Interprétation de mon log Hijackthis Fermé

Question

Bonjour,
Serait-il possible de m'aider a interpréter le log hijackthis que je viens d'enregistrer ? Mon PC est en effet très lent au démarrage ces temps-ci, bien que j'ai fait de nombreuses analyses Panda Antivirus, Spybot et Ad-Aware !
Merci d'avance

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\TPSrv.exe
C:\PROGRAM FILES\PANDA SECURITY\PANDA ANTIVIRUS PRO 2009\WebProxy.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PsCtrls.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PavFnSvr.exe
C:\Program Files\Fichiers communs\Panda Security\PavShld\pavprsrv.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PsImSvc.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PskSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\pavsrv51.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\AVENGINE.EXE
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\Firewall\PSHOST.EXE
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\ApvxdWin.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\ALCXMNTR.EXE
C:\PROGRA~1\PHILIP~1\VProperty.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9BE.EXE
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\HP_Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\WU7S7P9D\HiJackThis[1].exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [ToUcamVProperty] C:\PROGRA~1\PHILIP~1\VProperty.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [EPSON Stylus CX3600 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9BE.EXE /P26 "EPSON Stylus CX3600 Series" /O6 "USB001" /M "Stylus CX3600"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Security\Panda Antivirus Pro 2009\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files\Panda Security\Panda Antivirus Pro 2009\Inicio.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - https://www.pixum.fr/?p_ref=crm_umleitung_photoreflex_1113
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://a532.g.akamai.net/...
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - https://tiragesphoto.fnac.com/
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: Panda Software Controller - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PsCtrls.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Security, S.L. - C:\Program Files\Fichiers communs\Panda Security\PavShld\pavprsrv.exe
O23 - Service: Panda On-Access Anti-Malware Service (PAVSRV) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\pavsrv51.exe
O23 - Service: Panda Host Service (PSHost) - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\Firewall\PSHOST.EXE
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Security S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PsImSvc.exe
O23 - Service: Panda PSK service (PskSvcRetail) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PskSvc.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Panda TPSrv (TPSrv) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\TPSrv.exe

Xplode · Answer

Bonjour,

peux tu commencer par faire ceci :


Toolbar S&D ----->

Télécharge Toolbar S&D Ici : https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

Suis le tutorial disponible à cette adresse : https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/

Lance l'option 1 ( Recherche )

Puis copie/colle le rapport dans ton prochain message ( Il se trouve sous C:\TB.txt )

----------------------------------------------

Puis ceci :

RSIT ----->

[x] Télécharge Random's System Information Tool à cette adresse : http://images.malwareremoval.com/random/RSIT.exe

[x] Double clique sur " RSIT.exe ".

[x] Clique sur " Continue ".

[x] Si hijackthis n'est pas présent il sera automatiquement téléchargé et tu devras accepter la license.

[x] Une fois l'analyse finie, deux fichiers ( info.txt & log.txt ) s'ouvriront.

[x] Copie colle le contenu des deux rapports dans ton prochain message

-------> Si jamais tu as fermé les rapports sans faire attention, ils sont sous C:\rsit

Ski' · Answer

Désolé j'm'étais gourée, j'voulais vous envoyer un mp, et en fait sa l'a posté ici x)

Mae · Answer

Alors, voila le rapport de Toolbar SD


   -----------\  ToolBar S&D 1.2.9   XP/Vista


   "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
   Option : [1] ( 31/08/2009|13:51 )

   -----------\  Recherche de Fichiers / Dossiers ...


   -----------\  Extensions

   (HP_Propri‚taire) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

   (Maou) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

   (Marlou) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Start Page"="https://www.google.fr"
   "Search Page"="https://www.google.com/?gws_rd=ssl"
   "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
   "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"


   --------------------\  Recherche d'autres infections

   C:\WINDOWS\Pack.epk
 
   C:\WINDOWS\System32\eueugua.dat
   C:\WINDOWS\System32\eueugua.exe
   C:\WINDOWS\System32\eueugua_nav.dat
   C:\WINDOWS\System32\eueugua_navps.dat
   [b]==> EGDACCESS <==/b




   1 - "C:\ToolBar SD\TB_1.txt" - 31/08/2009|14:01 - Option : [1]

   -----------\  Fin du rapport a 14:01:28,68



Et celui de RSIT.exe


info.txt
info.txt logfile of random's system information tool 1.06 2009-08-31 14:07:28

======Uninstall list======

-->C:\Program Files\DivX\ConverterUninstall.exe /CONVERTER
-->C:\Program Files\Fichiers communs\Real\Update_OB1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->c:\WINDOWS\system32\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205}
-->c:\WINDOWS\system32\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382}
-->c:\WINDOWS\system32\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629}
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{23EFDB58-0874-4883-9810-EDA510B19FAE}\setup.exe" -l0x9 
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2BB79C8D-9DCC-4861-8A23-AE1B0B45E2B6}\setup.exe" -l0x9 
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{775FFF70-4A8C-4500-908D-3C34DBEB11D5}\setup.exe" -l0x9 
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{83021AC3-086F-4B77-ACCD-1BD7C9AB211E}\setup.exe" -l0x9 
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B14F9B26-D695-4C4A-8B11-0FE6CDCC797B}\setup.exe" -l0x9 
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E213C271-AEFA-481D-A9B4-914D88925B8D}\setup.exe" -l0x9 
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
ABBYY FineReader 6.0 Sprint-->MsiExec.exe /I{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}
Ad-Aware-->"C:\Documents and Settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800}\Ad-AwareAE.exe" REMOVE=TRUE MODIFY=FALSE
Ad-Aware-->C:\Documents and Settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800}\Ad-AwareAE.exe
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 8.1.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81200000003}
Adobe Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
ArcSoft PhotoBase 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{40FD99B4-63C3-49EE-A3BE-5D87762F3F2D}\Setup.exe" -l0x40c  -uninst 
ArcSoft PhotoImpression-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DEEC6C50-046E-4962-B71D-52B973101930}\Setup.exe" -l0x40c  -uninst 
ArcSoft VideoImpression 1.6-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{923C8F79-D70B-4E53-B278-41AD6560C55C}\Setup.exe" -l0x40c  -uninst 
ATI Control Panel-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe" 
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
Audacity 1.2.6-->"C:\Program Files\Audacity\unins000.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Content Uploader-->C:\Program Files\DivX\DivXContentUploaderUninstall.exe /CUPLOADER
DivX Converter-->C:\Program Files\DivX\ConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
EPSON CardMonitor-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{109D28C7-FB38-483A-9C91-001CB59E2699}\SETUP.EXE" -l0x40c uninst
EPSON Copy Utility 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67EDD823-135A-4D59-87BD-950616D6E857}\Setup.exe" -l0x40c -UnInstall
Epson Easy Photo Print 2-->C:\Program Files\InstallShield Installation Information\{DEDB47A3-C988-4A43-A645-E2CEA571E680}\SETUP.EXE -runfromtemp -l0x040c UNINST -removeonly
EPSON Logiciel imprimante-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\epupdate.exe /r
EPSON Logiciel imprimante-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
EPSON PhotoQuicker3.5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{65F5B7AF-3363-11D7-BB6B-00018021113F}\SETUP.EXE" -l0x40c uninst
EPSON PhotoStarter3.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C48817E7-AA05-4151-A99D-1E1E550CE801}\SETUP.EXE" -l0x40c uninst
EPSON PRINT Image Framer Tool2.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{23B59ED4-C360-11D7-875B-0090CC005647}\SETUP.EXE" -l0x40c anything
EPSON Scan-->C:\Program Files\epson\escndv\setup\setup.exe /r
EPSON Smart Panel-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6C11D561-620B-47DA-A693-4C597F3CDF40}\SETUP.EXE" -l0x40c Uninstall
EPSON Stylus SX100_TX100 Manuel-->C:\Program Files\EPSON\TPMANUAL\ESSX100_TX100\FRA\USE_G\DOCUNINS.EXE
EPSON SX100 Series Printer Uninstall-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FINSEDE.EXE /R /APD /P:"EPSON SX100 Series"
EPSON Web-To-Page-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}\SETUP.EXE" -l0x40c -anything
ESCX3600 Guide de réf.-->C:\Program Files\EPSON\TPMANUAL\ESCX3600\REF_G\DOCUNINS.EXE
ESCX3600 Guide des logiciels-->C:\Program Files\EPSON\TPMANUAL\ESCX3600\PQU_G\DOCUNINS.EXE
Gimp Pack Mode 2.6.2-->"C:\Program Files\Gimp Pack Mode\unins000.exe"
High Definition Audio - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\Documents and Settings\HP_Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\WU7S7P9D\HijackThis.exe" /uninstall
HP Appareils photos Photosmart 5.0-->C:\Program Files\HP\Digital Imaging\{C83A12B9-B31B-461A-BBD4-CE9B988094F1}\setup\hpzscr01.exe -datfile hpiscr01.dat
HP Deskjet Printer Preload-->MsiExec.exe /I{2C5D07FB-31A2-4F2D-9FDA-0B24ACD42BD0}
HP Document Viewer 5.3-->C:\Program Files\HP\Digital Imaging\DocumentViewer\hpzscr01.exe -datfile hpqbud04.dat
HP Imaging Device Functions 5.3-->C:\Program Files\HP\Digital Imaging\DigitalImagingMonitor\hpzscr01.exe -datfile hpqbud01.dat
HP Multimedia Keyboard Software-->C:\HP\KBD\KBD.EXE uninstalled
HP Photosmart 330,380,420,470,7800,8000,8200 Series-->C:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\setup\hpzscr01.exe -d MsiRollbackUninstaller -datfile hphscr08.dat
HP PSC & OfficeJet 5.3.B-->"C:\Program Files\HP\Digital Imaging\{5B79CFD1-6845-4158-9D7D-6BE89DF2C135}\setup\hpzscr01.exe" -datfile hposcr07.dat
HP Software Update-->MsiExec.exe /X{ECFDD6BD-E0C0-41CC-A171-E6D6AF4C0E93}
HP Solution Center & Imaging Support Tools 5.3-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
InterActual Player-->C:\Program Files\InterActual\InterActual Player\inuninst.exe
InterVideo WinDVD Player-->"C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL
iTunes-->MsiExec.exe /I{E0219810-16E4-437D-9165-93D7B22524F9}
J2SE Runtime Environment 5.0-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150000}
Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
Lecteur Windows Media 10-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Les Sims Deluxe-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{10798AE3-DCBB-43C3-9C93-C23512427E25}\Setup.exe"  -l040c
Macromedia Flash Player 8-->MsiExec.exe /X{6815FCDD-401D-481E-BA88-31B4754C2B46}
Messenger Plus! 3-->"C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /Remove
Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Works-->MsiExec.exe /I{A059DE09-1B49-4450-B340-7AE097EC3F04}
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB969897)-->"C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB972260)-->"C:\WINDOWS\ie7updates\KB972260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961371-v2)-->"C:\WINDOWS\$NtUninstallKB961371-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
Mozilla Firefox (2.0.0.20)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
muvee autoProducer 4.0-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2C3D719A-92C7-4323-89CC-C937D0267B84}\setup.exe" -l0x40c 
Nokia Connectivity Cable Driver-->MsiExec.exe /X{11964613-805F-432D-A12B-169554B793E7}
Nokia PC Suite-->C:\Documents and Settings\All Users\Application Data\Installations\{A982E6CC-9F0D-4948-9B18-BDFD55DE4A72}\Nokia_PC_Suite_6_84_10_3_fre_web.exe
Nokia PC Suite-->MsiExec.exe /I{A982E6CC-9F0D-4948-9B18-BDFD55DE4A72}
OpenOffice.org 2.0-->MsiExec.exe /I{3869903C-0EF4-48D9-A12F-145AD549BA12}
Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
Package de pilotes Windows - Nokia (WUDFRd) WPD  (06/01/2007 6.84.33.0)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccswpddri_044C8712DB44F83D9DE6C376991EE9254E0A69E4\pccswpddriver.inf
Package de pilotes Windows - Nokia Modem  (02/15/2007 3.1)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccs_bluet_8B37DC72918CCD58A6EC20373AF6242B037A293B\pccs_bluetooth.inf
Package de pilotes Windows - Nokia Modem  (02/15/2007 3.1)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccs_bluet_F12A08B6F776984A95553486F64C541356F86E38\pccs_bluetooth.inf
Package de pilotes Windows - Nokia Modem  (05/24/2007 6.84.0.1)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE
okbtmdm_5E1541AFF1E1EA3554CE566743CCAD323ED1C108
okbtmdm.inf
Panda Antivirus Pro 2009-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E55FB276-73C9-4776-AB53-BC028C0509ED}\SETUP.exe" -l0x40c  -removeonly
PC Connectivity Solution-->MsiExec.exe /I{99A40651-0BC2-4095-8F9A-A40FAB224FEF}
PC-Doctor 5 for Windows-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{AB61A692-5543-4C48-979B-8CEA1C52FE9C} /l1036 
PCFriendly-->C:\Program Files\PCFriendly\inuninst.exe
PDFCreator-->MsiExec.exe /I{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}
Philips ToUcam Pro Camera-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\PROGRA~1\PHILIP~1\Kill840.exe" 840 ToUcamVProperty VProperty
Picasa 2-->"C:\Program Files\Picasa2\Uninstall.exe"
PIF DESIGNER2.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7BD0A2D8-4EA0-43C6-BDF8-DDA87B8031C6}\SETUP.EXE" -l0x40c anything
PS2-->C:\WINDOWS\system32\ps2.exe uninstall
Python 2.2 pywin32 extensions (build 203)-->"C:\Python22\Removepywin32.exe" -u "C:\Python22\pywin32-wininst.log"
Python 2.2.3-->C:\Python22\UNWISE.EXE C:\Python22\INSTALL.LOG
QuickTime for Windows (32-bit)-->C:\WINDOWS\QTW32DEL.EXE
QuickTime-->MsiExec.exe /I{95A890AA-B3B1-44B6-9C18-A8F7AB3EE7FC}
RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB1puninst.exe RealNetworks|RealPlayer|6.0
RegSupreme-->"C:\Program Files\RegSupreme\unins000.exe"
ScanToWeb-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EBAE381B-60A6-4863-AA9F-FCAB755BC9E5}\SETUP.EXE" ADDREMOVEDLG
Sonic Express Labeler-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
Sonic MyDVD Plus-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
Sonic RecordNow Audio-->MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382}
Sonic RecordNow Copy-->MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629}
Sonic RecordNow Data-->MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205}
Sonic Update Manager-->MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Spyware Doctor 5.1-->C:\Program Files\Spyware Doctor\unins000.exe /LOG
StationRipper 2.84-->C:\Program Files\Ratajik Software\StationRipper\uninstall-StationRipper.exe
Update for Windows XP (KB953356)-->"C:\WINDOWS\$NtUninstallKB953356$\spuninst\spuninst.exe"
VeohTV BETA-->C:\Program Files\InstallShield Installation Information\{D1B11537-EA51-4DD8-BF1E-098BEE48868D}\setup.exe -runfromtemp -l0x0409
VideoLink Pro-->C:\PROGRA~1\VIDEOL~1\UNWISE.EXE C:\PROGRA~1\VIDEOL~1\INSTALL.LOG
Virtools 3D Life Player-->C:\Program Files\Virtools\3D Life Player\WebplayerConfig.exe -u
Visual C++ 2008 x86 Runtime - (v9.0.30729)-->MsiExec.exe /X{F333A33D-125C-32A2-8DCE-5C5D14231E27}
Visual C++ 2008 x86 Runtime - v9.0.30729.01-->C:\WINDOWS\system32\msiexec.exe /x {F333A33D-125C-32A2-8DCE-5C5D14231E27} /qb+ REBOOTPROMPT=""
WinBrick2000-->C:\WINDOWS\s&f_UnIn.exe -uC:\Program Files\WinBrick2000\UnInst.inf
Windows Live Messenger-->MsiExec.exe /I{F6326B60-1B1D-4ABF-BFCD-7B7404F44411}
Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
Wisdom-soft ScreenHunter 4.0 Free-->C:\PROGRA~1\WISDOM~1\UNWISE.EXE C:\PROGRA~1\WISDOM~1\INSTALL.LOG

======Security center information======

AV: Panda Antivirus Pro 2009
FW: Panda Personal Firewall 2009

======System event log======

Computer Name: NOM-EB85C523610
Event Code: 7036
Message: Le service Service COM de gravage de CD IMAPI est entré dans l'état : arrêté.

Record Number: 347
Source Name: Service Control Manager
Time Written: 20090606182814.000000+120
Event Type: Informations
User: 

Computer Name: NOM-EB85C523610
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Service COM de gravage de CD IMAPI.

Record Number: 346
Source Name: Service Control Manager
Time Written: 20090606182809.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: NOM-EB85C523610
Event Code: 7036
Message: Le service Service COM de gravage de CD IMAPI est entré dans l'état : en cours d'exécution.

Record Number: 345
Source Name: Service Control Manager
Time Written: 20090606182809.000000+120
Event Type: Informations
User: 

Computer Name: NOM-EB85C523610
Event Code: 4226
Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.

Record Number: 344
Source Name: Tcpip
Time Written: 20090606182452.000000+120
Event Type: Avertissement
User: 

Computer Name: NOM-EB85C523610
Event Code: 7036
Message: Le service Service COM de gravage de CD IMAPI est entré dans l'état : arrêté.

Record Number: 343
Source Name: Service Control Manager
Time Written: 20090606175126.000000+120
Event Type: Informations
User: 

=====Application event log=====

Computer Name: NOM-EB85C523610
Event Code: 0
Message: 
Record Number: 5
Source Name: ServiceLayer
Time Written: 20090703112428.000000+120
Event Type: Informations
User: 

Computer Name: NOM-EB85C523610
Event Code: 4000
Message: The Panda Anti-virus Service has started successfully.

Record Number: 4
Source Name: Sentinel
Time Written: 20090703112258.000000+120
Event Type: Informations
User: 

Computer Name: NOM-EB85C523610
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 3
Source Name: SecurityCenter
Time Written: 20090703112244.000000+120
Event Type: Informations
User: 

Computer Name: NOM-EB85C523610
Event Code: 0
Message: 
Record Number: 2
Source Name: Panda Software Controller
Time Written: 20090703112237.000000+120
Event Type: Informations
User: 

Computer Name: NOM-EB85C523610
Event Code: 0
Message: 
Record Number: 1
Source Name: gusvc
Time Written: 20090703112237.000000+120
Event Type: Informations
User: 

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=C:\Program Files\PC Connectivity Solution\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;c:\Python22;C:\Program Files\ATI Technologies\ATI Control Panel;C:\Program Files\QuickTime\QTSystem\;C:\Program Files\Panda Security\Panda Antivirus Pro 2009\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 47 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=2f02
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"SonicCentral"=c:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\
"CLASSPATH"=.;C:\Program Files\Java\jre1.5.0\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.5.0\lib\ext\QTJava.zip

-----------------EOF-----------------

et log.txt

Logfile of random's system information tool 1.06 (written by random/random)
Run by HP_Propriétaire at 2009-08-31 14:06:56
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 55 GB (37%) free of 146 GB
Total RAM: 446 MB (7% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:07:20, on 31/08/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\TPSrv.exe
C:\PROGRAM FILES\PANDA SECURITY\PANDA ANTIVIRUS PRO 2009\WebProxy.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PsCtrls.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PavFnSvr.exe
C:\Program Files\Fichiers communs\Panda Security\PavShld\pavprsrv.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PsImSvc.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PskSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\pavsrv51.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\AVENGINE.EXE
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\Firewall\PSHOST.EXE
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\ApvxdWin.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\ALCXMNTR.EXE
C:\PROGRA~1\PHILIP~1\VProperty.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9BE.EXE
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\HP_Propriétaire\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\HP_Propriétaire.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Pluginseg\VeohToolbar.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [ToUcamVProperty] C:\PROGRA~1\PHILIP~1\VProperty.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [EPSON Stylus CX3600 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9BE.EXE /P26 "EPSON Stylus CX3600 Series" /O6 "USB001" /M "Stylus CX3600"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Security\Panda Antivirus Pro 2009\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files\Panda Security\Panda Antivirus Pro 2009\Inicio.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - https://www.pixum.fr/?p_ref=crm_umleitung_photoreflex_1113
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://a532.g.akamai.net/...
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - https://tiragesphoto.fnac.com/
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: Panda Software Controller - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PsCtrls.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Security, S.L. - C:\Program Files\Fichiers communs\Panda Security\PavShld\pavprsrv.exe
O23 - Service: Panda On-Access Anti-Malware Service (PAVSRV) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\pavsrv51.exe
O23 - Service: Panda Host Service (PSHost) - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\Firewall\PSHOST.EXE
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Security S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PsImSvc.exe
O23 - Service: Panda PSK service (PskSvcRetail) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PskSvc.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Panda TPSrv (TPSrv) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\TPSrv.exe

Xplode · Answer

Ok petite infection USB, egdacess ...

Commence par faire ceci :

USBfix ------>

[x] Télécharge USBfix à cette adresse : http://sd-1.archive-host.com/membres/up/127028005715545653/UsbFix.exe

[x] Un tutoriel est disponible ici : https://www.malekal.com/usbfix-supprimer-virus-usb/

[x] Installe le

[x] Branche tout tes médias amovibles ( clés USB, DD externe )

[x] Lance USBfix en cliquant sur l'icône qui est sur ton bureau ( Clique droit -> Executer en tant qu'administrateur pour vista )

[x] Choisis l'option F ( pour français ) et valide en appuyant sur entrée.

[x] Au menu principal, choisi l'option 1

[x] Laisse l'outil travailler puis poste le rapport dans ton prochain message


-------------------------------------------

Navilog ---->

[x] Télécharge Navilog1.exe (IL-MAFIOSO) à cette adresse : http://il.mafioso.pagesperso-orange.fr/Navifix/Navilog1.exe
[x] Enregistre-le sur ton Bureau !! 
[x] Lance l'installation en double cliquant sur navilog.exe.
[x] Une fois l'installation terminée, l'utilitaire s'exécutera automatiquement.
[x] (Si ce n'est pas le cas, double clique sur le raccourci présent sur le Bureau)
[x] Laisse-toi guider par l'utilitaire. Choisis l'option 1 puis valide.

/!\ N'utilise pas l'option 2, 3 et 4 sans mon accord ! /!\

[x] Patiente jusqu'à l'apparition de ce message :
   "*** Analyse Termine le ..... ***"
[x] Appuie sur une touche comme demandé. Le Bloc-notes va s'ouvrir. Poste son contenu de cette manière :

-> Edition / Sélectionner tout
-> Edition / Copier
-> Clique-Droit / Coller dans ta réponse

Nb : Le rapport se trouve également ici : C:\fixnavi.txt

------> Si jamais tu as besoin d'aide un tuto est disponible ici : http://www.malekal.com/Adware.Magic_Control.php

^^Marie^^ · Answer

Salut

Serai peut-être judicieux de faire l'option 2
1 - "C:\ToolBar SD\TB_1.txt" - 31/08/2009|14:01 - Option : [1]

Mae · Answer

Rapport de USB fix


############################## | UsbFix V6.023 |

User : HP_Propriétaire (Administrateurs) # NOM-EB85C523610
Update on 29/08/09 by Chiquitine29, C_XX & Chimay8
Start at: 14:24:18 | 31/08/2009
Website : http://pagesperso-orange.fr/NosTools/index.html

AMD Sempron(tm) Processor 3000+
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 7.0.5730.13
Windows Firewall Status : Disabled
AV : Panda Antivirus Pro 2009 8.00.00 [ Enabled | Updated ]
FW : Panda Personal Firewall 2009[ Enabled ]8.00.00

C:\ -> Disque fixe local # 143,04 Go (53,56 Go free) [HP_PAVILION] # NTFS
D:\ -> Disque fixe local # 5,99 Go (1,92 Go free) [HP_RECOVERY] # FAT32
E:\ -> Disque CD-ROM
F:\ -> Disque amovible # 1,78 Go (917,28 Mo free) [IPOD] # FAT32

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\TPSrv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRAM FILES\PANDA SECURITY\PANDA ANTIVIRUS PRO 2009\WebProxy.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PsCtrls.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PavFnSvr.exe
C:\Program Files\Fichiers communs\Panda Security\PavShld\pavprsrv.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PsImSvc.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PskSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\pavsrv51.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\AVENGINE.EXE
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\Firewall\PSHOST.EXE
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\ApvxdWin.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\ALCXMNTR.EXE
C:\PROGRA~1\PHILIP~1\VProperty.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9BE.EXE
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\iTunes\iTunes.exe

################## | Fichiers # Dossiers infectieux |

Présent ! D:\autorun.inf  

################## | Suspect ! ... | https://www.virustotal.com/gui/ |


################## | Registre # Clés Run infectieuses |

Présent ! HKLM\software\microsoft\security center "FirewallDisableNotify" ( 0x1 )  

################## | Registre # Mountpoints2 |

HKCU\..\..\Explorer\MountPoints2\{2cac15af-400d-11dc-b9ff-0013d3bbc1ba}
Shell\AutoRun\command =F:\LaunchU3.exe -a

################## | Cracks / Keygens / Serials |


################## | ! Fin du rapport # UsbFix V6.023 ! |



Le rapport de Navilog arrive, j'

Mae · Answer

Oups, mauvaise manip, j'ai posté le message trop tot!
Donc le rapport de Navilog arrive, j'ai fait l'option 1

Par contre pour USB fix, je n'ai pas de clé USB, et la seule que j'ai utilisée récemment était à une amie, donc je ne l'ai plus maintenant.
Merci de m'aider en tout cas :) !

Mae · Answer

Navilog me demande de redémarrer, c'est normal?

Xplode · Answer

Oui c'est normal, fait le, puis poste le rapport qui se trouve ici : C:\fixnavi.txt

Mae · Answer

Euh je crois que j'ai fait une bêtise, le rapport s'appelle "cleanavi"
J'ai pourtant bien pris l'option 1 quand on me demandait de choisir entre 1,2,3 et 4, et de nouveau l'option 1 quand j'ai du choisir entre 1 et 2

Recherche executée en mode normal 

Nettoyage exécuté au redémarrage de l'ordinateur


C:\WINDOWS\System32\zgebgbkxcy.exe supprimé !
C:\DOCUME~1\Marlou\menudm~1\progra~1\InternetGamebox supprimé ! 
C:\WINDOWS\pack.epk supprimé !
C:\WINDOWS\system32\eueugua.exe supprimé !
C:\WINDOWS\system32\eueugua.dat supprimé !
C:\WINDOWS\system32\eueugua_nav.dat supprimé !
C:\WINDOWS\system32\eueugua_navps.dat supprimé !
C:\WINDOWS\prefetch\eueugua*.pf supprimé !


Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\HP_Propri‚taire\locals~1\Temp effectué !


*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok



C:\WINDOWS\Tasks\B753025D9188ABF9.job trouvé ! Infection Lop possible non traitée par cet outil !


*** Scan terminé 31/08/2009 18:42:34,00 ***

Xplode · Answer

Non tu n'as pas fait de bêtise tout est ok c'est mon canned qui n'est plus à jour ^^

Fais ceci maintenant :

Lop S&D ---->

[x] Télécharge Lop S&D (par Eric_71 & Angeldark) à cette adresse : https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

[x] Attention Désactivez les protections résidentes : Antivirus, antispywares, controleurs d'intégrité, etc... pour que l'outil puisse s'exécuter correctement. 

[x] Double clique sur " LopSD.exe " ( Vista : Clique droit -> Executer en tant qu'administrateur )

[x] Choisis l'option F pour français

[x] Ensuite, Choisis l'option 1 ( Recherche )

[x] Laisse l'outil travailler

[x] Poste le rapport dans ton prochain message

Mae · Answer

Rapport Lop S&D



   --------------------\  Lop S&D 4.2.5-0   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 3000+ )
   BIOS : Phoenix - Award BIOS v6.00PG
   USER : HP_Propriétaire ( Administrator )
   BOOT : Normal boot
   Antivirus : Panda Antivirus Pro 2009 8.00.00 (Not Activated)
   Firewall  : Panda Personal Firewall 2009 8.00.00 (Not Activated)
   C:\ (Local Disk) - NTFS - Total:143 Go (Free:56 Go)
   D:\ (Local Disk) - FAT32 - Total:5 Go (Free:1 Go)
   E:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [1] ( 31/08/2009|20:38 )
 
   --------------------\  Listing des dossiers dans APPLIC~1

   [29/08/2009|23:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{83C91755-2546-441D-AC40-9A6B4B860800}
   [13/05/2008|17:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [25/12/2006|13:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [11/06/2009|21:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EPSON
   [28/01/2007|18:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [12/06/2008|14:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
   [31/03/2007|20:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hole lies comp drv
   [03/01/2005|00:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
   [15/09/2007|12:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Installations
   [03/01/2005|00:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
   [29/08/2009|23:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
   [01/04/2006|10:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [21/01/2006|15:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [05/08/2007|18:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies
   [12/03/2009|22:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Panda Security
   [15/09/2007|13:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite
   [24/02/2006|22:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
   [03/01/2005|00:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
   [19/01/2008|21:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\sentinel
   [03/01/2005|00:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
   [30/08/2009|11:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [31/03/2007|19:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [11/07/2008|22:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
   [11/06/2009|21:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
   [08/08/2006|20:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

   [10/03/2008|18:52] C:\DOCUME~1\Chris\APPLIC~1\Macromedia

   [09/01/2008|15:25] C:\DOCUME~1\Cynthia\APPLIC~1\Macromedia

   [03/01/2005|00:50] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
   [25/11/2004|05:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [03/01/2005|01:15] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
   [03/01/2005|00:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
   [03/01/2005|01:05] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec


   [09/10/2008|21:17] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Adobe
   [04/03/2006|13:53] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AdobeUM
   [12/08/2007|14:58] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Apple Computer
   [18/01/2006|11:22] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Arcsoft
   [22/12/2007|21:19] C:\DOCUME~1\HP_PRO~1\APPLIC~1\DivX
   [16/01/2007|20:02] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Google
   [27/12/2008|21:33] C:\DOCUME~1\HP_PRO~1\APPLIC~1\gtk-2.0
   [18/01/2006|11:26] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Help
   [15/10/2006|17:41] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HP
   [17/02/2006|22:38] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HPQ
   [25/11/2004|05:26] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Identities
   [11/06/2009|21:27] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InstallShield
   [12/02/2006|15:37] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InterVideo
   [15/10/2006|18:16] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Leadertech
   [19/01/2008|19:48] C:\DOCUME~1\HP_PRO~1\APPLIC~1\LogProtect
   [17/02/2006|21:59] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Macromedia
   [24/02/2006|23:09] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft
   [16/01/2007|20:00] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Mozilla
   [13/02/2006|21:19] C:\DOCUME~1\HP_PRO~1\APPLIC~1\MSNInstaller
   [05/08/2007|18:46] C:\DOCUME~1\HP_PRO~1\APPLIC~1\muvee Technologies
   [15/09/2007|13:17] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Nokia
   [31/08/2009|18:46] C:\DOCUME~1\HP_PRO~1\APPLIC~1\OpenOffice.org2
   [12/03/2009|22:15] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Panda Security
   [15/09/2007|13:01] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PC Suite
   [09/12/2007|21:56] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PC Tools
   [10/07/2008|12:48] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Real
   [03/01/2005|00:54] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SampleView
   [19/02/2006|14:22] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Smart Panel
   [05/08/2007|18:38] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sonic
   [30/07/2006|17:12] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sun
   [17/01/2006|23:26] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Symantec
   [09/12/2007|21:56] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Talkback
   [14/04/2008|21:23] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Template
   [10/11/2008|18:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\U3
   [15/03/2006|21:08] C:\DOCUME~1\HP_PRO~1\APPLIC~1\vlc


   [03/01/2005|00:08] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
   [15/03/2006|12:54] C:\DOCUME~1\LOCALS~1\APPLIC~1\Symantec

   [09/10/2008|21:30] C:\DOCUME~1\Maou\APPLIC~1\Adobe
   [01/01/2007|11:04] C:\DOCUME~1\Maou\APPLIC~1\Apple Computer
   [22/01/2006|22:46] C:\DOCUME~1\Maou\APPLIC~1\ArcSoft
   [01/07/2008|23:01] C:\DOCUME~1\Maou\APPLIC~1\DivX
   [10/01/2008|21:22] C:\DOCUME~1\Maou\APPLIC~1\EPSON
   [27/09/2006|18:18] C:\DOCUME~1\Maou\APPLIC~1\Google
   [18/06/2009|12:36] C:\DOCUME~1\Maou\APPLIC~1\gtk-2.0
   [18/02/2006|11:13] C:\DOCUME~1\Maou\APPLIC~1\Help
   [17/02/2006|12:07] C:\DOCUME~1\Maou\APPLIC~1\HP
   [20/02/2006|19:34] C:\DOCUME~1\Maou\APPLIC~1\HPQ
   [25/11/2004|05:26] C:\DOCUME~1\Maou\APPLIC~1\Identities
   [09/03/2009|22:43] C:\DOCUME~1\Maou\APPLIC~1\InstallShield
   [02/06/2006|21:56] C:\DOCUME~1\Maou\APPLIC~1\InterVideo
   [19/01/2008|19:48] C:\DOCUME~1\Maou\APPLIC~1\LogProtect
   [18/02/2006|11:33] C:\DOCUME~1\Maou\APPLIC~1\Macromedia
   [17/02/2006|10:14] C:\DOCUME~1\Maou\APPLIC~1\Microsoft
   [17/01/2007|08:21] C:\DOCUME~1\Maou\APPLIC~1\Mozilla
   [30/08/2009|11:11] C:\DOCUME~1\Maou\APPLIC~1\OpenOffice.org2
   [16/09/2007|13:37] C:\DOCUME~1\Maou\APPLIC~1\PC Suite
   [10/07/2008|14:41] C:\DOCUME~1\Maou\APPLIC~1\Real
   [03/01/2005|00:54] C:\DOCUME~1\Maou\APPLIC~1\SampleView
   [27/05/2007|18:11] C:\DOCUME~1\Maou\APPLIC~1\Smart Panel
   [03/01/2007|20:05] C:\DOCUME~1\Maou\APPLIC~1\Sonic
   [25/06/2009|10:19] C:\DOCUME~1\Maou\APPLIC~1\Spotify
   [27/01/2006|19:10] C:\DOCUME~1\Maou\APPLIC~1\Sun
   [03/01/2005|01:05] C:\DOCUME~1\Maou\APPLIC~1\Symantec
   [12/12/2007|16:07] C:\DOCUME~1\Maou\APPLIC~1\Talkback
   [16/01/2009|23:34] C:\DOCUME~1\Maou\APPLIC~1\Template
   [10/12/2006|14:20] C:\DOCUME~1\Maou\APPLIC~1\vlc

   [19/10/2008|12:54] C:\DOCUME~1\Marlou\APPLIC~1\Adobe
   [31/03/2007|22:25] C:\DOCUME~1\Marlou\APPLIC~1\Adverts
   [03/01/2005|00:50] C:\DOCUME~1\Marlou\APPLIC~1\Apple Computer
   [26/01/2006|20:54] C:\DOCUME~1\Marlou\APPLIC~1\Arcsoft
   [31/03/2007|22:25] C:\DOCUME~1\Marlou\APPLIC~1\Binaxisnew
   [19/10/2007|17:50] C:\DOCUME~1\Marlou\APPLIC~1\DivX
   [27/09/2006|14:25] C:\DOCUME~1\Marlou\APPLIC~1\Google
   [03/11/2006|19:44] C:\DOCUME~1\Marlou\APPLIC~1\Help
   [09/07/2008|21:36] C:\DOCUME~1\Marlou\APPLIC~1\HP
   [26/01/2006|20:38] C:\DOCUME~1\Marlou\APPLIC~1\HPQ
   [25/11/2004|05:26] C:\DOCUME~1\Marlou\APPLIC~1\Identities
   [29/05/2007|19:42] C:\DOCUME~1\Marlou\APPLIC~1\InterVideo
   [19/01/2008|19:48] C:\DOCUME~1\Marlou\APPLIC~1\LogProtect
   [22/02/2006|13:01] C:\DOCUME~1\Marlou\APPLIC~1\Macromedia
   [22/02/2006|12:39] C:\DOCUME~1\Marlou\APPLIC~1\Microsoft
   [27/01/2007|21:11] C:\DOCUME~1\Marlou\APPLIC~1\Mozilla
   [25/09/2007|20:46] C:\DOCUME~1\Marlou\APPLIC~1\Nokia
   [10/06/2009|15:31] C:\DOCUME~1\Marlou\APPLIC~1\OpenOffice.org2
   [16/09/2007|11:12] C:\DOCUME~1\Marlou\APPLIC~1\PC Suite
   [21/10/2008|19:27] C:\DOCUME~1\Marlou\APPLIC~1\Real
   [03/01/2005|00:54] C:\DOCUME~1\Marlou\APPLIC~1\SampleView
   [02/05/2008|16:27] C:\DOCUME~1\Marlou\APPLIC~1\Smart Panel
   [01/12/2007|10:58] C:\DOCUME~1\Marlou\APPLIC~1\Sonic
   [31/01/2006|20:42] C:\DOCUME~1\Marlou\APPLIC~1\Sun
   [03/01/2005|01:05] C:\DOCUME~1\Marlou\APPLIC~1\Symantec
   [12/12/2007|15:19] C:\DOCUME~1\Marlou\APPLIC~1\Talkback
   [23/03/2009|23:19] C:\DOCUME~1\Marlou\APPLIC~1\U3
   [15/03/2006|20:30] C:\DOCUME~1\Marlou\APPLIC~1\vlc

   [12/07/2007|11:14] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [29/08/2009 23:27][--a------] C:\WINDOWS	asks\Ad-Aware Update (Weekly).job
   [31/08/2009 20:00][--ah-----] C:\WINDOWS	asks\B753025D9188ABF9.job
   [31/08/2009 18:39][--ah-----] C:\WINDOWS	asks\SA.DAT
   [05/08/2004 20:00][-rah-----] C:\WINDOWS	asks\desktop.ini

   ( B753025D9188ABF9.job )=( c:\docume~1\marlou\applic~1\binaxi~1\DaleModeJump.exe )

   --------------------\  Listing des dossiers dans C:\Program Files

   [11/06/2009|21:35] C:\Program Files\ABBYY FineReader 6.0 Sprint
   [13/05/2008|17:40] C:\Program Files\Adobe
   [05/09/2007|10:42] C:\Program Files\Alwil Software
   [18/01/2006|00:05] C:\Program Files\ArcSoft
   [03/01/2005|00:26] C:\Program Files\ATI Technologies
   [08/10/2007|21:41] C:\Program Files\Audacity
   [24/11/2004|03:37] C:\Program Files\ComPlus Applications
   [15/09/2007|12:59] C:\Program Files\DIFX
   [11/11/2007|12:26] C:\Program Files\DivX
   [15/11/2008|20:11] C:\Program Files\Easy Internet signup
   [11/06/2009|21:36] C:\Program Files\epson
   [11/06/2009|21:38] C:\Program Files\Epson Software
   [03/04/2009|16:07] C:\Program Files\Fichiers communs
   [27/12/2008|21:37] C:\Program Files\Gimp Pack Mode
   [15/11/2008|20:33] C:\Program Files\Google
   [02/11/2007|14:55] C:\Program Files\Harry Potter Creative CD
   [03/01/2005|00:33] C:\Program Files\HP
   [11/06/2009|21:38] C:\Program Files\InstallShield Installation Information
   [01/01/2007|10:55] C:\Program Files\InterActual
   [26/08/2009|13:21] C:\Program Files\Internet Explorer
   [03/01/2005|00:46] C:\Program Files\InterVideo
   [12/08/2007|14:38] C:\Program Files\iPod
   [12/08/2007|14:38] C:\Program Files\iTunes
   [29/08/2009|22:12] C:\Program Files\Java
   [29/08/2009|23:19] C:\Program Files\Lavasoft
   [18/01/2006|11:38] C:\Program Files\licenses
   [08/08/2006|21:19] C:\Program Files\LogProtect
   [01/04/2006|14:07] C:\Program Files\Maxis
   [16/11/2008|00:35] C:\Program Files\Messenger
   [29/08/2009|22:02] C:\Program Files\Messenger Plus! Live
   [25/06/2007|20:40] C:\Program Files\MessengerPlus! 3
   [25/11/2004|05:27] C:\Program Files\microsoft frontpage
   [03/01/2005|00:48] C:\Program Files\Microsoft Office
   [15/11/2006|20:35] C:\Program Files\Microsoft Works
   [16/11/2008|00:30] C:\Program Files\Movie Maker
   [31/08/2009|18:48] C:\Program Files\Mozilla Firefox
   [13/02/2006|21:18] C:\Program Files\MSN
   [25/11/2004|05:27] C:\Program Files\MSN Gaming Zone
   [16/11/2008|00:53] C:\Program Files\MSN Messenger
   [15/11/2006|15:37] C:\Program Files\MSXML 4.0
   [06/11/2007|20:04] C:\Program Files\muvee Technologies
   [31/08/2009|18:42] C:\Program Files\Navilog1
   [16/11/2008|00:25] C:\Program Files\NetMeeting
   [15/09/2007|13:00] C:\Program Files\Nokia
   [25/11/2004|05:27] C:\Program Files\Online Services
   [18/01/2006|12:08] C:\Program Files\OpenOffice.org 2.0
   [26/08/2009|13:21] C:\Program Files\Outlook Express
   [12/03/2009|22:15] C:\Program Files\Panda Security
   [15/09/2007|12:59] C:\Program Files\PC Connectivity Solution
   [15/11/2006|20:35] C:\Program Files\PC-Doctor 5 for Windows
   [10/05/2009|15:35] C:\Program Files\PCFriendly
   [19/09/2008|21:04] C:\Program Files\PDFCreator
   [02/04/2008|16:38] C:\Program Files\pese_courrier
   [15/11/2006|20:35] C:\Program Files\Philips ToUcam Camera
   [01/05/2008|17:39] C:\Program Files\Picasa2
   [12/08/2007|14:36] C:\Program Files\QuickTime
   [28/09/2007|18:58] C:\Program Files\Ratajik Software
   [18/01/2006|11:38] C:\Program Fileseadmes
   [10/07/2008|12:43] C:\Program Files\Real
   [15/11/2008|18:24] C:\Program Files\RegSupreme
   [26/11/2007|21:20] C:\Program Files\Screamer Radio
   [03/01/2005|01:02] C:\Program Files\Services en ligne
   [17/01/2006|23:53] C:\Program Files\Smart Panel
   [18/02/2006|17:21] C:\Program Files\sollab
   [03/01/2005|00:44] C:\Program Files\Sonic
   [03/05/2009|18:56] C:\Program Files\Spotify
   [29/08/2009|22:51] C:\Program Files\Spybot - Search & Destroy
   [18/02/2008|19:36] C:\Program Files\Spyware Doctor
   [15/11/2008|20:36] C:\Program Files\StationRipper
   [29/09/2007|15:04] C:\Program Files\StreamRipper32
   [31/03/2007|19:48] C:\Program Files\Symantec
   [31/08/2009|13:43] C:\Program Files\Trend Micro
   [24/11/2004|03:37] C:\Program Files\Uninstall Information
   [07/03/2008|19:51] C:\Program Files\Veoh Networks
   [15/03/2006|20:29] C:\Program Files\VideoLAN
   [15/11/2006|20:35] C:\Program Files\VideoLink Pro
   [28/07/2007|16:09] C:\Program Files\Virtools
   [03/11/2006|16:00] C:\Program Files\WinBrick2000
   [25/06/2007|20:41] C:\Program Files\Windows Live
   [16/11/2008|00:25] C:\Program Files\Windows Media Player
   [16/11/2008|00:25] C:\Program Files\Windows NT
   [24/11/2004|03:37] C:\Program Files\WindowsUpdate
   [18/02/2006|11:54] C:\Program Files\Wisdom-soft ScreenHunter Free
   [25/11/2004|05:28] C:\Program Files\xerox

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [15/11/2008|18:23] C:\Program Files\Fichiers communs\Adobe
   [03/01/2005|00:39] C:\Program Files\Fichiers communs\Hewlett-Packard
   [15/11/2008|20:38] C:\Program Files\Fichiers communs\HP
   [03/01/2005|00:52] C:\Program Files\Fichiers communs\InstallShield
   [03/01/2005|00:19] C:\Program Files\Fichiers communs\Java
   [03/01/2005|00:49] C:\Program Files\Fichiers communs\Microsoft Shared
   [25/11/2004|05:26] C:\Program Files\Fichiers communs\MSSoap
   [03/01/2005|00:52] C:\Program Files\Fichiers communs\muvee Technologies
   [15/09/2007|13:00] C:\Program Files\Fichiers communs\Nokia
   [25/11/2004|05:26] C:\Program Files\Fichiers communs\ODBC
   [12/03/2009|22:07] C:\Program Files\Fichiers communs\Panda Security
   [15/09/2007|13:00] C:\Program Files\Fichiers communs\PCSuite
   [03/04/2009|16:07] C:\Program Files\Fichiers communs\Real
   [01/02/2005|10:24] C:\Program Files\Fichiers communs\Services
   [18/01/2006|00:02] C:\Program Files\Fichiers communs\Smith Micro Shared
   [15/11/2008|20:39] C:\Program Files\Fichiers communs\Sonic Shared
   [25/11/2004|05:26] C:\Program Files\Fichiers communs\SpeechEngines
   [03/01/2005|00:43] C:\Program Files\Fichiers communs\SureThing Shared
   [31/03/2007|19:46] C:\Program Files\Fichiers communs\Symantec Shared
   [16/11/2008|00:25] C:\Program Files\Fichiers communs\System
   [03/01/2005|00:44] C:\Program Files\Fichiers communs\TiVo Shared
   [03/04/2009|16:07] C:\Program Files\Fichiers communs\xing shared

   --------------------\  Process

   ( 65 Processes )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   C:\DOCUME~1\Marlou\APPLIC~1\binaxi~1
   C:\DOCUME~1\Marlou\APPLIC~1\Adverts
   C:\WINDOWS\Tasks\B753025D9188ABF9.job
 
   --------------------\  Verification du Registre

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2009-08-31 20:41:21
   Windows 5.1.2600 Service Pack 3 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 265
 
   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !

   [F:16][D:0]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
   [F:1][D:0]-> C:\DOCUME~1\HP_PRO~1\Cookies
   [F:1][D:0]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - 31/08/2009|20:43 - Option : [1]

   --------------------\  Fin du rapport a 20:43:59

Xplode · Answer

Lance maintenant l'option 2 de lop S&D et copie/colle le rapport

--------------------------------------

RootkitBuster ---->

Télécharge rootkitbuster à cette adresse -> http://www.trendmicro.com/ftp/products/rootkitbuster/RootkitBuster_2.52.1013.zip

Décompresse le sur ton bureau, puis lance le.

Vérifie que toutes les cases sont cochées en haut, puis cliques sur " Scan "

Laisse l'outil travailler, puis poste le rapport qui s'ouvrira dans ton prochain message

Mae · Answer

Et voila le rapport de Rootkitbuster :)


+----------------------------------------------------
| Trend Micro RootkitBuster 
| Module version: 2.52.0.1013
+----------------------------------------------------


--== Dump Hidden MBR and Hidden File on C:\ ==--
No hidden files found.

--== Dump Hidden Registry Value on HKLM ==--
No hidden registry entries found.


--== Dump Hidden Process ==--
No hidden processes found.

--== Dump Hidden Driver ==--
No hidden drivers found.

Xplode · Answer

Ok tu peux poster le rapport de l'option 2 de lop S&D ?

Mae · Answer

Ah excuse moi, j'avais pas vu !


   --------------------\  Lop S&D 4.2.5-0   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 3000+ )
   BIOS : Phoenix - Award BIOS v6.00PG
   USER : HP_Propriétaire ( Administrator )
   BOOT : Normal boot
   Antivirus : Panda Antivirus Pro 2009 8.00.00 (Activated)
   Firewall  : Panda Personal Firewall 2009 8.00.00 (Activated)
   C:\ (Local Disk) - NTFS - Total:143 Go (Free:57 Go)
   D:\ (Local Disk) - FAT32 - Total:5 Go (Free:1 Go)
   E:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [2] ( 31/08/2009|21:30 )


   \\\\\\\\\\\\\\\ SUPPRESSION

   Supprime! - C:\WINDOWS\Tasks\B753025D9188ABF9.job 
   Supprime! - C:\DOCUME~1\Marlou\APPLIC~1\binaxi~1
   Supprime! - C:\DOCUME~1\Marlou\APPLIC~1\Adverts
 
   \\\\\\\\\\\\\\\ 

 
   --------------------\  Listing des dossiers dans APPLIC~1

   [29/08/2009|23:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{83C91755-2546-441D-AC40-9A6B4B860800}
   [13/05/2008|17:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [25/12/2006|13:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [11/06/2009|21:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EPSON
   [28/01/2007|18:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [12/06/2008|14:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
   [31/03/2007|20:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hole lies comp drv
   [03/01/2005|00:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
   [15/09/2007|12:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Installations
   [03/01/2005|00:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
   [29/08/2009|23:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
   [01/04/2006|10:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [21/01/2006|15:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [05/08/2007|18:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies
   [12/03/2009|22:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Panda Security
   [15/09/2007|13:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite
   [24/02/2006|22:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
   [03/01/2005|00:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
   [19/01/2008|21:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\sentinel
   [03/01/2005|00:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
   [30/08/2009|11:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [31/03/2007|19:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [11/07/2008|22:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
   [11/06/2009|21:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
   [08/08/2006|20:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

   [10/03/2008|18:52] C:\DOCUME~1\Chris\APPLIC~1\Macromedia

   [09/01/2008|15:25] C:\DOCUME~1\Cynthia\APPLIC~1\Macromedia

   [03/01/2005|00:50] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
   [25/11/2004|05:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [03/01/2005|01:15] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
   [03/01/2005|00:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
   [03/01/2005|01:05] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec


   [09/10/2008|21:17] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Adobe
   [04/03/2006|13:53] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AdobeUM
   [12/08/2007|14:58] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Apple Computer
   [18/01/2006|11:22] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Arcsoft
   [22/12/2007|21:19] C:\DOCUME~1\HP_PRO~1\APPLIC~1\DivX
   [16/01/2007|20:02] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Google
   [27/12/2008|21:33] C:\DOCUME~1\HP_PRO~1\APPLIC~1\gtk-2.0
   [18/01/2006|11:26] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Help
   [15/10/2006|17:41] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HP
   [17/02/2006|22:38] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HPQ
   [25/11/2004|05:26] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Identities
   [11/06/2009|21:27] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InstallShield
   [12/02/2006|15:37] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InterVideo
   [15/10/2006|18:16] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Leadertech
   [19/01/2008|19:48] C:\DOCUME~1\HP_PRO~1\APPLIC~1\LogProtect
   [17/02/2006|21:59] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Macromedia
   [24/02/2006|23:09] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft
   [16/01/2007|20:00] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Mozilla
   [13/02/2006|21:19] C:\DOCUME~1\HP_PRO~1\APPLIC~1\MSNInstaller
   [05/08/2007|18:46] C:\DOCUME~1\HP_PRO~1\APPLIC~1\muvee Technologies
   [15/09/2007|13:17] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Nokia
   [31/08/2009|18:46] C:\DOCUME~1\HP_PRO~1\APPLIC~1\OpenOffice.org2
   [12/03/2009|22:15] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Panda Security
   [15/09/2007|13:01] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PC Suite
   [09/12/2007|21:56] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PC Tools
   [10/07/2008|12:48] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Real
   [03/01/2005|00:54] C:\DOCUME~1\HP_PRO~1\APPLIC~1\SampleView
   [19/02/2006|14:22] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Smart Panel
   [05/08/2007|18:38] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sonic
   [30/07/2006|17:12] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sun
   [17/01/2006|23:26] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Symantec
   [09/12/2007|21:56] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Talkback
   [14/04/2008|21:23] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Template
   [10/11/2008|18:24] C:\DOCUME~1\HP_PRO~1\APPLIC~1\U3
   [15/03/2006|21:08] C:\DOCUME~1\HP_PRO~1\APPLIC~1\vlc


   [03/01/2005|00:08] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
   [15/03/2006|12:54] C:\DOCUME~1\LOCALS~1\APPLIC~1\Symantec

   [09/10/2008|21:30] C:\DOCUME~1\Maou\APPLIC~1\Adobe
   [01/01/2007|11:04] C:\DOCUME~1\Maou\APPLIC~1\Apple Computer
   [22/01/2006|22:46] C:\DOCUME~1\Maou\APPLIC~1\ArcSoft
   [01/07/2008|23:01] C:\DOCUME~1\Maou\APPLIC~1\DivX
   [10/01/2008|21:22] C:\DOCUME~1\Maou\APPLIC~1\EPSON
   [27/09/2006|18:18] C:\DOCUME~1\Maou\APPLIC~1\Google
   [18/06/2009|12:36] C:\DOCUME~1\Maou\APPLIC~1\gtk-2.0
   [18/02/2006|11:13] C:\DOCUME~1\Maou\APPLIC~1\Help
   [17/02/2006|12:07] C:\DOCUME~1\Maou\APPLIC~1\HP
   [20/02/2006|19:34] C:\DOCUME~1\Maou\APPLIC~1\HPQ
   [25/11/2004|05:26] C:\DOCUME~1\Maou\APPLIC~1\Identities
   [09/03/2009|22:43] C:\DOCUME~1\Maou\APPLIC~1\InstallShield
   [02/06/2006|21:56] C:\DOCUME~1\Maou\APPLIC~1\InterVideo
   [19/01/2008|19:48] C:\DOCUME~1\Maou\APPLIC~1\LogProtect
   [18/02/2006|11:33] C:\DOCUME~1\Maou\APPLIC~1\Macromedia
   [17/02/2006|10:14] C:\DOCUME~1\Maou\APPLIC~1\Microsoft
   [17/01/2007|08:21] C:\DOCUME~1\Maou\APPLIC~1\Mozilla
   [30/08/2009|11:11] C:\DOCUME~1\Maou\APPLIC~1\OpenOffice.org2
   [16/09/2007|13:37] C:\DOCUME~1\Maou\APPLIC~1\PC Suite
   [10/07/2008|14:41] C:\DOCUME~1\Maou\APPLIC~1\Real
   [03/01/2005|00:54] C:\DOCUME~1\Maou\APPLIC~1\SampleView
   [27/05/2007|18:11] C:\DOCUME~1\Maou\APPLIC~1\Smart Panel
   [03/01/2007|20:05] C:\DOCUME~1\Maou\APPLIC~1\Sonic
   [25/06/2009|10:19] C:\DOCUME~1\Maou\APPLIC~1\Spotify
   [27/01/2006|19:10] C:\DOCUME~1\Maou\APPLIC~1\Sun
   [03/01/2005|01:05] C:\DOCUME~1\Maou\APPLIC~1\Symantec
   [12/12/2007|16:07] C:\DOCUME~1\Maou\APPLIC~1\Talkback
   [16/01/2009|23:34] C:\DOCUME~1\Maou\APPLIC~1\Template
   [10/12/2006|14:20] C:\DOCUME~1\Maou\APPLIC~1\vlc

   [19/10/2008|12:54] C:\DOCUME~1\Marlou\APPLIC~1\Adobe
   [03/01/2005|00:50] C:\DOCUME~1\Marlou\APPLIC~1\Apple Computer
   [26/01/2006|20:54] C:\DOCUME~1\Marlou\APPLIC~1\Arcsoft
   [19/10/2007|17:50] C:\DOCUME~1\Marlou\APPLIC~1\DivX
   [27/09/2006|14:25] C:\DOCUME~1\Marlou\APPLIC~1\Google
   [03/11/2006|19:44] C:\DOCUME~1\Marlou\APPLIC~1\Help
   [09/07/2008|21:36] C:\DOCUME~1\Marlou\APPLIC~1\HP
   [26/01/2006|20:38] C:\DOCUME~1\Marlou\APPLIC~1\HPQ
   [25/11/2004|05:26] C:\DOCUME~1\Marlou\APPLIC~1\Identities
   [29/05/2007|19:42] C:\DOCUME~1\Marlou\APPLIC~1\InterVideo
   [19/01/2008|19:48] C:\DOCUME~1\Marlou\APPLIC~1\LogProtect
   [22/02/2006|13:01] C:\DOCUME~1\Marlou\APPLIC~1\Macromedia
   [22/02/2006|12:39] C:\DOCUME~1\Marlou\APPLIC~1\Microsoft
   [27/01/2007|21:11] C:\DOCUME~1\Marlou\APPLIC~1\Mozilla
   [25/09/2007|20:46] C:\DOCUME~1\Marlou\APPLIC~1\Nokia
   [10/06/2009|15:31] C:\DOCUME~1\Marlou\APPLIC~1\OpenOffice.org2
   [16/09/2007|11:12] C:\DOCUME~1\Marlou\APPLIC~1\PC Suite
   [21/10/2008|19:27] C:\DOCUME~1\Marlou\APPLIC~1\Real
   [03/01/2005|00:54] C:\DOCUME~1\Marlou\APPLIC~1\SampleView
   [02/05/2008|16:27] C:\DOCUME~1\Marlou\APPLIC~1\Smart Panel
   [01/12/2007|10:58] C:\DOCUME~1\Marlou\APPLIC~1\Sonic
   [31/01/2006|20:42] C:\DOCUME~1\Marlou\APPLIC~1\Sun
   [03/01/2005|01:05] C:\DOCUME~1\Marlou\APPLIC~1\Symantec
   [12/12/2007|15:19] C:\DOCUME~1\Marlou\APPLIC~1\Talkback
   [23/03/2009|23:19] C:\DOCUME~1\Marlou\APPLIC~1\U3
   [15/03/2006|20:30] C:\DOCUME~1\Marlou\APPLIC~1\vlc

   [12/07/2007|11:14] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [29/08/2009 23:27][--a------] C:\WINDOWS	asks\Ad-Aware Update (Weekly).job
   [31/08/2009 18:39][--ah-----] C:\WINDOWS	asks\SA.DAT
   [05/08/2004 20:00][-rah-----] C:\WINDOWS	asks\desktop.ini

   --------------------\  Listing des dossiers dans C:\Program Files

   [11/06/2009|21:35] C:\Program Files\ABBYY FineReader 6.0 Sprint
   [13/05/2008|17:40] C:\Program Files\Adobe
   [05/09/2007|10:42] C:\Program Files\Alwil Software
   [18/01/2006|00:05] C:\Program Files\ArcSoft
   [03/01/2005|00:26] C:\Program Files\ATI Technologies
   [08/10/2007|21:41] C:\Program Files\Audacity
   [24/11/2004|03:37] C:\Program Files\ComPlus Applications
   [15/09/2007|12:59] C:\Program Files\DIFX
   [11/11/2007|12:26] C:\Program Files\DivX
   [15/11/2008|20:11] C:\Program Files\Easy Internet signup
   [11/06/2009|21:36] C:\Program Files\epson
   [11/06/2009|21:38] C:\Program Files\Epson Software
   [03/04/2009|16:07] C:\Program Files\Fichiers communs
   [27/12/2008|21:37] C:\Program Files\Gimp Pack Mode
   [15/11/2008|20:33] C:\Program Files\Google
   [02/11/2007|14:55] C:\Program Files\Harry Potter Creative CD
   [03/01/2005|00:33] C:\Program Files\HP
   [11/06/2009|21:38] C:\Program Files\InstallShield Installation Information
   [01/01/2007|10:55] C:\Program Files\InterActual
   [26/08/2009|13:21] C:\Program Files\Internet Explorer
   [03/01/2005|00:46] C:\Program Files\InterVideo
   [12/08/2007|14:38] C:\Program Files\iPod
   [12/08/2007|14:38] C:\Program Files\iTunes
   [29/08/2009|22:12] C:\Program Files\Java
   [29/08/2009|23:19] C:\Program Files\Lavasoft
   [18/01/2006|11:38] C:\Program Files\licenses
   [08/08/2006|21:19] C:\Program Files\LogProtect
   [01/04/2006|14:07] C:\Program Files\Maxis
   [16/11/2008|00:35] C:\Program Files\Messenger
   [29/08/2009|22:02] C:\Program Files\Messenger Plus! Live
   [25/06/2007|20:40] C:\Program Files\MessengerPlus! 3
   [25/11/2004|05:27] C:\Program Files\microsoft frontpage
   [03/01/2005|00:48] C:\Program Files\Microsoft Office
   [15/11/2006|20:35] C:\Program Files\Microsoft Works
   [16/11/2008|00:30] C:\Program Files\Movie Maker
   [31/08/2009|18:48] C:\Program Files\Mozilla Firefox
   [13/02/2006|21:18] C:\Program Files\MSN
   [25/11/2004|05:27] C:\Program Files\MSN Gaming Zone
   [16/11/2008|00:53] C:\Program Files\MSN Messenger
   [15/11/2006|15:37] C:\Program Files\MSXML 4.0
   [06/11/2007|20:04] C:\Program Files\muvee Technologies
   [31/08/2009|18:42] C:\Program Files\Navilog1
   [16/11/2008|00:25] C:\Program Files\NetMeeting
   [15/09/2007|13:00] C:\Program Files\Nokia
   [25/11/2004|05:27] C:\Program Files\Online Services
   [18/01/2006|12:08] C:\Program Files\OpenOffice.org 2.0
   [26/08/2009|13:21] C:\Program Files\Outlook Express
   [12/03/2009|22:15] C:\Program Files\Panda Security
   [15/09/2007|12:59] C:\Program Files\PC Connectivity Solution
   [15/11/2006|20:35] C:\Program Files\PC-Doctor 5 for Windows
   [10/05/2009|15:35] C:\Program Files\PCFriendly
   [19/09/2008|21:04] C:\Program Files\PDFCreator
   [02/04/2008|16:38] C:\Program Files\pese_courrier
   [15/11/2006|20:35] C:\Program Files\Philips ToUcam Camera
   [01/05/2008|17:39] C:\Program Files\Picasa2
   [12/08/2007|14:36] C:\Program Files\QuickTime
   [28/09/2007|18:58] C:\Program Files\Ratajik Software
   [18/01/2006|11:38] C:\Program Fileseadmes
   [10/07/2008|12:43] C:\Program Files\Real
   [15/11/2008|18:24] C:\Program Files\RegSupreme
   [26/11/2007|21:20] C:\Program Files\Screamer Radio
   [03/01/2005|01:02] C:\Program Files\Services en ligne
   [17/01/2006|23:53] C:\Program Files\Smart Panel
   [18/02/2006|17:21] C:\Program Files\sollab
   [03/01/2005|00:44] C:\Program Files\Sonic
   [03/05/2009|18:56] C:\Program Files\Spotify
   [29/08/2009|22:51] C:\Program Files\Spybot - Search & Destroy
   [18/02/2008|19:36] C:\Program Files\Spyware Doctor
   [15/11/2008|20:36] C:\Program Files\StationRipper
   [29/09/2007|15:04] C:\Program Files\StreamRipper32
   [31/03/2007|19:48] C:\Program Files\Symantec
   [31/08/2009|13:43] C:\Program Files\Trend Micro
   [24/11/2004|03:37] C:\Program Files\Uninstall Information
   [07/03/2008|19:51] C:\Program Files\Veoh Networks
   [15/03/2006|20:29] C:\Program Files\VideoLAN
   [15/11/2006|20:35] C:\Program Files\VideoLink Pro
   [28/07/2007|16:09] C:\Program Files\Virtools
   [03/11/2006|16:00] C:\Program Files\WinBrick2000
   [25/06/2007|20:41] C:\Program Files\Windows Live
   [16/11/2008|00:25] C:\Program Files\Windows Media Player
   [16/11/2008|00:25] C:\Program Files\Windows NT
   [24/11/2004|03:37] C:\Program Files\WindowsUpdate
   [18/02/2006|11:54] C:\Program Files\Wisdom-soft ScreenHunter Free
   [25/11/2004|05:28] C:\Program Files\xerox

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [15/11/2008|18:23] C:\Program Files\Fichiers communs\Adobe
   [03/01/2005|00:39] C:\Program Files\Fichiers communs\Hewlett-Packard
   [15/11/2008|20:38] C:\Program Files\Fichiers communs\HP
   [03/01/2005|00:52] C:\Program Files\Fichiers communs\InstallShield
   [03/01/2005|00:19] C:\Program Files\Fichiers communs\Java
   [03/01/2005|00:49] C:\Program Files\Fichiers communs\Microsoft Shared
   [25/11/2004|05:26] C:\Program Files\Fichiers communs\MSSoap
   [03/01/2005|00:52] C:\Program Files\Fichiers communs\muvee Technologies
   [15/09/2007|13:00] C:\Program Files\Fichiers communs\Nokia
   [25/11/2004|05:26] C:\Program Files\Fichiers communs\ODBC
   [12/03/2009|22:07] C:\Program Files\Fichiers communs\Panda Security
   [15/09/2007|13:00] C:\Program Files\Fichiers communs\PCSuite
   [03/04/2009|16:07] C:\Program Files\Fichiers communs\Real
   [01/02/2005|10:24] C:\Program Files\Fichiers communs\Services
   [18/01/2006|00:02] C:\Program Files\Fichiers communs\Smith Micro Shared
   [15/11/2008|20:39] C:\Program Files\Fichiers communs\Sonic Shared
   [25/11/2004|05:26] C:\Program Files\Fichiers communs\SpeechEngines
   [03/01/2005|00:43] C:\Program Files\Fichiers communs\SureThing Shared
   [31/03/2007|19:46] C:\Program Files\Fichiers communs\Symantec Shared
   [16/11/2008|00:25] C:\Program Files\Fichiers communs\System
   [03/01/2005|00:44] C:\Program Files\Fichiers communs\TiVo Shared
   [03/04/2009|16:07] C:\Program Files\Fichiers communs\xing shared

   --------------------\  Process

   ( 65 Processes )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Verification du Registre
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2009-08-31 21:32:50
   Windows 5.1.2600 Service Pack 3 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 265
 
   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !

   [F:34][D:4]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
   [F:6][D:0]-> C:\DOCUME~1\HP_PRO~1\Cookies
   [F:72][D:4]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - 31/08/2009|20:43 - Option : [1]
   2 - "C:\Lop SD\LopR_2.txt" - 31/08/2009|21:34 - Option : [2]

   --------------------\  Fin du rapport a 21:34:53

Interprétation de mon log Hijackthis

16 réponses

Discussions similaires