Virus win32.brontoke Résolu

Question

Bonjour,
Je n'arrive pas à supprimer un vers win32.brontoke. j'ai essayer plusieurs outils de désinfection spécifique a brontoke comme Bitdefender, Kaspersky... mais sans succès.... apparement c'est une infection assez coriace 
est ce que quelqu'un aurai la recette miracle?
merci

Nic00 · Answer

Bonjour,

&#9654; Télécharge random's system information tool (RSIT) 
http://images.malwareremoval.com/random/RSIT.exe
&#9654;Enregistre le sur ton Bureau
&#9654; Double clique sur RSIT.exe pour l’exécuter. 

&#9654; Clique sur "continue" à l'écran Disclaimer. 

&#9654; Si l'outil HIjackThis  n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera et tu n’auras qu’à  accepter la licence. 

&#9654; Une fois le scan terminé , 2 rapports vont apparaitre. 
&#9654; Poste les dans ton prochain message 
&#9654; Note : les rapports se trouvent aussi ici : ( log.txt & info.txt )

Talamasca · Answer

Voilou.... et merci bien



info.txt logfile of random's system information tool 1.06 2009-06-27 14:00:28

======Uninstall list======

 Fruity Loops Plugin Pack Release 2 - OxYGeN      -->C:\Audio\FRUITY~1\Plugins\FRUITY~1\UNWISE.EXE C:\Audio\FRUITY~1\Plugins\FRUITY~1\INSTALL.LOG
-->MsiExec.exe /I{9A346205-EA92-4406-B1AB-50379DA3F057}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
3dsmax ancillary install-->MsiExec.exe /I{7C8B5E63-821A-4DFB-BDFA-19854D88EC5C}
802.11 USB Wireless LAN Adapter-->C:\WINDOWS\system32\unwlsdrv.exe SiS163u
Adobe Anchor Service CS4-->MsiExec.exe /I{1618734A-3957-4ADD-8199-F973763109A8}
Adobe Audition 3.0-->msiexec /I {53C141BA-4F9E-43FB-B4F9-0C01BB716FA8}
Adobe Bridge CS4-->MsiExec.exe /I{83877DB1-8B77-45BC-AB43-2BAC22E093E0}
Adobe BridgeTalk Plugin CS3-->MsiExec.exe /I{B73CFB12-C814-4638-AFFD-7E3AAFAF0B4E}
Adobe CMaps CS4-->MsiExec.exe /I{94D398EB-D2FD-4FD1-B8C4-592635E8A191}
Adobe Color - Photoshop Specific CS4-->MsiExec.exe /I{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}
Adobe Color EU Extra Settings CS4-->MsiExec.exe /I{5570C7F0-43D0-4916-8A9E-AEDD52FA86F4}
Adobe Color JA Extra Settings CS4-->MsiExec.exe /I{0D6013AB-A0C7-41DC-973C-E93129C9A29F}
Adobe Color NA Recommended Settings CS4-->MsiExec.exe /I{00ADFB20-AE75-46F4-AD2C-F48B15AC3100}
Adobe Color Video Profiles CS CS4-->MsiExec.exe /I{63C24A08-70F3-4C8E-B9FB-9F21A903801D}
Adobe Creative Suite 3 Design Premium-->MsiExec.exe /I{B1EF7B00-8FCC-4209-BFB6-37C50B354B2A}
Adobe CSI CS4-->MsiExec.exe /I{0F723FC1-7606-4867-866C-CE80AD292DAF}
Adobe Default Language CS4-->MsiExec.exe /I{C52E3EC1-048C-45E1-8D53-10B0C6509683}
Adobe Device Central CS4-->MsiExec.exe /I{67F0E67A-8E93-4C2C-B29D-47C48262738A}
Adobe Drive CS4-->MsiExec.exe /I{16E16F01-2E2D-4248-A42F-76261C147B6C}
Adobe ExtendScript Toolkit 2-->MsiExec.exe /I{24D7346D-D4B4-45E8-98EA-75EC14B42DD8}
Adobe ExtendScript Toolkit CS4-->MsiExec.exe /I{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}
Adobe Extension Manager CS3-->MsiExec.exe /I{BE5F3842-8309-4754-92D5-83E02E6077A3}
Adobe Extension Manager CS4-->MsiExec.exe /I{054EFA56-2AC1-48F4-A883-0AB89874B972}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Fonts All-->MsiExec.exe /I{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}
Adobe Help Viewer CS3-->MsiExec.exe /I{7ACFB90E-8FD0-4397-AD3A-5195412623A3}
Adobe Illustrator CS4-->C:\Program Files\Fichiers communs\Adobe\Installers\2a31ae7a5c43ff52d8577782dd34e04\Setup.exe --uninstall=1
Adobe Illustrator CS4-->MsiExec.exe /I{87532CAB-7932-4F84-8937-823337622807}
Adobe InDesign CS3 Icon Handler-->MsiExec.exe /I{EA7B3CC4-366D-4CF6-8350-FD7A7034116E}
Adobe InDesign CS3-->MsiExec.exe /I{FE8327F9-3AC1-4586-8C7E-3DEE2BC92441}
Adobe Linguistics CS4-->MsiExec.exe /I{931AB7EA-3656-4BB7-864D-022B09E3DD67}
Adobe MotionPicture Color Files-->MsiExec.exe /I{6B708481-748A-4EB4-97C1-CD386244FF77}
Adobe Output Module-->MsiExec.exe /I{BB4E33EC-8181-4685-96F7-8554293DEC6A}
Adobe PDF Library Files CS4-->MsiExec.exe /I{F93C84A6-0DC6-42AF-89FA-776F7C377353}
Adobe Photoshop CS4 Support-->MsiExec.exe /I{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}
Adobe Photoshop CS4-->C:\Program Files\Fichiers communs\Adobe\Installers\faf656ef605427ee2f42989c3ad31b8\Setup.exe --uninstall=1
Adobe Photoshop CS4-->MsiExec.exe /I{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}
Adobe Photoshop CS4-->MsiExec.exe /I{E4848436-0345-47E2-B648-8B522FCDA623}
Adobe Reader 9.1.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A91000000001}
Adobe Search for Help-->MsiExec.exe /I{F0E64E2E-3A60-40D8-A55D-92F6831875DA}
Adobe Service Manager Extension-->MsiExec.exe /I{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}
Adobe Setup-->MsiExec.exe /I{0D67A4E4-5BE0-4C9A-8AD8-AB552B433F23}
Adobe Setup-->MsiExec.exe /I{8CE08C3C-8FF4-45D9-925E-4F3CE2D7FA7D}
Adobe Setup-->MsiExec.exe /I{9D3F3D5A-BE6D-48C4-B51E-E2D6753ABCDE}
Adobe Setup-->MsiExec.exe /I{F168BB9D-76DA-40DE-B20B-59AA18891D07}
Adobe Shockwave Player-->C:\WINDOWS\system32\Adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log
Adobe SING CS3-->MsiExec.exe /I{B671CBFD-4109-4D35-9252-3062D3CCB7B2}
Adobe SVG Viewer 3.0-->C:\Program Files\Fichiers communs\Adobe\SVG Viewer 3.0\Uninstall\Winstall.exe -u -fC:\Program Files\Fichiers communs\Adobe\SVG Viewer 3.0\Uninstall\Install.log
Adobe Type Support CS4-->MsiExec.exe /I{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}
Adobe Update Manager CS4-->MsiExec.exe /I{05308C4E-7285-4066-BAE3-6B50DA6ED755}
Adobe WAS CS3-->MsiExec.exe /I{C5BD220A-EFE8-48A5-B70E-9503D535FACE}
Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}
Adobe XMP Panels CS3-->MsiExec.exe /I{D5A31AB1-345D-47C7-A87B-036A669F6DF1}
Adobe XMP Panels CS4-->MsiExec.exe /I{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}
AdobeColorCommonSetCMYK-->MsiExec.exe /I{68243FF8-83CA-466B-B2B8-9F99DA5479C4}
AdobeColorCommonSetRGB-->MsiExec.exe /I{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}
Adware Spyware Scanner Deleter version 0.2-->"C:\Program Files\AdwareSpywareScannerDeleter\unins000.exe"
AHV content for Acrobat and Flash-->MsiExec.exe /I{6BBAA81D-6A7E-43AD-8889-2F002DCAAFDD}
Ajouter ou supprimer Adobe Creative Suite 3 Design Premium-->C:\Program Files\Fichiers communs\Adobe\Installers\e79070e1ef25043cbd93191267ecaf0\Setup.exe
ALUpdate-->"C:\Program Files\ESTsoft\ALUpdate\unins000.exe"
ALZip-->"C:\Program Files\ESTsoft\ALZip\unins000.exe"
ANIO Service-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7B5CE976-C7A9-4E38-A7F3-6C8EF025DD8E}\Setup.exe" 
Apple Mobile Device Support-->MsiExec.exe /I{659B48CD-0608-4ED5-94C0-0B6C87114F10}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Artweaver 0.5-->"C:\Program Files\Artweaver 0.5\unins000.exe"
ASIO4ALL-->C:\Program Files\ASIO4ALL v2\uninstall.exe
Assassin's Creed-->C:\Program Files\InstallShield Installation Information\{8CFA9151-6404-409A-AF22-4632D04582FD}\setup.exe -runfromtemp -l0x040c -removeonly
Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Catalyst Control Center-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{055EE59D-217B-43A7-ABFF-507B966405D8}\setup.exe" -l0x0 
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
Autodesk 3ds Max 9 32-bit-->MsiExec.exe /I{E96D4088-AAC5-437F-9E39-EC0E387897B4}
Autodesk DWF Viewer 7-->MsiExec.exe /I{9A346205-EA92-4406-B1AB-50379DA3F057}
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
Backburner-->MsiExec.exe /I{3D347E6D-5A03-4342-B5BA-6A771885F379}
Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
Catalyst Control Center - Branding-->MsiExec.exe /I{D3B1C799-CB73-42DE-BA0F-2344793A095C}
Chinese Traditional Fonts Support For Adobe Reader 9-->MsiExec.exe /I{AC76BA86-7AD7-2448-0000-900000000003}
Collab-->C:\Program Files\Image-Line\Collab\uninstall.exe
Connect-->MsiExec.exe /I{B29AD377-CC12-490A-A480-1452337C618D}
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
CPUID CPU-Z 1.51-->"C:\Program Files\CPUID\CPU-Z\unins000.exe"
DepthDither 2.0-->"C:\Program Files\Adobe\Adobe Photoshop CS4\Plug-Ins\DepthDither\uninst\unins000.exe"
Dictionnaire Freelang (liste de mots)-->"C:\Documents and Settings\Bart\Local Settings\Application Data\Dictionnaire Freelang\unins001.exe"
Dictionnaire Freelang 3.74 beta-->"C:\Documents and Settings\Bart\Local Settings\Application Data\Dictionnaire Freelang\unins000.exe"
Digital Element Aurora-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CC4ECCC8-11CE-4542-A3DB-78947BC11D1D}\Setup.exe" 
EasyCleaner-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F5346614-B7C4-4E94-826A-E2363155233D}\setup.exe" -l0x9  -removeonly
eMule-->"C:\Program Files\eMule\Uninstall.exe"
EVEREST Home Edition v2.20-->"C:\Program Files\Lavalys\EVEREST Home Edition\unins000.exe"
FBX Plugin 2006.08 for Max 9.0-->C:\Program Files\Autodesk\FBX\FbxPlugins\2006.08\Max90\Uninstall.exe
Fichiers de prise en charge de l'installation de Microsoft SQL Server (Français)-->MsiExec.exe /X{3380F354-C5F7-4E71-8F51-EEE6C3F06C62}
FL Studio 8-->C:\Program Files\Image-Line\FL Studio 8.0.2\uninstall.exe
Folding@home-gpu-->MsiExec.exe /I{6A90C837-054E-44AE-B9BD-1B1F87986BBC}
Free Mp3 Wma Converter V 1.8.0-->"C:\Program Files\Free Audio Pack\unins000.exe"
Galerie de photos Windows Live-->MsiExec.exe /X{A70FA218-6598-4AC9-813D-63597C5DD068}
getPlus(R) for Adobe-->"C:\Program Files\NOS\bin\getPlus_HelperSvc.exe" /UninstallGet1
GOM Player-->"C:\Program Files\GRETECH\GomPlayer\Uninstall.exe"
HijackThis 2.0.2-->"C:\Program Files	rend micro\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall  /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
IBM WebSphere Application Server Community Edition v1.1-->C:\Program Files\IBM\WebSphere\AppServerCommunityEdition\_uninst\uninstaller.exe
iCF Skin Pack-->C:\Program Files\iColorFolder\Uninstall Skin Pack.exe
iColorFolder-->C:\Program Files\iColorFolder\uninstall.exe
IL Download Manager-->C:\Program Files\Image-Line\Downloader\uninstall.exe
InterVideo WinDVD-->"C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL
iTunes-->MsiExec.exe /I{CC5702D7-86E2-45A8-99D7-E8B976ADCC56}
J2SE Runtime Environment 5.0-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150000}
Jahshaka-->C:\Program Files\Jahshaka\uninst-jahshaka.exe
Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216013FF}
kuler-->MsiExec.exe /I{098727E1-775A-4450-B573-3F441F1CA243}
Le Centre de Contrôle de Licences de Syncrosoft-->C:\PROGRA~1\SYNCRO~1\UNWISE.EXE C:\PROGRA~1\SYNCRO~1\INSTALL.LOG
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Lingoes 2.5.3-->"C:\Program Files\Lingoes\Translator2\unins000.exe"
Macromedia FreeHand MXa-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{939740B5-0064-4779-854A-8C1086181C05}\Setup.exe" -l0x9 UNINSTALL
Magic ISO Maker v5.5 (build 0276)-->C:\PROGRA~1\MagicISO\UNWISE.EXE C:\PROGRA~1\MagicISO\INSTALL.LOG
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
MetaProducts Mass Downloader-->C:\Program Files\Mass Downloader\massdown.exe /UnInstall
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{72AD53CC-CCC0-3757-8480-9EE176866A7C}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{0BD83598-C2EF-3343-847B-7D2E84599128}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft Office PowerPoint Viewer 2003-->MsiExec.exe /X{90AF040C-6000-11D3-8CFE-0150048383C9}
Microsoft Silverlight-->MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Express Edition (SQLEXPRESS)-->MsiExec.exe /I{480DBB60-F0B6-45F2-B26F-1A2E11197791}
Microsoft SQL Server 2005 Tools Express Edition-->MsiExec.exe /I{3F59A7E0-BC01-4435-9E93-C7D7015C21DA}
Microsoft SQL Server 2005-->"c:\Program Files\Microsoft SQL Server\90\Setup Bootstrap\ARPWrapper.exe" /Remove
Microsoft SQL Server Native Client-->MsiExec.exe /I{9C7E944F-4502-40B8-A0AB-66B2FA9EE829}
Microsoft SQL Server VSS Writer-->MsiExec.exe /I{75FF1600-6330-43FA-9022-E0835BF20778}
Microsoft Text-to-Speech Engine 4.0 (English)-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\msTTS.inf, Uninstall
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969897)-->"C:\WINDOWS\$NtUninstallKB969897$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->c:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
Mozilla Firefox (3.0.11)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 6 Service Pack 2 (KB954459)-->MsiExec.exe /I{97AA1F3C-DD64-4AA6-AEC5-F8F9F4CC21C5}
msxml4-->MsiExec.exe /X{5AE3D9F1-9E9E-4015-8787-E22705AA32C5}
Mustek 1200 UB PLUS v1.2-->C:\WINDOWS\TWAIN_32\S6U12BX\UNINST.EXE
Nero 9-->C:\Program Files\Fichiers communs\Nero\Nero ProductInstaller 4\SetupX.exe  REMOVESERIALNUMBER="9M03-01A1-PCX7-K31A-8A94-98PT-KT2E-522A"
OCCT Perestroika 3.1.0-->"C:\Program Files\OCCT\unins000.exe"
OpenLibraries-->C:\Program Files\OpenLibraries\uninst-openlibraries.exe
OpenOffice.org 3.1-->MsiExec.exe /I{0FA44E79-CD7D-4E8D-A2EE-26FE05F509B6}
Orange - Logiciels Internet-->C:\Program Files\OrangeHSS\installation\core\Installgui.exe -u
Pack Vista Inspirat 1.1-->C:\WINDOWS\BricoPacks\Vista Inspirat\Remove.exe
PDF Settings CS4-->MsiExec.exe /I{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}
Photoshop Camera Raw-->MsiExec.exe /I{CC75AB5C-2110-4A7F-AF52-708680D22FE8}
PoiZone-->C:\Program Files\Image-Line\PoiZone\uninstall.exe
QuickTime-->MsiExec.exe /I{C78EAC6F-7A73-452E-8134-DBB2165C5A68}
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m -nrg2709
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Splash V1.11f-->C:\PROGRA~1\Autodesk\3DSMAX~1\plugins\UNWISE.EXE C:\PROGRA~1\Autodesk\3DSMAX~1\plugins\INSTALL.LOG
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Spyware Terminator-->"C:\Program Files\Spyware Terminator\unins000.exe"
Steinberg Cubase SX v3.1.1.944-->C:\PROGRA~1\CUBASE~1\UNWISE.EXE C:\PROGRA~1\CUBASE~1\INSTALL.LOG
Stellarium 0.10.2-->"C:\Program Files\Stellarium\unins000.exe"
StuffPlug 3-->C:\Program Files\StuffPlug3\Uninstall.exe
Suite Shared Configuration CS4-->MsiExec.exe /I{842B4B72-9E8F-4962-B3C1-1C422A5C4434}
SyncroSoft Emu (Remove only)-->C:\Program Files\SyncroSoft\Pos\H2O\Uninst.exe
Total Overdose-->MsiExec.exe /X{051E7B99-6D35-4905-BAF3-740893EF657A}
Toxic Biohazard-->C:\Program Files\Image-Line\Toxic Biohazard\uninstall.exe
Ubuntu-->C:\ubuntu\Uninstall-Ubuntu.exe
VIMICRO USB PC Camera 301x-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{41E496B5-47F4-11D6-9BBB-00E0987BB2CD}\setup.exe" -l0x9 
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
Windows Live OneCare safety scanner-->RunDll32.exe "C:\Program Files\Windows Live Safety Center\wlscCore.dll",UninstallFunction WLSC_SCANNER_PRODUCT
Windows Live Writer-->MsiExec.exe /X{3DFF4274-EBB0-4356-9692-972965018954}
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"
XnView 1.95.4-->"C:\Program Files\XnView\unins000.exe"

======Hosts File======

127.0.0.1 localhost

======Security center information======

AV: AntiVir Desktop
FW: Norton Internet Worm Protection (disabled)

======System event log======

Computer Name: ORDI_STEPH
Event Code: 7036
Message: Le service Service Messenger Sharing Folders USN Journal Reader est entré dans l'état : en cours d'exécution.

Record Number: 115840
Source Name: Service Control Manager
Time Written: 20090620001505.000000+120
Event Type: Informations
User: 

Computer Name: ORDI_STEPH
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Service Messenger Sharing Folders USN Journal Reader.

Record Number: 115839
Source Name: Service Control Manager
Time Written: 20090620001505.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: ORDI_STEPH
Event Code: 7036
Message: Le service Service de transfert intelligent en arrière-plan est entré dans l'état : en cours d'exécution.

Record Number: 115838
Source Name: Service Control Manager
Time Written: 20090620001502.000000+120
Event Type: Informations
User: 

Computer Name: ORDI_STEPH
Event Code: 16391
Message: Le format de la liste de travaux BITS n'est pas reconnu. La liste a peut-être été créée par une autre version de BITS. La liste de travaux a été effacée.

Record Number: 115837
Source Name: BITS
Time Written: 20090620001502.000000+120
Event Type: erreur
User: 

Computer Name: ORDI_STEPH
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Service de transfert intelligent en arrière-plan.

Record Number: 115836
Source Name: Service Control Manager
Time Written: 20090620001502.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

=====Application event log=====

Computer Name: ORDI_STEPH
Event Code: 4113
Message: AntiVir a détecté dans le fichier
C:\Documents and Settings\Bart\Application Data\Google\Shell32.dll
un code suspect avec la désignation 'TR/FraudPack.oyr'!

Record Number: 5595
Source Name: Avira AntiVir
Time Written: 20090627002319.000000+120
Event Type: Avertissement
User: AUTORITE NT\SYSTEM

Computer Name: ORDI_STEPH
Event Code: 4113
Message: AntiVir a détecté dans le fichier
C:\Documents and Settings\Bart\Application Data\Google\Shell32.dll
un code suspect avec la désignation 'TR/FraudPack.oyr'!

Record Number: 5594
Source Name: Avira AntiVir
Time Written: 20090627002314.000000+120
Event Type: Avertissement
User: AUTORITE NT\SYSTEM

Computer Name: ORDI_STEPH
Event Code: 4113
Message: AntiVir a détecté dans le fichier
C:\Documents and Settings\Bart\Application Data\Google\Shell32.dll
un code suspect avec la désignation 'TR/FraudPack.oyr'!

Record Number: 5593
Source Name: Avira AntiVir
Time Written: 20090627002309.000000+120
Event Type: Avertissement
User: AUTORITE NT\SYSTEM

Computer Name: ORDI_STEPH
Event Code: 4113
Message: AntiVir a détecté dans le fichier
C:\Documents and Settings\Bart\Application Data\Google\Shell32.dll
un code suspect avec la désignation 'TR/FraudPack.oyr'!

Record Number: 5592
Source Name: Avira AntiVir
Time Written: 20090627002304.000000+120
Event Type: Avertissement
User: AUTORITE NT\SYSTEM

Computer Name: ORDI_STEPH
Event Code: 4113
Message: AntiVir a détecté dans le fichier
C:\Documents and Settings\Bart\Application Data\Google\Shell32.dll
un code suspect avec la désignation 'TR/FraudPack.oyr'!

Record Number: 5591
Source Name: Avira AntiVir
Time Written: 20090627002258.000000+120
Event Type: Avertissement
User: AUTORITE NT\SYSTEM

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\WBEM;C:\Program Files\Aqsis\bin;C:\Program Files\ATI Technologies\ATI.ACE;C:\Program Files\ESTsoft\ALZip;C:\PROGRA~1\Borland\Delphi6\Bin;C:\PROGRA~1\Borland\Delphi6\Projects\Bpl;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\Autodesk\Backburner\;C:\Program Files\Fichiers communs\Autodesk Shared\;c:\Program Files\Microsoft SQL Server\90\Tools\binn\;C:\Program Files\QuickTime\QTSystem\;C:\Program Files\Jahshaka\..\gtk2\bin;C:\Program Files\Jahshaka\..\mlt\bin;C:\Program Files\OpenLibraries\bin
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 9, GenuineIntel
"PROCESSOR_REVISION"=0409
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"AQSISHOME"=C:\Program Files\Aqsis\bin
"CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip
"MLT_REPOSITORY"=C:\Program Files\Jahshaka\..\mlt\share\mlt\modules
"PYTHONPATH"=C:\Program Files\OpenLibraries\python

-----------------EOF-----------------

Talamasca · Answer

Logfile of random's system information tool 1.06 (written by random/random)
Run by Bart at 2009-06-27 14:00:11
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 63 GB (33%) free of 191 GB
Total RAM: 2047 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:00:24, on 27/06/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\WTClient.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Folding@home\Folding@home-gpu\Folding@home.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
C:\Documents and Settings\Bart\Application Data\Folding@home-gpu\FahCore_11.exe
C:\Program Files\OrangeHSS\systray\systrayapp.exe
C:\Program Files\OrangeHSS\connectivity\connectivitymanager.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\CoreCom.exe
C:\Program Files\Autodesk\3ds Max 9\mentalray\satelliteaysat_3dsmax9_32server.exe
C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\Drivers\WTSRV.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\mom.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Bart\Bureau\RSIT.exe
C:\Program Files	rend micro\Bart.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60446
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.lo.st.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: MegaIEMn - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {a33fa729-d155-4b23-842b-2c665ecabdb6} - (no file)
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [WTClient] WTClient.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [realteks] "C:\Documents and Settings\Bart\Application Data\Google\cjhhl15625481.exe" 2
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32	scupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32	scupgrd.exe (User 'Default user')
O4 - Startup: Folding@home-gpu.lnk = ?
O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe
O8 - Extra context menu item: &Tout télécharger en utilisant Mass Downloader - C:\Program Files\Mass Downloader\Add_All.htm
O8 - Extra context menu item: Ajouter au fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Télécharger en utilisant &Mass Downloader - C:\Program Files\Mass Downloader\Add_Url.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: Mass Downloader - {0FD01980-CCCB-11D3-80D4-0000E80E2EDE} - C:\Program Files\Mass Downloader\massdown.exe
O9 - Extra 'Tools' menuitem: &Mass Downloader - {0FD01980-CCCB-11D3-80D4-0000E80E2EDE} - C:\Program Files\Mass Downloader\massdown.exe
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Europa Casino - {4C826F10-D34B-4ba8-B609-1FB8C6482A05} - C:\Casino\Europa Casino\casino.exe (file missing)
O9 - Extra 'Tools' menuitem: Europa Casino - {4C826F10-D34B-4ba8-B609-1FB8C6482A05} - C:\Casino\Europa Casino\casino.exe (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://*.mappy.com
O15 - Trusted Zone: http://*.orange.fr
O15 - Trusted Zone: http://rw.search.ke.voila.fr
O15 - Trusted Zone: http://orange.weborama.fr
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.4.8.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} - https://www.eset.com/
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - Unknown owner - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe (file missing)
O23 - Service: Digimation Protection Server (DigiPSrv) - Digimation, Inc. - C:\PROGRA~1\Autodesk\3DSMAX~1\plugins\Digipsrv.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: mental ray 3.5 Satellite (32-bit) (mi-raysat_3dsmax9_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 9\mentalray\satelliteaysat_3dsmax9_32server.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: Nero MediaHome 4 Service (NeroMediaHomeService.4) - Unknown owner - C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (file missing)
O23 - Service: PLFlash DeviceIoControl Service - Unknown owner - C:\Program Files\Nero\Nero BackItUp 4\IoctlSvc.exe (file missing)
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: WinTab Service (WinTabService) - Tablet Driver - C:\WINDOWS\System32\Drivers\WTSRV.EXE

Nic00 · Answer

Va dans ajout/suppression de programmes puis cherche si tu as des programmes comme : 

" CID Help", "Circle Developement" , "Adverts"( ou "CiD-quelquechose")

--->s’ils s'y trouvent, supprime les.

&#9654;Télécharges Lop S&D :
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

&#9654;Installe-le en double-cliquant dessus
 /!\   si tu as Vista, désactive l’UAC le temps de la désinfection :	Panneau de configuration>comptes utilisateurs>activer/désactiver le contrôle  des comptes utilisateurs>décoche la cas puis fais OK 
/!\   si tu as TeaTimer (le résident de Spybot), désactive-le sinon il va gêner la désinfection en empêchant la modification des BHO et la réparation du registre :
*Démarre Spybot, clique sur Mode, coche Mode avancé 
*A gauche, clique sur Outils, puis sur Résident 
*Décoche la case devant Résident "TeaTimer" puis quitte Spybot :
&#9654; Une fois la désinfection terminée ( et pas avant ), réactiver le " TeaTimer " . 
&#9654; Sélectionne la langue souhaitée, puis choisis l'option 1 (Recherche). 
 &#9654;Une fois le scan terminé, enregistrez le rapport généré, poste-le.
&#9654; Le rapport se trouve aussi sous la racine du disque: C:\lopR.txt.

Talamasca · Answer

Voilà....
Par contre ça devenait assez critique, plusieurs fois windows c'est arrêté sur une page bleu en me disant que le système s'arrêté pour éviter de gros dommages. j'ai passé plusieurs fois Malwarbite, Spybot et un outil appelé "Brontgui.com" par SOPHTEMP mais je n'arrive pas a ouvrir une session avec les droits d'Admin ce qu'il fait que ce scan n'est pas fait sur toutes parties du système. Si il te faut un autre log RSIT je te fais ça. 
merci 





  --------------------\  Lop S&D 4.2.5-0   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Multiprocessor Free :               Intel(R) Pentium(R) 4 CPU 2.93GHz )
   BIOS : Award Modular BIOS v6.00PG
   USER : Bart ( Administrator )
   BOOT : Normal boot
   Antivirus : AntiVir Desktop 9.0.1.26 (Activated)
   Firewall  : Norton Internet Worm Protection 2006 (Not Activated)
   C:\ (Local Disk) - NTFS - Total:186 Go (Free:55 Go)
   D:\ (CD or DVD)
   E:\ (USB) - FAT - Total:61 Mo (Free:0 Go)
   F:\ (USB)
   G:\ (USB)
   H:\ (USB)
   I:\ (USB)
   L:\ (Local Disk) - FAT32 - Total:149 Go (Free:51 Go)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [1] ( 28/06/2009|21:28 )
 
   --------------------\  Listing des dossiers dans APPLIC~1

   [24/07/2006|00:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
   [28/06/2009|10:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Mozilla

   [28/06/2009|18:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{55A29068-F2CE-456C-9148-C869879E2357}
   [05/06/2009|23:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
   [25/06/2009|13:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [28/06/2009|01:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ALM
   [21/11/2008|21:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
   [05/06/2009|23:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [14/06/2009|03:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ATI
   [09/05/2009|17:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Autodesk
   [25/05/2009|01:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
   [15/06/2008|22:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
   [12/01/2009|00:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DAEMON Tools Lite
   [10/04/2009|03:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DassaultSystemes
   [19/03/2009|17:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
   [19/05/2009|23:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [28/10/2008|16:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GRETECH
   [26/06/2009|19:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Lab Setup Files
   [28/06/2009|10:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
   [20/06/2009|15:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ma-config.com
   [25/06/2009|13:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macromedia
   [25/06/2009|13:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
   [15/02/2009|19:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
   [21/01/2009|09:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [18/05/2009|23:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [03/06/2009|23:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
   [19/05/2009|21:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
   [28/11/2008|13:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
   [28/06/2009|20:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Rising
   [26/06/2009|22:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Simply Super Software
   [08/06/2009|08:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Solegis
   [28/06/2009|18:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [28/06/2009|17:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spyware Terminator
   [08/06/2009|08:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\stock
   [14/06/2008|16:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [26/06/2009|23:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
   [28/06/2009|18:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TuneUp Software
   [09/05/2009|18:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ubisoft
   [28/10/2008|12:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [01/04/2009|20:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

   [14/06/2008|17:25] C:\DOCUME~1\Aurore\APPLIC~1\Adobe
   [14/06/2008|16:21] C:\DOCUME~1\Aurore\APPLIC~1\ATI
   [14/06/2008|17:29] C:\DOCUME~1\Aurore\APPLIC~1\Google
   [18/11/2008|21:05] C:\DOCUME~1\Aurore\APPLIC~1\HiYo
   [14/06/2008|16:21] C:\DOCUME~1\Aurore\APPLIC~1\Identities
   [25/03/2009|17:51] C:\DOCUME~1\Aurore\APPLIC~1\LimeWire
   [14/06/2008|17:25] C:\DOCUME~1\Aurore\APPLIC~1\Macromedia
   [13/03/2009|21:18] C:\DOCUME~1\Aurore\APPLIC~1\Microsoft

   [28/06/2009|08:52] C:\DOCUME~1\Bart\APPLIC~1\Adobe
   [26/06/2009|22:47] C:\DOCUME~1\Bart\APPLIC~1\AdobeUM
   [26/06/2009|11:52] C:\DOCUME~1\Bart\APPLIC~1\Apple Computer
   [26/06/2009|11:52] C:\DOCUME~1\Bart\APPLIC~1\Artweaver
   [17/05/2009|20:53] C:\DOCUME~1\Bart\APPLIC~1\ATI
   [26/06/2009|11:52] C:\DOCUME~1\Bart\APPLIC~1\Blender Foundation
   [08/04/2009|14:33] C:\DOCUME~1\Bart\APPLIC~1\Broad Intelligence
   [30/11/2008|14:55] C:\DOCUME~1\Bart\APPLIC~1\Canneverbe_Limited
   [20/04/2009|15:21] C:\DOCUME~1\Bart\APPLIC~1\com.adobe.ExMan
   [12/01/2009|00:52] C:\DOCUME~1\Bart\APPLIC~1\DAEMON Tools
   [01/05/2009|22:12] C:\DOCUME~1\Bart\APPLIC~1\DAEMON Tools Lite
   [12/01/2009|00:52] C:\DOCUME~1\Bart\APPLIC~1\DAEMON Tools Pro
   [20/04/2009|00:39] C:\DOCUME~1\Bart\APPLIC~1\DivX
   [15/06/2009|01:54] C:\DOCUME~1\Bart\APPLIC~1\Download Manager
   [28/10/2008|18:25] C:\DOCUME~1\Bart\APPLIC~1\ESTsoft
   [28/06/2009|13:07] C:\DOCUME~1\Bart\APPLIC~1\Folding@home-gpu
   [28/06/2009|10:25] C:\DOCUME~1\Bart\APPLIC~1\Google
   [14/06/2009|05:04] C:\DOCUME~1\Bart\APPLIC~1\GrabPro
   [28/10/2008|16:09] C:\DOCUME~1\Bart\APPLIC~1\GRETECH
   [03/04/2009|17:07] C:\DOCUME~1\Bart\APPLIC~1\gtk-2.0
   [21/06/2008|22:43] C:\DOCUME~1\Bart\APPLIC~1\Help
   [27/10/2008|22:09] C:\DOCUME~1\Bart\APPLIC~1\HiYo
   [24/07/2006|00:21] C:\DOCUME~1\Bart\APPLIC~1\Identities
   [17/01/2009|14:03] C:\DOCUME~1\Bart\APPLIC~1\InstallShield
   [04/08/2006|15:13] C:\DOCUME~1\Bart\APPLIC~1\InterTrust
   [08/10/2006|02:35] C:\DOCUME~1\Bart\APPLIC~1\InterVideo
   [01/12/2008|23:18] C:\DOCUME~1\Bart\APPLIC~1\Lingoes
   [25/06/2009|13:11] C:\DOCUME~1\Bart\APPLIC~1\Macromedia
   [22/03/2009|14:14] C:\DOCUME~1\Bart\APPLIC~1\Malwarebytes
   [14/06/2009|09:14] C:\DOCUME~1\Bart\APPLIC~1\MetaProducts
   [28/06/2009|12:59] C:\DOCUME~1\Bart\APPLIC~1\Microsoft
   [17/01/2009|15:44] C:\DOCUME~1\Bart\APPLIC~1\Mozilla
   [17/06/2008|16:07] C:\DOCUME~1\Bart\APPLIC~1\MSNInstaller
   [06/06/2009|15:51] C:\DOCUME~1\Bart\APPLIC~1\Nero
   [17/05/2009|14:51] C:\DOCUME~1\Bart\APPLIC~1\Notepad++
   [08/04/2009|14:32] C:\DOCUME~1\Bart\APPLIC~1\OpenCandy
   [20/03/2009|01:53] C:\DOCUME~1\Bart\APPLIC~1\OpenOffice.org
   [14/06/2009|08:49] C:\DOCUME~1\Bart\APPLIC~1\Orbit
   [28/06/2009|18:06] C:\DOCUME~1\Bart\APPLIC~1\Spyware Terminator
   [18/06/2009|19:33] C:\DOCUME~1\Bart\APPLIC~1\Steinberg
   [26/06/2009|22:47] C:\DOCUME~1\Bart\APPLIC~1\Stellarium
   [16/06/2008|17:50] C:\DOCUME~1\Bart\APPLIC~1\Sun
   [24/07/2006|01:18] C:\DOCUME~1\Bart\APPLIC~1\Symantec
   [28/06/2009|18:35] C:\DOCUME~1\Bart\APPLIC~1\TuneUp Software
   [09/05/2009|18:30] C:\DOCUME~1\Bart\APPLIC~1\Ubisoft
   [27/06/2009|14:38] C:\DOCUME~1\Bart\APPLIC~1\uTorrent
   [17/06/2009|00:36] C:\DOCUME~1\Bart\APPLIC~1\vlc
   [22/06/2009|23:05] C:\DOCUME~1\Bart\APPLIC~1\XnView

   [24/07/2006|00:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

   [14/06/2008|17:37] C:\DOCUME~1\GUILLA~1\APPLIC~1\Adobe
   [14/06/2008|17:33] C:\DOCUME~1\GUILLA~1\APPLIC~1\ATI
   [14/06/2008|17:37] C:\DOCUME~1\GUILLA~1\APPLIC~1\Google
   [13/11/2008|22:02] C:\DOCUME~1\GUILLA~1\APPLIC~1\HiYo
   [14/06/2008|17:33] C:\DOCUME~1\GUILLA~1\APPLIC~1\Identities
   [14/06/2008|17:37] C:\DOCUME~1\GUILLA~1\APPLIC~1\Macromedia
   [25/12/2008|20:57] C:\DOCUME~1\GUILLA~1\APPLIC~1\Microsoft
   [23/06/2008|16:10] C:\DOCUME~1\GUILLA~1\APPLIC~1\OpenOffice.org2

   [17/05/2009|12:40] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
   [28/10/2008|12:41] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
   [27/01/2009|20:06] C:\DOCUME~1\LOCALS~1\APPLIC~1\Mozilla

   [08/05/2009|23:04] C:\DOCUME~1\NEROME~1.4\APPLIC~1\Microsoft

   [19/05/2009|00:02] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
 
   --------------------\  Tâches planifiées dans C:\WINDOWS\tasks

   [28/06/2009 21:11][--a------] C:\WINDOWS\tasks\Maintenance en 1 clic.job
   [28/06/2009 00:01][--a------] C:\WINDOWS\tasks\NeroLiveEpgUpdate-ORDI_STEPH_Bart.job
   [28/06/2009 21:11][--ah-----] C:\WINDOWS\tasks\SA.DAT
   [05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

   --------------------\  Listing des dossiers dans C:\Program Files

   [28/06/2009|02:41] C:\Program Files\Adobe
   [22/06/2009|21:54] C:\Program Files\AdwareSpywareScannerDeleter
   [09/06/2009|01:48] C:\Program Files\AirSnare
   [19/05/2009|21:56] C:\Program Files\Alex Feinman
   [26/03/2009|00:31] C:\Program Files\Alwil Software
   [17/05/2009|16:01] C:\Program Files\ANI
   [26/03/2009|00:31] C:\Program Files\Apple Software Update
   [13/06/2009|12:57] C:\Program Files\Artweaver 0.5
   [18/06/2009|20:53] C:\Program Files\ASIO
   [26/03/2009|00:31] C:\Program Files\ASIO4ALL v2
   [14/06/2009|03:26] C:\Program Files\ATI Technologies
   [26/03/2009|00:31] C:\Program Files\Audioblast
   [09/05/2009|14:40] C:\Program Files\Autodesk
   [28/06/2009|03:45] C:\Program Files\Avira
   [04/05/2009|01:39] C:\Program Files\Beneton Movie GIF
   [05/06/2009|23:35] C:\Program Files\Bonjour
   [26/03/2009|00:31] C:\Program Files\BRuniversalFilt
   [26/03/2009|00:31] C:\Program Files\Buzz
   [19/04/2009|01:13] C:\Program Files\CCleaner
   [04/06/2009|07:31] C:\Program Files\Codec
   [19/04/2009|01:13] C:\Program Files\ComPlus Applications
   [17/06/2009|00:44] C:\Program Files\CPUID
   [18/06/2009|20:54] C:\Program Files\Cubase SX 3
   [26/03/2009|00:31] C:\Program Files\CursorXP
   [02/05/2009|12:13] C:\Program Files\DAEMON Tools Lite
   [26/03/2009|00:31] C:\Program Files\DebugMode
   [26/03/2009|00:31] C:\Program Files\Delta SP
   [13/06/2009|12:57] C:\Program Files\Dictionnaire Freelang
   [13/06/2009|12:57] C:\Program Files\Digital Element
   [26/03/2009|00:31] C:\Program Files\directx
   [26/03/2009|00:31] C:\Program Files\Eidos
   [02/05/2009|19:48] C:\Program Files\eMule
   [26/03/2009|00:31] C:\Program Files\EPSON
   [26/03/2009|00:31] C:\Program Files\ESTsoft
   [26/03/2009|00:31] C:\Program Files\etexchange
   [27/06/2009|00:02] C:\Program Files\Fichiers communs
   [17/06/2009|00:44] C:\Program Files\Folding@home
   [04/05/2009|01:18] C:\Program Files\Free Audio Pack
   [26/03/2009|00:31] C:\Program Files\GENIUS TABLET
   [13/06/2009|12:57] C:\Program Files\Google
   [26/03/2009|00:31] C:\Program Files\GRETECH
   [26/03/2009|00:31] C:\Program Files\IBM
   [14/06/2009|07:16] C:\Program Files\iColorFolder
   [26/04/2009|15:11] C:\Program Files\Image-Line
   [25/06/2009|13:09] C:\Program Files\InstallShield Installation Information
   [22/06/2009|15:11] C:\Program Files\Internet Explorer
   [26/03/2009|00:31] C:\Program Files\InterVideo
   [13/06/2009|12:58] C:\Program Files\iPod
   [13/06/2009|12:58] C:\Program Files\iTunes
   [26/03/2009|00:31] C:\Program Files\Java
   [13/06/2009|12:58] C:\Program Files\JRE
   [19/04/2009|01:14] C:\Program Files\Lavalys
   [28/06/2009|10:27] C:\Program Files\Lavasoft
   [26/03/2009|00:31] C:\Program Files\Lingoes
   [20/06/2009|15:53] C:\Program Files\ma-config.com
   [26/06/2009|23:10] C:\Program Files\Macromedia
   [20/06/2009|15:50] C:\Program Files\MadOnion.com
   [26/06/2009|23:10] C:\Program Files\MagicISO
   [26/03/2009|00:31] C:\Program Files\Ma‹do Production
   [28/06/2009|07:59] C:\Program Files\Malwarebytes' Anti-Malware
   [17/06/2009|00:49] C:\Program Files\Mass Downloader
   [22/06/2009|14:58] C:\Program Files\Messenger
   [02/04/2009|18:28] C:\Program Files\Messenger Plus! Live
   [25/04/2009|16:10] C:\Program Files\Microsoft ActiveSync
   [26/03/2009|00:31] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [26/03/2009|00:31] C:\Program Files\microsoft frontpage
   [02/05/2009|19:42] C:\Program Files\Microsoft Office
   [03/06/2009|23:52] C:\Program Files\Microsoft SDKs
   [26/03/2009|00:31] C:\Program Files\Microsoft Silverlight
   [13/06/2009|12:58] C:\Program Files\Microsoft SQL Server
   [18/05/2009|18:33] C:\Program Files\Microsoft Synchronization Services
   [13/06/2009|12:58] C:\Program Files\Microsoft.NET
   [22/06/2009|14:35] C:\Program Files\Movie Maker
   [28/06/2009|21:15] C:\Program Files\Mozilla Firefox
   [24/04/2009|10:50] C:\Program Files\msn
   [19/06/2009|22:39] C:\Program Files\MSN Gaming Zone
   [19/04/2009|01:15] C:\Program Files\MSXML 4.0
   [13/06/2009|12:58] C:\Program Files\MSXML 6.0
   [13/06/2009|12:58] C:\Program Files\Nero
   [22/06/2009|14:32] C:\Program Files\NetMeeting
   [26/03/2009|00:31] C:\Program Files\NOS
   [17/06/2009|00:44] C:\Program Files\OCCT
   [02/04/2009|13:23] C:\Program Files\Online Services
   [10/06/2009|20:21] C:\Program Files\OpenOffice.org 3
   [13/06/2009|12:59] C:\Program Files\OrangeHSS
   [22/06/2009|15:11] C:\Program Files\Outlook Express
   [05/06/2009|23:26] C:\Program Files\QuickTime
   [19/04/2009|01:15] C:\Program Files\Realtek
   [26/03/2009|00:31] C:\Program Files\Reference Assemblies
   [19/04/2009|01:15] C:\Program Files\RegCleaner
   [28/06/2009|20:31] C:\Program Files\Rising
   [26/03/2009|00:31] C:\Program Files\Services en ligne
   [17/05/2009|14:49] C:\Program Files\SiSWLAN
   [13/06/2009|12:59] C:\Program Files\Solegis
   [27/06/2009|16:53] C:\Program Files\Spybot - Search & Destroy
   [28/06/2009|18:06] C:\Program Files\Spyware Terminator
   [26/06/2009|23:10] C:\Program Files\Stellarium
   [19/04/2009|01:15] C:\Program Files\StuffPlug3
   [18/06/2009|18:52] C:\Program Files\Syncrosoft
   [26/03/2009|00:31] C:\Program Files\ToniArts
   [27/06/2009|16:54] C:\Program Files\trend micro
   [28/06/2009|18:35] C:\Program Files\TuneUp Utilities 2009
   [15/05/2009|02:17] C:\Program Files\Ubisoft
   [26/03/2009|00:31] C:\Program Files\Uninstall Information
   [13/06/2009|12:59] C:\Program Files\uTorrent
   [13/06/2009|12:59] C:\Program Files\VBW
   [13/06/2009|12:59] C:\Program Files\Vimicro
   [14/05/2009|00:46] C:\Program Files\VstPlugins
   [07/05/2009|19:20] C:\Program Files\Windows Live
   [26/03/2009|00:31] C:\Program Files\Windows Live Safety Center
   [26/03/2009|00:31] C:\Program Files\Windows Media Components
   [26/03/2009|00:31] C:\Program Files\Windows Media Connect 2
   [22/06/2009|15:11] C:\Program Files\Windows Media Player
   [22/06/2009|14:32] C:\Program Files\Windows NT
   [26/03/2009|00:31] C:\Program Files\Windows Update
   [27/06/2009|16:54] C:\Program Files\WindowsUpdate
   [26/03/2009|00:31] C:\Program Files\xerox
   [27/06/2009|16:54] C:\Program Files\XnView
   [26/03/2009|00:31] C:\Program Files\ZET 6.0

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [28/06/2009|02:46] C:\Program Files\Fichiers communs\Adobe
   [20/04/2009|18:51] C:\Program Files\Fichiers communs\Adobe AIR
   [26/06/2009|22:47] C:\Program Files\Fichiers communs\Adobe Systems Shared
   [05/06/2009|23:35] C:\Program Files\Fichiers communs\Apple
   [09/05/2009|12:02] C:\Program Files\Fichiers communs\Autodesk Shared
   [26/11/2008|19:22] C:\Program Files\Fichiers communs\AVSMedia
   [15/06/2008|22:10] C:\Program Files\Fichiers communs\BOONTY Shared
   [08/06/2009|02:09] C:\Program Files\Fichiers communs\Borland Shared
   [07/05/2009|23:10] C:\Program Files\Fichiers communs\Control Panels
   [28/03/2009|20:41] C:\Program Files\Fichiers communs\France Telecom
   [16/04/2009|21:15] C:\Program Files\Fichiers communs\InstallShield
   [25/06/2009|13:09] C:\Program Files\Fichiers communs\Macromedia Shared
   [20/04/2009|21:18] C:\Program Files\Fichiers communs\Macrovision Shared
   [28/06/2009|03:43] C:\Program Files\Fichiers communs\Microsoft Shared
   [24/07/2006|00:09] C:\Program Files\Fichiers communs\MSSoap
   [19/05/2009|21:39] C:\Program Files\Fichiers communs\Nero
   [24/07/2006|01:53] C:\Program Files\Fichiers communs\ODBC
   [24/07/2006|00:09] C:\Program Files\Fichiers communs\Services
   [14/06/2008|16:36] C:\Program Files\Fichiers communs\Softwin
   [24/07/2006|01:53] C:\Program Files\Fichiers communs\SpeechEngines
   [14/06/2008|16:43] C:\Program Files\Fichiers communs\Symantec Shared
   [22/06/2009|14:32] C:\Program Files\Fichiers communs\System
   [25/03/2009|18:33] C:\Program Files\Fichiers communs\Vbox
   [30/03/2009|16:28] C:\Program Files\Fichiers communs\Windows Live
   [14/06/2008|16:59] C:\Program Files\Fichiers communs\WindowsLiveInstaller

   --------------------\  Process

   ( 58 Processes )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Verification du Registre
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2009-06-28 21:32:40
   Windows 5.1.2600 Service Pack 3 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\Bart\Application Data\uTorrent\Adobe Audition v3.0 + Crack WinAll.torrent
   C:\DOCUME~1\Bart\Mes documents\3dsmax\import\Textures\CRACK1.GIF
   C:\DOCUME~1\Bart\Mes documents\3dsmax\import\Textures\CRACKS2C.TGA
   C:\DOCUME~1\Bart\Mes documents\Downloads\Adobe Audition v3.0 + Crack WinAll
   C:\DOCUME~1\Bart\Mes documents\Downloads\Adobe Audition v3.0 + Crack WinAll\Adobe Audition v3.0 + Crack WinAll.uif
   C:\DOCUME~1\Bart\Mes documents\Downloads\Adobe Audition v3.0 + Crack WinAll\nope.nfo
   C:\DOCUME~1\Bart\Mes documents\Downloads\Psytrance\Beat Hackers\Unknown Album\Crack (RMX unreleased 2003).mp3
   C:\DOCUME~1\Bart\Mes documents\Downloads\Psytrance\Beat Hackers\VA - Exodus\Crack.mp3
   C:\DOCUME~1\Bart\Mes documents\Downloads\Psytrance\Vibe Tribe\Wise Cracks
   C:\DOCUME~1\Bart\Mes documents\Downloads\Psytrance\Vibe Tribe\Wise Cracks\01 Wise Cracks.mp3
   C:\DOCUME~1\Bart\Mes documents\Downloads\Psytrance\Vibe Tribe\Wise Cracks\02 Dream Catcher.mp3
   C:\DOCUME~1\Bart\Mes documents\Downloads\Psytrance\Vibe Tribe\Wise Cracks\03 Carousel.mp3
   C:\DOCUME~1\Bart\Mes documents\Downloads\Psytrance\Vibe Tribe\Wise Cracks\04 Three Quarters.mp3
   C:\DOCUME~1\Bart\Mes documents\Downloads\Psytrance\Vibe Tribe\Wise Cracks\05 LFObia.mp3
   C:\DOCUME~1\Bart\Mes documents\Downloads\Psytrance\Vibe Tribe\Wise Cracks\06 The Brain.B.Q.mp3
   C:\DOCUME~1\Bart\Mes documents\Downloads\Psytrance\Vibe Tribe\Wise Cracks\07 Bad Habbits.mp3
   C:\DOCUME~1\Bart\Mes documents\Downloads\Psytrance\Vibe Tribe\Wise Cracks\08 Pulse.mp3
   C:\DOCUME~1\Bart\Mes documents\Downloads\Steinberg.Cubase.SX.3.1.1.944-H2O\Steinberg.Cubase.SX.3.0.2.623.H2O.DVDRip\DRIVER_installer_SX_v3.0.2.623 H2O.Crack.rar
   C:\DOCUME~1\Bart\Mes documents\Notes\Serial\Adobe\[0] Adobe Photoshop Extended Cs4 11 Full Serial Real Works Keygen Crack Activation Final 2009.txt
   C:\DOCUME~1\Bart\Mes documents\Notes\Serial\Adobe\[1] [0] Adobe Photoshop Extended CS4 11 FULL Serial REAL WORKS Keygen Crack Activation Final 2009.txt
   C:\DOCUME~1\Bart\Mes documents\æTorrrent\Adobe Audition v3.0 + Crack WinAll.torrent


   [F:36][D:4]-> C:\DOCUME~1\Bart\LOCALS~1\Temp
   [F:58][D:4]-> C:\DOCUME~1\Bart\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - 28/06/2009|21:35 - Option : [1]

   --------------------\  Fin du rapport a 21:35:53

Nic00 · Answer

&#9654;Relance Lop S&D
&#9654; Choisis l’option 2
&#9654; Ne touche à rien lors de la suppression !

Talamasca · Answer

Je sais pas si je dois mais je colle le rapport 
Il te faut un nouveau log RSIT ou hijackthis?  



--------------------\  Lop S&D 4.2.5-0   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Multiprocessor Free :               Intel(R) Pentium(R) 4 CPU 2.93GHz )
   BIOS : Award Modular BIOS v6.00PG
   USER : Bart ( Administrator )
   BOOT : Normal boot
   Antivirus : AntiVir Desktop 9.0.1.26 (Activated)
   Firewall  : Norton Internet Worm Protection 2006 (Not Activated)
   C:\ (Local Disk) - NTFS - Total:186 Go (Free:55 Go)
   D:\ (CD or DVD)
   E:\ (USB) - FAT - Total:61 Mo (Free:0 Go)
   F:\ (USB)
   G:\ (USB)
   H:\ (USB)
   I:\ (USB)
   L:\ (Local Disk) - FAT32 - Total:149 Go (Free:51 Go)
   M:\ (USB) - FAT32 - Total:7731 Mo (Free:7 Go)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [2] ( 28/06/2009|22:47 )


   \\\\\\\\\\\\\\\ SUPPRESSION

   -
   [ Fichier Hosts ] .. Restaure!
 
   \\\\\\\\\\\\\\\ 

 
   --------------------\  Listing des dossiers dans APPLIC~1

   [24/07/2006|00:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
   [28/06/2009|10:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Mozilla

   [28/06/2009|18:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{55A29068-F2CE-456C-9148-C869879E2357}
   [05/06/2009|23:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
   [25/06/2009|13:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [28/06/2009|01:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ALM
   [21/11/2008|21:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
   [05/06/2009|23:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [14/06/2009|03:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ATI
   [09/05/2009|17:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Autodesk
   [25/05/2009|01:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
   [15/06/2008|22:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
   [12/01/2009|00:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DAEMON Tools Lite
   [10/04/2009|03:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DassaultSystemes
   [19/03/2009|17:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
   [19/05/2009|23:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [28/10/2008|16:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GRETECH
   [26/06/2009|19:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Lab Setup Files
   [28/06/2009|10:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
   [20/06/2009|15:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ma-config.com
   [25/06/2009|13:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macromedia
   [25/06/2009|13:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
   [15/02/2009|19:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
   [21/01/2009|09:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [18/05/2009|23:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [03/06/2009|23:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
   [19/05/2009|21:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
   [28/11/2008|13:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
   [28/06/2009|20:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Rising
   [26/06/2009|22:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Simply Super Software
   [08/06/2009|08:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Solegis
   [28/06/2009|18:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [28/06/2009|17:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spyware Terminator
   [08/06/2009|08:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\stock
   [14/06/2008|16:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [26/06/2009|23:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
   [28/06/2009|18:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TuneUp Software
   [09/05/2009|18:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ubisoft
   [28/10/2008|12:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [01/04/2009|20:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

   [14/06/2008|17:25] C:\DOCUME~1\Aurore\APPLIC~1\Adobe
   [14/06/2008|16:21] C:\DOCUME~1\Aurore\APPLIC~1\ATI
   [14/06/2008|17:29] C:\DOCUME~1\Aurore\APPLIC~1\Google
   [18/11/2008|21:05] C:\DOCUME~1\Aurore\APPLIC~1\HiYo
   [14/06/2008|16:21] C:\DOCUME~1\Aurore\APPLIC~1\Identities
   [25/03/2009|17:51] C:\DOCUME~1\Aurore\APPLIC~1\LimeWire
   [14/06/2008|17:25] C:\DOCUME~1\Aurore\APPLIC~1\Macromedia
   [13/03/2009|21:18] C:\DOCUME~1\Aurore\APPLIC~1\Microsoft

   [28/06/2009|08:52] C:\DOCUME~1\Bart\APPLIC~1\Adobe
   [26/06/2009|22:47] C:\DOCUME~1\Bart\APPLIC~1\AdobeUM
   [26/06/2009|11:52] C:\DOCUME~1\Bart\APPLIC~1\Apple Computer
   [26/06/2009|11:52] C:\DOCUME~1\Bart\APPLIC~1\Artweaver
   [17/05/2009|20:53] C:\DOCUME~1\Bart\APPLIC~1\ATI
   [26/06/2009|11:52] C:\DOCUME~1\Bart\APPLIC~1\Blender Foundation
   [08/04/2009|14:33] C:\DOCUME~1\Bart\APPLIC~1\Broad Intelligence
   [30/11/2008|14:55] C:\DOCUME~1\Bart\APPLIC~1\Canneverbe_Limited
   [20/04/2009|15:21] C:\DOCUME~1\Bart\APPLIC~1\com.adobe.ExMan
   [12/01/2009|00:52] C:\DOCUME~1\Bart\APPLIC~1\DAEMON Tools
   [01/05/2009|22:12] C:\DOCUME~1\Bart\APPLIC~1\DAEMON Tools Lite
   [12/01/2009|00:52] C:\DOCUME~1\Bart\APPLIC~1\DAEMON Tools Pro
   [20/04/2009|00:39] C:\DOCUME~1\Bart\APPLIC~1\DivX
   [15/06/2009|01:54] C:\DOCUME~1\Bart\APPLIC~1\Download Manager
   [28/10/2008|18:25] C:\DOCUME~1\Bart\APPLIC~1\ESTsoft
   [28/06/2009|13:07] C:\DOCUME~1\Bart\APPLIC~1\Folding@home-gpu
   [28/06/2009|10:25] C:\DOCUME~1\Bart\APPLIC~1\Google
   [14/06/2009|05:04] C:\DOCUME~1\Bart\APPLIC~1\GrabPro
   [28/10/2008|16:09] C:\DOCUME~1\Bart\APPLIC~1\GRETECH
   [03/04/2009|17:07] C:\DOCUME~1\Bart\APPLIC~1\gtk-2.0
   [21/06/2008|22:43] C:\DOCUME~1\Bart\APPLIC~1\Help
   [27/10/2008|22:09] C:\DOCUME~1\Bart\APPLIC~1\HiYo
   [24/07/2006|00:21] C:\DOCUME~1\Bart\APPLIC~1\Identities
   [17/01/2009|14:03] C:\DOCUME~1\Bart\APPLIC~1\InstallShield
   [04/08/2006|15:13] C:\DOCUME~1\Bart\APPLIC~1\InterTrust
   [08/10/2006|02:35] C:\DOCUME~1\Bart\APPLIC~1\InterVideo
   [01/12/2008|23:18] C:\DOCUME~1\Bart\APPLIC~1\Lingoes
   [25/06/2009|13:11] C:\DOCUME~1\Bart\APPLIC~1\Macromedia
   [22/03/2009|14:14] C:\DOCUME~1\Bart\APPLIC~1\Malwarebytes
   [14/06/2009|09:14] C:\DOCUME~1\Bart\APPLIC~1\MetaProducts
   [28/06/2009|12:59] C:\DOCUME~1\Bart\APPLIC~1\Microsoft
   [17/01/2009|15:44] C:\DOCUME~1\Bart\APPLIC~1\Mozilla
   [17/06/2008|16:07] C:\DOCUME~1\Bart\APPLIC~1\MSNInstaller
   [06/06/2009|15:51] C:\DOCUME~1\Bart\APPLIC~1\Nero
   [17/05/2009|14:51] C:\DOCUME~1\Bart\APPLIC~1\Notepad++
   [08/04/2009|14:32] C:\DOCUME~1\Bart\APPLIC~1\OpenCandy
   [20/03/2009|01:53] C:\DOCUME~1\Bart\APPLIC~1\OpenOffice.org
   [14/06/2009|08:49] C:\DOCUME~1\Bart\APPLIC~1\Orbit
   [28/06/2009|22:16] C:\DOCUME~1\Bart\APPLIC~1\Spyware Terminator
   [18/06/2009|19:33] C:\DOCUME~1\Bart\APPLIC~1\Steinberg
   [26/06/2009|22:47] C:\DOCUME~1\Bart\APPLIC~1\Stellarium
   [16/06/2008|17:50] C:\DOCUME~1\Bart\APPLIC~1\Sun
   [24/07/2006|01:18] C:\DOCUME~1\Bart\APPLIC~1\Symantec
   [28/06/2009|18:35] C:\DOCUME~1\Bart\APPLIC~1\TuneUp Software
   [09/05/2009|18:30] C:\DOCUME~1\Bart\APPLIC~1\Ubisoft
   [27/06/2009|14:38] C:\DOCUME~1\Bart\APPLIC~1\uTorrent
   [17/06/2009|00:36] C:\DOCUME~1\Bart\APPLIC~1\vlc
   [22/06/2009|23:05] C:\DOCUME~1\Bart\APPLIC~1\XnView

   [24/07/2006|00:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

   [14/06/2008|17:37] C:\DOCUME~1\GUILLA~1\APPLIC~1\Adobe
   [14/06/2008|17:33] C:\DOCUME~1\GUILLA~1\APPLIC~1\ATI
   [14/06/2008|17:37] C:\DOCUME~1\GUILLA~1\APPLIC~1\Google
   [13/11/2008|22:02] C:\DOCUME~1\GUILLA~1\APPLIC~1\HiYo
   [14/06/2008|17:33] C:\DOCUME~1\GUILLA~1\APPLIC~1\Identities
   [14/06/2008|17:37] C:\DOCUME~1\GUILLA~1\APPLIC~1\Macromedia
   [25/12/2008|20:57] C:\DOCUME~1\GUILLA~1\APPLIC~1\Microsoft
   [23/06/2008|16:10] C:\DOCUME~1\GUILLA~1\APPLIC~1\OpenOffice.org2

   [17/05/2009|12:40] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
   [28/10/2008|12:41] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
   [27/01/2009|20:06] C:\DOCUME~1\LOCALS~1\APPLIC~1\Mozilla

   [08/05/2009|23:04] C:\DOCUME~1\NEROME~1.4\APPLIC~1\Microsoft

   [19/05/2009|00:02] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [28/06/2009 22:00][--a------] C:\WINDOWS	asks\Maintenance en 1 clic.job
   [28/06/2009 00:01][--a------] C:\WINDOWS	asks\NeroLiveEpgUpdate-ORDI_STEPH_Bart.job
   [28/06/2009 21:11][--ah-----] C:\WINDOWS	asks\SA.DAT
   [05/08/2004 14:00][-r-h-----] C:\WINDOWS	asks\desktop.ini

   --------------------\  Listing des dossiers dans C:\Program Files

   [28/06/2009|02:41] C:\Program Files\Adobe
   [22/06/2009|21:54] C:\Program Files\AdwareSpywareScannerDeleter
   [09/06/2009|01:48] C:\Program Files\AirSnare
   [19/05/2009|21:56] C:\Program Files\Alex Feinman
   [26/03/2009|00:31] C:\Program Files\Alwil Software
   [17/05/2009|16:01] C:\Program Files\ANI
   [26/03/2009|00:31] C:\Program Files\Apple Software Update
   [13/06/2009|12:57] C:\Program Files\Artweaver 0.5
   [18/06/2009|20:53] C:\Program Files\ASIO
   [26/03/2009|00:31] C:\Program Files\ASIO4ALL v2
   [14/06/2009|03:26] C:\Program Files\ATI Technologies
   [26/03/2009|00:31] C:\Program Files\Audioblast
   [09/05/2009|14:40] C:\Program Files\Autodesk
   [28/06/2009|03:45] C:\Program Files\Avira
   [04/05/2009|01:39] C:\Program Files\Beneton Movie GIF
   [05/06/2009|23:35] C:\Program Files\Bonjour
   [26/03/2009|00:31] C:\Program Files\BRuniversalFilt
   [26/03/2009|00:31] C:\Program Files\Buzz
   [19/04/2009|01:13] C:\Program Files\CCleaner
   [04/06/2009|07:31] C:\Program Files\Codec
   [19/04/2009|01:13] C:\Program Files\ComPlus Applications
   [17/06/2009|00:44] C:\Program Files\CPUID
   [18/06/2009|20:54] C:\Program Files\Cubase SX 3
   [26/03/2009|00:31] C:\Program Files\CursorXP
   [02/05/2009|12:13] C:\Program Files\DAEMON Tools Lite
   [26/03/2009|00:31] C:\Program Files\DebugMode
   [26/03/2009|00:31] C:\Program Files\Delta SP
   [13/06/2009|12:57] C:\Program Files\Dictionnaire Freelang
   [13/06/2009|12:57] C:\Program Files\Digital Element
   [26/03/2009|00:31] C:\Program Files\directx
   [26/03/2009|00:31] C:\Program Files\Eidos
   [02/05/2009|19:48] C:\Program Files\eMule
   [26/03/2009|00:31] C:\Program Files\EPSON
   [26/03/2009|00:31] C:\Program Files\ESTsoft
   [26/03/2009|00:31] C:\Program Files\etexchange
   [27/06/2009|00:02] C:\Program Files\Fichiers communs
   [17/06/2009|00:44] C:\Program Files\Folding@home
   [04/05/2009|01:18] C:\Program Files\Free Audio Pack
   [26/03/2009|00:31] C:\Program Files\GENIUS TABLET
   [13/06/2009|12:57] C:\Program Files\Google
   [26/03/2009|00:31] C:\Program Files\GRETECH
   [26/03/2009|00:31] C:\Program Files\IBM
   [14/06/2009|07:16] C:\Program Files\iColorFolder
   [26/04/2009|15:11] C:\Program Files\Image-Line
   [25/06/2009|13:09] C:\Program Files\InstallShield Installation Information
   [22/06/2009|15:11] C:\Program Files\Internet Explorer
   [26/03/2009|00:31] C:\Program Files\InterVideo
   [13/06/2009|12:58] C:\Program Files\iPod
   [13/06/2009|12:58] C:\Program Files\iTunes
   [26/03/2009|00:31] C:\Program Files\Java
   [13/06/2009|12:58] C:\Program Files\JRE
   [19/04/2009|01:14] C:\Program Files\Lavalys
   [28/06/2009|10:27] C:\Program Files\Lavasoft
   [26/03/2009|00:31] C:\Program Files\Lingoes
   [20/06/2009|15:53] C:\Program Files\ma-config.com
   [26/06/2009|23:10] C:\Program Files\Macromedia
   [20/06/2009|15:50] C:\Program Files\MadOnion.com
   [26/06/2009|23:10] C:\Program Files\MagicISO
   [26/03/2009|00:31] C:\Program Files\Ma‹do Production
   [28/06/2009|07:59] C:\Program Files\Malwarebytes' Anti-Malware
   [17/06/2009|00:49] C:\Program Files\Mass Downloader
   [22/06/2009|14:58] C:\Program Files\Messenger
   [02/04/2009|18:28] C:\Program Files\Messenger Plus! Live
   [25/04/2009|16:10] C:\Program Files\Microsoft ActiveSync
   [26/03/2009|00:31] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [26/03/2009|00:31] C:\Program Files\microsoft frontpage
   [02/05/2009|19:42] C:\Program Files\Microsoft Office
   [03/06/2009|23:52] C:\Program Files\Microsoft SDKs
   [26/03/2009|00:31] C:\Program Files\Microsoft Silverlight
   [13/06/2009|12:58] C:\Program Files\Microsoft SQL Server
   [18/05/2009|18:33] C:\Program Files\Microsoft Synchronization Services
   [13/06/2009|12:58] C:\Program Files\Microsoft.NET
   [22/06/2009|14:35] C:\Program Files\Movie Maker
   [28/06/2009|21:25] C:\Program Files\Mozilla Firefox
   [24/04/2009|10:50] C:\Program Files\msn
   [19/06/2009|22:39] C:\Program Files\MSN Gaming Zone
   [19/04/2009|01:15] C:\Program Files\MSXML 4.0
   [13/06/2009|12:58] C:\Program Files\MSXML 6.0
   [13/06/2009|12:58] C:\Program Files\Nero
   [22/06/2009|14:32] C:\Program Files\NetMeeting
   [26/03/2009|00:31] C:\Program Files\NOS
   [17/06/2009|00:44] C:\Program Files\OCCT
   [02/04/2009|13:23] C:\Program Files\Online Services
   [10/06/2009|20:21] C:\Program Files\OpenOffice.org 3
   [13/06/2009|12:59] C:\Program Files\OrangeHSS
   [22/06/2009|15:11] C:\Program Files\Outlook Express
   [05/06/2009|23:26] C:\Program Files\QuickTime
   [19/04/2009|01:15] C:\Program Files\Realtek
   [26/03/2009|00:31] C:\Program Files\Reference Assemblies
   [19/04/2009|01:15] C:\Program Files\RegCleaner
   [28/06/2009|20:31] C:\Program Files\Rising
   [26/03/2009|00:31] C:\Program Files\Services en ligne
   [17/05/2009|14:49] C:\Program Files\SiSWLAN
   [13/06/2009|12:59] C:\Program Files\Solegis
   [27/06/2009|16:53] C:\Program Files\Spybot - Search & Destroy
   [28/06/2009|22:16] C:\Program Files\Spyware Terminator
   [26/06/2009|23:10] C:\Program Files\Stellarium
   [19/04/2009|01:15] C:\Program Files\StuffPlug3
   [18/06/2009|18:52] C:\Program Files\Syncrosoft
   [26/03/2009|00:31] C:\Program Files\ToniArts
   [27/06/2009|16:54] C:\Program Files	rend micro
   [28/06/2009|18:35] C:\Program Files\TuneUp Utilities 2009
   [15/05/2009|02:17] C:\Program Files\Ubisoft
   [26/03/2009|00:31] C:\Program Files\Uninstall Information
   [13/06/2009|12:59] C:\Program Files\uTorrent
   [13/06/2009|12:59] C:\Program Files\VBW
   [13/06/2009|12:59] C:\Program Files\Vimicro
   [14/05/2009|00:46] C:\Program Files\VstPlugins
   [07/05/2009|19:20] C:\Program Files\Windows Live
   [26/03/2009|00:31] C:\Program Files\Windows Live Safety Center
   [26/03/2009|00:31] C:\Program Files\Windows Media Components
   [26/03/2009|00:31] C:\Program Files\Windows Media Connect 2
   [22/06/2009|15:11] C:\Program Files\Windows Media Player
   [22/06/2009|14:32] C:\Program Files\Windows NT
   [26/03/2009|00:31] C:\Program Files\Windows Update
   [27/06/2009|16:54] C:\Program Files\WindowsUpdate
   [26/03/2009|00:31] C:\Program Files\xerox
   [27/06/2009|16:54] C:\Program Files\XnView
   [26/03/2009|00:31] C:\Program Files\ZET 6.0

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [28/06/2009|02:46] C:\Program Files\Fichiers communs\Adobe
   [20/04/2009|18:51] C:\Program Files\Fichiers communs\Adobe AIR
   [26/06/2009|22:47] C:\Program Files\Fichiers communs\Adobe Systems Shared
   [05/06/2009|23:35] C:\Program Files\Fichiers communs\Apple
   [09/05/2009|12:02] C:\Program Files\Fichiers communs\Autodesk Shared
   [26/11/2008|19:22] C:\Program Files\Fichiers communs\AVSMedia
   [15/06/2008|22:10] C:\Program Files\Fichiers communs\BOONTY Shared
   [08/06/2009|02:09] C:\Program Files\Fichiers communs\Borland Shared
   [07/05/2009|23:10] C:\Program Files\Fichiers communs\Control Panels
   [28/03/2009|20:41] C:\Program Files\Fichiers communs\France Telecom
   [16/04/2009|21:15] C:\Program Files\Fichiers communs\InstallShield
   [25/06/2009|13:09] C:\Program Files\Fichiers communs\Macromedia Shared
   [20/04/2009|21:18] C:\Program Files\Fichiers communs\Macrovision Shared
   [28/06/2009|03:43] C:\Program Files\Fichiers communs\Microsoft Shared
   [24/07/2006|00:09] C:\Program Files\Fichiers communs\MSSoap
   [19/05/2009|21:39] C:\Program Files\Fichiers communs\Nero
   [24/07/2006|01:53] C:\Program Files\Fichiers communs\ODBC
   [24/07/2006|00:09] C:\Program Files\Fichiers communs\Services
   [14/06/2008|16:36] C:\Program Files\Fichiers communs\Softwin
   [24/07/2006|01:53] C:\Program Files\Fichiers communs\SpeechEngines
   [14/06/2008|16:43] C:\Program Files\Fichiers communs\Symantec Shared
   [22/06/2009|14:32] C:\Program Files\Fichiers communs\System
   [25/03/2009|18:33] C:\Program Files\Fichiers communs\Vbox
   [30/03/2009|16:28] C:\Program Files\Fichiers communs\Windows Live
   [14/06/2008|16:59] C:\Program Files\Fichiers communs\WindowsLiveInstaller

Nic00 · Answer

Le rapport n'est pas en entier. Reposte le entièrement.

Talamasca · Answer

désolé j'avais pas fais attention...


   --------------------\  Lop S&D 4.2.5-0   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Multiprocessor Free :               Intel(R) Pentium(R) 4 CPU 2.93GHz )
   BIOS : Award Modular BIOS v6.00PG
   USER : Bart ( Administrator )
   BOOT : Normal boot
   Antivirus : AntiVir Desktop 9.0.1.26 (Activated)
   Firewall  : Norton Internet Worm Protection 2006 (Not Activated)
   C:\ (Local Disk) - NTFS - Total:186 Go (Free:55 Go)
   D:\ (CD or DVD)
   E:\ (USB) - FAT - Total:61 Mo (Free:0 Go)
   F:\ (USB)
   G:\ (USB)
   H:\ (USB)
   I:\ (USB)
   L:\ (Local Disk) - FAT32 - Total:149 Go (Free:51 Go)
   M:\ (USB) - FAT32 - Total:7731 Mo (Free:7 Go)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [2] ( 28/06/2009|22:47 )


   \\\\\\\\\\\\\\\ SUPPRESSION

   -
   [ Fichier Hosts ] .. Restaure!
 
   \\\\\\\\\\\\\\\ 

 
   --------------------\  Listing des dossiers dans APPLIC~1

   [24/07/2006|00:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
   [28/06/2009|10:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Mozilla

   [28/06/2009|18:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{55A29068-F2CE-456C-9148-C869879E2357}
   [05/06/2009|23:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
   [25/06/2009|13:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [28/06/2009|01:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ALM
   [21/11/2008|21:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
   [05/06/2009|23:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [14/06/2009|03:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ATI
   [09/05/2009|17:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Autodesk
   [25/05/2009|01:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
   [15/06/2008|22:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
   [12/01/2009|00:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DAEMON Tools Lite
   [10/04/2009|03:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DassaultSystemes
   [19/03/2009|17:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
   [19/05/2009|23:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [28/10/2008|16:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GRETECH
   [26/06/2009|19:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Lab Setup Files
   [28/06/2009|10:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
   [20/06/2009|15:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ma-config.com
   [25/06/2009|13:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macromedia
   [25/06/2009|13:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
   [15/02/2009|19:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
   [21/01/2009|09:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [18/05/2009|23:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [03/06/2009|23:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
   [19/05/2009|21:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
   [28/11/2008|13:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
   [28/06/2009|20:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Rising
   [26/06/2009|22:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Simply Super Software
   [08/06/2009|08:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Solegis
   [28/06/2009|18:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [28/06/2009|17:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spyware Terminator
   [08/06/2009|08:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\stock
   [14/06/2008|16:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [26/06/2009|23:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
   [28/06/2009|18:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TuneUp Software
   [09/05/2009|18:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ubisoft
   [28/10/2008|12:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [01/04/2009|20:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

   [14/06/2008|17:25] C:\DOCUME~1\Aurore\APPLIC~1\Adobe
   [14/06/2008|16:21] C:\DOCUME~1\Aurore\APPLIC~1\ATI
   [14/06/2008|17:29] C:\DOCUME~1\Aurore\APPLIC~1\Google
   [18/11/2008|21:05] C:\DOCUME~1\Aurore\APPLIC~1\HiYo
   [14/06/2008|16:21] C:\DOCUME~1\Aurore\APPLIC~1\Identities
   [25/03/2009|17:51] C:\DOCUME~1\Aurore\APPLIC~1\LimeWire
   [14/06/2008|17:25] C:\DOCUME~1\Aurore\APPLIC~1\Macromedia
   [13/03/2009|21:18] C:\DOCUME~1\Aurore\APPLIC~1\Microsoft

   [28/06/2009|08:52] C:\DOCUME~1\Bart\APPLIC~1\Adobe
   [26/06/2009|22:47] C:\DOCUME~1\Bart\APPLIC~1\AdobeUM
   [26/06/2009|11:52] C:\DOCUME~1\Bart\APPLIC~1\Apple Computer
   [26/06/2009|11:52] C:\DOCUME~1\Bart\APPLIC~1\Artweaver
   [17/05/2009|20:53] C:\DOCUME~1\Bart\APPLIC~1\ATI
   [26/06/2009|11:52] C:\DOCUME~1\Bart\APPLIC~1\Blender Foundation
   [08/04/2009|14:33] C:\DOCUME~1\Bart\APPLIC~1\Broad Intelligence
   [30/11/2008|14:55] C:\DOCUME~1\Bart\APPLIC~1\Canneverbe_Limited
   [20/04/2009|15:21] C:\DOCUME~1\Bart\APPLIC~1\com.adobe.ExMan
   [12/01/2009|00:52] C:\DOCUME~1\Bart\APPLIC~1\DAEMON Tools
   [01/05/2009|22:12] C:\DOCUME~1\Bart\APPLIC~1\DAEMON Tools Lite
   [12/01/2009|00:52] C:\DOCUME~1\Bart\APPLIC~1\DAEMON Tools Pro
   [20/04/2009|00:39] C:\DOCUME~1\Bart\APPLIC~1\DivX
   [15/06/2009|01:54] C:\DOCUME~1\Bart\APPLIC~1\Download Manager
   [28/10/2008|18:25] C:\DOCUME~1\Bart\APPLIC~1\ESTsoft
   [28/06/2009|13:07] C:\DOCUME~1\Bart\APPLIC~1\Folding@home-gpu
   [28/06/2009|10:25] C:\DOCUME~1\Bart\APPLIC~1\Google
   [14/06/2009|05:04] C:\DOCUME~1\Bart\APPLIC~1\GrabPro
   [28/10/2008|16:09] C:\DOCUME~1\Bart\APPLIC~1\GRETECH
   [03/04/2009|17:07] C:\DOCUME~1\Bart\APPLIC~1\gtk-2.0
   [21/06/2008|22:43] C:\DOCUME~1\Bart\APPLIC~1\Help
   [27/10/2008|22:09] C:\DOCUME~1\Bart\APPLIC~1\HiYo
   [24/07/2006|00:21] C:\DOCUME~1\Bart\APPLIC~1\Identities
   [17/01/2009|14:03] C:\DOCUME~1\Bart\APPLIC~1\InstallShield
   [04/08/2006|15:13] C:\DOCUME~1\Bart\APPLIC~1\InterTrust
   [08/10/2006|02:35] C:\DOCUME~1\Bart\APPLIC~1\InterVideo
   [01/12/2008|23:18] C:\DOCUME~1\Bart\APPLIC~1\Lingoes
   [25/06/2009|13:11] C:\DOCUME~1\Bart\APPLIC~1\Macromedia
   [22/03/2009|14:14] C:\DOCUME~1\Bart\APPLIC~1\Malwarebytes
   [14/06/2009|09:14] C:\DOCUME~1\Bart\APPLIC~1\MetaProducts
   [28/06/2009|12:59] C:\DOCUME~1\Bart\APPLIC~1\Microsoft
   [17/01/2009|15:44] C:\DOCUME~1\Bart\APPLIC~1\Mozilla
   [17/06/2008|16:07] C:\DOCUME~1\Bart\APPLIC~1\MSNInstaller
   [06/06/2009|15:51] C:\DOCUME~1\Bart\APPLIC~1\Nero
   [17/05/2009|14:51] C:\DOCUME~1\Bart\APPLIC~1\Notepad++
   [08/04/2009|14:32] C:\DOCUME~1\Bart\APPLIC~1\OpenCandy
   [20/03/2009|01:53] C:\DOCUME~1\Bart\APPLIC~1\OpenOffice.org
   [14/06/2009|08:49] C:\DOCUME~1\Bart\APPLIC~1\Orbit
   [28/06/2009|22:16] C:\DOCUME~1\Bart\APPLIC~1\Spyware Terminator
   [18/06/2009|19:33] C:\DOCUME~1\Bart\APPLIC~1\Steinberg
   [26/06/2009|22:47] C:\DOCUME~1\Bart\APPLIC~1\Stellarium
   [16/06/2008|17:50] C:\DOCUME~1\Bart\APPLIC~1\Sun
   [24/07/2006|01:18] C:\DOCUME~1\Bart\APPLIC~1\Symantec
   [28/06/2009|18:35] C:\DOCUME~1\Bart\APPLIC~1\TuneUp Software
   [09/05/2009|18:30] C:\DOCUME~1\Bart\APPLIC~1\Ubisoft
   [27/06/2009|14:38] C:\DOCUME~1\Bart\APPLIC~1\uTorrent
   [17/06/2009|00:36] C:\DOCUME~1\Bart\APPLIC~1\vlc
   [22/06/2009|23:05] C:\DOCUME~1\Bart\APPLIC~1\XnView

   [24/07/2006|00:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

   [14/06/2008|17:37] C:\DOCUME~1\GUILLA~1\APPLIC~1\Adobe
   [14/06/2008|17:33] C:\DOCUME~1\GUILLA~1\APPLIC~1\ATI
   [14/06/2008|17:37] C:\DOCUME~1\GUILLA~1\APPLIC~1\Google
   [13/11/2008|22:02] C:\DOCUME~1\GUILLA~1\APPLIC~1\HiYo
   [14/06/2008|17:33] C:\DOCUME~1\GUILLA~1\APPLIC~1\Identities
   [14/06/2008|17:37] C:\DOCUME~1\GUILLA~1\APPLIC~1\Macromedia
   [25/12/2008|20:57] C:\DOCUME~1\GUILLA~1\APPLIC~1\Microsoft
   [23/06/2008|16:10] C:\DOCUME~1\GUILLA~1\APPLIC~1\OpenOffice.org2

   [17/05/2009|12:40] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
   [28/10/2008|12:41] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
   [27/01/2009|20:06] C:\DOCUME~1\LOCALS~1\APPLIC~1\Mozilla

   [08/05/2009|23:04] C:\DOCUME~1\NEROME~1.4\APPLIC~1\Microsoft

   [19/05/2009|00:02] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
 
   --------------------\  Tâches planifiées dans C:\WINDOWS\tasks

   [28/06/2009 22:00][--a------] C:\WINDOWS\tasks\Maintenance en 1 clic.job
   [28/06/2009 00:01][--a------] C:\WINDOWS\tasks\NeroLiveEpgUpdate-ORDI_STEPH_Bart.job
   [28/06/2009 21:11][--ah-----] C:\WINDOWS\tasks\SA.DAT
   [05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

   --------------------\  Listing des dossiers dans C:\Program Files

   [28/06/2009|02:41] C:\Program Files\Adobe
   [22/06/2009|21:54] C:\Program Files\AdwareSpywareScannerDeleter
   [09/06/2009|01:48] C:\Program Files\AirSnare
   [19/05/2009|21:56] C:\Program Files\Alex Feinman
   [26/03/2009|00:31] C:\Program Files\Alwil Software
   [17/05/2009|16:01] C:\Program Files\ANI
   [26/03/2009|00:31] C:\Program Files\Apple Software Update
   [13/06/2009|12:57] C:\Program Files\Artweaver 0.5
   [18/06/2009|20:53] C:\Program Files\ASIO
   [26/03/2009|00:31] C:\Program Files\ASIO4ALL v2
   [14/06/2009|03:26] C:\Program Files\ATI Technologies
   [26/03/2009|00:31] C:\Program Files\Audioblast
   [09/05/2009|14:40] C:\Program Files\Autodesk
   [28/06/2009|03:45] C:\Program Files\Avira
   [04/05/2009|01:39] C:\Program Files\Beneton Movie GIF
   [05/06/2009|23:35] C:\Program Files\Bonjour
   [26/03/2009|00:31] C:\Program Files\BRuniversalFilt
   [26/03/2009|00:31] C:\Program Files\Buzz
   [19/04/2009|01:13] C:\Program Files\CCleaner
   [04/06/2009|07:31] C:\Program Files\Codec
   [19/04/2009|01:13] C:\Program Files\ComPlus Applications
   [17/06/2009|00:44] C:\Program Files\CPUID
   [18/06/2009|20:54] C:\Program Files\Cubase SX 3
   [26/03/2009|00:31] C:\Program Files\CursorXP
   [02/05/2009|12:13] C:\Program Files\DAEMON Tools Lite
   [26/03/2009|00:31] C:\Program Files\DebugMode
   [26/03/2009|00:31] C:\Program Files\Delta SP
   [13/06/2009|12:57] C:\Program Files\Dictionnaire Freelang
   [13/06/2009|12:57] C:\Program Files\Digital Element
   [26/03/2009|00:31] C:\Program Files\directx
   [26/03/2009|00:31] C:\Program Files\Eidos
   [02/05/2009|19:48] C:\Program Files\eMule
   [26/03/2009|00:31] C:\Program Files\EPSON
   [26/03/2009|00:31] C:\Program Files\ESTsoft
   [26/03/2009|00:31] C:\Program Files\etexchange
   [27/06/2009|00:02] C:\Program Files\Fichiers communs
   [17/06/2009|00:44] C:\Program Files\Folding@home
   [04/05/2009|01:18] C:\Program Files\Free Audio Pack
   [26/03/2009|00:31] C:\Program Files\GENIUS TABLET
   [13/06/2009|12:57] C:\Program Files\Google
   [26/03/2009|00:31] C:\Program Files\GRETECH
   [26/03/2009|00:31] C:\Program Files\IBM
   [14/06/2009|07:16] C:\Program Files\iColorFolder
   [26/04/2009|15:11] C:\Program Files\Image-Line
   [25/06/2009|13:09] C:\Program Files\InstallShield Installation Information
   [22/06/2009|15:11] C:\Program Files\Internet Explorer
   [26/03/2009|00:31] C:\Program Files\InterVideo
   [13/06/2009|12:58] C:\Program Files\iPod
   [13/06/2009|12:58] C:\Program Files\iTunes
   [26/03/2009|00:31] C:\Program Files\Java
   [13/06/2009|12:58] C:\Program Files\JRE
   [19/04/2009|01:14] C:\Program Files\Lavalys
   [28/06/2009|10:27] C:\Program Files\Lavasoft
   [26/03/2009|00:31] C:\Program Files\Lingoes
   [20/06/2009|15:53] C:\Program Files\ma-config.com
   [26/06/2009|23:10] C:\Program Files\Macromedia
   [20/06/2009|15:50] C:\Program Files\MadOnion.com
   [26/06/2009|23:10] C:\Program Files\MagicISO
   [26/03/2009|00:31] C:\Program Files\Ma‹do Production
   [28/06/2009|07:59] C:\Program Files\Malwarebytes' Anti-Malware
   [17/06/2009|00:49] C:\Program Files\Mass Downloader
   [22/06/2009|14:58] C:\Program Files\Messenger
   [02/04/2009|18:28] C:\Program Files\Messenger Plus! Live
   [25/04/2009|16:10] C:\Program Files\Microsoft ActiveSync
   [26/03/2009|00:31] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [26/03/2009|00:31] C:\Program Files\microsoft frontpage
   [02/05/2009|19:42] C:\Program Files\Microsoft Office
   [03/06/2009|23:52] C:\Program Files\Microsoft SDKs
   [26/03/2009|00:31] C:\Program Files\Microsoft Silverlight
   [13/06/2009|12:58] C:\Program Files\Microsoft SQL Server
   [18/05/2009|18:33] C:\Program Files\Microsoft Synchronization Services
   [13/06/2009|12:58] C:\Program Files\Microsoft.NET
   [22/06/2009|14:35] C:\Program Files\Movie Maker
   [28/06/2009|21:25] C:\Program Files\Mozilla Firefox
   [24/04/2009|10:50] C:\Program Files\msn
   [19/06/2009|22:39] C:\Program Files\MSN Gaming Zone
   [19/04/2009|01:15] C:\Program Files\MSXML 4.0
   [13/06/2009|12:58] C:\Program Files\MSXML 6.0
   [13/06/2009|12:58] C:\Program Files\Nero
   [22/06/2009|14:32] C:\Program Files\NetMeeting
   [26/03/2009|00:31] C:\Program Files\NOS
   [17/06/2009|00:44] C:\Program Files\OCCT
   [02/04/2009|13:23] C:\Program Files\Online Services
   [10/06/2009|20:21] C:\Program Files\OpenOffice.org 3
   [13/06/2009|12:59] C:\Program Files\OrangeHSS
   [22/06/2009|15:11] C:\Program Files\Outlook Express
   [05/06/2009|23:26] C:\Program Files\QuickTime
   [19/04/2009|01:15] C:\Program Files\Realtek
   [26/03/2009|00:31] C:\Program Files\Reference Assemblies
   [19/04/2009|01:15] C:\Program Files\RegCleaner
   [28/06/2009|20:31] C:\Program Files\Rising
   [26/03/2009|00:31] C:\Program Files\Services en ligne
   [17/05/2009|14:49] C:\Program Files\SiSWLAN
   [13/06/2009|12:59] C:\Program Files\Solegis
   [27/06/2009|16:53] C:\Program Files\Spybot - Search & Destroy
   [28/06/2009|22:16] C:\Program Files\Spyware Terminator
   [26/06/2009|23:10] C:\Program Files\Stellarium
   [19/04/2009|01:15] C:\Program Files\StuffPlug3
   [18/06/2009|18:52] C:\Program Files\Syncrosoft
   [26/03/2009|00:31] C:\Program Files\ToniArts
   [27/06/2009|16:54] C:\Program Files\trend micro
   [28/06/2009|18:35] C:\Program Files\TuneUp Utilities 2009
   [15/05/2009|02:17] C:\Program Files\Ubisoft
   [26/03/2009|00:31] C:\Program Files\Uninstall Information
   [13/06/2009|12:59] C:\Program Files\uTorrent
   [13/06/2009|12:59] C:\Program Files\VBW
   [13/06/2009|12:59] C:\Program Files\Vimicro
   [14/05/2009|00:46] C:\Program Files\VstPlugins
   [07/05/2009|19:20] C:\Program Files\Windows Live
   [26/03/2009|00:31] C:\Program Files\Windows Live Safety Center
   [26/03/2009|00:31] C:\Program Files\Windows Media Components
   [26/03/2009|00:31] C:\Program Files\Windows Media Connect 2
   [22/06/2009|15:11] C:\Program Files\Windows Media Player
   [22/06/2009|14:32] C:\Program Files\Windows NT
   [26/03/2009|00:31] C:\Program Files\Windows Update
   [27/06/2009|16:54] C:\Program Files\WindowsUpdate
   [26/03/2009|00:31] C:\Program Files\xerox
   [27/06/2009|16:54] C:\Program Files\XnView
   [26/03/2009|00:31] C:\Program Files\ZET 6.0

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [28/06/2009|02:46] C:\Program Files\Fichiers communs\Adobe
   [20/04/2009|18:51] C:\Program Files\Fichiers communs\Adobe AIR
   [26/06/2009|22:47] C:\Program Files\Fichiers communs\Adobe Systems Shared
   [05/06/2009|23:35] C:\Program Files\Fichiers communs\Apple
   [09/05/2009|12:02] C:\Program Files\Fichiers communs\Autodesk Shared
   [26/11/2008|19:22] C:\Program Files\Fichiers communs\AVSMedia
   [15/06/2008|22:10] C:\Program Files\Fichiers communs\BOONTY Shared
   [08/06/2009|02:09] C:\Program Files\Fichiers communs\Borland Shared
   [07/05/2009|23:10] C:\Program Files\Fichiers communs\Control Panels
   [28/03/2009|20:41] C:\Program Files\Fichiers communs\France Telecom
   [16/04/2009|21:15] C:\Program Files\Fichiers communs\InstallShield
   [25/06/2009|13:09] C:\Program Files\Fichiers communs\Macromedia Shared
   [20/04/2009|21:18] C:\Program Files\Fichiers communs\Macrovision Shared
   [28/06/2009|03:43] C:\Program Files\Fichiers communs\Microsoft Shared
   [24/07/2006|00:09] C:\Program Files\Fichiers communs\MSSoap
   [19/05/2009|21:39] C:\Program Files\Fichiers communs\Nero
   [24/07/2006|01:53] C:\Program Files\Fichiers communs\ODBC
   [24/07/2006|00:09] C:\Program Files\Fichiers communs\Services
   [14/06/2008|16:36] C:\Program Files\Fichiers communs\Softwin
   [24/07/2006|01:53] C:\Program Files\Fichiers communs\SpeechEngines
   [14/06/2008|16:43] C:\Program Files\Fichiers communs\Symantec Shared
   [22/06/2009|14:32] C:\Program Files\Fichiers communs\System
   [25/03/2009|18:33] C:\Program Files\Fichiers communs\Vbox
   [30/03/2009|16:28] C:\Program Files\Fichiers communs\Windows Live
   [14/06/2008|16:59] C:\Program Files\Fichiers communs\WindowsLiveInstaller

   --------------------\  Process

   ( 57 Processes )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Verification du Registre
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2009-06-28 22:56:00
   Windows 5.1.2600 Service Pack 3 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\Bart\Application Data\uTorrent\Adobe Audition v3.0 + Crack WinAll.torrent
   C:\DOCUME~1\Bart\Mes documents\3dsmax\import\Textures\CRACK1.GIF
   C:\DOCUME~1\Bart\Mes documents\3dsmax\import\Textures\CRACKS2C.TGA
   C:\DOCUME~1\Bart\Mes documents\Downloads\Adobe Audition v3.0 + Crack WinAll
   C:\DOCUME~1\Bart\Mes documents\Downloads\Adobe Audition v3.0 + Crack WinAll\Adobe Audition v3.0 + Crack WinAll.uif
   C:\DOCUME~1\Bart\Mes documents\Downloads\Adobe Audition v3.0 + Crack WinAll\nope.nfo
   C:\DOCUME~1\Bart\Mes documents\Downloads\Psytrance\Beat Hackers\Unknown Album\Crack (RMX unreleased 2003).mp3
   C:\DOCUME~1\Bart\Mes documents\Downloads\Psytrance\Beat Hackers\VA - Exodus\Crack.mp3
   C:\DOCUME~1\Bart\Mes documents\Downloads\Psytrance\Vibe Tribe\Wise Cracks
   C:\DOCUME~1\Bart\Mes documents\Downloads\Psytrance\Vibe Tribe\Wise Cracks\01 Wise Cracks.mp3
   C:\DOCUME~1\Bart\Mes documents\Downloads\Psytrance\Vibe Tribe\Wise Cracks\02 Dream Catcher.mp3
   C:\DOCUME~1\Bart\Mes documents\Downloads\Psytrance\Vibe Tribe\Wise Cracks\03 Carousel.mp3
   C:\DOCUME~1\Bart\Mes documents\Downloads\Psytrance\Vibe Tribe\Wise Cracks\04 Three Quarters.mp3
   C:\DOCUME~1\Bart\Mes documents\Downloads\Psytrance\Vibe Tribe\Wise Cracks\05 LFObia.mp3
   C:\DOCUME~1\Bart\Mes documents\Downloads\Psytrance\Vibe Tribe\Wise Cracks\06 The Brain.B.Q.mp3
   C:\DOCUME~1\Bart\Mes documents\Downloads\Psytrance\Vibe Tribe\Wise Cracks\07 Bad Habbits.mp3
   C:\DOCUME~1\Bart\Mes documents\Downloads\Psytrance\Vibe Tribe\Wise Cracks\08 Pulse.mp3
   C:\DOCUME~1\Bart\Mes documents\Downloads\Steinberg.Cubase.SX.3.1.1.944-H2O\Steinberg.Cubase.SX.3.0.2.623.H2O.DVDRip\DRIVER_installer_SX_v3.0.2.623 H2O.Crack.rar
   C:\DOCUME~1\Bart\Mes documents\Notes\Serial\Adobe\[0] Adobe Photoshop Extended Cs4 11 Full Serial Real Works Keygen Crack Activation Final 2009.txt
   C:\DOCUME~1\Bart\Mes documents\Notes\Serial\Adobe\[1] [0] Adobe Photoshop Extended CS4 11 FULL Serial REAL WORKS Keygen Crack Activation Final 2009.txt
   C:\DOCUME~1\Bart\Mes documents\æTorrrent\Adobe Audition v3.0 + Crack WinAll.torrent
   C:\DOCUME~1\Bart\Recent\Adobe Illustrator CS4 FULL Serial REAL WORKS Keygen Crack Activation Final 2009(1).txt.lnk
   C:\DOCUME~1\Bart\Recent\Adobe Illustrator Cs4 Full Serial Real Works Keygen Crack Activation Final 2009.txt.lnk


   [F:37][D:4]-> C:\DOCUME~1\Bart\LOCALS~1\Temp
   [F:65][D:4]-> C:\DOCUME~1\Bart\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - 28/06/2009|21:35 - Option : [1]
   2 - "C:\Lop SD\LopR_2.txt" - 28/06/2009|22:58 - Option : [2]

   --------------------\  Fin du rapport a 22:58:39

Talamasca · Answer

je me demande si un formatage serait pas le mieux. non?
Les plantages sont moins fréquent depuis hier soir mais il y en a tjs et quand ça plante pas ça déconne quand même.
Je préférerais qu'on en vienne à bout mais ça serait peut être pas mal de faire table rase.
j'attends ton avis

Nic00 · Answer

La désinfection n'est pas encore terminée donc c'est normal que ton ordi ne soit pas encore redevenu comme avant, là on a fait que une étape de la désinfection.

Si vraiment tu le souhaite, tu peux reformater (mais ce n'est pas obligé).
Comme tu veux =) si vraiment tu es tenté et que ton ordi doit être réparé le + rapidement possible alors oui.

A toi de voir.

Talamasca · Answer

Ben disons que j'ai ce Pc depuis 5 ans et ce serait la première fois, ça lui ferais peut-être pas de mal non? parceque je repartirais bien sur un truc propre quand même... depuis un moment déjà les programmes reste affichés dans ajouter/supprimer et 2 ou 3 dysfonctionnements pour lesquelle plusieurs réparations n'ont jamais rien fait, du genre pas d'interface pour arrêter/redémarrer/mettre en veille... obligé de passer par le gestionnaire des tâches pour fermer la session et eteindre à la main. Y a aussi que je suis sur un réseau, j'ai fermé l'accès au dossier de partage en espèrant éviter d'infecter les deux autres Pc mais bon. Aprés ça m'embête aussi parceque tu a passé déjà un peu de temps sur les log... 
 Tu en penses quoi? si tu me dis que ça peu que lui faire du bien alors je vais le faire avant de monopoliser ton aide.

Nic00 · Answer

Ok alors oui reformate le.

Dans ta configuration tu as mis : 

Ubuntu 8.10 / Windows XP tu veux garder quoi ? Les 2 ?

Talamasca · Answer

Oui, je compte réinstallerais Ubuntu en dualboot sur la partition d'XP

Talamasca · Answer

bon alors c'est parti... je reformate c'est la première fois j'espère bien faire.
En tous cas merci bien Nicoo @+

Nic00 · Answer

Ok alors si tu veux je t'explique tout ça demain (à moins que tu saches comment faire ou que tu ais déjà commencé) parce que là je vais au dodo^^.

Bonne nuit , à demain.

Nic00 · Answer

Salut,

as-tu déjà commencé le formatage ou bien tu veux les explications ?

kduc · Answer

Salut à vous deux

As-tu essayé de télécharger et d' exécuter ce tool ?

https://www.bitdefender.com/premium-services/virus-and-spyware-removal.html

Nic00 · Answer

Il y a plein d'infections Win32.Brontok là tu nous donne celle avec A@mm mais il en existe plein d'autres. "Google" un peu tu verras.

Là on préconise le reformatage => ça fait 5 ans que le PC n'a pas été reformaté, tu comprends...

kduc · Answer

...

Je pense, et ne suis pas le seul, qu' il y a autre chose à faire avant un formatage !

Notamment, des scans en ligne ...

Pour le formatage, c' est une suggestion de Talamasca ... Or, c' est toi le helper !

PS : le tool est pour Brontok et ... variantes.

Nic00 · Answer

p.s : je suis bénévole pas helper...


Et pour le reformatage: au bout de 5 ans il est largement temps de le faire virus ou pas !

kduc · Answer

...

A ton aise ...

Talamasca · Answer

Salut,
Désol j'avai commencer le formatage. j'avais ouvert une page avec les explications sur un autre Pc et ça c'est bien passé, merci.
Je suis pas mécontent, il y avait peut être des choses à faire avant formatage mais ça n'aurais pas réglé le problème de certaines màj qui ne ce font plus et autres soucis. Ont à peser le pour est le contre pour savoir si ça pouvait valoir la peine de passer du temps à désinfecter un système qui de toute façon tourne sur une patte...
Enfin bref...me v'la tous neuf!
Merci @+

Nic00 · Answer

Okey...

Si tu n'as plus de problème tu peux mettre le sujet en résolu, sinon fais signe.

Talamasca · Answer

Ok, c'est impec alors je fais ça.
Merci @+

Nic00 · Answer

De rien, n'hésite pas à faire signe si jamais tu avais d'autres problèmes.

@+

Talamasca · Answer

ça roule

Nic00 · Answer

Bonne continuation.

++

Virus win32.brontoke

28 réponses

Votre réponse

Discussions similaires

Newsletters