123 · Answer

Salut,
J'ai viré AVG8.. pour l'instant j'ai juste AVAST.. 

pourquoi c'est meilleur AVG?? car je peux le 

remettre...et viré avast.

__________________________ 


Malwarebytes' Anti-Malware 1.34
Version de la base de données: 1807
Windows 5.1.2600 Service Pack 3

2009-02-27 12:16:39
mbam-log-2009-02-27 (12-16-39).txt

Type de recherche: Examen rapide
Eléments examinés: 95683
Temps écoulé: 9 minute(s), 28 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)


__________________________ 
========== FILES ==========
C:\Program Files\AskSBar\SrchAstt\1.bin moved 

successfully.
C:\Program Files\AskSBar\SrchAstt moved successfully.
C:\Program Files\AskSBar\bar\1.bin moved 

successfully.
C:\Program Files\AskSBar\bar moved successfully.
C:\Program Files\AskSBar moved successfully.
File/Folder C:\Program Files\AskSBar\bar not found.
File/Folder C:\Program Files\AskSBar\SrchAstt not 

found.
File/Folder C:\Program Files\AskSBar\bar\1.bin not 

found.
File/Folder C:\Program 

Files\AskSBar\bar\1.bin\ASKSBAR.DLL not found.
File/Folder C:\Program Files\AskSBar\SrchAstt\1.bin 

not found.
File/Folder C:\Program 

Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL not found.
C:\WINDOWS\$NtUninstallKB967715$\spuninst moved 

successfully.
C:\WINDOWS\$NtUninstallKB967715$ moved successfully.
File/Folder C:\WINDOWS\system32\wsnpoem not found.
File/Folder C:\WINDOWS\odb.exe not found.
File/Folder C:\WINDOWS\Bqucocuwusehihe.dll not found.
 
OTMoveIt3 by OldTimer - Version 1.0.8.0 log created 

on 02272009_122035
__________________________ 
mise à jour de adobe FAITE

__________________________ 
JAVA FAITE

JavaRa 1.13 Removal Log.Report follows after 

line.------------------------------------The JavaRa 

removal process was started on Fri Feb 27 12:28:24 

2009

Found and removed: C:\Program 

Files\Java\jre1.5.0_03Found and removed: C:\Program 

Files\Java\jre1.5.0_05Found and removed: C:\Program 

Files\Java\jre1.5.0_06Found and removed: 

C:\Windows\System32\jpicpl32.cplFound and removed: 

Software\JavaSoft\Java2D\1.5.0_03Found and removed: 

Software\JavaSoft\Java2D\1.5.0_05Found and removed: 

Software\JavaSoft\Java2D\1.5.0_06Found and removed: 

Software\JavaSoft\Java2D\1.5.0_09Found and removed: 

SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDE

FFEDCBA}Found and removed: 

SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDE

FFEDCBA}Found and removed: 

SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDE

FFEDCBA}Found and removed: 

SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDE

FFEDCBA}Found and removed: 

SOFTWARE\Classes\Installer\Features\8A0F842331866D117

AB7000B0D510003Found and removed: 

SOFTWARE\Classes\Installer\Features\8A0F842331866D117

AB7000B0D510005Found and removed: 

SOFTWARE\Classes\Installer\Features\8A0F842331866D117

AB7000B0D510006Found and removed: 

SOFTWARE\Classes\Installer\Features\8A0F842331866D117

AB7000B0D510009Found and removed: 

SOFTWARE\Classes\Installer\Products\8A0F842331866D117

AB7000B0D510003Found and removed: 

SOFTWARE\Classes\Installer\Products\8A0F842331866D117

AB7000B0D510005Found and removed: 

SOFTWARE\Classes\Installer\Products\8A0F842331866D117

AB7000B0D510006Found and removed: 

SOFTWARE\Classes\Installer\Products\8A0F842331866D117

AB7000B0D510009Found and removed: 

SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866

D117AB7000B0D510003Found and removed: 

SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866

D117AB7000B0D510005Found and removed: 

SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866

D117AB7000B0D510006Found and removed: 

SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866

D117AB7000B0D510009Found and removed: 

SOFTWARE\Classes\JavaPlugin.150_03Found and removed: 

SOFTWARE\Classes\JavaPlugin.150_05Found and removed: 

SOFTWARE\Classes\JavaPlugin.150_06Found and removed: 

SOFTWARE\Classes\JavaPlugin.150_09Found and removed: 

SOFTWARE\Classes\JavaWebStart.isInstalled.1.5.0.0Foun

d and removed: SOFTWARE\JavaSoft\Java 

Plug-in\1.5.0_03Found and removed: 

SOFTWARE\JavaSoft\Java Plug-in\1.5.0_05Found and 

removed: SOFTWARE\JavaSoft\Java Plug-in\1.5.0_06Found 

and removed: SOFTWARE\JavaSoft\Java 

Plug-in\1.5.0_09Found and removed: 

SOFTWARE\JavaSoft\Java Runtime Environment\1.5Found 

and removed: SOFTWARE\JavaSoft\Java Runtime 

Environment\1.5.0_03Found and removed: 

SOFTWARE\JavaSoft\Java Runtime 

Environment\1.5.0_05Found and removed: 

SOFTWARE\JavaSoft\Java Runtime 

Environment\1.5.0_06Found and removed: 

SOFTWARE\JavaSoft\Java Runtime 

Environment\1.5.0_09Found and removed: 

SOFTWARE\Microsoft\Code Store Database\Distribution 

Units\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}Found and 

removed: SOFTWARE\Microsoft\Code Store 

Database\Distribution 

Units\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}Found and 

removed: SOFTWARE\Microsoft\Code Store 

Database\Distribution 

Units\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}Found and 

removed: SOFTWARE\Microsoft\Code Store 

Database\Distribution 

Units\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}Found and 

removed: 

SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\U

serData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0

D510003Found and removed: 

SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\U

serData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0

D510005Found and removed: 

SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\U

serData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0

D510006Found and removed: 

SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\U

serData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0

D510009Found and removed: 

SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\U

serData\S-1-5-18\Products\8A0F842331866D117AB7000B0D5

10003Found and removed: 

SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\U

serData\S-1-5-18\Products\8A0F842331866D117AB7000B0D5

10005Found and removed: 

SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\U

serData\S-1-5-18\Products\8A0F842331866D117AB7000B0D5

10006Found and removed: 

SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\U

serData\S-1-5-18\Products\8A0F842331866D117AB7000B0D5

10009Found and removed: 

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{

3248F0A8-6813-11D6-A77B-00B0D0150030}Found and 

removed: 

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{

3248F0A8-6813-11D6-A77B-00B0D0150050}Found and 

removed: 

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{

3248F0A8-6813-11D6-A77B-00B0D0150060}Found and 

removed: 

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{

3248F0A8-6813-11D6-A77B-00B0D0150090}Found and 

removed: SOFTWARE\JavaSoft\Java Web 

Start\1.5.0_03Found and removed: 

SOFTWARE\JavaSoft\Java Web Start\1.5.0_05Found and 

removed: SOFTWARE\JavaSoft\Java Web 

Start\1.5.0_06Found and removed: 

SOFTWARE\JavaSoft\Java Web Start\1.5.0_09Found and 

removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDE

FFEDCBA}Found and removed: SOFTWARE\JavaSoft\Java Web 

Start\1.0.1Found and removed: SOFTWARE\JavaSoft\Java 

Web Start\1.0.1_02Found and removed: 

SOFTWARE\JavaSoft\Java Web Start\1.0.1_03Found and 

removed: SOFTWARE\JavaSoft\Java Web 

Start\1.0.1_04Found and removed: 

SOFTWARE\JavaSoft\Java Web Start\1.2Found and 

removed: SOFTWARE\JavaSoft\Java Web 

Start\1.2.0_01Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDE

FFEDCBB}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDE

FFEDCBA}Found and removed: 

Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDE

FFEDCBB}Found and removed: 

SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\F

olders\C:\Program Files\Java\jre1.5.0_03\Found and 

removed: 

SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\F

olders\C:\Program Files\Java\jre1.5.0_05\Found and 

removed: 

SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\F

olders\C:\Program Files\Java\jre1.5.0_06\Found and 

removed: 

SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\F

olders\C:\Program 

Files\Java\jre1.5.0_09\------------------------------

------Finished reporting.
__________________________ 
ToolCleaner, ça ne fonctionne pas. J'appuie sur RECHERCHE en haut et ça ne fait rien.... Est-ce que c'est long?

__________________________ 
CCleaner FAITE

__________________________ 
Voici le rapport de BITDEFENDER:
BitDefender Online Scanner
  
  
 
Rapport d'analyse généré à: Fri, Feb 27, 2009 - 13:41:21
 
 
  
  
 
Voie d'analyse: A:\;C:\;D:\;F:\;
  
  
 
 
  
  
 
Statistiques
 
Temps
 00:43:46
 
Fichiers
 196915
 
Directoires
 16640
 
Secteurs de boot
 0
 
Archives
 1886
 
Paquets programmes
 22199
 
  
  
 
Résultats
 
Virus identifiés
 1
 
Fichiers infectés
 2
 
Fichiers suspects
 0
 
Avertissements
 0
 
Désinfectés
 0
 
Fichiers effacés
 2
 
  
  
 
Info sur les moteurs
 
Définition virus
 2684695
 
Version des moteurs
 AVCORE v1.7 (build 8314.19) (i386) (Sep 29 2008 17:19:14)
 
Analyse des plugins
 17
 
Archive des plugins
 45
 
Unpack des plugins
 7
 
E-mail plugins
 6
 
Système plugins
 4
 
  
  
 
Paramètres d'analyse
 
Première action
 Désinfecté
 
Seconde Action
 Supprimé
 
Heuristique
 Oui
 
Acceptez les avertissements
 Oui
 
Extensions analysées
 exe;com;dll;ocx;scr;bin;dat;386;vxd;sys;wdm;cla;class;ovl;ole;hlp;doc;dot;xls;ppt;wbk;wiz;pot;ppa;xla;xlt;vbs;vbe;mdb;rtf;htm;hta;html;xml;xtp;php;asp;js;shs;chm;lnk;pif;prc;url;smm;pfd;msi;ini;csc;cmd;bas;
 
Excludez les extensions
  
 
Analyse d'emails
 Oui
 
Analyse des Archives
 Oui
 
Analyser paquets programmes
 Oui
 
Analyse des fichiers
 Oui
 
Analyse de boot
 Oui
 
  
  
 
  Fichier analysé
  Statut
 
C:\Documents and Settings\Ludger\Bureau\Simon-Pier\Téléchargement\ftpexpert3.exe
 Détecté avec: Adware.Generic.31823
 
C:\Documents and Settings\Ludger\Bureau\Simon-Pier\Téléchargement\ftpexpert3.exe
 Supprimé
 
C:\System Volume Information\_restore{7686025F-E06C-4EA8-9EA0-2DA305B7A01D}\RP1252\A0269494.exe
 Détecté avec: Adware.Generic.31823
 
C:\System Volume Information\_restore{7686025F-E06C-4EA8-9EA0-2DA305B7A01D}\RP1252\A0269494.exe
 Supprimé
 
 


__________________________ 
Merci beaucoup! Est-ce que tout est correct ou il reste certaines choses à faire?

sim123 · Answer

Toolcleaner:
C:\TB.txt: trouvé !
C:\SDFIX: trouvé !
C:\_OtMoveIt: trouvé !
C:\Toolbar SD: trouvé !
C:\Rsit: trouvé !
C:\Documents and Settings\Ludger\Bureau\Virus\OTMoveIt3.exe: trouvé !
C:\Program Files	rend micro\HijackThis.exe: trouvé !
C:\Program Files	rend micro\hijackthis.log: trouvé !

Dois-je faire supprimer?

jlpjlp · Answer

abg 8 ou antivir c'est mieux que avast : c'est comme cela ils sont actuellement plus efficaces


_______________


oui vire tout avec tool cleaner

_______________

désactive ta restauration puis redemarre ton ordi puis réactive la

http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/fdocid/20020830101856924

________________

encore des soucis???

sim123 · Answer

Non, je crois que tout est correct. Je vais viré avast et installer AVG.

Merci pour ton aide!

jlpjlp · Answer

ok c'est bon

sim123 · Answer

slt je té ecrit cet semaine et je n'ai pas eu de reponse j'ai des virus en quarantaine dans avg est-ce que je doit les suprime ou ca va se faire seul.

jlpjlp · Answer

en general tu laisse en quarantaine une semaine et 
si ton ordi va bien tu les vires de la quarantaine

Virus - Page 2

Discussions similaires

Newsletters