Beagle + virus Résolu

Question

Bonjour à tous,

Depuis quelques jours j'ai un Beagle qui m'empêche entre autre d'utiliser mon réseau Wi-Fi. J'ai réussi à remettre le Wi-Fi en modifiant à 3 la valeur de la clé HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Ndisuio\Start dans la base de registre. En effet à chaque démarage le Beagle remet la valeur à 4.
J'ai donc pu récupérer mon Wi-Fi mais le Beagle est toujours là et me remodifie continuellement la clé.
J'ai essayé de le supprimer avec Elibagla, F-Secure Blacklight, Combofix et Malwarebytes mais ils n'arrivent pas à le supprimer ou alors je m'y prend mal.
J'ai donc besoin de votre aide !

D'avance merci

Destrio5 · Accepted Answer

Bonjour,

--> Télécharge FindyKill (de Chiquitine29) sur ton Bureau.

--> Lance l'installation avec les paramètres par défaut.

--> Double-clique sur le raccourci FindyKill sur ton Bureau.
(Sous Vista, il faut cliquer droit sur le raccourci FindyKill et choisir Exécuter en tant qu'administrateur)

--> Au menu principal, choisis l'option 1 (Recherche).

--> Poste le rapport FindyKill.txt

Note : le rapport FindyKill.txt est sauvegardé à la racine du disque.

patineur44 · Answer

Voici le rapport :



############################## [ FindyKill V4.727 ]

# User : CARRE Florence (Administrateurs) # SALON
# Update on 27/04/09 by Chiquitine29
# Start at: 16:17:39 | 28/04/2009
# Website : http://pagesperso-orange.fr/FindyKill.Ad.Remover/

#               Intel(R) Pentium(R) 4 CPU 3.20GHz
# Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 7.0.5730.11
# Windows Firewall Status : Enabled
# AV : AntiVirus Firewall 6.15 6.15 [ (!) Disabled | Updated ]
# FW : AntiVirus Firewall 6.15[ (!) Disabled ]6.15

# C:\ # Disque fixe local # 27,95 Go (2,46 Go free) [VAIO] # NTFS
# D:\ # Disque fixe local # 197,95 Go (7,5 Go free) [VAIO] # NTFS
# E:\ # Disque amovible
# F:\ # Disque CD-ROM

############################## [ Processus actifs ]

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\EPSON\eEBAPI\eEBSVC.exe
C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40ST7.EXE
C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\MessengerPlus! 3\MsgPlus1.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Sony\HotKey Utility\HKserv.exe
C:\Program Files\Lexmark 6200 Series\ezprint.exe
D:\Program Files\QuickTime\QTTask.exe
C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Sony\HotKey Utility\HKWnd.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\wbem\wmiprvse.exe

################## [ Fichiers / Dossiers infectieux ]

Found ! C:\WINDOWS\Prefetch\FLEC006.EXE-3A0F400C.pf 
Found ! C:\WINDOWS\Prefetch\MDELK.EXE-0EF461CE.pf 
Found ! C:\WINDOWS\Prefetch\WINTEMS.EXE-377E42D4.pf 
Found ! "C:\Documents and Settings\CARRE Florence\Application Data\drivers" 

################## [ Infected Temp Files ]


################## [ Registre / Clés infectieuses ]

Found ! HKEY_USERS\S-1-5-21-2824591020-838480686-1845456479-1005\Software\Local AppWizard-Generated Applications\winupgro  
Found ! HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winupgro  


################## [ Recherche dans supports amovibles]


################## [ Registre / Mountpoints2 ]

# -> Not found !  

################## [ ! Fin du rapport # FindyKill V4.727 ! ]

floflo · Answer

perso: telecharge le kit de desinfection de norton sa marche nikel j'ai eu le meme prob

met moi le processeur qui ressemble a: hdlr...exe    un truc du genre

floflo · Answer

perso j'ai oublier fait: ctrl+alt+suppr et si tu as hldrrr.exe, supprime le 
ou alors ya un process qui ressemble a "beagle.exe" ou un truc du genre je sais plus trop

patineur44 · Answer

J'ai ni l'un ni l'autre ;(
La solution de Norton c'est efficace ? Je peux le trouver où ?

floflo · Answer

ici: http://www.commentcamarche.net/faq/sujet 2731 virus kit de desinfection pour eradiquer w32 beagle mm bagle

patineur44 · Answer

Ok je vais essayer.
Merci !

crapoulou · Answer

Salut,
Petite intervention,
patineur44, je te conseille extrêmement vivement de te fier aux conseils de Destrio5 et à l'outil de Chiquitine et non pas aux utilitaires bidons anti-bagle qui circulent sur le net.
Sur ce, bonne continuation Willy.
Crapoulou.

floflo · Answer

heu dsl mais j'ai utilisé cet outil et sa a super bien marché chez moi

crapoulou · Answer

Tant mieux.

Destrio5 · Answer

--> Supprime le fichier qui t'a infecté (Crack par exemple).

--> Branche tes disques amovibles à ton PC (clefs USB, disque dur externe, etc...) sans les ouvrir.

--> Double-clique sur le raccourci FindyKill sur ton Bureau.

--> Au menu principal, choisis l'option 2 (Suppression).

/!\ Il y aura un redémarrage, laisse travailler l'outil jusqu'à l'apparition du message "nettoyage effectué" /!\

--> Ensuite, poste le rapport FindyKill.txt

Note : le rapport FindyKill.txt est sauvegardé à la racine du disque.

patineur44 · Answer

Voici le rapport :



############################## [ FindyKill V4.727 ]

# User : CARRE Florence (Administrateurs) # SALON
# Update on 27/04/09 by Chiquitine29
# Start at: 16:46:05 | 28/04/2009
# Website : http://pagesperso-orange.fr/FindyKill.Ad.Remover/

#               Intel(R) Pentium(R) 4 CPU 3.20GHz
# Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 7.0.5730.11
# Windows Firewall Status : Enabled
# AV : AntiVirus Firewall 6.15 6.15 [ (!) Disabled | Updated ]
# FW : AntiVirus Firewall 6.15[ (!) Disabled ]6.15

# C:\ # Disque fixe local # 27,95 Go (2,46 Go free) [VAIO] # NTFS
# D:\ # Disque fixe local # 197,95 Go (7,5 Go free) [VAIO] # NTFS
# E:\ # Disque amovible
# F:\ # Disque CD-ROM

############################## [ Active Processes ] 

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\EPSON\eEBAPI\eEBSVC.exe
C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40ST7.EXE
C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Sony\VAIO Cooperated Initialisation\VCI_SVC.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
C:\Program Files\Sony\VAIO Cooperated Initialisation\VCI_Task.exe
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wbem\wmiprvse.exe

################## [ Infected Files \ Folders ]

Deleted ! C:\WINDOWS\Prefetch\FLEC006.EXE-3A0F400C.pf  
Deleted ! C:\WINDOWS\Prefetch\MDELK.EXE-0EF461CE.pf  
Deleted ! C:\WINDOWS\Prefetch\WINTEMS.EXE-377E42D4.pf  
Deleted ! C:\WINDOWS\Prefetch\WINUPGRO.EXE-0F8DCEDB.pf  
Deleted ! "C:\Documents and Settings\CARRE Florence\Application Data\drivers"  

################## [ Infected Temp Files ]


################## [ Registry / Infected keys ] 

Deleted ! HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winupgro   

################## [ Cleaning Removable drives ] 


################## [ Registry / Mountpoint2 ]

# -> Not found !  

################## [ States / Restarting of services ]  

# Services : [ Auto=2 / Request=3 / Disable=4 ]

# Ndisuio -> # Type of startup =3  
# EapHost -> # Type of startup =2  
# Ip6Fw -> # Type of startup =2  
# SharedAccess -> # Type of startup =2  
# wuauserv -> # Type of startup =2  
# wscsvc -> # Type of startup =2  

################## [ Searching Other Infections ]

# Références de comparaison Bagle MD5 :

File ... : C:\Qoobox\Quarantine\C\Documents and Settings\CARRE Florence\Application Data\drivers\winupgro.exe.vir
CRC32 .. : 31a82915
MD5 .... : 86ab09b35c73378d1576a587e181a5f4 
 
# -> Nothing found.
 
################## [ Corrupted files # Re-Installation required ] 
 
C:\HijackThis.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\fsav.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\FSAV32.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\fsavstrt.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\fsgk32.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\fsgk32st.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\fsqh.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\fssm32.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\QrtFix.exe
C:\Program Files\AntivirusFirewall\Anti-Virus	race\common\TraceLog.exe
C:\Program Files\AntivirusFirewall\backweb\6588780\6.3.2.123-6588780L\Programegister.exe
C:\Program Files\AntivirusFirewall\backweb\6588780\Program\fsbwsys.exe
C:\Program Files\AntivirusFirewall\backweb\6588780\Program\fspex.exe
C:\Program Files\AntivirusFirewall\backweb\6588780\Program\iLaunchr.exe
C:\Program Files\AntivirusFirewall\backweb\6588780\Program\ServiceWrapper-6588780.exe
C:\Program Files\AntivirusFirewall\Common\FAMEH32.EXE
C:\Program Files\AntivirusFirewall\Common\FCH32.EXE
C:\Program Files\AntivirusFirewall\Common\FSDIAG.exe
C:\Program Files\AntivirusFirewall\Common\FSHOTFIX.EXE
C:\Program Files\AntivirusFirewall\Common\FSLAUNCH.EXE
C:\Program Files\AntivirusFirewall\Common\FSM32.EXE
C:\Program Files\AntivirusFirewall\Common\FSMA32.EXE
C:\Program Files\AntivirusFirewall\Common\FSMB32.EXE
C:\Program Files\AntivirusFirewall\Common\ILAUNCHR.EXE
C:\Program Files\AntivirusFirewall\Common\POLUTIL.EXE
C:\Program Files\AntivirusFirewall\FSGUI\fsavaui.exe
C:\Program Files\AntivirusFirewall\FSGUI\fsavgui.exe
C:\Program Files\AntivirusFirewall\FSGUI\fsdiagui.exe
C:\Program Files\AntivirusFirewall\FSGUI\fsgetwab.exe
C:\Program Files\AntivirusFirewall\FSGUI\fsguidll.exe
C:\Program Files\AntivirusFirewall\FSGUI\fshelp.exe
C:\Program Files\AntivirusFirewall\FSGUI\fssw.exe
C:\Program Files\AntivirusFirewall\FSGUI\fstlui.exe
C:\Program Files\AntivirusFirewall\FSGUI\ispnews.exe
C:\Program Files\AntivirusFirewall\FSGUI\quaranti.exe
C:\Program Files\AntivirusFirewall\FSGUI\webfiltr.exe
C:\Program Files\AntivirusFirewall\fsuninst.exe
C:\Program Files\AntivirusFirewall\FWES\program\fsdfwd.exe
C:\Program Files\AntivirusFirewall\TNB	nbutil.exe
C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\Update.exe
C:\Program Files\Mozilla Firefox\uninstall\helper.exe
C:\Program Files\Sonic\RecordNow!\Launch.exe

################################### [ Cracks / Keygens / Serials ]

# -> Nothing found !  

################## [ ! End of Report # FindyKill V4.727 ! ]

Destrio5 · Answer

--> Réinstalle ton antivirus/firewall F-Secure.

--> Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.

--> Double-clique sur RSIT.exe afin de lancer le programme.
(Sous Vista, il faut cliquer droit sur RSIT.exe et choisir Exécuter en tant qu'administrateur)

--> Clique sur Continue à l'écran Disclaimer.

--> Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

--> Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

Note : les rapports sont sauvegardés dans le dossier C:\rsit.

patineur44 · Answer

F-Secure c'est pas mon antivirus !
Je l'installe quand même ?
Je le trouve où ?

Destrio5 · Answer

Tu as quel antivirus selon toi ?

patineur44 · Answer

Aucun depuis quelques semaines car j'avais l'antivirus d'Orange mais j'ai arrêté l'abonnement.
Je fais quoi ?

Destrio5 · Answer

L'antivirus d'Orange, c'est F-Secure en fait.

--> Désinstalle F-Secure.

--> Installe Antivir et mets-le à jour.

--> Double-clique sur l'icône d'Antivir (Parapluie) dans la barre des tâches.

--> Dans Antivir, choisis Outils puis Configuration.

--> Coche Mode Expert et coche Rech. Rootkit au dém. de la recherche à droite dans Autres réglages.

--> Fais un scan complet et poste le rapport.

Tutoriel sur Antivir

patineur44 · Answer

Ca va faire 2 heures que j'ai lançé le scan Antivir mais ça n'en ait qu'à 20%. C'est normal ?

Destrio5 · Answer

"Ca va faire 2 heures que j'ai lançé le scan Antivir mais ça n'en ait qu'à 20%. C'est normal ?"

---> Ça dépend de la puissance du PC, des données qu'il y a sur le disque dur, du nombre de disques durs, etc.

Destrio5 · Answer

--> Télécharge Lop S&D (par Eric_71 & Angeldark) sur ton Bureau.

--> Double-clique dessus pour lancer l'installation.

--> Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau.
(Sous Vista, il faut cliquer droit sur le raccourci de Lop S&D et choisir Exécuter en tant qu'administrateur)

--> Sélectionne la langue souhaitée, puis choisis l'option 1 (Recherche).

--> Patiente jusqu'à la fin du scan.

--> Poste le rapport généré (C:\lopR.txt).

patineur44 · Answer

Voici le rapport :



   --------------------\  Lop S&D 4.2.5-0   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Multiprocessor Free :               Intel(R) Pentium(R) 4 CPU 3.20GHz )
   BIOS : BIOS Date: 08/12/04 16:40:47 Ver: 08.00.09
   USER : CARRE Florence ( Administrator )
   BOOT : Normal boot
   Antivirus : AntiVirus Firewall 6.15 6.15 (Not Activated)
   Firewall  : AntiVirus Firewall 6.15 6.15 (Not Activated)
   C:\ (Local Disk) - NTFS - Total:27 Go (Free:1 Go)
   D:\ (Local Disk) - NTFS - Total:197 Go (Free:7 Go)
   E:\ (USB)
   F:\ (CD or DVD)
   Z:\ (Network Disk)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [1] ( 28/04/2009|22:58 )
 
   --------------------\  Listing des dossiers dans APPLIC~1

   [15/09/2004|19:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [30/05/2008|23:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
   [30/05/2008|23:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [28/04/2009|17:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
   [01/08/2005|16:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
   [02/02/2009|13:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EPSON
   [22/03/2007|01:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Exit Meet Funk Play
   [06/12/2004|11:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FaxCtr
   [09/08/2006|09:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure
   [10/02/2009|10:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [21/02/2009|18:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Hewlett-Packard
   [25/02/2009|13:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
   [03/01/2005|18:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
   [01/08/2005|19:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
   [19/04/2009|11:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
   [27/03/2005|12:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [04/01/2009|20:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [15/10/2008|07:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
   [25/12/2004|14:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
   [27/08/2004|13:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
   [12/03/2007|22:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
   [18/07/2005|09:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Corporation
   [28/03/2005|16:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [03/08/2007|18:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TomTom
   [07/08/2005|16:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
   [15/09/2004|19:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\VAIO Media Platform
   [25/02/2009|13:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WEBREG
   [06/07/2006|06:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

   [14/03/2006|18:50] C:\DOCUME~1\CARREF~1\APPLIC~1\Adobe
   [21/05/2008|08:36] C:\DOCUME~1\CARREF~1\APPLIC~1\AdobeUM
   [30/05/2008|23:39] C:\DOCUME~1\CARREF~1\APPLIC~1\Apple Computer
   [29/11/2007|09:24] C:\DOCUME~1\CARREF~1\APPLIC~1\FaxCtr
   [11/08/2006|23:05] C:\DOCUME~1\CARREF~1\APPLIC~1\F-Secure
   [30/10/2006|18:20] C:\DOCUME~1\CARREF~1\APPLIC~1\Google
   [30/11/2004|17:53] C:\DOCUME~1\CARREF~1\APPLIC~1\Help
   [25/02/2009|13:36] C:\DOCUME~1\CARREF~1\APPLIC~1\HP
   [27/08/2004|13:24] C:\DOCUME~1\CARREF~1\APPLIC~1\Identities
   [11/01/2005|15:00] C:\DOCUME~1\CARREF~1\APPLIC~1\InterVideo
   [09/08/2006|10:04] C:\DOCUME~1\CARREF~1\APPLIC~1\ispnews
   [10/02/2005|22:02] C:\DOCUME~1\CARREF~1\APPLIC~1\Leadertech
   [30/11/2004|18:38] C:\DOCUME~1\CARREF~1\APPLIC~1\Macromedia
   [19/04/2009|11:32] C:\DOCUME~1\CARREF~1\APPLIC~1\Malwarebytes
   [11/06/2008|23:56] C:\DOCUME~1\CARREF~1\APPLIC~1\Microsoft
   [04/01/2008|13:57] C:\DOCUME~1\CARREF~1\APPLIC~1\Mozilla
   [09/08/2006|10:02] C:\DOCUME~1\CARREF~1\APPLIC~1
tr
   [09/08/2006|10:08] C:\DOCUME~1\CARREF~1\APPLIC~1\PEX
   [06/09/2007|00:22] C:\DOCUME~1\CARREF~1\APPLIC~1\Skype
   [10/02/2005|22:02] C:\DOCUME~1\CARREF~1\APPLIC~1\Sonic
   [17/05/2008|19:11] C:\DOCUME~1\CARREF~1\APPLIC~1\Sony Corporation
   [27/08/2004|14:02] C:\DOCUME~1\CARREF~1\APPLIC~1\Sun
   [27/08/2004|14:15] C:\DOCUME~1\CARREF~1\APPLIC~1\Symantec
   [04/03/2009|02:13] C:\DOCUME~1\CARREF~1\APPLIC~1\uTorrent
   [11/11/2005|13:40] C:\DOCUME~1\CARREF~1\APPLIC~1\v3.0
   [05/02/2007|10:28] C:\DOCUME~1\CARREF~1\APPLIC~1\vlc
   [03/03/2009|14:20] C:\DOCUME~1\CARREF~1\APPLIC~1\WebCompiler2

   [15/09/2004|19:44] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
   [27/08/2004|13:24] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [15/09/2004|19:44] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
   [27/08/2004|14:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
   [27/08/2004|14:15] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec


   [17/01/2008|21:12] C:\DOCUME~1\FICHMA~1\APPLIC~1\Adobe
   [30/11/2004|18:56] C:\DOCUME~1\FICHMA~1\APPLIC~1\AdobeUM
   [08/08/2006|00:00] C:\DOCUME~1\FICHMA~1\APPLIC~1\Apple Computer
   [21/12/2004|10:49] C:\DOCUME~1\FICHMA~1\APPLIC~1\FaxCtr
   [17/02/2009|11:49] C:\DOCUME~1\FICHMA~1\APPLIC~1\F-Secure
   [30/04/2007|21:29] C:\DOCUME~1\FICHMA~1\APPLIC~1\Google
   [06/08/2005|11:20] C:\DOCUME~1\FICHMA~1\APPLIC~1\Help
   [27/08/2004|13:24] C:\DOCUME~1\FICHMA~1\APPLIC~1\Identities
   [02/02/2009|13:17] C:\DOCUME~1\FICHMA~1\APPLIC~1\InstallShield
   [30/12/2004|22:55] C:\DOCUME~1\FICHMA~1\APPLIC~1\InterVideo
   [09/08/2006|13:41] C:\DOCUME~1\FICHMA~1\APPLIC~1\ispnews
   [08/01/2005|20:10] C:\DOCUME~1\FICHMA~1\APPLIC~1\Leadertech
   [28/11/2004|20:32] C:\DOCUME~1\FICHMA~1\APPLIC~1\Macromedia
   [17/11/2008|01:26] C:\DOCUME~1\FICHMA~1\APPLIC~1\Microsoft
   [05/01/2008|18:27] C:\DOCUME~1\FICHMA~1\APPLIC~1\Mozilla
   [08/08/2006|18:16] C:\DOCUME~1\FICHMA~1\APPLIC~1
tr
   [16/05/2006|10:33] C:\DOCUME~1\FICHMA~1\APPLIC~1\ShopperReports
   [07/06/2008|23:51] C:\DOCUME~1\FICHMA~1\APPLIC~1\Skype
   [08/01/2005|20:10] C:\DOCUME~1\FICHMA~1\APPLIC~1\Sonic
   [18/05/2005|23:30] C:\DOCUME~1\FICHMA~1\APPLIC~1\Sony Corporation
   [27/08/2004|14:02] C:\DOCUME~1\FICHMA~1\APPLIC~1\Sun
   [27/08/2004|14:15] C:\DOCUME~1\FICHMA~1\APPLIC~1\Symantec
   [30/12/2005|19:44] C:\DOCUME~1\FICHMA~1\APPLIC~1\v3.0

   [14/02/2009|20:45] C:\DOCUME~1\FICHMA~3\APPLIC~1\Adobe
   [17/10/2006|12:58] C:\DOCUME~1\FICHMA~3\APPLIC~1\AdobeUM
   [02/01/2005|13:58] C:\DOCUME~1\FICHMA~3\APPLIC~1\FaxCtr
   [24/12/2006|13:58] C:\DOCUME~1\FICHMA~3\APPLIC~1\F-Secure
   [24/12/2006|16:14] C:\DOCUME~1\FICHMA~3\APPLIC~1\Google
   [27/08/2004|13:24] C:\DOCUME~1\FICHMA~3\APPLIC~1\Identities
   [06/09/2006|08:50] C:\DOCUME~1\FICHMA~3\APPLIC~1\ispnews
   [20/07/2006|20:34] C:\DOCUME~1\FICHMA~3\APPLIC~1\Leadertech
   [16/03/2005|20:46] C:\DOCUME~1\FICHMA~3\APPLIC~1\Macromedia
   [24/12/2006|14:01] C:\DOCUME~1\FICHMA~3\APPLIC~1\Microsoft
   [26/12/2008|01:14] C:\DOCUME~1\FICHMA~3\APPLIC~1\Mozilla
   [19/09/2005|17:09] C:\DOCUME~1\FICHMA~3\APPLIC~1\ShopperReports
   [20/07/2006|20:34] C:\DOCUME~1\FICHMA~3\APPLIC~1\Sonic
   [24/12/2006|20:10] C:\DOCUME~1\FICHMA~3\APPLIC~1\Sony Corporation
   [27/08/2004|14:02] C:\DOCUME~1\FICHMA~3\APPLIC~1\Sun
   [27/08/2004|14:15] C:\DOCUME~1\FICHMA~3\APPLIC~1\Symantec

   [15/09/2004|19:44] C:\DOCUME~1\GERBEA~1\APPLIC~1\Adobe
   [02/01/2005|13:52] C:\DOCUME~1\GERBEA~1\APPLIC~1\FaxCtr
   [21/12/2006|13:38] C:\DOCUME~1\GERBEA~1\APPLIC~1\F-Secure
   [24/09/2007|18:42] C:\DOCUME~1\GERBEA~1\APPLIC~1\Google
   [23/03/2006|21:44] C:\DOCUME~1\GERBEA~1\APPLIC~1\Help
   [27/08/2004|13:24] C:\DOCUME~1\GERBEA~1\APPLIC~1\Identities
   [08/12/2005|22:12] C:\DOCUME~1\GERBEA~1\APPLIC~1\InterVideo
   [28/08/2006|06:36] C:\DOCUME~1\GERBEA~1\APPLIC~1\ispnews
   [08/10/2005|22:48] C:\DOCUME~1\GERBEA~1\APPLIC~1\Macromedia
   [16/09/2007|18:53] C:\DOCUME~1\GERBEA~1\APPLIC~1\Microsoft
   [21/05/2006|19:57] C:\DOCUME~1\GERBEA~1\APPLIC~1\ShopperReports
   [27/08/2004|14:02] C:\DOCUME~1\GERBEA~1\APPLIC~1\Sun
   [27/08/2004|14:15] C:\DOCUME~1\GERBEA~1\APPLIC~1\Symantec

   [02/01/2005|13:04] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
   [16/03/2009|01:46] C:\DOCUME~1\LOCALS~1\APPLIC~1\Sony Corporation
   [13/03/2005|18:21] C:\DOCUME~1\LOCALS~1\APPLIC~1\Symantec

   [27/08/2004|13:24] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft


 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [16/04/2009 07:15][--a------] C:\WINDOWS	asks\AppleSoftwareUpdate.job
   [28/04/2009 22:00][--ah-----] C:\WINDOWS	asks\AAFCA89897BF599C.job
   [19/04/2009 11:16][--a------] C:\WINDOWS	asks\Scheduled scanning task.job
   [05/08/2004 14:00][-r-h-c---] C:\WINDOWS	asks\desktop.ini
   [28/04/2009 22:37][--ah-----] C:\WINDOWS	asks\SA.DAT

   ( AAFCA89897BF599C.job )=( c:\docume~1\fichma~2\applic~1\pingli~1
ameboltbook.exe )

   --------------------\  MsgPlus SPONSOR INSTALLED !

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MsgPlus! Plugin]
   "SponsorInstalled"=dword:00000001


   --------------------\  Listing des dossiers dans C:\Program Files

   [06/12/2004|12:04] C:\Program Files\Abbyy FineReader 6.0 Sprint
   [15/02/2006|21:55] C:\Program Files\Adobe
   [25/03/2005|21:16] C:\Program Files\Adware
   [09/08/2006|09:55] C:\Program Files\AntivirusFirewall
   [30/05/2008|23:32] C:\Program Files\Apple Software Update
   [24/12/2006|12:26] C:\Program Files\Atari
   [27/03/2005|13:40] C:\Program Files\AV VCS 3.0
   [28/04/2009|17:30] C:\Program Files\Avira
   [27/04/2005|20:21] C:\Program Files\C2Media
   [17/01/2007|15:30] C:\Program Files\Cariboost Premium
   [14/01/2005|23:04] C:\Program Files\Cat Daddy Games
   [27/04/2009|15:50] C:\Program Files\ciel
   [27/04/2009|15:50] C:\Program Files\cielcompta
   [28/06/2005|10:05] C:\Program Files\Codemasters
   [27/08/2004|13:22] C:\Program Files\ComPlus Applications
   [27/08/2004|15:18] C:\Program Files\CONEXANT
   [02/12/2004|21:36] C:\Program Files\directx
   [10/02/2005|19:42] C:\Program Files\DivX
   [28/11/2004|19:11] C:\Program Files\Enlight
   [02/02/2009|13:18] C:\Program Files\epson
   [02/02/2009|13:20] C:\Program Files\EpsonNet
   [10/04/2005|13:35] C:\Program Files\eurobarre
   [27/04/2009|19:39] C:\Program Files\Fichiers communs
   [29/03/2005|12:21] C:\Program Files\FlashGet
   [05/05/2005|16:03] C:\Program Files\Generalia Software
   [11/02/2009|09:19] C:\Program Files\Google
   [27/03/2005|20:17] C:\Program Files\Hard Truck 18 Wheels
   [21/02/2009|18:27] C:\Program Files\Hewlett-Packard
   [21/02/2009|18:29] C:\Program Files\HP
   [14/04/2005|21:09] C:\Program Files\IncrediMail
   [02/02/2009|13:20] C:\Program Files\InstallShield Installation Information
   [27/08/2004|13:37] C:\Program Files\Intel
   [28/11/2004|16:12] C:\Program Files\InterActual
   [16/04/2009|00:57] C:\Program Files\Internet Explorer
   [18/07/2005|09:54] C:\Program Files\InterVideo
   [17/12/2006|13:47] C:\Program Files\Intuisphere
   [13/07/2005|23:29] C:\Program Files\iPod
   [13/07/2005|23:29] C:\Program Files\iTunes
   [01/10/2006|17:17] C:\Program Files\IZArc
   [27/03/2005|21:47] C:\Program Files\Jasc Software Inc
   [13/06/2006|19:10] C:\Program Files\Java
   [27/08/2004|13:57] C:\Program Files\LanExpress
   [05/08/2005|20:52] C:\Program Files\Lexmark 6200 Series
   [21/12/2004|20:28] C:\Program Files\Lexmark Fax Solutions
   [06/12/2004|12:00] C:\Program Files\Lexmark_6200 Series
   [25/02/2009|13:25] C:\Program Files\Lx_cats
   [07/05/2007|17:35] C:\Program Files\Maxis
   [13/10/2008|23:21] C:\Program Files\Messenger
   [28/04/2009|17:53] C:\Program Files\MessengerPlus! 3
   [27/04/2009|19:39] C:\Program Files\Microsoft ActiveSync
   [27/08/2004|13:24] C:\Program Files\microsoft frontpage
   [05/10/2006|18:49] C:\Program Files\Microsoft FrontPage Express
   [29/04/2005|18:17] C:\Program Files\Microsoft Money
   [13/04/2008|14:22] C:\Program Files\Microsoft Office
   [16/03/2008|16:24] C:\Program Files\Microsoft Picture It! PhotoPub
   [12/12/2004|12:30] C:\Program Files\Microsoft Visual Studio
   [03/11/2005|23:32] C:\Program Files\Microsoft Works
   [03/03/2005|16:43] C:\Program Files\MobilZone
   [23/07/2007|14:50] C:\Program Files\MobiMate
   [10/12/2004|19:40] C:\Program Files\MoodLogic
   [13/10/2008|11:01] C:\Program Files\Movie Maker
   [28/04/2009|21:21] C:\Program Files\Mozilla Firefox
   [13/04/2008|14:21] C:\Program Files\MSECache
   [04/03/2005|21:52] C:\Program Files\MSN
   [06/03/2005|14:36] C:\Program Files\MSN Apps
   [27/08/2004|13:22] C:\Program Files\MSN Gaming Zone
   [10/04/2005|09:34] C:\Program Files\MSN Messenger
   [16/11/2006|08:06] C:\Program Files\MSXML 4.0
   [15/05/2005|12:46] C:\Program Files
CASE
   [13/10/2008|10:54] C:\Program Files\NetMeeting
   [15/10/2008|07:25] C:\Program Files\NOS
   [05/05/2005|15:29] C:\Program Files\Nvu
   [04/02/2007|21:28] C:\Program Files\Oberon Media
   [27/08/2004|13:22] C:\Program Files\Online Services
   [15/06/2006|21:11] C:\Program Files\OpenOffice.org1.1.4
   [31/12/2008|17:22] C:\Program Files\Outlook Express
   [26/09/2006|07:51] C:\Program Files\PhanTim3
   [09/03/2007|13:15] C:\Program Files\Ping license ace
   [07/12/2004|17:21] C:\Program Files\PIXELA
   [05/05/2005|15:33] C:\Program Files\PutItOn
   [29/11/2004|17:26] C:\Program Files\Rockstar Games
   [28/03/2005|17:43] C:\Program Files\Securitoo
   [01/06/2005|13:40] C:\Program Files\Sega
   [27/08/2004|13:23] C:\Program Files\Services en ligne
   [03/08/2007|13:04] C:\Program Files\Sharp
   [25/06/2005|14:27] C:\Program Files\sixteen tons entertainment
   [12/03/2007|22:33] C:\Program Files\Skype
   [15/09/2004|19:57] C:\Program Files\Sonic
   [12/07/2007|12:18] C:\Program Files\Sony
   [15/12/2004|09:45] C:\Program Files\Sony Corporation
   [17/05/2008|18:06] C:\Program Files\SopCast
   [06/08/2005|12:17] C:\Program Files\SuperTux
   [28/03/2005|17:23] C:\Program Files\Symantec
   [23/06/2005|16:01] C:\Program Files\The Learning Company
   [02/01/2005|17:32] C:\Program Files\Train Simulator
   [10/02/2005|10:46] C:\Program Files\Trymedia
   [15/09/2004|19:41] C:\Program Files\TVTV EPG Installer
   [15/09/2004|19:41] C:\Program Files\TvTvHTML
   [02/12/2005|19:21] C:\Program Files\Ultralingua
   [27/08/2004|13:27] C:\Program Files\Uninstall Information
   [15/09/2004|19:41] C:\Program Files\Utimaco
   [05/08/2005|18:36] C:\Program Files\VideoLAN
   [30/05/2008|23:54] C:\Program Files\VirtualDJ
   [31/12/2008|17:22] C:\Program Files\Wanadoo
   [23/07/2007|15:18] C:\Program Files\Windows Media Connect 2
   [13/10/2008|10:54] C:\Program Files\Windows Media Player
   [13/10/2008|10:54] C:\Program Files\Windows NT
   [13/06/2006|17:51] C:\Program Files\WindowsUpdate
   [09/05/2008|19:10] C:\Program Files\WinHTTrack
   [15/07/2006|20:26] C:\Program Files\WinRAR
   [02/10/2006|07:45] C:\Program Files\WinZip
   [15/09/2006|11:29] C:\Program Files\WMR11
   [27/08/2004|13:24] C:\Program Files\xerox
   [23/02/2008|22:14] C:\Program Files\Xi
   [27/08/2004|14:14] C:\Program Files\Yahoo! Messenger Installer
   [27/08/2004|14:14] C:\Program Files\YahooMFU

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [21/05/2008|08:39] C:\Program Files\Fichiers communs\Adobe
   [01/08/2005|16:23] C:\Program Files\Fichiers communs\BOONTY Shared
   [27/10/2005|09:56] C:\Program Files\Fichiers communs\CIEL
   [28/12/2004|17:49] C:\Program Files\Fichiers communs\DESIGNER
   [27/06/2005|18:42] C:\Program Files\Fichiers communs\DirectX
   [02/02/2009|13:20] C:\Program Files\Fichiers communs\EPSON
   [21/02/2009|18:27] C:\Program Files\Fichiers communs\Hewlett-Packard
   [21/02/2009|18:27] C:\Program Files\Fichiers communs\HP
   [03/01/2005|18:13] C:\Program Files\Fichiers communs\InstallShield
   [27/08/2004|14:02] C:\Program Files\Fichiers communs\Java
   [09/04/2005|22:59] C:\Program Files\Fichiers communs\Logitech
   [01/08/2005|19:43] C:\Program Files\Fichiers communs\Macrovision Shared
   [28/04/2009|17:29] C:\Program Files\Fichiers communs\Microsoft Shared
   [27/08/2004|13:23] C:\Program Files\Fichiers communs\MSSoap
   [27/08/2004|15:17] C:\Program Files\Fichiers communs\ODBC
   [24/12/2006|12:32] C:\Program Files\Fichiers communs\PocketSoft
   [27/10/2005|10:05] C:\Program Files\Fichiers communs\Sage
   [27/08/2004|13:23] C:\Program Files\Fichiers communs\Services
   [12/03/2007|22:33] C:\Program Files\Fichiers communs\Skype
   [18/07/2005|09:44] C:\Program Files\Fichiers communs\Sony Shared
   [27/08/2004|15:17] C:\Program Files\Fichiers communs\SpeechEngines
   [28/03/2005|17:04] C:\Program Files\Fichiers communs\Symantec Shared
   [13/10/2008|10:54] C:\Program Files\Fichiers communs\System

   --------------------\  Process

   ( 51 Processes )

   iexplore.exe ~ [PID:3636]

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   C:\Program Files\pingli~1
   C:\Program Files\C2Media
   C:\DOCUME~1\CARREF~1\Cookies\carre_florence@advertising[2].txt
   C:\WINDOWS\Tasks\AAFCA89897BF599C.job
 
   --------------------\  Verification du Registre

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2009-04-28 23:00:03
   Windows 5.1.2600 Service Pack 3 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !

   [F:9][D:6]-> C:\DOCUME~1\CARREF~1\LOCALS~1\Temp
   [F:33][D:0]-> C:\DOCUME~1\CARREF~1\Cookies
   [F:1547][D:4]-> C:\DOCUME~1\CARREF~1\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - 28/04/2009|23:01 - Option : [1]

   --------------------\  Fin du rapport a 23:01:28

Destrio5 · Answer

--> Double-clique sur le raccourci de Lop S&D pour le lancer.
(Sous Vista, il faut cliquer droit sur le raccourci de Lop S&D et choisir Exécuter en tant qu'administrateur) 

--> Choisis cette fois-ci l'option 2 (Suppression).

--> Ne ferme pas la fenêtre lors de la suppression !

--> Poste le rapport généré (C:\lopR.txt).

(Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

patineur44 · Answer

Voici le rapport :




   --------------------\  Lop S&D 4.2.5-0   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Multiprocessor Free :               Intel(R) Pentium(R) 4 CPU 3.20GHz )
   BIOS : BIOS Date: 08/12/04 16:40:47 Ver: 08.00.09
   USER : CARRE Florence ( Administrator )
   BOOT : Normal boot
   Antivirus : AntiVirus Firewall 6.15 6.15 (Not Activated)
   Firewall  : AntiVirus Firewall 6.15 6.15 (Not Activated)
   C:\ (Local Disk) - NTFS - Total:27 Go (Free:1 Go)
   D:\ (Local Disk) - NTFS - Total:197 Go (Free:7 Go)
   E:\ (USB)
   F:\ (CD or DVD)
   Z:\ (Network Disk)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [2] ( 28/04/2009|23:09 )


   \\\\\\\\\\\\\\\ SUPPRESSION

   Supprime! - C:\DOCUME~1\CARREF~1\Cookies\carre_florence@advertising[2].txt
   Supprime! - C:\WINDOWS\Tasks\AAFCA89897BF599C.job 
   Supprime! - C:\Program Files\pingli~1
   Supprime! - C:\Program Files\C2Media
 
   \\\\\\\\\\\\\\\ 

 
   --------------------\  Listing des dossiers dans APPLIC~1

   [15/09/2004|19:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [30/05/2008|23:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
   [30/05/2008|23:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [28/04/2009|17:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
   [01/08/2005|16:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
   [02/02/2009|13:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EPSON
   [28/04/2009|20:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Exit Meet Funk Play
   [06/12/2004|11:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FaxCtr
   [09/08/2006|09:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure
   [10/02/2009|10:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [21/02/2009|18:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Hewlett-Packard
   [25/02/2009|13:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
   [03/01/2005|18:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
   [01/08/2005|19:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
   [19/04/2009|11:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
   [27/03/2005|12:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [04/01/2009|20:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [15/10/2008|07:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
   [25/12/2004|14:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
   [27/08/2004|13:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
   [12/03/2007|22:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
   [18/07/2005|09:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Corporation
   [28/03/2005|16:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [03/08/2007|18:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TomTom
   [07/08/2005|16:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
   [15/09/2004|19:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\VAIO Media Platform
   [25/02/2009|13:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WEBREG
   [06/07/2006|06:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

   [14/03/2006|18:50] C:\DOCUME~1\CARREF~1\APPLIC~1\Adobe
   [21/05/2008|08:36] C:\DOCUME~1\CARREF~1\APPLIC~1\AdobeUM
   [30/05/2008|23:39] C:\DOCUME~1\CARREF~1\APPLIC~1\Apple Computer
   [29/11/2007|09:24] C:\DOCUME~1\CARREF~1\APPLIC~1\FaxCtr
   [11/08/2006|23:05] C:\DOCUME~1\CARREF~1\APPLIC~1\F-Secure
   [30/10/2006|18:20] C:\DOCUME~1\CARREF~1\APPLIC~1\Google
   [30/11/2004|17:53] C:\DOCUME~1\CARREF~1\APPLIC~1\Help
   [25/02/2009|13:36] C:\DOCUME~1\CARREF~1\APPLIC~1\HP
   [27/08/2004|13:24] C:\DOCUME~1\CARREF~1\APPLIC~1\Identities
   [11/01/2005|15:00] C:\DOCUME~1\CARREF~1\APPLIC~1\InterVideo
   [09/08/2006|10:04] C:\DOCUME~1\CARREF~1\APPLIC~1\ispnews
   [10/02/2005|22:02] C:\DOCUME~1\CARREF~1\APPLIC~1\Leadertech
   [30/11/2004|18:38] C:\DOCUME~1\CARREF~1\APPLIC~1\Macromedia
   [19/04/2009|11:32] C:\DOCUME~1\CARREF~1\APPLIC~1\Malwarebytes
   [11/06/2008|23:56] C:\DOCUME~1\CARREF~1\APPLIC~1\Microsoft
   [04/01/2008|13:57] C:\DOCUME~1\CARREF~1\APPLIC~1\Mozilla
   [09/08/2006|10:02] C:\DOCUME~1\CARREF~1\APPLIC~1
tr
   [09/08/2006|10:08] C:\DOCUME~1\CARREF~1\APPLIC~1\PEX
   [06/09/2007|00:22] C:\DOCUME~1\CARREF~1\APPLIC~1\Skype
   [10/02/2005|22:02] C:\DOCUME~1\CARREF~1\APPLIC~1\Sonic
   [17/05/2008|19:11] C:\DOCUME~1\CARREF~1\APPLIC~1\Sony Corporation
   [27/08/2004|14:02] C:\DOCUME~1\CARREF~1\APPLIC~1\Sun
   [27/08/2004|14:15] C:\DOCUME~1\CARREF~1\APPLIC~1\Symantec
   [04/03/2009|02:13] C:\DOCUME~1\CARREF~1\APPLIC~1\uTorrent
   [11/11/2005|13:40] C:\DOCUME~1\CARREF~1\APPLIC~1\v3.0
   [05/02/2007|10:28] C:\DOCUME~1\CARREF~1\APPLIC~1\vlc
   [03/03/2009|14:20] C:\DOCUME~1\CARREF~1\APPLIC~1\WebCompiler2

   [15/09/2004|19:44] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
   [27/08/2004|13:24] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [15/09/2004|19:44] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
   [27/08/2004|14:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
   [27/08/2004|14:15] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec


   [17/01/2008|21:12] C:\DOCUME~1\FICHMA~1\APPLIC~1\Adobe
   [30/11/2004|18:56] C:\DOCUME~1\FICHMA~1\APPLIC~1\AdobeUM
   [08/08/2006|00:00] C:\DOCUME~1\FICHMA~1\APPLIC~1\Apple Computer
   [21/12/2004|10:49] C:\DOCUME~1\FICHMA~1\APPLIC~1\FaxCtr
   [17/02/2009|11:49] C:\DOCUME~1\FICHMA~1\APPLIC~1\F-Secure
   [30/04/2007|21:29] C:\DOCUME~1\FICHMA~1\APPLIC~1\Google
   [06/08/2005|11:20] C:\DOCUME~1\FICHMA~1\APPLIC~1\Help
   [27/08/2004|13:24] C:\DOCUME~1\FICHMA~1\APPLIC~1\Identities
   [02/02/2009|13:17] C:\DOCUME~1\FICHMA~1\APPLIC~1\InstallShield
   [30/12/2004|22:55] C:\DOCUME~1\FICHMA~1\APPLIC~1\InterVideo
   [09/08/2006|13:41] C:\DOCUME~1\FICHMA~1\APPLIC~1\ispnews
   [08/01/2005|20:10] C:\DOCUME~1\FICHMA~1\APPLIC~1\Leadertech
   [28/11/2004|20:32] C:\DOCUME~1\FICHMA~1\APPLIC~1\Macromedia
   [17/11/2008|01:26] C:\DOCUME~1\FICHMA~1\APPLIC~1\Microsoft
   [05/01/2008|18:27] C:\DOCUME~1\FICHMA~1\APPLIC~1\Mozilla
   [08/08/2006|18:16] C:\DOCUME~1\FICHMA~1\APPLIC~1
tr
   [16/05/2006|10:33] C:\DOCUME~1\FICHMA~1\APPLIC~1\ShopperReports
   [07/06/2008|23:51] C:\DOCUME~1\FICHMA~1\APPLIC~1\Skype
   [08/01/2005|20:10] C:\DOCUME~1\FICHMA~1\APPLIC~1\Sonic
   [18/05/2005|23:30] C:\DOCUME~1\FICHMA~1\APPLIC~1\Sony Corporation
   [27/08/2004|14:02] C:\DOCUME~1\FICHMA~1\APPLIC~1\Sun
   [27/08/2004|14:15] C:\DOCUME~1\FICHMA~1\APPLIC~1\Symantec
   [30/12/2005|19:44] C:\DOCUME~1\FICHMA~1\APPLIC~1\v3.0

   [14/02/2009|20:45] C:\DOCUME~1\FICHMA~3\APPLIC~1\Adobe
   [17/10/2006|12:58] C:\DOCUME~1\FICHMA~3\APPLIC~1\AdobeUM
   [02/01/2005|13:58] C:\DOCUME~1\FICHMA~3\APPLIC~1\FaxCtr
   [24/12/2006|13:58] C:\DOCUME~1\FICHMA~3\APPLIC~1\F-Secure
   [24/12/2006|16:14] C:\DOCUME~1\FICHMA~3\APPLIC~1\Google
   [27/08/2004|13:24] C:\DOCUME~1\FICHMA~3\APPLIC~1\Identities
   [06/09/2006|08:50] C:\DOCUME~1\FICHMA~3\APPLIC~1\ispnews
   [20/07/2006|20:34] C:\DOCUME~1\FICHMA~3\APPLIC~1\Leadertech
   [16/03/2005|20:46] C:\DOCUME~1\FICHMA~3\APPLIC~1\Macromedia
   [24/12/2006|14:01] C:\DOCUME~1\FICHMA~3\APPLIC~1\Microsoft
   [26/12/2008|01:14] C:\DOCUME~1\FICHMA~3\APPLIC~1\Mozilla
   [19/09/2005|17:09] C:\DOCUME~1\FICHMA~3\APPLIC~1\ShopperReports
   [20/07/2006|20:34] C:\DOCUME~1\FICHMA~3\APPLIC~1\Sonic
   [24/12/2006|20:10] C:\DOCUME~1\FICHMA~3\APPLIC~1\Sony Corporation
   [27/08/2004|14:02] C:\DOCUME~1\FICHMA~3\APPLIC~1\Sun
   [27/08/2004|14:15] C:\DOCUME~1\FICHMA~3\APPLIC~1\Symantec

   [15/09/2004|19:44] C:\DOCUME~1\GERBEA~1\APPLIC~1\Adobe
   [02/01/2005|13:52] C:\DOCUME~1\GERBEA~1\APPLIC~1\FaxCtr
   [21/12/2006|13:38] C:\DOCUME~1\GERBEA~1\APPLIC~1\F-Secure
   [24/09/2007|18:42] C:\DOCUME~1\GERBEA~1\APPLIC~1\Google
   [23/03/2006|21:44] C:\DOCUME~1\GERBEA~1\APPLIC~1\Help
   [27/08/2004|13:24] C:\DOCUME~1\GERBEA~1\APPLIC~1\Identities
   [08/12/2005|22:12] C:\DOCUME~1\GERBEA~1\APPLIC~1\InterVideo
   [28/08/2006|06:36] C:\DOCUME~1\GERBEA~1\APPLIC~1\ispnews
   [08/10/2005|22:48] C:\DOCUME~1\GERBEA~1\APPLIC~1\Macromedia
   [16/09/2007|18:53] C:\DOCUME~1\GERBEA~1\APPLIC~1\Microsoft
   [21/05/2006|19:57] C:\DOCUME~1\GERBEA~1\APPLIC~1\ShopperReports
   [27/08/2004|14:02] C:\DOCUME~1\GERBEA~1\APPLIC~1\Sun
   [27/08/2004|14:15] C:\DOCUME~1\GERBEA~1\APPLIC~1\Symantec

   [02/01/2005|13:04] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
   [16/03/2009|01:46] C:\DOCUME~1\LOCALS~1\APPLIC~1\Sony Corporation
   [13/03/2005|18:21] C:\DOCUME~1\LOCALS~1\APPLIC~1\Symantec

   [27/08/2004|13:24] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft


 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [16/04/2009 07:15][--a------] C:\WINDOWS	asks\AppleSoftwareUpdate.job
   [19/04/2009 11:16][--a------] C:\WINDOWS	asks\Scheduled scanning task.job
   [05/08/2004 14:00][-r-h-c---] C:\WINDOWS	asks\desktop.ini
   [28/04/2009 22:37][--ah-----] C:\WINDOWS	asks\SA.DAT

   --------------------\  Listing des dossiers dans C:\Program Files

   [06/12/2004|12:04] C:\Program Files\Abbyy FineReader 6.0 Sprint
   [15/02/2006|21:55] C:\Program Files\Adobe
   [25/03/2005|21:16] C:\Program Files\Adware
   [09/08/2006|09:55] C:\Program Files\AntivirusFirewall
   [30/05/2008|23:32] C:\Program Files\Apple Software Update
   [24/12/2006|12:26] C:\Program Files\Atari
   [27/03/2005|13:40] C:\Program Files\AV VCS 3.0
   [28/04/2009|17:30] C:\Program Files\Avira
   [17/01/2007|15:30] C:\Program Files\Cariboost Premium
   [14/01/2005|23:04] C:\Program Files\Cat Daddy Games
   [27/04/2009|15:50] C:\Program Files\ciel
   [27/04/2009|15:50] C:\Program Files\cielcompta
   [28/06/2005|10:05] C:\Program Files\Codemasters
   [27/08/2004|13:22] C:\Program Files\ComPlus Applications
   [27/08/2004|15:18] C:\Program Files\CONEXANT
   [02/12/2004|21:36] C:\Program Files\directx
   [10/02/2005|19:42] C:\Program Files\DivX
   [28/11/2004|19:11] C:\Program Files\Enlight
   [02/02/2009|13:18] C:\Program Files\epson
   [02/02/2009|13:20] C:\Program Files\EpsonNet
   [10/04/2005|13:35] C:\Program Files\eurobarre
   [27/04/2009|19:39] C:\Program Files\Fichiers communs
   [29/03/2005|12:21] C:\Program Files\FlashGet
   [05/05/2005|16:03] C:\Program Files\Generalia Software
   [11/02/2009|09:19] C:\Program Files\Google
   [27/03/2005|20:17] C:\Program Files\Hard Truck 18 Wheels
   [21/02/2009|18:27] C:\Program Files\Hewlett-Packard
   [21/02/2009|18:29] C:\Program Files\HP
   [14/04/2005|21:09] C:\Program Files\IncrediMail
   [02/02/2009|13:20] C:\Program Files\InstallShield Installation Information
   [27/08/2004|13:37] C:\Program Files\Intel
   [28/11/2004|16:12] C:\Program Files\InterActual
   [16/04/2009|00:57] C:\Program Files\Internet Explorer
   [18/07/2005|09:54] C:\Program Files\InterVideo
   [17/12/2006|13:47] C:\Program Files\Intuisphere
   [13/07/2005|23:29] C:\Program Files\iPod
   [13/07/2005|23:29] C:\Program Files\iTunes
   [01/10/2006|17:17] C:\Program Files\IZArc
   [27/03/2005|21:47] C:\Program Files\Jasc Software Inc
   [13/06/2006|19:10] C:\Program Files\Java
   [27/08/2004|13:57] C:\Program Files\LanExpress
   [05/08/2005|20:52] C:\Program Files\Lexmark 6200 Series
   [21/12/2004|20:28] C:\Program Files\Lexmark Fax Solutions
   [06/12/2004|12:00] C:\Program Files\Lexmark_6200 Series
   [25/02/2009|13:25] C:\Program Files\Lx_cats
   [07/05/2007|17:35] C:\Program Files\Maxis
   [13/10/2008|23:21] C:\Program Files\Messenger
   [28/04/2009|17:53] C:\Program Files\MessengerPlus! 3
   [27/04/2009|19:39] C:\Program Files\Microsoft ActiveSync
   [27/08/2004|13:24] C:\Program Files\microsoft frontpage
   [05/10/2006|18:49] C:\Program Files\Microsoft FrontPage Express
   [29/04/2005|18:17] C:\Program Files\Microsoft Money
   [13/04/2008|14:22] C:\Program Files\Microsoft Office
   [16/03/2008|16:24] C:\Program Files\Microsoft Picture It! PhotoPub
   [12/12/2004|12:30] C:\Program Files\Microsoft Visual Studio
   [03/11/2005|23:32] C:\Program Files\Microsoft Works
   [03/03/2005|16:43] C:\Program Files\MobilZone
   [23/07/2007|14:50] C:\Program Files\MobiMate
   [10/12/2004|19:40] C:\Program Files\MoodLogic
   [13/10/2008|11:01] C:\Program Files\Movie Maker
   [28/04/2009|21:21] C:\Program Files\Mozilla Firefox
   [13/04/2008|14:21] C:\Program Files\MSECache
   [04/03/2005|21:52] C:\Program Files\MSN
   [06/03/2005|14:36] C:\Program Files\MSN Apps
   [27/08/2004|13:22] C:\Program Files\MSN Gaming Zone
   [10/04/2005|09:34] C:\Program Files\MSN Messenger
   [16/11/2006|08:06] C:\Program Files\MSXML 4.0
   [15/05/2005|12:46] C:\Program Files
CASE
   [13/10/2008|10:54] C:\Program Files\NetMeeting
   [15/10/2008|07:25] C:\Program Files\NOS
   [05/05/2005|15:29] C:\Program Files\Nvu
   [04/02/2007|21:28] C:\Program Files\Oberon Media
   [27/08/2004|13:22] C:\Program Files\Online Services
   [15/06/2006|21:11] C:\Program Files\OpenOffice.org1.1.4
   [31/12/2008|17:22] C:\Program Files\Outlook Express
   [26/09/2006|07:51] C:\Program Files\PhanTim3
   [07/12/2004|17:21] C:\Program Files\PIXELA
   [05/05/2005|15:33] C:\Program Files\PutItOn
   [29/11/2004|17:26] C:\Program Files\Rockstar Games
   [28/03/2005|17:43] C:\Program Files\Securitoo
   [01/06/2005|13:40] C:\Program Files\Sega
   [27/08/2004|13:23] C:\Program Files\Services en ligne
   [03/08/2007|13:04] C:\Program Files\Sharp
   [25/06/2005|14:27] C:\Program Files\sixteen tons entertainment
   [12/03/2007|22:33] C:\Program Files\Skype
   [15/09/2004|19:57] C:\Program Files\Sonic
   [12/07/2007|12:18] C:\Program Files\Sony
   [15/12/2004|09:45] C:\Program Files\Sony Corporation
   [17/05/2008|18:06] C:\Program Files\SopCast
   [06/08/2005|12:17] C:\Program Files\SuperTux
   [28/03/2005|17:23] C:\Program Files\Symantec
   [23/06/2005|16:01] C:\Program Files\The Learning Company
   [02/01/2005|17:32] C:\Program Files\Train Simulator
   [10/02/2005|10:46] C:\Program Files\Trymedia
   [15/09/2004|19:41] C:\Program Files\TVTV EPG Installer
   [15/09/2004|19:41] C:\Program Files\TvTvHTML
   [02/12/2005|19:21] C:\Program Files\Ultralingua
   [27/08/2004|13:27] C:\Program Files\Uninstall Information
   [15/09/2004|19:41] C:\Program Files\Utimaco
   [05/08/2005|18:36] C:\Program Files\VideoLAN
   [30/05/2008|23:54] C:\Program Files\VirtualDJ
   [31/12/2008|17:22] C:\Program Files\Wanadoo
   [23/07/2007|15:18] C:\Program Files\Windows Media Connect 2
   [13/10/2008|10:54] C:\Program Files\Windows Media Player
   [13/10/2008|10:54] C:\Program Files\Windows NT
   [13/06/2006|17:51] C:\Program Files\WindowsUpdate
   [09/05/2008|19:10] C:\Program Files\WinHTTrack
   [15/07/2006|20:26] C:\Program Files\WinRAR
   [02/10/2006|07:45] C:\Program Files\WinZip
   [15/09/2006|11:29] C:\Program Files\WMR11
   [27/08/2004|13:24] C:\Program Files\xerox
   [23/02/2008|22:14] C:\Program Files\Xi
   [27/08/2004|14:14] C:\Program Files\Yahoo! Messenger Installer
   [27/08/2004|14:14] C:\Program Files\YahooMFU

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [21/05/2008|08:39] C:\Program Files\Fichiers communs\Adobe
   [01/08/2005|16:23] C:\Program Files\Fichiers communs\BOONTY Shared
   [27/10/2005|09:56] C:\Program Files\Fichiers communs\CIEL
   [28/12/2004|17:49] C:\Program Files\Fichiers communs\DESIGNER
   [27/06/2005|18:42] C:\Program Files\Fichiers communs\DirectX
   [02/02/2009|13:20] C:\Program Files\Fichiers communs\EPSON
   [21/02/2009|18:27] C:\Program Files\Fichiers communs\Hewlett-Packard
   [21/02/2009|18:27] C:\Program Files\Fichiers communs\HP
   [03/01/2005|18:13] C:\Program Files\Fichiers communs\InstallShield
   [27/08/2004|14:02] C:\Program Files\Fichiers communs\Java
   [09/04/2005|22:59] C:\Program Files\Fichiers communs\Logitech
   [01/08/2005|19:43] C:\Program Files\Fichiers communs\Macrovision Shared
   [28/04/2009|17:29] C:\Program Files\Fichiers communs\Microsoft Shared
   [27/08/2004|13:23] C:\Program Files\Fichiers communs\MSSoap
   [27/08/2004|15:17] C:\Program Files\Fichiers communs\ODBC
   [24/12/2006|12:32] C:\Program Files\Fichiers communs\PocketSoft
   [27/10/2005|10:05] C:\Program Files\Fichiers communs\Sage
   [27/08/2004|13:23] C:\Program Files\Fichiers communs\Services
   [12/03/2007|22:33] C:\Program Files\Fichiers communs\Skype
   [18/07/2005|09:44] C:\Program Files\Fichiers communs\Sony Shared
   [27/08/2004|15:17] C:\Program Files\Fichiers communs\SpeechEngines
   [28/03/2005|17:04] C:\Program Files\Fichiers communs\Symantec Shared
   [13/10/2008|10:54] C:\Program Files\Fichiers communs\System

   --------------------\  Process

   ( 50 Processes )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Verification du Registre
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2009-04-28 23:10:36
   Windows 5.1.2600 Service Pack 3 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !

   [F:9][D:6]-> C:\DOCUME~1\CARREF~1\LOCALS~1\Temp
   [F:32][D:0]-> C:\DOCUME~1\CARREF~1\Cookies
   [F:1572][D:4]-> C:\DOCUME~1\CARREF~1\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - 28/04/2009|23:01 - Option : [1]
   2 - "C:\Lop SD\LopR_2.txt" - 28/04/2009|23:11 - Option : [2]

   --------------------\  Fin du rapport a 23:11:31

Destrio5 · Answer

---> Supprime les traces de F-Secure avec ceci.

---> Désactive ton antivirus le temps de la manipulation car OTMoveIt3 est détecté comme une infection à tort.

---> Télécharge OTMoveIt3 (OldTimer) sur ton Bureau.

---> Double-clique sur OTMoveIt3.exe afin de le lancer.

---> Copie (Ctrl+C) le texte suivant ci-dessous : 





:processes
explorer.exe 

:files 
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Exit Meet Funk Play    
C:\DOCUME~1\FICHMA~1\APPLIC~1\ShopperReports 
C:\DOCUME~1\FICHMA~3\APPLIC~1\ShopperReports       
C:\DOCUME~1\GERBEA~1\APPLIC~1\ShopperReports
C:\Program Files\eurobarre 
C:\Program Files
CASE 
C:\Documents and Settings\FICHMANN Clément\Application Data\onlinemanagerlogo
C:\Documents and Settings\FICHMANN Clément\Application Data\Ping license ace

:commands
[purity]
[emptytemp]
[reboot]





---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.

---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.

---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
Le nom du rapport correspond au moment de sa création : date_heure.log

patineur44 · Answer

Voici le rapport :

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Exit Meet Funk Play moved successfully.
C:\DOCUME~1\FICHMA~1\APPLIC~1\ShopperReports\cses1 moved successfully.
C:\DOCUME~1\FICHMA~1\APPLIC~1\ShopperReports\cseport moved successfully.
C:\DOCUME~1\FICHMA~1\APPLIC~1\ShopperReports\cs\dwld moved successfully.
C:\DOCUME~1\FICHMA~1\APPLIC~1\ShopperReports\cs\db moved successfully.
C:\DOCUME~1\FICHMA~1\APPLIC~1\ShopperReports\cs moved successfully.
C:\DOCUME~1\FICHMA~1\APPLIC~1\ShopperReports moved successfully.
C:\DOCUME~1\FICHMA~3\APPLIC~1\ShopperReports\cses1 moved successfully.
C:\DOCUME~1\FICHMA~3\APPLIC~1\ShopperReports\cseport moved successfully.
C:\DOCUME~1\FICHMA~3\APPLIC~1\ShopperReports\cs\dwld moved successfully.
C:\DOCUME~1\FICHMA~3\APPLIC~1\ShopperReports\cs\db moved successfully.
C:\DOCUME~1\FICHMA~3\APPLIC~1\ShopperReports\cs moved successfully.
C:\DOCUME~1\FICHMA~3\APPLIC~1\ShopperReports moved successfully.
C:\DOCUME~1\GERBEA~1\APPLIC~1\ShopperReports\cses2 moved successfully.
C:\DOCUME~1\GERBEA~1\APPLIC~1\ShopperReports\cseport moved successfully.
C:\DOCUME~1\GERBEA~1\APPLIC~1\ShopperReports\cs\dwld moved successfully.
C:\DOCUME~1\GERBEA~1\APPLIC~1\ShopperReports\cs\db moved successfully.
C:\DOCUME~1\GERBEA~1\APPLIC~1\ShopperReports\cs moved successfully.
C:\DOCUME~1\GERBEA~1\APPLIC~1\ShopperReports moved successfully.
C:\Program Files\eurobarre\skin moved successfully.
C:\Program Files\eurobarre moved successfully.
C:\Program Files
CASE moved successfully.
File/Folder C:\Documents and Settings\FICHMANN Clément\Application Data\onlinemanagerlogo not found.
File/Folder C:\Documents and Settings\FICHMANN Clément\Application Data\Ping license ace not found.
========== COMMANDS ==========
User's Temp folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\CARRE Florence\Local Settings\Temporary Internet Files\Content.IE5\K2Y0EB5G\affich-12216698-beagle-virus[2].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\CARRE Florence\Local Settings\Temporary Internet Files\Content.IE5\93Q84WA7\1QAQCA6S3IQTCAUFJB2BCA8QN8VACA9UH2QUCAZO3G9VCAOMYDOXCA7XN8C6CA0EQM3XCA1MM0YWCAQ5DNNCCATHY3YTCA9TNRGECALSQ6ZVCALO6TSDCAZY3RE7CAUL79HBCADWX2QACAEH9YEK.htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\CARRE Florence\Local Settings\Temporary Internet Files\Content.IE5\93Q84WA7\WPDPCAVN90HPCA4TLWJJCAK6X85DCAEDAUQZCA2T8BJECAUK7JX7CAJ1H7BNCA8SH6N3CAEU4R00CA99LQFDCAWYQ13OCADLJVX9CAEBWUUXCA1B9VWTCAFFU1LDCA3CAKFQCAHPLEV7CAAWKX1R.htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\CARRE Florence\Local Settings\Temporary Internet Files\Content.IE5\89YXLOL2	opdepart[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\CARRE Florence\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\CARRE Florence\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat scheduled to be deleted on reboot.
User's Temporary Internet Files folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Network Service Temp folder emptied.
Network Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS	emp\JET281F.tmp scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS	emp\JET28FA.tmp scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
FireFox cache emptied.
Temp folders emptied.
 
OTMoveIt3 by OldTimer - Version 1.0.11.0 log created on 04282009_233304

Destrio5 · Answer

---> Désinstalle FindyKill.

---> Refais un scan RSIT et poste le rapport log.

patineur44 · Answer

Voici le rapport info.txt :

info.txt logfile of random's system information tool 1.06 2009-04-28 23:55:24

======Uninstall list======

-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->C:\WINDOWS\system32\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
32 Bit HP CIO Components Installer-->MsiExec.exe /I{09BDEEF0-5590-457D-89A9-5DB2742F9BBF}
ABBYY FineReader 6.0 Sprint Plus-->MsiExec.exe /I{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}
Acrobat Elements 6.0 - Français-->MsiExec.exe /I{E5E6E687-1036-BA7E-6000-000000000001}
Adobe Acrobat Reader 3.02-->C:\WINDOWS\uninst.exe -fC:\Acrobat3\Reader\DeIsL1.isu
Adobe Flash Player 9 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\FlashUtil9b.exe -uninstallDelete
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Photoshop Album 2.0 Edition Découverte-->MsiExec.exe /I{11B569C2-4BF6-4ED0-9D17-A4273943CB24}
Adobe Photoshop Elements 2.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Adobe\Photoshop Elements 2\Uninst.isu" -c"C:\Program Files\Adobe\Photoshop Elements 2\Uninst.dll"
Adobe Premiere Standard-->RunDll32 "C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll",LaunchSetup "C:\Program Files\InstallShield Installation Information\{7998F67D-655B-42E3-B651-18D96DD17268}\setup.exe"
Adobe Reader 6.0.1 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A00000000001}
Adobe Reader 7.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7646-A70000000000}
Adobe Reader 7.0.8 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70500000002}
Adobe Reader 7.0.9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70900000002}
Adobe Reader 7.1.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A71000000002}
AntiVirus Firewall-->C:\PROGRA~1\ANTIVI~1\Common\fsbwih.exe /uninstall
Apple Software Update-->MsiExec.exe /I{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
Barre d'outils MSN-->C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\mtbs.exe c
Cariboost Free Edition v1-->"C:\Program Files\Intuisphere\Cariboost Free Edition v1\unins000.exe"
CCleaner (remove only)-->"D:\Program Files\CCleaner\uninst.exe"
Ciel Compta pour Windows-->C:\WINDOWS\unin040c.exe -f"c:\program files\ciel\DeIsL1.isu"
Ciel eSauvegarde V2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CBF7A3DA-880B-4747-AB57-D74A4EBAC69E}\install.exe" UNINSTALL
Click to DVD 2.5.32-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E809063C-51A3-4269-8984-D1EB742F2151}\setup.exe" -l0x40c  -removeonly
Comanche 4-->C:\WINDOWS\IsUn040c.exe -f"D:\Program Files\Comanche 4\Uninst.isu"
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Crazy Taxi 3 Demo-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{25AC51D8-A588-4379-AAEF-3F500AC9EEBD}\setup.exe" 
Crazy Taxi Demo-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{56A218A0-8924-11D6-B016-0040052179B6}\setup.exe" 
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Pro Trial-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
Données de menu Click to DVD 2.0.01-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{98A3A654-3AEF-42D9-BA91-DE5815EA5897}\setup.exe" 
DVgate Plus-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{685BCC47-B8EC-45EC-BBCE-77DF2451502C}\Setup.exe" -l0x40c 
Emergency 3 Demo 1.0-->"C:\Program Files\sixteen tons entertainment\Emergency 3 Demo\uninst.exe"
Emergency 4 Demo-->D:\Program Files\sixteen tons entertainment\Emergency 4 Demo\uninst.exe
Enregistrement en ligne VAIO (Français)-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{668B1BD6-4593-4959-970E-249AFFE6F35C} /l1036 
EPSON PX700W Series Printer Uninstall-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FINSENE.EXE /R /APD /P:"EPSON PX700W Series"
EPSON Scan-->C:\Program Files\epson\escndv\setup\setup.exe /r
EPSON Stylus Photo PX700W_PX800FW_TX700W_TX800FW Manuel-->C:\Program Files\EPSON\TPMANUAL\ESP_PX_TX_700W_800FW\FRA\USE_G\DOCUNINS.EXE
EpsonNet Print-->C:\Program Files\InstallShield Installation Information\{3E31400D-274E-4647-916C-2CACC3741799}\ENPSETUP.exe -runfromtemp -l0x040c -EPSON -removeonly
Eurobarre-->C:\PROGRA~1\EUROBA~1\uninstall.exe
Extension Système de Microsoft Money-->MsiExec.exe /I{CF5193F7-6B37-11D5-B7D2-00AA00A204F1}
Favorit-->"c:\windows\system32\sqwkuua.exe" -uninstall
Fire Department Episode 3 - Demo-->D:\Program Files\Monte Cristo\Fire Department 3 - Demo\uninst.exe
Garfield Screen Saver-->C:\WINDOWS\system32\Garfield.scr /u
GhostMouse 2.0-->C:\WINDOWS\uninst.exe -fC:\GMouse20\DeIsL1.isu  -cC:\GMouse20\_ISREG32.DLL
Google Earth-->MsiExec.exe /I{1E04F83B-2AB9-4301-9EF7-E86307F79C72}
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_0531C63A913CC9D1.exe" /uninstall
GTA San Andreas-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}\SETUP.exe" -l0x40c  -removeonly
Helios-->C:\WINDOWS\unin040c.exe -f"D:\Program Files\Helios\DeIsL1.isu"  -c"D:\Program Files\Helios\_ISREG32.DLL"
HijackThis 2.0.2-->"C:\Program Files	rend micro\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
HotKey Utility-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BB311F54-39D6-4A03-8E18-053D1B2833D7}\Setup.exe" -l0x40c 
HP Imaging Device Functions 10.0-->C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
HP iPAQ Setup Assistant v1.0.7.0-->C:\Program Files\HP\HP iPAQ Setup Assistant\Uninst.exe
HP Photosmart All-In-One Driver Software 10.0 Rel .2-->C:\Program Files\HP\Digital Imaging\{20B30DC1-E423-4939-B51D-05C58B0F9BBB}\setup\hpzscr01.exe -datfile hposcr21.dat -onestop
HP Update-->MsiExec.exe /X{11B83AD3-7A46-4C2E-A568-9505981D4C6F}
Image Transfer-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{564A8DD3-70BC-4018-A5C3-7CEB10BBB6E9}\Setup.exe" UNINSTALL
ImageMixer for Sony-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1B4AA674-F5CA-4BB5-831A-CD37B4021959}\setup.exe" 
InterActual Player-->C:\Program Files\InterActual\InterActual Player\inuninst.exe
InterVideo WinDVD 5 for VAIO-->"C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL
InterVideo WinDVDX-->"C:\Program Files\InstallShield Installation Information\{1A91D1FA-B9B3-4556-9878-5C61059A19B2}\setup.exe" REMOVEALL
iPAQ WebReg-->MsiExec.exe /I{D37C6152-89DF-4D29-83CF-666200D5F398}
iPod Update 2004-04-28-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{E6696A8C-C55A-405C-AFEB-F3880A8BAA45} /l1036 
iTunes-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{47808F78-F178-49DC-B708-15FE538B16FF} 
iWizz-->D:\Program Files\iWizz\uninstall.exe
IZArc 3.5 beta 3-->"C:\Program Files\IZArc\unins000.exe"
J2SE Runtime Environment 5.0 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150070}
Java 2 Runtime Environment, SE v1.4.2_05-->MsiExec.exe /I{7148F0A8-6813-11D6-A77B-00B0D0142050}
JVTorrent 1.1-->D:\Program Files\JVTorrent\uninst.exe
Kaspersky Online Scanner-->C:\WINDOWS\system32\KASPER~1\KASPER~1\kavuninstall.exe
Kaspersky On-line Scanner-->C:\WINDOWS\system32\KASPER~1\KASPER~1\kavuninstall.exe
KC Softwares KFK-->"D:\Program Files\KC Softwares\KFK\unins000.exe"
L&H TTS3000 Français-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\LHTTSFRF.inf, Uninstall
LAN-Express AS IEEE 802.11 Wireless LAN-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FCCB0B43-7A6D-49A4-A5B3-B10F592F4EB6}\Setup.exe" -l0x9 
Le géant du trafic-->D:\PROGRA~1\TGiant\UNWISE.EXE D:\PROGRA~1\TGiant\INSTALL.LOG
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Lexmark 6200 Series-->C:\WINDOWS\system32\spool\drivers\w32x86\3\lxbuUNST.EXE -NOLICENSE
Macromedia Flash 5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4C93C363-414E-11D4-9756-00C04F8EEB39}\Setup.exe" UNINSTALL
Macromedia Flash Player-->MsiExec.exe /X{27579b3c-5470-4496-be6c-0c872674f19f}
Malwarebytes' Anti-Malware-->"D:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Maxx GP fr-->"D:\Program Files\Maxx GP\unins000.exe"
Memory Stick Formatter-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{27337663-2619-11D4-99DC-0000F49094C7}\Setup.exe" -l0x40c /UNINSTALL
mesjeuxvideo Uninstall-->C:\mesjeuxvideo\mesjeuxvideo\ACCSIM~2.EXE /c
Messenger Plus! 3-->"C:\Program Files\MessengerPlus! 3\MsgPlus1.exe" /Remove
Microsoft ActiveSync-->MsiExec.exe /I{99052DB7-9592-4522-A558-5417BBAD48EE}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft FrontPage Express-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\fpxpress.inf, Uninstall
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft Money-->MsiExec.exe /I{E7298FD8-1386-11D5-8D6C-0050DAD32D95}
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Standard Edition 2003-->MsiExec.exe /I{9112040C-6000-11D3-8CFE-0150048383C9}
Microsoft Office Word Viewer 2003-->MsiExec.exe /I{9085040C-6000-11D3-8CFE-0150048383C9}
Microsoft Office XP Web Components-->MsiExec.exe /I{9026040C-6000-11D3-8CFE-0150048383C9}
Microsoft Picture It! Express 2001-->MsiExec.exe /I{FB10FE1A-9906-44A1-B8AB-B70B19FEAB58}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Works 7.0-->MsiExec.exe /I{64D114CE-4234-45C2-B60A-2B07D5A48F72}
MicroStaff WINASPI-->C:\MWASPI\uninst.exe
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB928090)-->"C:\WINDOWS\ie7updates\KB928090-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB929969)-->"C:\WINDOWS\ie7updates\KB929969\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB931768)-->"C:\WINDOWS\ie7updates\KB931768-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB933566)-->"C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB937143)-->"C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
MoodLogic-->C:\WINDOWS\ml-uninstall-v10.exe
Mozilla Firefox (2.0.0.11)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSN Messenger 7.0-->MsiExec.exe /I{ABEB838C-A1A7-4C5D-B7E1-8B4314600777}
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
My Info Centre-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{62B715BC-01F5-4CC9-9811-D24ED44C16D4} /l1036 
Net Transport 1.94.282-->"C:\Program Files\Xi\NetTransport 2\unins000.exe"
Netpass XP-->D:\Program Files
etpass\Uninstal.exe
NetpassIE-->D:\Program Files
etpassie\Uninstal.exe
NetXfer 2.43.368-->"C:\Program Files\Xi\Nettransport\unins000.exe"
NVIDIA Drivers-->C:\WINDOWS\system32
vudisp.exe UninstallGUI
OCR Software by I.R.I.S. 10.0-->C:\Program Files\HP\Digital Imaging\OCR\hpzscr01.exe -datfile hpqbud11.dat
OpenMG Limited Patch 4.0-04-07-14-01-->C:\Program Files\Fichiers communs\Sony Shared\OpenMG\HotFixes\HotFix4.0-04-07-14-01\HotFixSetup\setup.exe /u
OpenMG Secure Module 4.0.00-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{6F1974D6-4249-43B6-88B0-9A9B8A33956C} /l1033 UNINSTALL
PC Software pour ZQ-540-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Sharp\PC Software\Uninst.isu"
PhanTim3-->"C:\Program Files\PhanTim3\Uninstall.exe"
PhotoFiltre-->"D:\Program Files\PhotoFiltre\Uninst.exe"
PictureGear Studio 2.0-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{88DA0A52-3372-4803-971A-ADFB961707E8}\Setup.exe" 
Pokémon Project Studio Version Rouge-->C:\Program Files\The Learning Company\Pokémon Project Studio Version Rouge\uninstal.exe
Prison Tycoon (remove only)-->"D:\Program Files\Valusoft\Prison Tycoon\Uninstall.exe"
Programme de gestion Camera de Logitech®-->"C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\SETUP.EXE" UNINSTALL REMOVEPROMPT
QuickTime-->MsiExec.exe /I{1838C5A2-AB32-4145-85C1-BB9B8DFA24CD}
RCT3 Soaked-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EA926717-CE5A-4CB4-AB21-9E6E9565A458}\Setup.exe" -l0x40c 
Restaurant Empire-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{99A51EBF-47E0-11D7-B796-0050BFE4DB80}\setup.exe" -l0x40c  -uninst 
RollerCoaster Tycoon® 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{907B4640-266B-4A21-92FB-CD1A86CD0F63}\Setup.exe" -l0x40c 
SafeGuard® PrivateDisk 1.00.6 - Try and Buy Version-->MsiExec.exe /X{48E9DE14-39D1-4974-91A6-D4E1836F648D}
Shockwave-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
SimCity 3000-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Maxis\SimCity 3000\Uninst.isu"
Skype 3.0-->"C:\Program Files\Skype\Phone\unins000.exe"
Skype Plugin Manager-->MsiExec.exe /I{3D5E5C0A-5B36-4F98-99A7-287F7DBDCE03}
SoftV92 Data Fax Modem-->C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_8086&DEV_24D6&SUBSYS_816F104D\HXFSETUP.EXE -U -IVEN_8086&DEV_24D6&SUBSYS_816F104D
Solutions de télécopie Lexmark-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\8\INTEL3~1\IDriver.exe /M{764C0C8F-B1B1-49BF-AEDC-4E48E857A667} /l1036 /z/U
Sonic RecordNow!-->MsiExec.exe /I{9541FED0-327F-4DF0-8B96-EF57EF622F19}
SonicStage 2.1.00-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{71D6CE84-B7DC-4166-8E0D-56C1C37BFB5A}\Setup.exe" -l0x40c UNINSTALL
SonicStage Mastering Studio 1.4-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BF3B304B-8A18-452D-A19F-6012CA8418D7}\setup.exe" -l0x40c 
SonicStage Mastering Studio Audio Filter Custom Preset-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{013E1BA8-C815-4E27-BCB9-D6B1B2E24094}\Setup.exe" -l0x40c 
SonicStage Mastering Studio Audio Filter-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AB467B85-4F52-48C2-AEED-0673D00417B0}\Setup.exe" -l0x40c 
SonicStage Mastering Studio Plugins 1.3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EE7EB179-5AA2-4B28-AC92-5CBAAF82BA7F}\Setup.exe" -l0x40c 
Sony MPEG2-TS Splitter 1.0-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F7BF7FD5-5DDA-43F5-9185-3531D9ED1D6C}\setup.exe" -l0x40c  -removeonly
Sony USB Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5C29CB8B-AC1E-4114-8D68-9CD080140D4A}\Setup.exe" UNINSTALL
Sony Utilities DLL-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EF3D45BB-2260-4008-88EA-492E7744A9DF}\Setup.exe" -l0x9 
Sony Video Shared Library-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6990A2BF-D1D2-11D3-81BC-00609789C908}\setup.exe" 
SopCast 3.0.3-->C:\Program Files\SopCast\uninst.exe
SuperTux 0.1.2-->"C:\Program Files\SuperTux\unins000.exe"
TmSunriseDemoMag 1.4.5-->"D:\Program Files\TmSunriseDemoMag\unins000.exe"
Turbo Cut File v2.21-->"D:\Turbo Cut File\unins000.exe"
UltraVNC v1.0.2-->"D:\Program Files\UltraVNC\unins000.exe"
VAIO Edit Components-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{761C9026-14F0-4352-8658-934558272404}\setup.exe" 
VAIO Enquête (Français)-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{9080C5D2-82FA-452A-87FA-CBB4B05D67A5} /l1036 
VAIO Entertainment Platform-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D917FD82-6CE5-489A-AAF8-C701AAC85C4D}\setup.exe" -l0x40c 
VAIO GrandBlue Wallpaper-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D8E2BDAE-4AEB-464D-A410-89AF090B08D9}\Setup.exe" -l0x9 
VAIO Launcher-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A43F939E-A863-433D-AC78-0897E44CFEB2}\setup.exe" -l0x40c 
VAIO Media 3.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1EB317D8-8945-4FD6-B37F-DF470317C6AB}\Setup.exe" -l0x40c UNINSTALL
VAIO Media Integrated Server 3.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7A79D11B-FD82-4A5E-834F-20173515DD14}\setup.exe" -l0x40c UNINSTALL
VAIO Media Redistribution 3.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7128C69B-8F7E-4336-8698-3FD3CDD955EC}\Setup.exe" -l0x40c UNINSTALL
VAIO SLIT Pattern Wallpaper-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{266AEE68-5718-4A31-BDD3-D356B1250C70}\Setup.exe" -l0x9 
VAIO SLIT Scene Wallpaper-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A17456ED-3432-49FF-A14D-E0F00A96A2AA}\Setup.exe" -l0x9 
VAIO SLIT-A Screen Saver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8D324F1B-A39E-4D5A-BA58-147416FE019A}\Setup.exe" -l0x9 
VAIO SLIT-B Screen Saver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3600FB01-C63B-4A3D-B044-BB21792C6811}\Setup.exe" -l0x9 
VAIO SLIT-C Screen Saver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{01AF4645-78E6-46C4-B528-54863679CC40}\Setup.exe" -l0x9 
VAIO System Information-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2366D960-F00F-11D3-99D3-00C04FCCB775}\Setup.exe" -l0x40c 
VAIO TV Tuner Library 1.3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DC6E3CD5-A93D-44EA-85AE-894C1603B7E2}\setup.exe" 
VAIO Update 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9E158BB9-37B9-464B-837E-CC1D5766291B}\setup.exe" -l0x40c  -removeonly
VAIO Zone Remote Commander-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{31858EA8-B6C6-499C-8051-B11722E7C978}\Setup.exe" -l0x40c 
VAIO Zone-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{ED8D39F2-7FFA-45EC-B148-EF2472955BB4}\setup.exe" -l0x40c 
VideoLAN VLC media player 0.8.2-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Virtual DJ Home Edition - Atomix Productions-->C:\PROGRA~1\VIRTUA~1\UNWISE.EXE C:\PROGRA~1\VIRTUA~1\INSTALL.LOG
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 10 Hotfix - KB894476-->"C:\WINDOWS\$NtUninstallKB894476$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
WinHTTrack Website Copier 3.42-2-->"C:\Program Files\WinHTTrack\unins000.exe"
WM Recorder 11.0-->C:\Program Files\WMR11\Uninstal.exe
WorldMate 2006 Standard Edition-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7255D37E-4393-421D-BD47-9DDCB2767264}\setup.exe" -l0x40c  -removeonly
Worms 4 Mayhem Demo-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{ED340366-F336-420D-8867-88643836D900}\setup.exe" -l0x9  -removeonly
x-black LCD-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{546CCE4F-3620-47A8-98C9-4D6FD8F311AF} /l1036 

======Security center information======

AV: AntiVir Desktop

======System event log======

Computer Name: SALON
Event Code: 7036
Message: Le service Compatibilité avec le Changement rapide d'utilisateur est entré dans l'état : en cours d'exécution.

Record Number: 105250
Source Name: Service Control Manager
Time Written: 20090408070354.000000+120
Event Type: Informations
User: 

Computer Name: SALON
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Compatibilité avec le Changement rapide d'utilisateur.

Record Number: 105249
Source Name: Service Control Manager
Time Written: 20090408070354.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: SALON
Event Code: 4201
Message: Le système a détecté que la carte réseau \DEVICE\TCPIP_{5CAD9C6C-E4E8-453B-AC90-689B6994F8CE} était connectée au réseau,
et a lancé une opération normale sur la carte réseau.

Record Number: 105248
Source Name: Tcpip
Time Written: 20090408070350.000000+120
Event Type: Informations
User: 

Computer Name: SALON
Event Code: 7036
Message: Le service Acquisition d'image Windows (WIA) est entré dans l'état : en cours d'exécution.

Record Number: 105247
Source Name: Service Control Manager
Time Written: 20090408070344.000000+120
Event Type: Informations
User: 

Computer Name: SALON
Event Code: 8033
Message: L'explorateur a forcé une élection sur le réseau \Device\NetBT_Tcpip_{5CAD9C6C-E4E8-453B-AC90-689B6994F8CE} car un maître explorateur a été arrêté.

Record Number: 105246
Source Name: BROWSER
Time Written: 20090408070335.000000+120
Event Type: Informations
User: 

=====Application event log=====

Computer Name: CARRE-FICHMANN
Event Code: 1
Message: Service démarré.

Record Number: 21525
Source Name: VzFw
Time Written: 20081205104743.000000+060
Event Type: Informations
User: 

Computer Name: CARRE-FICHMANN
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 21524
Source Name: SecurityCenter
Time Written: 20081205104741.000000+060
Event Type: Informations
User: 

Computer Name: CARRE-FICHMANN
Event Code: 2
Message: 
Record Number: 21523
Source Name: BackWeb Plug-in - 6588780
Time Written: 20081205104732.000000+060
Event Type: Informations
User: 

Computer Name: CARRE-FICHMANN
Event Code: 2
Message: 
Record Number: 21522
Source Name: BackWeb Plug-in - 6588780
Time Written: 20081205104729.000000+060
Event Type: Informations
User: 

Computer Name: CARRE-FICHMANN
Event Code: 2
Message: 
Record Number: 21521
Source Name: BackWeb Plug-in - 6588780
Time Written: 20081205003702.000000+060
Event Type: Informations
User: 

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;D:\Program Files\QuickTime\QTSystem
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 3 Stepping 4, GenuineIntel
"PROCESSOR_REVISION"=0304
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre1.5.0_07\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.5.0_07\lib\ext\QTJava.zip

-----------------EOF-----------------

patineur44 · Answer

Voici le rapport log.txt :

Logfile of random's system information tool 1.06 (written by random/random)
Run by CARRE Florence at 2009-04-28 23:54:45
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 2 GB (8%) free of 29 GB
Total RAM: 511 MB (31% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:55:21, on 28/04/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Fichiers communs\EPSON\eEBAPI\eEBSVC.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40ST7.EXE
C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Sony\HotKey Utility\HKserv.exe
C:\Program Files\Lexmark 6200 Series\ezprint.exe
D:\Program Files\QuickTime\QTTask.exe
C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Sony\HotKey Utility\HKWnd.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\explorer.exe
C:\Documents and Settings\CARRE Florence\Bureau\RSIT.exe
C:\Program Files	rend micro\CARRE Florence.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O2 - BHO: NetXfer - {83B80A9C-D91A-4F22-8DCF-EA7204039F79} - C:\Program Files\Xi\Nettransport\NXIEHelper.dll (file missing)
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} - C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: NetXfer - {C16CBAAC-A75C-4DB5-A0DD-CDF5CAFCDD3A} - C:\Program Files\Xi\Nettransport\NXToolBar.dll (file missing)
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [LXBUCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXBUtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus1.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HKSERV.EXE] C:\Program Files\Sony\HotKey Utility\HKserv.exe
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 6200 Series\ezprint.exe"
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [VAIO Update 3] "C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe"  /Stationary
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\RunOnce: [OTMoveIt] C:\Documents and Settings\CARRE Florence\Bureau\OTMoveIt3.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Auto EPSON Stylus Photo PX700W sur CLÉMENT] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIENE.EXE /FU "C:\WINDOWS\TEMP\E_S30.tmp" /EF "HKCU"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - .DEFAULT User Startup: VAIO Launcher.lnk = C:\Program Files\Sony\VAIO Launcher\Launcher.exe (User 'Default user')
O4 - Global Startup: Antivirus Firewall.lnk = C:\Program Files\AntivirusFirewall\backweb\6588780\Program\fspex.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O8 - Extra context menu item: &Télécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddLink.html
O8 - Extra context menu item: Tout t&élécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddList.html
O8 - Extra context menu item: Tout télécharger avec NetXfer - C:\Program Files\Xi\Nettransport\NXAddList.html
O8 - Extra context menu item: Télécharger avec NetXfer - C:\Program Files\Xi\Nettransport\NXAddLink.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Protection Internet Explorer - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\AntivirusFirewall\Anti-Spyware\ieshield.dll (file missing)
O9 - Extra 'Tools' menuitem: Protection Internet Explorer... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\AntivirusFirewall\Anti-Spyware\ieshield.dll (file missing)
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Antivirus Firewall (BackWeb Plug-in - 6588780) - Unknown owner - C:\PROGRA~1\ANTIVI~1\backweb\6588780\Program\SERVIC~1.EXE (file missing)
O23 - Service: EpsonBidirectionalService - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\eEBAPI\eEBSVC.exe
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40ST7.EXE
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: lxbu_device - Lexmark International, Inc. - C:\WINDOWS\system32\lxbucoms.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: VAIO Entertainment Aggregation and Control Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment\VzRs\VzRs.exe
O23 - Service: VAIO Entertainment Task Scheduler - Sony Corporation - C:\Program Files\Sony\vaio entertainment\VzTaskScheduler.exe
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe
O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe
O23 - Service: VAIO Cooporated Initialisation (VCI) - Sony Corporation - C:\Program Files\Sony\VAIO Cooperated Initialisation\VCI_SVC.exe
O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe

Destrio5 · Answer

---> Désactive ton antivirus le temps de la manipulation car OTMoveIt3 est détecté comme une infection à tort.

---> Télécharge OTMoveIt3 (OldTimer) sur ton Bureau.

---> Double-clique sur OTMoveIt3.exe afin de le lancer.

---> Copie (Ctrl+C) le texte suivant ci-dessous : 





:processes
explorer.exe 

:files 
C:\Program Files\HbTools

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83B80A9C-D91A-4F22-8DCF-EA7204039F79}] 
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\fqt]   
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\funkplayuploadwait]    
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HbTools]    
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplScan] 
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WeatherOnTray]   
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\xnopczey]  
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\zango] 

:commands
[purity]
[emptytemp]
[reboot]





---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.

---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.

---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
Le nom du rapport correspond au moment de sa création : date_heure.log

patineur44 · Answer

Voici le rapport :


========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
File/Folder C:\Program Files\HbTools not found.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83B80A9C-D91A-4F22-8DCF-EA7204039F79}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\fqt\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\funkplayuploadwait\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HbTools\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplScan\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WeatherOnTray\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\xnopczey\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\zango\ deleted successfully.
========== COMMANDS ==========
User's Temp folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\CARRE Florence\Local Settings\Temporary Internet Files\Content.IE5\K2Y0EB5G\ads[10].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\CARRE Florence\Local Settings\Temporary Internet Files\Content.IE5\K2Y0EB5G\ads[11].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\CARRE Florence\Local Settings\Temporary Internet Files\Content.IE5\K2Y0EB5G\ads[5].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\CARRE Florence\Local Settings\Temporary Internet Files\Content.IE5\K2Y0EB5G\ads[6].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\CARRE Florence\Local Settings\Temporary Internet Files\Content.IE5\K2Y0EB5G\autopromo[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\CARRE Florence\Local Settings\Temporary Internet Files\Content.IE5\93Q84WA7\affich-12216698-beagle-virus[2].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\CARRE Florence\Local Settings\Temporary Internet Files\Content.IE5\89YXLOL2\affich-12216698-beagle-virus[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\CARRE Florence\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\CARRE Florence\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat scheduled to be deleted on reboot.
User's Temporary Internet Files folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Network Service Temp folder emptied.
Network Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS	emp\HPSLPS011.log scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS	emp\JET281F.tmp scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS	emp\JET28FA.tmp scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
FireFox cache emptied.
Temp folders emptied.
 
OTMoveIt3 by OldTimer - Version 1.0.11.0 log created on 04292009_000422

Files moved on Reboot...
C:\Documents and Settings\CARRE Florence\Local Settings\Temporary Internet Files\Content.IE5\K2Y0EB5G\ads[10].htm moved successfully.
C:\Documents and Settings\CARRE Florence\Local Settings\Temporary Internet Files\Content.IE5\K2Y0EB5G\ads[11].htm moved successfully.
C:\Documents and Settings\CARRE Florence\Local Settings\Temporary Internet Files\Content.IE5\K2Y0EB5G\ads[5].htm moved successfully.
C:\Documents and Settings\CARRE Florence\Local Settings\Temporary Internet Files\Content.IE5\K2Y0EB5G\ads[6].htm moved successfully.
C:\Documents and Settings\CARRE Florence\Local Settings\Temporary Internet Files\Content.IE5\K2Y0EB5G\autopromo[1].htm moved successfully.
C:\Documents and Settings\CARRE Florence\Local Settings\Temporary Internet Files\Content.IE5\93Q84WA7\affich-12216698-beagle-virus[2].htm moved successfully.
C:\Documents and Settings\CARRE Florence\Local Settings\Temporary Internet Files\Content.IE5\89YXLOL2\affich-12216698-beagle-virus[1].htm moved successfully.
C:\Documents and Settings\CARRE Florence\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat moved successfully.
C:\WINDOWS	emp\HPSLPS011.log moved successfully.
File C:\WINDOWS	emp\JET281F.tmp not found!
File C:\WINDOWS	emp\JET28FA.tmp not found!

Destrio5 · Answer

---> Désinstalle les programmes suivants :
- J2SE Runtime Environment 5.0 Update 7
- Java 2 Runtime Environment, SE v1.4.2_05

---> Mets à jour Java.

---> Mets à jour Adobe Reader.

Ton PC va mieux ?

patineur44 · Answer

C'est bon j'ai désinstallé les anciennes versions de Java et de Acrobat Reader et j'ai installé les dernières.
Mon PC à l'air d'aller beaucoup mieux en plus il est un peu plus rapide !
Merci beaucoup !
Je dois faire autre chose ?

patineur44 · Answer

Je peux supprimer tous les logs et les logiciels du bureau ?
Il y a pas un logiciel pour tous les supprimer ?

Destrio5 · Answer

1/

---> Désinstalle HijackThis.

---> Télécharge ToolsCleaner2 sur ton Bureau.
* Double-clique sur ToolsCleaner2.exe pour le lancer.
* Clique sur Recherche et laisse le scan agir.
* Clique sur Suppression pour finaliser. 
* Tu peux, si tu le souhaites, te servir des Options Facultatives.
* Clique sur Quitter pour obtenir le rapport. 
* Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).


2/

---> Télécharge et installe CCleaner Slim.
* Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
* Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage. 
* Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs (Sauvegarde la base de registre).


3/

---> Il est nécessaire de désactiver puis réactiver la restauration système pour la purger.

---> Je te conseille de créer un point de restauration que tu pourras utiliser plus tard si tu as un problème.


==Prévention==

Conserve MBAM. Il te servira à scanner les fichiers douteux en complément de l'antivirus et scanne le disque dur régulièrement.

Comme navigateur, utilise plutôt Mozilla Firefox qu'Internet Explorer. Tu peux utiliser l'extension NoScript pour plus de sécurité.

Vérifie que les mises à jour automatiques sont bien activées (Menu Démarrer, clique droit sur Poste de travail, onglet Mises à jour automatiques).

Par rapport au P2P : Lien

Voici un dossier complet (A lire avec Adobe Reader ou Foxit Reader) : Lien


Sois plus vigilant(e) sur Internet ;)

patineur44 · Answer

Voici le rapport TCleaner :


[ Rapport ToolsCleaner version 2.3.5 (par A.Rothstein & dj QUIOU) ]

--> Recherche: 

C:\HijackThis.exe: trouvé !
C:\Combofix.txt: trouvé !
C:\lopR.txt: trouvé !
C:\FindyKill.txt: trouvé !
C:\Lop SD: trouvé !
C:\Qoobox: trouvé !
C:\_OtMoveIt: trouvé !
C:\Rsit: trouvé !
C:\Documents and Settings\CARRE Florence\Bureau\LopSD.exe: trouvé !
C:\Documents and Settings\CARRE Florence\Bureau\fsbl.exe: trouvé !
C:\Documents and Settings\CARRE Florence\Bureau\EliBaglA.exe: trouvé !
C:\Documents and Settings\CARRE Florence\Bureau\OTMoveIt3.exe: trouvé !
C:\Documents and Settings\CARRE Florence\Bureau\Rsit.exe: trouvé !
C:\Program Files	rend micro\HijackThis.exe: trouvé !
C:\Program Files	rend micro\hijackthis.log: trouvé !

---------------------------------
--> Suppression: 

C:\HijackThis.exe: supprimé !
C:\Documents and Settings\CARRE Florence\Bureau\LopSD.exe: supprimé !
C:\Documents and Settings\CARRE Florence\Bureau\fsbl.exe: supprimé !
C:\Documents and Settings\CARRE Florence\Bureau\EliBaglA.exe: supprimé !
C:\Program Files	rend micro\HijackThis.exe: supprimé !
C:\Combofix.txt: supprimé !
C:\lopR.txt: supprimé !
C:\FindyKill.txt: supprimé !
C:\Documents and Settings\CARRE Florence\Bureau\OTMoveIt3.exe: supprimé !
C:\Documents and Settings\CARRE Florence\Bureau\Rsit.exe: supprimé !
C:\Program Files	rend micro\hijackthis.log: supprimé !
C:\Lop SD: supprimé !
C:\Qoobox: supprimé !
C:\_OtMoveIt: supprimé !
C:\Rsit: supprimé !

patineur44 · Answer

J'ai fini de faire ce que tu m'as dit.
J'ai aussi lu les 2 dossiers que tu m'as passé et je dois dire que le PDF est assez interressant !
J'espère que je vais être tranquil pour un moment.
Merci beaucoup pour ton aide !

Destrio5 · Answer

Tu peux supprimer ToolsCleaner.

Bonne journée ;)

patineur44 · Answer

Voilà c'est fait !
Merci beaucoup pour ton aide !

Beagle + virus

38 réponses

Discussions similaires

Newsletters