Je viens de virer ce qui est scané et mais ..

minhaf Messages postés 23 Date d'inscription   Statut Membre -  
 Utilisateur anonyme -
Bonjour,
je viens de virer ce qui scané pas mal de Trojan et autres , mais apres redémarer , tjrs meme probleme de Windows installer ? Merci de continuer à m'aider , j'attends la suite .....cordialement
Configuration: Windows XP Internet Explorer 7.0

8 réponses

  1. Utilisateur anonyme
     
    Bonsoir

    Quel est ton problème exactement?

    Fait ceci dans un premier temps:
    Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.

    -> http://images.malwareremoval.com/random/RSIT.exe

    ! Déconnecte toi et ferme toutes tes applications en cours !

    Double-clique sur " RSIT.exe " pour le lancer .

    -> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .

    * Devant l'option "List files/folders created ..." , tu choisis : 2 months

    * clique ensuite sur " Continue " pour lancer l'analyse ...

    -> laisse faire le scan et ne touche pas au PC ...
    Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-note).

    Poste le contenu de " log.txt " (c'est celui qui apparait à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...

    Important : poste un rapport, puis l'autre dans la réponse suivante
    Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum

    ( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )

    Merci
    0
  2. minhaf Messages postés 23 Date d'inscription   Statut Membre 1
     
    voila l'INFO que j'ai obtenu :

    info.txt logfile of random's system information tool 1.06 2009-06-03 21:54:45

    ======Uninstall list======

    -->C:\PROGRA~1\Yahoo!\Common\UNYT_W~1.EXE
    -->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
    -->C:\WINDOWS\system32\\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205}
    -->C:\WINDOWS\system32\\MSIEXEC.EXE /x {1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
    -->C:\WINDOWS\system32\\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382}
    -->C:\WINDOWS\system32\\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629}
    -->MsiExec.exe /I{0F122737-72B2-4095-8B3E-7AAE753DFD3D}
    -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
    ABBYY FineReader 6.0 Sprint-->MsiExec.exe /X{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}
    Acrobat.com-->msiexec /qb /x {77DCDCE3-2DED-62F3-8154-05E745472D07}
    Acrobat.com-->MsiExec.exe /I{77DCDCE3-2DED-62F3-8154-05E745472D07}
    Acronis True Image-->C:\Program Files\Acronis\TrueImage\MediaBuilder.exe -uninstall
    Adobe Acrobat 9 Pro Extended - English, Français, Deutsch-->msiexec /I {AC76BA86-1033-F400-7761-000000000004}
    Adobe AIR-->c:\Program Files\Fichiers communs\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
    Adobe AIR-->MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
    Adobe Bridge 1.0-->MsiExec.exe /I{B74D4E10-6884-0000-0000-000000000103}
    Adobe Common File Installer-->MsiExec.exe /I{8EDBA74D-0686-4C99-BFDD-F894678E5101}
    Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
    Adobe Help Center 1.0-->MsiExec.exe /I{E9787678-119F-4D52-B551-6739B2B22101}
    Adobe Illustrator CS2-->msiexec /I {B2F5D08C-7E79-4FCD-AAF4-57AD35FF0601}
    Adobe Photoshop CS2-->msiexec /I {236BB7C4-4419-42FD-040C-1E257A25E34D}
    Adobe Stock Photos 1.0-->MsiExec.exe /I{786C5747-0C40-4930-9AFE-113BCE553101}
    Adobe SVG Viewer 3.0-->C:\Program Files\Fichiers communs\Adobe\SVG Viewer 3.0\Uninstall\Winstall.exe -u -fC:\Program Files\Fichiers communs\Adobe\SVG Viewer 3.0\Uninstall\Install.log
    Apple Mobile Device Support-->MsiExec.exe /I{AFA20D47-69C3-4030-8DF8-D37466E70F13}
    Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
    Applian FLV Player-->"C:\WINDOWS\Applian FLV Player\uninstall.exe" "/U:C:\Program Files\FLV Player\Uninstall\uninstall.xml"
    Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
    Atlas MetaFile Viewer-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Baker Atlas\Atlas MetaFile Viewer\Uninst.isu"
    Atout Clic 6e-->C:\PROGRA~1\ATOUTC~1\UNWISE.EXE C:\PROGRA~1\ATOUTC~1\INSTALL.LOG
    Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
    Broadcom Management Programs-->MsiExec.exe /I{26E1BFB0-E87E-4696-9F89-B467F01F81E5}
    CA Yahoo! Anti-Spy (remove only)-->"C:\Program Files\CA Yahoo! Anti-Spy\uninstall.exe"
    CDDRV_Installer-->MsiExec.exe /I{0C826C5B-B131-423A-A229-C71B3CACCD6A}
    Citrix ICA Web Client-->C:\WINDOWS\system32\ctxsetup.exe /uninst C:\PROGRA~1\Citrix\icaweb32\uninst.inf
    Conexant HDA D110 MDC V.92 Modem-->C:\Program Files\CONEXANT\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_14F100C3\HXFSETUP.EXE -U -Idel1028p.inf
    Corel Paint Shop Pro X-->MsiExec.exe /I{1A15507A-8551-4626-915D-3D5FA095CC1B}
    Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
    Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
    Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
    Dealio Toolbar v4.0-->MsiExec.exe /X{94C3BB3A-56A1-43DE-A242-8B41F46E97EF}
    Dell Fax PC-->C:\Program Files\Dell PC Fax\Install\x86\Uninst.exe /R:faxunst
    Dell Resource CD-->MsiExec.exe /X{FCD9CD52-7222-4672-94A0-A722BA702FD0}
    Dell Support 3.2.1-->MsiExec.exe /X{CEE2252C-4035-4B27-8EC6-0B085DD3A413}
    Digital Formation LESA 7.0.2-->"C:\Program Files\LESA\unins000.exe"
    Digital Line Detect-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E646DCF0-5A68-11D5-B229-002078017FBF}\setup.exe" -l0x40c ControlPanel
    Ecrin v4.02-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{269474CD-EF49-4F9B-B869-DF8D29FF1467}
    Emeraude-->"C:\Program Files\InstallShield Installation Information\{9FD5A2FF-4A15-49A9-994E-73FE09C65278}\setup.exe" -runfromtemp -l0x0409 -removeonly
    Emeraude-->MsiExec.exe /I{9FD5A2FF-4A15-49A9-994E-73FE09C65278}
    Extension de Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{0CA6047C-D28B-4295-834A-07C52BA20C2D}
    F.A.S.T. RTA-->MsiExec.exe /I{70656F35-4086-4BCC-AA36-47A64947087A}
    F.A.S.T. CBM-->MsiExec.exe /I{BD16B04B-F045-4C67-916F-83D61FDCB83A}
    F.A.S.T. FieldNotes-->MsiExec.exe /I{0FD47BA1-599E-4209-A6C6-DF2303F1659F}
    F.A.S.T. Piper-->MsiExec.exe /I{C0614510-0667-466D-BA2D-1435C478F096}
    F.A.S.T. ValiData-->MsiExec.exe /I{638A91EC-3079-4FE6-BDCE-433E5FC5723A}
    F.A.S.T. VirtuWell-->MsiExec.exe /I{94CF955A-EC2B-426C-841B-A8119AF17107}
    F.A.S.T. WellTest-->MsiExec.exe /I{4B91C139-8660-48C8-82A0-D5861E16A65C}
    FLEXlm 11.3 Win32-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7D4F1294-4C3B-468F-A9C0-129A57129612}\Setup.exe" -l0x9
    FotoStation Easy-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67DD948A-974D-41B7-9723-036BCFA45232}\Setup.exe"
    Free Easy Burner V 3.8-->"C:\Program Files\Free Easy Burner\unins000.exe"
    GeoGraphix Release 2007.1-->MsiExec.exe /I{6CE249A3-BA82-4537-924A-C6E7D98AAFA3}
    Glary Registry Repair 2.9-->"C:\Program Files\Glary Registry Repair\unins000.exe"
    Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_BDA1448D3D255554.exe" /uninstall
    Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
    Hardlock Device Driver-->C:\WINDOWS\system32\UNWISE.EXE C:\WINDOWS\system32\HLDRV.LOG
    Hardlock Device Drivers-->C:\WINDOWS\system32\UNWISE.EXE C:\WINDOWS\system32\HLDRV.LOG
    HASP Device Drivers-->C:\WINDOWS\system32\UNWISE.EXE C:\WINDOWS\system32\HDD32.LOG
    High Definition Audio Driver Package - KB835221-->C:\WINDOWS\$NtUninstallKB835221WXP$\spuninst\spuninst.exe
    HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
    Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
    Intel(R) Graphics Media Accelerator Driver-->RUNDLL32.EXE C:\WINDOWS\system32\ialmrem.dll,UninstallW2KIGfx2ID PCI\VEN_8086&DEV_27A6 PCI\VEN_8086&DEV_27A2
    Interactive Petrophysics V3.5-->MsiExec.exe /I{19EFD2E5-4A4C-44BA-A730-D1513F77D2E6}
    J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
    Java Runtime Environment 1.1-->C:\WINDOWS\uninst.exe -f"C:\Program Files\JavaSoft\JRE\1.1\lib\DeIsL3.isu"
    Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216010FF}
    Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
    Kaspersky Anti-Virus 6.0 for Windows Workstations-->MsiExec.exe /I{79B986AD-54D8-4498-AA06-89808829ACC0}
    Kaspersky Anti-Virus 6.0 for Windows Workstations-->MsiExec.exe /I{79B986AD-54D8-4498-AA06-89808829ACC0}
    KhalInstallWrapper-->MsiExec.exe /I{3101CB58-3482-4D21-AF1A-7057FC935355}
    Landmark LAM 2003-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{60985D0D-56D3-4558-86F8-3ECF6C1C448B}\Setup.exe" -l0x9 -uninst
    Landmark LAM W2000-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{99F2697D-EDC1-11D2-B8C3-00C04F8EEBF9}\Setup.exe"
    Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
    Les Indispensables Éducation pour Microsoft Office-->MsiExec.exe /X{75F3A4B2-F6E8-434D-A2EF-DBBC016C6CB2}
    Logiciel Intel(R) PROSet/Wireless-->C:\WINDOWS\Installer\iProInst.exe
    Logitech Desktop Messenger-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}\SETUP.EXE" -l0x40c UNINSTALL
    Logitech SetPoint-->C:\Program Files\InstallShield Installation Information\{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}\setup.exe -runfromtemp -l0x040c -removeonly
    Loupe-->C:\WINDOWS\st6unst.exe -n "C:\Program Files\Loupe\ST6UNST.LOG"
    Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
    mCore-->MsiExec.exe /I{E81667C6-2856-46D6-ABEA-6A2F42166779}
    MCU-->MsiExec.exe /I{D2988E9B-C73F-422C-AD4B-A66EBE257120}
    mDrWiFi-->MsiExec.exe /I{F6090A17-0967-4A8A-B3C3-422A1B514D49}
    MediaDirect-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9C6978E8-B6D0-4AB7-A7A0-D81A74FBF745}\Setup.exe" -l0x40c -cluninstall
    Menus intelligents (Windows Live Toolbar)-->MsiExec.exe /X{0CC70FEF-5068-4CD5-B4DE-86FFD98EC929}
    Merak Value Management Suite 2001-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8325D9DE-576B-43C2-B3D3-302638B2BFCE}\setup.exe" UNINSTALL
    mHlpDell-->MsiExec.exe /I{49D687E5-6784-431B-A0A2-2F23B8CC5A1B}
    Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
    Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
    Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
    Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
    Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{3F7924B9-D148-3141-87B1-68F36043A940}
    Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
    Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{511DF669-2930-30C0-8EB6-552887E29EC8}
    Microsoft .NET Framework 3.0 Service Pack 1-->MsiExec.exe /I{2BA00471-0328-3743-93BD-FA813353A783}
    Microsoft .NET Framework 3.5 Language Pack - fra-->MsiExec.exe /I{5B76AEA2-D4E5-3B55-B965-ACC36AE0EAFC}
    Microsoft .NET Framework 3.5-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setup.exe
    Microsoft .NET Framework 3.5-->MsiExec.exe /I{2FC099BD-AC9B-33EB-809C-D332E1B27C40}
    Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
    Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
    Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
    Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
    Microsoft Silverlight-->MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
    Microsoft SQL Server Compact 3.5 Design Tools FRA-->MsiExec.exe /X{043ECF7B-4724-4F7B-8A9D-BC22719E95F7}
    Microsoft SQL Server Compact 3.5 FRA-->MsiExec.exe /I{BE361597-42AC-4513-9BA6-FFAB310038FB}
    Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
    Microsoft Visual Basic 2008 Express - Français-->C:\Program Files\Microsoft Visual Studio 9.0\Microsoft Visual Basic 2008 Express Edition - FRA\setup.exe
    Microsoft Visual Basic 2008 Express Edition - FRA-->MsiExec.exe /X{ACC61C04-48C5-3F6F-977B-AD33E94E5F40}
    Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
    Microsoft Windows SDK for Visual Studio 2008 Express Tools for .NET Framework-->MsiExec.exe /X{AB47EEE8-507B-331F-AA28-B7C7257F014C}
    Microsoft Windows SDK for Visual Studio 2008 Express Tools for Win32-->MsiExec.exe /X{07FCBED5-94C3-4F94-B9D3-360FA27C7B06}
    Microsoft Works-->MsiExec.exe /I{6B1CB38D-E2E4-4A30-933D-EFDEBA76AD9C}
    Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
    mIWA-->MsiExec.exe /I{3E9D596A-61D4-4239-BD19-2DB984D2A16F}
    mLogView-->MsiExec.exe /I{0E2B0B41-7E08-4F9F-B21F-41C4133F43B7}
    mMHouse-->MsiExec.exe /I{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}
    Mobile Phone Suite Easy Synchronization-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AC134D03-97F1-45B9-B32A-52E885AFA895}\setup.exe" -l0x40c
    Modem Helper-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F142D56-3326-11D5-B229-002078017FBF}\setup.exe" -l0x40c ControlPanel
    Module linguistique Microsoft .NET Framework 3.5 - fra-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack - fra\setup.exe
    mPfMgr-->MsiExec.exe /I{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}
    mPfWiz-->MsiExec.exe /I{90B0D222-8C21-4B35-9262-53B042F18AF9}
    mProSafe-->MsiExec.exe /I{23FB368F-1399-4EAC-817C-4B83ECBE3D83}
    mSSO-->MsiExec.exe /I{06BE8AFD-A8E2-4B63-BAE7-287016D16ACB}
    MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
    MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
    MSXML 6.0 Parser (KB933579)-->MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}
    mWlsSafe-->MsiExec.exe /I{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}
    mWMI-->MsiExec.exe /I{63DB9CCD-2B56-4217-9A3D-507AC78320CA}
    mXML-->MsiExec.exe /I{9CC89556-3578-48DD-8408-04E66EBEF401}
    mZConfig-->MsiExec.exe /I{94658027-9F16-4509-BBD7-A59FE57C3023}
    NetWaiting-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F92ABBB-6BBF-11D5-B229-002078017FBF}\setup.exe" -l0x40c ControlPanel
    NeuraLog-->MsiExec.exe /I{F56519A4-AFCC-4950-8214-DE5C0758EE1F}
    NeuraMap-->MsiExec.exe /I{59845577-6067-4C77-966B-52DF5DB857A5}
    NeuraView-->MsiExec.exe /I{662A038E-35F5-48CA-852B-5B7B004399A4}
    Nikon View 5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AAB84E83-C8DF-4752-9DFC-2E2A48EE5E9F}\setup.exe" UNINSTALL
    Nokia Connectivity Cable Driver-->MsiExec.exe /X{6882DD11-33B8-4DEA-8305-7E765BF74BD3}
    Nokia PC Suite-->MsiExec.exe /I{531317A5-586A-4E36-87C1-CA823447B375}
    OFM 2009.1-->MsiExec.exe /I{9E78E331-4882-4553-80C6-C783357F31F9}
    Orange Preload-->MsiExec.exe /I{38496EC2-78B7-412A-9398-FC6B7DB8E182}
    OutlookAddinSetup-->MsiExec.exe /I{9BDEF074-020E-458D-ADC5-8FF68E0C9B56}
    Paradigm Licenses Manager for GOCAD and SKUA (FLEXnet 11.6 - Windows 32-bits)-->MsiExec.exe /X{4E0D6448-1D65-4239-BD72-BEF4B8032DAB}
    PC Connectivity Solution-->MsiExec.exe /I{066D65EA-ED53-44E4-A96A-F81B6E409D2E}
    PDFCreator-->C:\Program Files\Capsoft\PDFCreator\uninstpw.exe C:\Program Files\Capsoft\PDFCreator
    PDFCreator-->C:\Program Files\PDFCreator\unins000.exe
    PDSView 3.2-->MsiExec.exe /I{D4EB36BC-8D3B-47B3-A020-2DAA219D26A9}
    PETRA-->C:\geoplus1\UNWISE.EXE C:\geoplus1\INSTALL.LOG
    Petrel 2005-->MsiExec.exe /I{34F191E5-F4F3-4F10-AFB8-CEAAB2D42F0E}
    Petrel 2008-->MsiExec.exe /I{4959CDAB-1A21-4CB7-B753-6ABAD3FFB11C}
    Petrolog 10.5.3-->MsiExec.exe /X{7BA22AC8-F45E-4FA3-BB42-9724C3EFABE9}
    PowerLog-->C:\WINDOWS\IsUninst.exe -fC:\Pwrlog32\Uninst.isu
    Prizm Chart Utility v3.1-->C:\WINDOWS\st6unst.exe -n "C:\Program Files\PrizmChartUtilityv31\ST6UNST.LOG"
    PTA-->MsiExec.exe /I{10EE139B-21D2-49B1-882C-AC54F0C88A7B}
    QuickSet-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C5074CC4-0E26-4716-A307-960272A90040}\setup.exe" -l0x40c APPDRVNT4
    QuickTime-->MsiExec.exe /I{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}
    Raider3d for Petrel 1.4.5-publish1-->"C:\Program Files\Schlumberger\Petrel 2005\unins000.exe"
    RealSpace Viewer-->C:\PROGRA~1\LIVEPI~1\REALSP~1\UNWISE.EXE C:\PROGRA~1\LIVEPI~1\REALSP~1\VIEWERS_INSTALL.LOG
    RockWorks 14-->"C:\Program Files\RockWare\unins000.exe"
    Roxio DLA-->MsiExec.exe /I{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
    Roxio MyDVD LE-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
    Roxio RecordNow Audio-->MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382}
    Roxio RecordNow Copy-->MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629}
    Roxio RecordNow Data-->MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205}
    Saphir 3.20-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{1DFE8F5E-CC62-4E08-9D96-E10CB85C6A7E}
    Schlumberger Log Data Toolbox-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{8CA86011-FD53-4B02-AA01-4E07FB0796C0}
    Search Settings 1.2.1-->MsiExec.exe /X{0B1AAC97-8563-41D9-AE47-58E6A222F0E1}
    SearchAssist-->C:\DELL\SearchAssist\UninstSA.bat
    Seismic Processing Workshop (SPW)-->C:\WINDOWS\uninst.exe -f"C:\Program Files\pgc\DeIsL6.isu" -cC:\PROGRA~1\pgc\_ISREG32.DLL
    Sentinel Protection Installer 7.5.0-->MsiExec.exe /I{A5A63519-F5C2-4F4A-849A-F28A1AB3D522}
    SereneScreen Marine Aquarium Time-->"C:\Program Files\SereneScreen\Marine Aquarium Time\unins000.exe"
    Skype™ 3.8-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
    Sonic Activation Module-->MsiExec.exe /I{5B6BE547-21E2-49CA-B2E2-6A5F470593B1}
    Spelling Dictionaries Support For Adobe Reader 9-->MsiExec.exe /I{AC76BA86-7AD7-5464-3428-900000000004}
    SPW-->MsiExec.exe /I{38788F54-EB96-4F6D-A8B9-E20EC3564D18}
    Spyware Terminator-->"C:\Program Files\Spyware Terminator\unins000.exe"
    Strater-->MsiExec.exe /I{70D74C50-66FB-471B-B917-24E20CAC17B9}
    Surfer 8-->MsiExec.exe /I{18A64EE3-F1FE-46F3-AAE1-8CDB35B6038B}
    Surligneur (Windows Live Toolbar)-->MsiExec.exe /X{81B5F83F-2291-48B0-8375-36B63A9BF5B0}
    SV SEG-Y Trace Viewer-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\GeoGraphix\UninstSEGYTV.isu"
    Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
    TatukGIS Free Coordinate Calculator 1.2.0-->"C:\Program Files\TatukGIS\Utilities\ttkCal\unins000.exe"
    The KINGDOM Suite 7.4-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\KingdomSuite\TKS74\Uninst.isu"
    Tiscali Internet-->MsiExec.exe /I{58B2B6D3-E5FF-4D16-87AC-52CC5717C7C6}
    VFRUN650I-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Compaq Computer Corporation\VFRUN650I\Uninst.isu"
    VideoLAN VLC media player 0.8.6a-->C:\Program Files\VideoLAN\VLC\uninstall.exe
    Voxler-->MsiExec.exe /I{632A536D-68E0-40CA-827C-D569C3A36750}
    Windows Driver Package - Nokia (WUDFRd) WPD (03/19/2007 6.83.31.1)-->C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccswpddri_039E7E24575DBAE6A389611AF28F4EB97729D33E\pccswpddriver.inf
    Windows Driver Package - Nokia Modem (02/15/2007 3.1)-->C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccs_bluet_8B37DC72918CCD58A6EC20373AF6242B037A293B\pccs_bluetooth.inf
    Windows Driver Package - Nokia Modem (06/12/2006 6.81.0.21)-->C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokbtmdm_62A340731F8930057B44B8864F236850B0D49D65\nokbtmdm.inf
    Windows Live Favorites pour Windows Live Toolbar-->MsiExec.exe /X{786C4AD1-DCBA-49A6-B0EF-B317A344BD66}
    Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
    Windows Live OneCare Contrôle parental-->MsiExec.exe /X{3677FD57-D0DE-47CD-942E-99913D04C135}
    Windows Live Toolbar-->"C:\Program Files\Windows Live Toolbar\UnInstall.exe" {0A8C97AD-DEED-4894-B446-3ABA95A77D0D}
    Windows Live Toolbar-->MsiExec.exe /X{0A8C97AD-DEED-4894-B446-3ABA95A77D0D}
    Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
    Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
    Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
    Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
    Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
    XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"
    Yahoo! Toolbar-->C:\PROGRA~1\Yahoo!\Common\UNYT_W~1.EXE

    ======Security center information======

    AV: Kaspersky Anti-Virus
    FW: Kaspersky Anti-Virus

    ======System event log======

    Computer Name: DHC36R2J
    Event Code: 1007
    Message: Votre ordinateur a automatiquement configuré l'adresse IP pour la
    carte avec l'adresse réseau 0019D23D6C3E. L'adresse IP utilisée est 169.254.10.104.

    Record Number: 39418
    Source Name: Dhcp
    Time Written: 20090602101749.000000+120
    Event Type: Avertissement
    User:

    Computer Name: DHC36R2J
    Event Code: 2504
    Message: Le serveur n'a pas pu se lier au transport \Device\NetBT_Tcpip_{FC2061B7-26AD-4F6A-985B-5CF1BFC43C64}.

    Record Number: 39417
    Source Name: Server
    Time Written: 20090602101749.000000+120
    Event Type: Avertissement
    User:

    Computer Name: DHC36R2J
    Event Code: 30013
    Message: L'allocateur DHCP s'est désactivé sur l'adresse IP 169.254.10.104,
    car l'adresse IP est en dehors de l'étendue 192.168.0.0/255.255.255.0
    à partir de laquelle les adresses sont allouées aux clients DHCP.
    Pour activer l'allocateur sur cette adresse IP,
    modifiez l'étendue pour y intégrer l'adresse IP,,
    ou modifiez l'adresse IP pour qu'elle puisse faire partie de l'étendue.

    Record Number: 39416
    Source Name: ipnathlp
    Time Written: 20090602101745.000000+120
    Event Type: erreur
    User:

    Computer Name: DHC36R2J
    Event Code: 30005
    Message: L'allocateur DHCP a détecté un serveur DHCP dont l'adresse IP est 192.168.0.1
    sur le même réseau que l'interface dont l'adresse IP est 192.168.0.77.
    L'allocateur s'est désactivé sur l'interface pour éviter
    d'embrouiller les clients DHCP.

    Record Number: 39415
    Source Name: ipnathlp
    Time Written: 20090602101745.000000+120
    Event Type: erreur
    User:

    Computer Name: DHC36R2J
    Event Code: 30009
    Message: L'allocateur DHCP a rencontré une erreur réseau en essayant de répondre
    sur l'adresse IP 252.47.137.102 à la demande d'un client.
    La donnée est le code de l'erreur.

    Record Number: 39414
    Source Name: ipnathlp
    Time Written: 20090602101745.000000+120
    Event Type: erreur
    User:

    =====Application event log=====

    Computer Name: DHC36R2J
    Event Code: 1004
    Message: Échec de détection du produit '{5B6BE547-21E2-49CA-B2E2-6A5F470593B1}', fonctionnalité 'SoleFeature', composant '{B7195B4D-220F-4055-B216-675DFB956538}. La ressource 'C:\Program Files\Fichiers communs\InstallShield\UpdateService\_ispmres.dll' n'existe pas

    Record Number: 19026
    Source Name: MsiInstaller
    Time Written: 20090527213017.000000+120
    Event Type: Avertissement
    User: DHC36R2J\baouche rafik

    Computer Name: DHC36R2J
    Event Code: 1001
    Message: Échec de détection du produit '{5B6BE547-21E2-49CA-B2E2-6A5F470593B1}', fonctionnalité 'SoleFeature' lors de la demande du composant '{D2D7B4BF-6CCA-11D5-8B3F-00105A9846E9}'

    Record Number: 19025
    Source Name: MsiInstaller
    Time Written: 20090527213017.000000+120
    Event Type: Avertissement
    User: DHC36R2J\baouche rafik

    Computer Name: DHC36R2J
    Event Code: 1004
    Message: Échec de détection du produit '{5B6BE547-21E2-49CA-B2E2-6A5F470593B1}', fonctionnalité 'SoleFeature', composant '{B7195B4D-220F-4055-B216-675DFB956538}. La ressource 'C:\Program Files\Fichiers communs\InstallShield\UpdateService\_ispmres.dll' n'existe pas

    Record Number: 19024
    Source Name: MsiInstaller
    Time Written: 20090527213017.000000+120
    Event Type: Avertissement
    User: DHC36R2J\baouche rafik

    Computer Name: DHC36R2J
    Event Code: 1001
    Message: Échec de détection du produit '{5B6BE547-21E2-49CA-B2E2-6A5F470593B1}', fonctionnalité 'SoleFeature' lors de la demande du composant '{D2D7B4BF-6CCA-11D5-8B3F-00105A9846E9}'

    Record Number: 19023
    Source Name: MsiInstaller
    Time Written: 20090527213017.000000+120
    Event Type: Avertissement
    User: DHC36R2J\baouche rafik

    Computer Name: DHC36R2J
    Event Code: 1004
    Message: Échec de détection du produit '{5B6BE547-21E2-49CA-B2E2-6A5F470593B1}', fonctionnalité 'SoleFeature', composant '{B7195B4D-220F-4055-B216-675DFB956538}. La ressource 'C:\Program Files\Fichiers communs\InstallShield\UpdateService\_ispmres.dll' n'existe pas

    Record Number: 19022
    Source Name: MsiInstaller
    Time Written: 20090527213017.000000+120
    Event Type: Avertissement
    User: DHC36R2J\baouche rafik

    ======Environment variables======

    "ComSpec"=%SystemRoot%\system32\cmd.exe
    "Path"=c:\program files\pc connectivity solution\;%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;c:\program files\fichiers communs\roxio shared\dllshared\;c:\program files\fichiers communs\adobe\agl;c:\petro95;c:\dev-c++\bin;c:\program files\adobe\frameviewer5.5\;c:\ecl\home;c:\ecl\macros;c:\program files\spt\olga;C:\Program Files\SPT\OLGA\OlgaExecutables;;c:\program files\spt\flexlm;;C:\Landmark\LAM\bin;C:\Program Files\GeoGraphix\System\;C:\Program Files\GeoGraphix\DataDirect\ODBC32v50\Drivers\;C:\Program Files\IVS\bin;C:\Program Files\QuickTime\QTSystem\
    "windir"=%SystemRoot%
    "FP_NO_HOST_CHECK"=NO
    "OS"=Windows_NT
    "PROCESSOR_ARCHITECTURE"=x86
    "PROCESSOR_LEVEL"=6
    "PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 6, GenuineIntel
    "PROCESSOR_REVISION"=0f06
    "NUMBER_OF_PROCESSORS"=2
    "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
    "TEMP"=%SystemRoot%\TEMP
    "TMP"=%SystemRoot%\TEMP
    "SonicCentral"=C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\
    "GS_LIB"=C:\petro95\gscript\lib;C:\petro95\gscript\fonts
    "GS_DLL"=C:\petro95\gscript\bin\gsdll32.dll
    "PLOG_DIR"=C:\petro95\
    "LOGIN_DIR"=C:\petro95\
    "LIBRARY_PATH"=C:\DEV-C++\LIB
    "C_INCLUDE_PATH"=C:\DEV-C++\INCLUDE
    "PYTHONHOME"=C:\Python25\
    "RMS_OW_2003"=2003
    "RMS_PETROSIM"=9938@fast_server
    "RMS_IKSIM"=9938@fast_server
    "Ocean2008Home"=C:\Program Files\Schlumberger\Petrel 2008\
    "PXCLUSTER_ENV"=C:\Program Files\Petroleum Experts\IPM 6\Samples
    "IVSHOME"=C:\Program Files\IVS
    "HOME"=C:\Program Files\IVS
    "CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
    "QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip
    "METAWINPATH"=C:\Program Files\Baker Atlas\Atlas MetaFile Viewer

    -----------------EOF-----------------
    CORDIALEMENT
    0
    1. Utilisateur anonyme
       
      Bonjour

      Il manque le rapport log.txt que tu trouveras dans C:\rsit.
      Poste le stp merci
      0
  3. minhaf Messages postés 23 Date d'inscription   Statut Membre 1
     
    Merci de penser à moi et voila le Log :

    Logfile of random's system information tool 1.06 (written by random/random)
    Run by baouche rafik at 2009-06-03 21:53:08
    Microsoft Windows XP Édition familiale Service Pack 3
    System drive C: has 15 GB (22%) free of 71 GB
    Total RAM: 1014 MB (38% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 21:54:34, on 03/06/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16827)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTSERV.EXE
    C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\system32\crypserv.exe
    C:\Program Files\GeoGraphix\Tools\GGXNASrv.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Logitech\Easy Synchronization\servicestub.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
    C:\Program Files\PDGM\licenses\lmgrd.exe
    C:\Program Files\PDGM\licenses\lmgrd.exe
    C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
    C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
    C:\Pwrlog32\PowerLogFlexlmComponents\lmgrd.exe
    C:\WINDOWS\system32\rclumad.exe
    C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
    C:\Program Files\Schlumberger\Petrel 2005\Flexlm95\lmgrd.exe
    C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
    C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
    C:\Program Files\PDGM\licenses\gocadlmd.exe
    C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
    C:\Program Files\Spyware Terminator\sp_rsser.exe
    C:\Program Files\Schlumberger\Petrel 2005\Flexlm95\lmgrd.slb.exe
    C:\Program Files\GeoGraphix\AdaptiveServer90\win32\dbsrv9.exe
    C:\Pwrlog32\PowerLogFlexlmComponents\petcom.exe
    C:\WINDOWS\system32\stacsv.exe
    C:\Program Files\ROXAR\FLEXlm 11.3 Win32\geomaticLM.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\GeoGraphix\Tools\GeoSync.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\WINDOWS\system32\hkcmd.exe
    C:\WINDOWS\system32\igfxpers.exe
    C:\WINDOWS\stsystra.exe
    C:\WINDOWS\system32\igfxsrvc.exe
    C:\Program Files\Dell\QuickSet\quickset.exe
    C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
    C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
    C:\Program Files\Dell\MediaDirect\PCMService.exe
    C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
    C:\WINDOWS\System32\DLA\DLACTRLW.EXE
    C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
    C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
    C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe
    C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe
    C:\Program Files\NetWaiting\netWaiting.exe
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
    C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
    C:\Program Files\Digital Line Detect\DLG.exe
    C:\Program Files\FotoStation Easy\FotoStation Easy AutoLaunch.exe
    C:\Program Files\Logitech\SetPoint\SetPoint.exe
    C:\Program Files\Nikon\NkView5\NkvMon.exe
    C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.EXE
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\baouche rafik\Bureau\RSIT.exe
    C:\Program Files\trend micro\baouche rafik.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell-row&channel=fr&ibd=5070201
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60446
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell-row&channel=fr&ibd=5070201
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.search.yahoo.com/
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
    O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O2 - BHO: Windows Live OneCare Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Contrôle parental\fssbho.dll
    O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O3 - Toolbar: Systran40premi.IEPlugIn - {CFB25594-4D5F-11D6-AB7B-00B0D094B576} - C:\Program Files\Systran\4_0\Premium\IEPlugIn.dll
    O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
    O3 - Toolbar: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
    O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
    O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
    O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
    O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
    O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -startup
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe"
    O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
    O4 - HKLM\..\Run: [Easy Synchronization] C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
    O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Dell PC Fax\fm3032.exe" /s
    O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
    O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
    O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
    O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Contrôle parental\fssui.exe" -autorun
    O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
    O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -scheduler
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
    O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
    O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe"
    O4 - HKLM\..\RunOnce: [Easy Synchronization] C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe --ports
    O4 - HKCU\..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netWaiting.exe
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: Digital Line Detect.lnk = ?
    O4 - Global Startup: FotoStation Easy AutoLaunch.lnk = C:\Program Files\FotoStation Easy\FotoStation Easy AutoLaunch.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
    O4 - Global Startup: NkvMon.exe.lnk = C:\Program Files\Nikon\NkView5\NkvMon.exe
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
    O8 - Extra context menu item: Ajouter la cible du lien à un fichier PDF existant - res://C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
    O8 - Extra context menu item: Ajouter à Kaspersky Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\ie_banner_deny.htm
    O8 - Extra context menu item: Ajouter à un fichier PDF existant - res://C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convertir au format Adobe PDF - res://C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
    O8 - Extra context menu item: Convertir la cible du lien au format Adobe PDF - res://C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\SCIEPlgn.dll
    O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\WINDOWS\system32\shdocvw.dll
    O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\WINDOWS\system32\shdocvw.dll
    O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
    O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
    O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/yinst/yinst_current.cab
    O16 - DPF: {6A7644D2-5B2D-440A-B909-2978A2919E74} (DemoLauncher Contrôle) - mk:@MSITStore:C:\DOCUME~1\BAOUCH~1\LOCALS~1\Temp\Répertoire%20temporaire%201%20pour%20DataSurfer_Users_Manual.zip\DataSurfer.chm::/HelpControl.ocx
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O18 - Protocol: bw+0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw+0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwg0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0s - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: offline-8876480 - {B04EAB0E-4F7F-4562-B07C-39823F0D6E9D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
    O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
    O20 - AppInit_DLLs: acaptuser32.dll,C:\PROGRA~1\KASPER~1\KASPER~1.0FO\adialhk.dll
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe
    O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Crypkey License - CrypKey (Canada) Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
    O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: GGX List Service (v2) - Landmark Graphics Corporation - C:\Program Files\GeoGraphix\Tools\GeoSync.exe
    O23 - Service: GGX Network Access Service - Landmark Graphics Corporation - C:\Program Files\GeoGraphix\Tools\GGXNASrv.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTSERV.EXE
    O23 - Service: Logitech Easy Synchronization - Unknown owner - C:\Program Files\Logitech\Easy Synchronization\servicestub.exe
    O23 - Service: PDGM - Acresso Software Inc. - C:\Program Files\PDGM\licenses\lmgrd.exe
    O23 - Service: PM90_sp4 - Macrovision Corporation - C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
    O23 - Service: Powerlog - Macrovision Corporation - C:\Pwrlog32\PowerLogFlexlmComponents\lmgrd.exe
    O23 - Service: Cluster Manager Service V2 (rcluma) - Unknown owner - C:\WINDOWS\system32\rclumad.exe
    O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    O23 - Service: ROXAR - Macrovision Corporation - C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
    O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    O23 - Service: schlumberger - Macrovision Corporation - C:\Program Files\Schlumberger\Petrel 2005\Flexlm95\lmgrd.exe
    O23 - Service: Sentinel Keys Server (SentinelKeysServer) - SafeNet, Inc. - C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
    O23 - Service: Sentinel Protection Server (SentinelProtectionServer) - SafeNet, Inc - C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
    O23 - Service: GGX Database Service (SQLANYs_GGX) - iAnywhere Solutions, Inc. - C:\Program Files\GeoGraphix\AdaptiveServer90\win32\dbsrv9.exe
    O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\WINDOWS\system32\stacsv.exe
    O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
    0
  4. minhaf Messages postés 23 Date d'inscription   Statut Membre 1
     
    EN TOUS CAS MERCI BEAUCOUP POUR VOTRE PRECIEUSE AIDE
    0
    1. Utilisateur anonyme
       
      Re

      # Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
      Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
      Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

      Télécharge et install UsbFix de C_XX & Chiquitine29

      Tutorial de Malekal_Morte si besoin, merci à lui : https://www.malekal.com/usbfix-supprimer-virus-usb/

      Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d avoir été infectés sans les ouvrir

      # Double clic sur le raccourci UsbFix présent sur ton bureau.

      # Choisi l option 1 (Recherche)

      # Laisse travailler l outil.

      # Ensuite post le rapport UsbFix.txt qui apparaîtra.

      # Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )

      ( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

      0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. minhaf Messages postés 23 Date d'inscription   Statut Membre 1
     
    Voila le rapport obtenu - cordialement

    ############################## [ UsbFix V3.028 | Scan ]

    # User : baouche rafik (Administrateurs) # DHC36R2J
    # Update on 02/06/09 by Chiquitine29, C_XX & Chimay8
    # WebSite : http://pagesperso-orange.fr/NosTools/usbfix.html
    # Start at: 19:32:31 | 04/06/2009

    # Intel(R) Core(TM)2 CPU T5500 @ 1.66GHz
    # Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
    # Internet Explorer 8.0.6001.18702
    # Windows Firewall Status : Disabled
    # AV : Kaspersky Anti-Virus 6.0.3.837 [ Enabled | Updated ]
    # FW : Kaspersky Anti-Virus[ Enabled ]6.0.3.837

    # C:\ # Disque fixe local # 69,44 Go (14,46 Go free) # NTFS
    # D:\ # Disque CD-ROM
    # E:\ # Disque amovible # 491,23 Mo (299,66 Mo free) [MightyDrive] # FAT
    # G:\ # Disque amovible # 1,95 Go (30,41 Mo free) # FAT

    ############################## [ Processus actifs ]

    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTSERV.EXE
    C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\system32\crypserv.exe
    C:\Program Files\Windows Live\Contrôle parental\fsssvc.exe
    C:\Program Files\GeoGraphix\Tools\GGXNASrv.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Logitech\Easy Synchronization\servicestub.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
    C:\Program Files\PDGM\licenses\lmgrd.exe
    C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
    C:\Program Files\PDGM\licenses\lmgrd.exe
    C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
    C:\Pwrlog32\PowerLogFlexlmComponents\lmgrd.exe
    C:\WINDOWS\system32\rclumad.exe
    C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
    C:\Program Files\Schlumberger\Petrel 2005\Flexlm95\lmgrd.exe
    C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
    C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
    C:\Program Files\PDGM\licenses\gocadlmd.exe
    C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
    C:\Program Files\Spyware Terminator\sp_rsser.exe
    C:\Program Files\GeoGraphix\AdaptiveServer90\win32\dbsrv9.exe
    C:\Program Files\Schlumberger\Petrel 2005\Flexlm95\lmgrd.slb.exe
    C:\WINDOWS\system32\stacsv.exe
    C:\Pwrlog32\PowerLogFlexlmComponents\petcom.exe
    C:\Program Files\ROXAR\FLEXlm 11.3 Win32\geomaticLM.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\GeoGraphix\Tools\GeoSync.exe
    C:\WINDOWS\System32\alg.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\igfxpers.exe
    C:\WINDOWS\stsystra.exe
    C:\Program Files\Dell\QuickSet\quickset.exe
    C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
    C:\WINDOWS\system32\igfxsrvc.exe
    C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
    C:\Program Files\Dell\MediaDirect\PCMService.exe
    C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
    C:\WINDOWS\System32\DLA\DLACTRLW.EXE
    C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
    C:\WINDOWS\system32\wbem\wmiprvse.exe
    C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
    C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe
    C:\Program Files\NetWaiting\netWaiting.exe
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
    C:\Program Files\Digital Line Detect\DLG.exe
    C:\Program Files\FotoStation Easy\FotoStation Easy AutoLaunch.exe
    C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
    C:\Program Files\Logitech\SetPoint\SetPoint.exe
    C:\Program Files\Nikon\NkView5\NkvMon.exe
    C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.EXE
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\system32\wbem\wmiprvse.exe

    ################## [ Registre Startup ]

    HKCU_Main: "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
    HKCU_Main: "Search Page"=""
    HKCU_Main: "Start Page"="https://fr.yahoo.com/"
    HKCU_Main: "Window Title"=""
    HKLM_logon: "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
    HKLM_logon: "DefaultUserName"="baouche rafik"
    HKLM_logon: "AltDefaultUserName"="baouche rafik"
    HKLM_logon: "LegalNoticeCaption"=""
    HKLM_logon: "LegalNoticeText"=""
    HKLM_Run: SynTPEnh=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    HKLM_Run: igfxtray=C:\WINDOWS\system32\igfxtray.exe
    HKLM_Run: igfxhkcmd=C:\WINDOWS\system32\hkcmd.exe
    HKLM_Run: igfxpers=C:\WINDOWS\system32\igfxpers.exe
    HKLM_Run: SigmatelSysTrayApp=stsystra.exe
    HKLM_Run: Dell QuickSet=C:\Program Files\Dell\QuickSet\quickset.exe
    HKLM_Run: IntelZeroConfig="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
    HKLM_Run: IntelWireless="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
    HKLM_Run: ISUSPM Startup="C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -startup
    HKLM_Run: ISUSScheduler="C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
    HKLM_Run: PCMService="C:\Program Files\Dell\MediaDirect\PCMService.exe"
    HKLM_Run: Kernel and Hardware Abstraction Layer=KHALMNPR.EXE
    HKLM_Run: Easy Synchronization=C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
    HKLM_Run: FaxCenterServer="C:\Program Files\Dell PC Fax\fm3032.exe" /s
    HKLM_Run: DLA=C:\WINDOWS\System32\DLA\DLACTRLW.EXE
    HKLM_Run: PCSuiteTrayApplication=C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
    HKLM_Run: MSKDetectorExe=C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
    HKLM_Run: fssui="C:\Program Files\Windows Live\Contrôle parental\fssui.exe" -autorun
    HKLM_Run: SpywareTerminator="C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
    HKLM_Run: ISUSPM="C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -scheduler
    HKLM_Run: SunJavaUpdateSched="C:\Program Files\Java\jre6\bin\jusched.exe"
    HKLM_Run: QuickTime Task="C:\Program Files\QuickTime\qttask.exe" -atboottime
    HKLM_Run: Adobe Acrobat Speed Launcher="C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
    HKLM_Run: Acrobat Assistant 8.0="C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
    HKLM_Run: AVP="C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe"
    HKLM_Run: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
    HKCU_Run: ModemOnHold=C:\Program Files\NetWaiting\netWaiting.exe
    HKCU_Run: LDM=C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    HKCU_Run: PcSync=C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
    HKCU_Run: ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe
    HKCU_Run: swg=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

    ################## [ Fichiers # Dossiers infectieux ]

    Found ! C:\desktop.ini
    Found ! C:\autorun.inf
    Found ! E:\AUTORUN.FCB
    Found ! E:\winfile.jpg
    Found ! E:\autorun.inf
    Found ! G:\explorer.exe
    Found ! G:\winfile.jpg
    Found ! G:\autorun.inf
    Found ! "G:\.\RECYCLER\RECYCLER"
    Found ! "G:\RECYCLER\RECYCLER"
    Found ! G:\recycler\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx

    ################## [ Registre # Clés Run infectieuses ]

    Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe
    Found ! HKLM\software\microsoft\windows nt\currentversion\image file execution options\drwtsn32.exe
    Found ! HKLM\software\microsoft\windows nt\currentversion\image file execution options\dwwinxp.exe
    Found ! HKLM\software\microsoft\security center "AntiVirusOverride" ( 0x1 )

    ################## [ Registre # Mountpoints2 ]

    HKCU\...\Explorer\MountPoints2\{150a8bf1-ded9-11db-b961-00188bb1e55d}\Shell\AutoRun\Command
    HKCU\...\Explorer\MountPoints2\{150a8bf1-ded9-11db-b961-00188bb1e55d}\Shell\open\Command
    HKCU\...\Explorer\MountPoints2\{31a3f0a6-42f8-11de-bc04-00188bb1e55d}\Shell\AutoRun\Command
    HKCU\...\Explorer\MountPoints2\{31a3f0a7-42f8-11de-bc04-00188bb1e55d}\Shell\AutoRun\Command
    HKCU\...\Explorer\MountPoints2\{31a3f0a8-42f8-11de-bc04-00188bb1e55d}\Shell\AutoRun\Command
    HKCU\...\Explorer\MountPoints2\{403f3106-c07c-11dd-b8f1-00188bb1e55d}\Shell\AutoRun\Command
    HKCU\...\Explorer\MountPoints2\{42a68eb0-b0d4-11dd-b8c0-00188bb1e55d}\Shell\AutoRun\Command
    HKCU\...\Explorer\MountPoints2\{42a68eb0-b0d4-11dd-b8c0-00188bb1e55d}\Shell\explore\Command
    HKCU\...\Explorer\MountPoints2\{42a68eb0-b0d4-11dd-b8c0-00188bb1e55d}\Shell\open\Command
    HKCU\...\Explorer\MountPoints2\{485f7aeb-190d-11dd-b6c7-00188bb1e55d}\Shell\AutoRun\Command
    HKCU\...\Explorer\MountPoints2\{485f7aeb-190d-11dd-b6c7-00188bb1e55d}\Shell\explore\Command
    HKCU\...\Explorer\MountPoints2\{485f7aeb-190d-11dd-b6c7-00188bb1e55d}\Shell\open\Command
    HKCU\...\Explorer\MountPoints2\{4ad680db-15b9-11dd-b6ab-00188bb1e55d}\Shell\AutoRun\Command
    HKCU\...\Explorer\MountPoints2\{4ad680db-15b9-11dd-b6ab-00188bb1e55d}\Shell\open\Command
    HKCU\...\Explorer\MountPoints2\{4b09d1cf-086d-11dd-b691-00188bb1e55d}\Shell\AutoRun\Command
    HKCU\...\Explorer\MountPoints2\{4b09d1cf-086d-11dd-b691-00188bb1e55d}\Shell\open\Command
    HKCU\...\Explorer\MountPoints2\{558bdc82-41f3-11de-bc00-00188bb1e55d}\Shell\AutoRun\Command
    HKCU\...\Explorer\MountPoints2\{5dc29c95-377b-11dc-ba36-00188bb1e55d}\Shell\AutoRun\Command
    HKCU\...\Explorer\MountPoints2\{5dc29c95-377b-11dc-ba36-00188bb1e55d}\Shell\explore\Command
    HKCU\...\Explorer\MountPoints2\{5dc29c95-377b-11dc-ba36-00188bb1e55d}\Shell\open\Command
    HKCU\...\Explorer\MountPoints2\{694d33f4-2b13-11dc-b9fd-00188bb1e55d}\Shell\AutoRun\Command
    HKCU\...\Explorer\MountPoints2\{73105332-293b-11dc-b9e8-00188bb1e55d}\Shell\AutoRun\Command
    HKCU\...\Explorer\MountPoints2\{7310533b-293b-11dc-b9e8-00188bb1e55d}\Shell\AutoRun\Command
    HKCU\...\Explorer\MountPoints2\{73373725-43ae-11de-bc07-00188bb1e55d}\Shell\AutoRun\Command
    HKCU\...\Explorer\MountPoints2\{73373726-43ae-11de-bc07-00188bb1e55d}\Shell\AutoRun\Command
    HKCU\...\Explorer\MountPoints2\{74b0c56e-b53c-11db-b928-806d6172696f}\Shell\AutoRun\Command
    HKCU\...\Explorer\MountPoints2\{83e9b20a-b55b-11db-b92c-00188bb1e55d}\Shell\AutoRun\Command
    HKCU\...\Explorer\MountPoints2\{83e9b20e-b55b-11db-b92c-00188bb1e55d}\Shell\AutoRun\Command
    HKCU\...\Explorer\MountPoints2\{8769b75e-baa7-11db-b939-00188bb1e55d}\Shell\AutoRun\Command
    HKCU\...\Explorer\MountPoints2\{8bb5b0c8-e090-11dc-bb2a-00188bb1e55d}\Shell\AutoRun\Command
    HKCU\...\Explorer\MountPoints2\{8bb5b0c8-e090-11dc-bb2a-00188bb1e55d}\Shell\open\Command
    HKCU\...\Explorer\MountPoints2\{e29cb908-e862-11dd-b9af-0019d23d6c3e}\Shell\AutoRun\Command
    HKCU\...\Explorer\MountPoints2\{e29cb908-e862-11dd-b9af-0019d23d6c3e}\Shell\open\Command

    ################## [ ! Fin du rapport # UsbFix V3.028 ! ]
    0
    1. Utilisateur anonyme
       
      Re

      Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d avoir été infectés sans les ouvrir

      # Double clic sur le raccourci UsbFix présent sur ton bureau

      # choisi l option 2 (Suppression)

      # Ton bureau disparaîtra et le pc redémarrera.

      # Au redémarrage, UsbFix scannera ton pc, laisse travailler l outil.

      # Ensuite post le rapport UsbFix.txt qui apparaîtra avec le bureau.

      # Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )

      ( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )


      0
  7. minhaf
     
    ############################## [ UsbFix V3.028 | Cleaning ]

    # User : baouche rafik (Administrateurs) # DHC36R2J
    # Update on 02/06/09 by Chiquitine29, C_XX & Chimay8
    # WebSite : http://pagesperso-orange.fr/NosTools/usbfix.html
    # Start at: 20:58:51 | 04/06/2009

    # Intel(R) Core(TM)2 CPU T5500 @ 1.66GHz
    # Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
    # Internet Explorer 8.0.6001.18702
    # Windows Firewall Status : Enabled
    # AV : Kaspersky Anti-Virus 6.0.3.837 [ Enabled | Updated ]
    # FW : Kaspersky Anti-Virus[ Enabled ]6.0.3.837

    # C:\ # Disque fixe local # 69,44 Go (15,79 Go free) # NTFS
    # D:\ # Disque CD-ROM
    # E:\ # Disque amovible # 244,84 Mo (40,91 Mo free) [ ZINAFERIEL] # FAT
    # F:\ # Disque amovible # 979,97 Mo (304,02 Mo free) # FAT32

    ############################## [ Processus actifs ]

    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTSERV.EXE
    C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\system32\crypserv.exe
    C:\Program Files\Windows Live\Contrôle parental\fsssvc.exe
    C:\Program Files\GeoGraphix\Tools\GGXNASrv.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Logitech\Easy Synchronization\servicestub.exe
    C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
    C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
    C:\Pwrlog32\PowerLogFlexlmComponents\lmgrd.exe
    C:\WINDOWS\system32\rclumad.exe
    C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
    C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
    C:\Program Files\Schlumberger\Petrel 2005\Flexlm95\lmgrd.exe
    C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
    C:\Pwrlog32\PowerLogFlexlmComponents\petcom.exe
    C:\Program Files\ROXAR\FLEXlm 11.3 Win32\geomaticLM.exe
    C:\Program Files\Schlumberger\Petrel 2005\Flexlm95\lmgrd.slb.exe
    C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
    C:\Program Files\Spyware Terminator\sp_rsser.exe
    C:\Program Files\GeoGraphix\AdaptiveServer90\win32\dbsrv9.exe
    C:\WINDOWS\system32\stacsv.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\GeoGraphix\Tools\GeoSync.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe
    C:\WINDOWS\system32\wbem\wmiprvse.exe
    C:\WINDOWS\System32\alg.exe

    ################## [ Fichiers # Dossiers infectieux ]

    Deleted ! F:\desktop.ini
    Deleted ! F:\winfile.jpg
    Deleted ! F:\autorun.inf

    ################## [ Registre # Clés Run infectieuses ]

    ################## [ Registre # Mountpoints2 ]

    ################## [ Listing des fichiers présent ]

    [02/04/2007 20:35|--a------|124] - C:\.err
    [29/08/2008 19:29|--a------|110] - C:\.lock
    [02/06/2009 14:38|--a------|40] - C:\AUTOEXEC.BAT
    [03/06/2009 10:16|--a------|2268] - C:\autorun.PNF
    [05/02/2007 19:27|--ahs----|216] - C:\boot.ini
    [05/08/2004 14:00|-rahs----|4952] - C:\Bootfont.bin
    [17/01/2009 17:47|--a------|44382] - C:\cbm-01-17-09-164735.dmp
    [17/01/2009 21:11|--a------|43706] - C:\cbm-01-17-09-201141.dmp
    [19/01/2009 00:17|--a------|43052] - C:\cbm-01-18-09-231720.dmp
    [12/04/2009 17:52|--a------|43552] - C:\cbm-04-12-09-175158.dmp
    [02/02/2009 23:19|--a------|2115] - C:\CKINFO.TXT
    [27/03/2009 23:26|--a------|0] - C:\COMLOG.txt
    [20/08/2004 12:37|--a------|0] - C:\CONFIG.SYS
    [01/04/2009 10:06|--a------|6260] - C:\CTRESUNITS.PXDB
    [01/02/2007 03:24|-rah-----|5962] - C:\dell.sdr
    [03/06/2009 14:25|--a------|14047] - C:\dlcx.log
    [01/02/2009 22:43|--a------|1066] - C:\DtoL.log
    [24/04/2009 03:14|--a------|73780] - C:\example_hafou.emf
    [05/02/2009 22:31|--a------|0] - C:\FCM26.tmp
    [28/03/2009 22:02|--a------|59592] - C:\ghr-160-.--0
    [28/03/2009 21:41|--a------|69192] - C:\ghr-170-.--0
    [28/03/2009 22:59|--a------|69192] - C:\ghr-170-.--1
    [?|?|?] - C:\hiberfil.sys
    [25/01/2009 06:18|--a------|59268] - C:\in
    [05/02/2007 22:02|--a------|4128] - C:\INFCACHE.1
    [20/08/2004 12:37|--ah-----|0] - C:\IO.SYS
    [21/02/2009 14:55|---h-----|3638] - C:\ipfolder.ico
    [20/08/2004 12:37|--ah-----|0] - C:\MSDOS.SYS
    [05/08/2004 14:00|-rahs----|47564] - C:\NTDETECT.COM
    [04/10/2008 17:10|-rahs----|252240] - C:\ntldr
    [25/01/2009 06:18|--a------|59268] - C:\out
    [?|?|?] - C:\pagefile.sys
    [28/09/2008 14:48|--a------|73] - C:\pdfinfo.ini
    [28/05/2009 01:27|--a------|138] - C:\PetDump.txt
    [01/10/2008 15:53|--ah-----|268] - C:\sqmdata00.sqm
    [01/10/2008 22:50|--ah-----|268] - C:\sqmdata01.sqm
    [16/10/2008 23:55|--ah-----|268] - C:\sqmdata02.sqm
    [17/10/2008 11:15|--ah-----|268] - C:\sqmdata03.sqm
    [31/10/2008 13:21|--ah-----|268] - C:\sqmdata04.sqm
    [16/11/2008 08:42|--ah-----|268] - C:\sqmdata05.sqm
    [16/11/2008 14:15|--ah-----|268] - C:\sqmdata06.sqm
    [16/11/2008 23:54|--ah-----|268] - C:\sqmdata07.sqm
    [17/11/2008 09:19|--ah-----|268] - C:\sqmdata08.sqm
    [02/12/2008 14:32|--ah-----|268] - C:\sqmdata09.sqm
    [02/12/2008 16:42|--ah-----|268] - C:\sqmdata10.sqm
    [02/12/2008 17:41|--ah-----|268] - C:\sqmdata11.sqm
    [02/12/2008 23:16|--ah-----|268] - C:\sqmdata12.sqm
    [03/12/2008 09:25|--ah-----|268] - C:\sqmdata13.sqm
    [18/12/2008 09:52|--ah-----|268] - C:\sqmdata14.sqm
    [30/09/2008 16:16|--ah-----|268] - C:\sqmdata15.sqm
    [01/10/2008 05:40|--ah-----|268] - C:\sqmdata16.sqm
    [01/10/2008 10:03|--ah-----|268] - C:\sqmdata17.sqm
    [01/10/2008 11:18|--ah-----|268] - C:\sqmdata18.sqm
    [01/10/2008 11:46|--ah-----|268] - C:\sqmdata19.sqm
    [01/10/2008 15:53|--ah-----|244] - C:\sqmnoopt00.sqm
    [01/10/2008 22:50|--ah-----|244] - C:\sqmnoopt01.sqm
    [16/10/2008 23:55|--ah-----|244] - C:\sqmnoopt02.sqm
    [17/10/2008 11:15|--ah-----|244] - C:\sqmnoopt03.sqm
    [31/10/2008 13:21|--ah-----|244] - C:\sqmnoopt04.sqm
    [16/11/2008 08:42|--ah-----|244] - C:\sqmnoopt05.sqm
    [16/11/2008 14:15|--ah-----|244] - C:\sqmnoopt06.sqm
    [16/11/2008 23:54|--ah-----|244] - C:\sqmnoopt07.sqm
    [17/11/2008 09:19|--ah-----|244] - C:\sqmnoopt08.sqm
    [02/12/2008 14:32|--ah-----|244] - C:\sqmnoopt09.sqm
    [02/12/2008 16:42|--ah-----|244] - C:\sqmnoopt10.sqm
    [02/12/2008 17:41|--ah-----|244] - C:\sqmnoopt11.sqm
    [02/12/2008 23:16|--ah-----|244] - C:\sqmnoopt12.sqm
    [03/12/2008 09:25|--ah-----|244] - C:\sqmnoopt13.sqm
    [18/12/2008 09:52|--ah-----|244] - C:\sqmnoopt14.sqm
    [30/09/2008 16:16|--ah-----|244] - C:\sqmnoopt15.sqm
    [01/10/2008 05:40|--ah-----|244] - C:\sqmnoopt16.sqm
    [01/10/2008 10:03|--ah-----|244] - C:\sqmnoopt17.sqm
    [01/10/2008 11:18|--ah-----|244] - C:\sqmnoopt18.sqm
    [01/10/2008 11:46|--ah-----|244] - C:\sqmnoopt19.sqm
    [03/06/2009 23:47|--a------|2249] - C:\TB.txt
    [26/05/2009 19:54|--ahs----|7680] - C:\Thumbs.db
    [04/06/2009 21:01|--a------|7510] - C:\UsbFix.txt
    [28/03/2009 22:59|--a------|2601] - C:\workarea.lst
    [30/05/2008 22:21|--a------|150] - C:\YServer.txt
    [27/05/2009 19:42|--a------|116079] - E:\isum_hotfix.exe
    [25/05/2009 00:18|--a------|514578324] - F:\memoire flash.rar
    [28/04/2009 16:03|--a------|548] - F:\N9679_Universite M Hamed Bougara de Boumerdes_EDUC.lic
    [28/04/2009 16:24|--a------|3516] - F:\Installation_license_Kappa.txt

    ################## [ Vaccination ]

    # C:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
    # E:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
    # F:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.

    ################## [ ! Fin du rapport # UsbFix V3.028 ! ]
    0
    1. Utilisateur anonyme
       
      Re

      Merci sylvain.ph;mais j'avais également repéré le post ;-))
      @+

      minhaf
      Re

      1)Un petit nettoyage:Télécharge Malwarebytes anti malware ici
      http://www.malwarebytes.org/mbam.php

      * Installe le (choisis bien "français" ; ne modifie pas les paramètres d'installe ) et mets le à jour .

      (NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : https://www.malekal.com/tutorial-aboutbuster/

      * Potasse le tuto pour te familiariser avec le prg :

      https://forum.pcastuces.com/sujet.asp?f=31&s=3

      (cela dis, il est très simple d’utilisation).

      relance malwarebytes en suivant scrupuleusement ces consignes :

      ! Déconnecte toi et ferme toutes applications en cours !

      * Lance Malwarebyte's .

      Fais un examen dit "Complet" .

      --> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
      --> à la fin tu cliques sur "résultat" .
      --> Vérifie que tous les objets infectés soient validés, puis clique sur " suppression " .

      Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !


      Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)

      2)Tu disposes de Kaspersky;fait un scan complet stp
      Poste le rapport merci

      @+
      0
  8. minhaf
     
    J'espere que c'est le bon poste ? cordialement

    ############################## [ UsbFix V3.028 | Cleaning ]

    # User : baouche rafik (Administrateurs) # DHC36R2J
    # Update on 02/06/09 by Chiquitine29, C_XX & Chimay8
    # WebSite : http://pagesperso-orange.fr/NosTools/usbfix.html
    # Start at: 20:58:51 | 04/06/2009

    # Intel(R) Core(TM)2 CPU T5500 @ 1.66GHz
    # Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
    # Internet Explorer 8.0.6001.18702
    # Windows Firewall Status : Enabled
    # AV : Kaspersky Anti-Virus 6.0.3.837 [ Enabled | Updated ]
    # FW : Kaspersky Anti-Virus[ Enabled ]6.0.3.837

    # C:\ # Disque fixe local # 69,44 Go (15,79 Go free) # NTFS
    # D:\ # Disque CD-ROM
    # E:\ # Disque amovible # 244,84 Mo (40,91 Mo free) [ ZINAFERIEL] # FAT
    # F:\ # Disque amovible # 979,97 Mo (304,02 Mo free) # FAT32

    ############################## [ Processus actifs ]

    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTSERV.EXE
    C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\system32\crypserv.exe
    C:\Program Files\Windows Live\Contrôle parental\fsssvc.exe
    C:\Program Files\GeoGraphix\Tools\GGXNASrv.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Logitech\Easy Synchronization\servicestub.exe
    C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
    C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
    C:\Pwrlog32\PowerLogFlexlmComponents\lmgrd.exe
    C:\WINDOWS\system32\rclumad.exe
    C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
    C:\Program Files\ROXAR\FLEXlm 11.3 Win32\lmgrd.exe
    C:\Program Files\Schlumberger\Petrel 2005\Flexlm95\lmgrd.exe
    C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
    C:\Pwrlog32\PowerLogFlexlmComponents\petcom.exe
    C:\Program Files\ROXAR\FLEXlm 11.3 Win32\geomaticLM.exe
    C:\Program Files\Schlumberger\Petrel 2005\Flexlm95\lmgrd.slb.exe
    C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
    C:\Program Files\Spyware Terminator\sp_rsser.exe
    C:\Program Files\GeoGraphix\AdaptiveServer90\win32\dbsrv9.exe
    C:\WINDOWS\system32\stacsv.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\GeoGraphix\Tools\GeoSync.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe
    C:\WINDOWS\system32\wbem\wmiprvse.exe
    C:\WINDOWS\System32\alg.exe

    ################## [ Fichiers # Dossiers infectieux ]

    Deleted ! F:\desktop.ini
    Deleted ! F:\winfile.jpg
    Deleted ! F:\autorun.inf

    ################## [ Registre # Clés Run infectieuses ]

    ################## [ Registre # Mountpoints2 ]

    ################## [ Listing des fichiers présent ]

    [02/04/2007 20:35|--a------|124] - C:\.err
    [29/08/2008 19:29|--a------|110] - C:\.lock
    [02/06/2009 14:38|--a------|40] - C:\AUTOEXEC.BAT
    [03/06/2009 10:16|--a------|2268] - C:\autorun.PNF
    [05/02/2007 19:27|--ahs----|216] - C:\boot.ini
    [05/08/2004 14:00|-rahs----|4952] - C:\Bootfont.bin
    [17/01/2009 17:47|--a------|44382] - C:\cbm-01-17-09-164735.dmp
    [17/01/2009 21:11|--a------|43706] - C:\cbm-01-17-09-201141.dmp
    [19/01/2009 00:17|--a------|43052] - C:\cbm-01-18-09-231720.dmp
    [12/04/2009 17:52|--a------|43552] - C:\cbm-04-12-09-175158.dmp
    [02/02/2009 23:19|--a------|2115] - C:\CKINFO.TXT
    [27/03/2009 23:26|--a------|0] - C:\COMLOG.txt
    [20/08/2004 12:37|--a------|0] - C:\CONFIG.SYS
    [01/04/2009 10:06|--a------|6260] - C:\CTRESUNITS.PXDB
    [01/02/2007 03:24|-rah-----|5962] - C:\dell.sdr
    [03/06/2009 14:25|--a------|14047] - C:\dlcx.log
    [01/02/2009 22:43|--a------|1066] - C:\DtoL.log
    [24/04/2009 03:14|--a------|73780] - C:\example_hafou.emf
    [05/02/2009 22:31|--a------|0] - C:\FCM26.tmp
    [28/03/2009 22:02|--a------|59592] - C:\ghr-160-.--0
    [28/03/2009 21:41|--a------|69192] - C:\ghr-170-.--0
    [28/03/2009 22:59|--a------|69192] - C:\ghr-170-.--1
    [?|?|?] - C:\hiberfil.sys
    [25/01/2009 06:18|--a------|59268] - C:\in
    [05/02/2007 22:02|--a------|4128] - C:\INFCACHE.1
    [20/08/2004 12:37|--ah-----|0] - C:\IO.SYS
    [21/02/2009 14:55|---h-----|3638] - C:\ipfolder.ico
    [20/08/2004 12:37|--ah-----|0] - C:\MSDOS.SYS
    [05/08/2004 14:00|-rahs----|47564] - C:\NTDETECT.COM
    [04/10/2008 17:10|-rahs----|252240] - C:\ntldr
    [25/01/2009 06:18|--a------|59268] - C:\out
    [?|?|?] - C:\pagefile.sys
    [28/09/2008 14:48|--a------|73] - C:\pdfinfo.ini
    [28/05/2009 01:27|--a------|138] - C:\PetDump.txt
    [01/10/2008 15:53|--ah-----|268] - C:\sqmdata00.sqm
    [01/10/2008 22:50|--ah-----|268] - C:\sqmdata01.sqm
    [16/10/2008 23:55|--ah-----|268] - C:\sqmdata02.sqm
    [17/10/2008 11:15|--ah-----|268] - C:\sqmdata03.sqm
    [31/10/2008 13:21|--ah-----|268] - C:\sqmdata04.sqm
    [16/11/2008 08:42|--ah-----|268] - C:\sqmdata05.sqm
    [16/11/2008 14:15|--ah-----|268] - C:\sqmdata06.sqm
    [16/11/2008 23:54|--ah-----|268] - C:\sqmdata07.sqm
    [17/11/2008 09:19|--ah-----|268] - C:\sqmdata08.sqm
    [02/12/2008 14:32|--ah-----|268] - C:\sqmdata09.sqm
    [02/12/2008 16:42|--ah-----|268] - C:\sqmdata10.sqm
    [02/12/2008 17:41|--ah-----|268] - C:\sqmdata11.sqm
    [02/12/2008 23:16|--ah-----|268] - C:\sqmdata12.sqm
    [03/12/2008 09:25|--ah-----|268] - C:\sqmdata13.sqm
    [18/12/2008 09:52|--ah-----|268] - C:\sqmdata14.sqm
    [30/09/2008 16:16|--ah-----|268] - C:\sqmdata15.sqm
    [01/10/2008 05:40|--ah-----|268] - C:\sqmdata16.sqm
    [01/10/2008 10:03|--ah-----|268] - C:\sqmdata17.sqm
    [01/10/2008 11:18|--ah-----|268] - C:\sqmdata18.sqm
    [01/10/2008 11:46|--ah-----|268] - C:\sqmdata19.sqm
    [01/10/2008 15:53|--ah-----|244] - C:\sqmnoopt00.sqm
    [01/10/2008 22:50|--ah-----|244] - C:\sqmnoopt01.sqm
    [16/10/2008 23:55|--ah-----|244] - C:\sqmnoopt02.sqm
    [17/10/2008 11:15|--ah-----|244] - C:\sqmnoopt03.sqm
    [31/10/2008 13:21|--ah-----|244] - C:\sqmnoopt04.sqm
    [16/11/2008 08:42|--ah-----|244] - C:\sqmnoopt05.sqm
    [16/11/2008 14:15|--ah-----|244] - C:\sqmnoopt06.sqm
    [16/11/2008 23:54|--ah-----|244] - C:\sqmnoopt07.sqm
    [17/11/2008 09:19|--ah-----|244] - C:\sqmnoopt08.sqm
    [02/12/2008 14:32|--ah-----|244] - C:\sqmnoopt09.sqm
    [02/12/2008 16:42|--ah-----|244] - C:\sqmnoopt10.sqm
    [02/12/2008 17:41|--ah-----|244] - C:\sqmnoopt11.sqm
    [02/12/2008 23:16|--ah-----|244] - C:\sqmnoopt12.sqm
    [03/12/2008 09:25|--ah-----|244] - C:\sqmnoopt13.sqm
    [18/12/2008 09:52|--ah-----|244] - C:\sqmnoopt14.sqm
    [30/09/2008 16:16|--ah-----|244] - C:\sqmnoopt15.sqm
    [01/10/2008 05:40|--ah-----|244] - C:\sqmnoopt16.sqm
    [01/10/2008 10:03|--ah-----|244] - C:\sqmnoopt17.sqm
    [01/10/2008 11:18|--ah-----|244] - C:\sqmnoopt18.sqm
    [01/10/2008 11:46|--ah-----|244] - C:\sqmnoopt19.sqm
    [03/06/2009 23:47|--a------|2249] - C:\TB.txt
    [26/05/2009 19:54|--ahs----|7680] - C:\Thumbs.db
    [04/06/2009 21:01|--a------|7510] - C:\UsbFix.txt
    [28/03/2009 22:59|--a------|2601] - C:\workarea.lst
    [30/05/2008 22:21|--a------|150] - C:\YServer.txt
    [27/05/2009 19:42|--a------|116079] - E:\isum_hotfix.exe
    [25/05/2009 00:18|--a------|514578324] - F:\memoire flash.rar
    [28/04/2009 16:03|--a------|548] - F:\N9679_Universite M Hamed Bougara de Boumerdes_EDUC.lic
    [28/04/2009 16:24|--a------|3516] - F:\Installation_license_Kappa.txt

    ################## [ Vaccination ]

    # C:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
    # E:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
    # F:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.

    ################## [ ! Fin du rapport # UsbFix V3.028 ! ]
    0