Comment bloquer les pubs !!

Résolu
roms75001 -  
Bonjour,
Voilà depuis quelques temps dès que j'accède à internet de nombreuses pubs envahissent ma barre d'outils.
Je dispose de Mozilla Firefox.
Et j'aimerais savoir si quelqu'un pourrait me passer un logiciel qui pourrait les bloquer.
Merci de votre compréhension.
Configuration: Windows XP
Firefox 3.5.5

50 réponses

Résumé de la discussion

Problème central : après une navigation web, une multitude de pubs envahissent la barre d'outils sur Firefox, et l'utilisateur demande un logiciel pour les bloquer sous Windows XP. Plusieurs répondants suggèrent des outils de sécurité et de nettoyage comme Malwarebytes Anti-Malware, RSIT, OTM, et CCleaner, et décrivent des procédures pour nettoyer les extensions et les fichiers indésirables. Des échanges détaillent des rapports d'analyse (logs), des procédures étape par étape et des outils complémentaires comme Toolbar-S&D et ToolsCleaner, sans tirer de conclusion sur l'état ou la résolution du problème.

Bobot (l’IA à votre service)
  2. ric025
    Salut.

    Cela peut être un effet indésirable engendré par une infection; :) Auquel cas, AdBlock ou autres seront inutiles.

    Pour en être sûr :

    HijackThis :

    ▶ Télécharge /// ---> HijackThis <--- \\

    ▶ Tout est expliqué sur ce site web pour l'installer et l'utiliser correctement.

    ▶ Poste le rapport obtenu dans le bloc note dans ta prochaine réponse.

    Comment copier/coller le rapport :

    ▶ Quand tu as le rapport à l écran, tu fais ctrl A pour "sélectionner tout" puis ctrl C pour "copier".

    ▶ Ensuite tu viens sur le forum pour me répondre et tu fais ctrl V pour "coller" le rapport.

    ++
    0
    1. roms75001 Auteur
      ok merci je vais essayer
      0
      1. roms75001 Auteur
        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 14:01:47, on 14/11/2009
        Platform: Windows XP SP3 (WinNT 5.01.2600)
        MSIE: Internet Explorer v8.00 (8.00.6001.18702)
        Boot mode: Normal

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        C:\Program Files\Alwil Software\Avast4\ashServ.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\WINDOWS\Explorer.EXE
        C:\WINDOWS\RTHDCPL.EXE
        C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
        C:\Program Files\Java\jre6\bin\jusched.exe
        C:\Program Files\iTunes\iTunesHelper.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\Program Files\Messenger\msmsgs.exe
        C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
        C:\Program Files\Java\jre6\bin\jqs.exe
        C:\WINDOWS\system32\svchost.exe
        C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
        C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
        C:\Program Files\iPod\bin\iPodService.exe
        C:\WINDOWS\system32\wbem\wmiapsrv.exe
        C:\Program Files\Steam\Steam.exe
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\Program Files\Trend Micro\HijackThis\HJT.exe

        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,userinit.exe
        O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
        O2 - BHO: NP Helper Class - {35B8D58C-B0CB-46b0-BA64-05B3804E4E86} - C:\Program Files\Internet Saving Optimizer\3.8.1.4690\NPIEAddOn.dll
        O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
        O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: System Search Dispatcher - {CDBFB47B-58A8-4111-BF95-06178DCE326D} - (no file)
        O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
        O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
        O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
        O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
        O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
        O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
        O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
        O4 - HKLM\..\Run: [PromoReg] C:\WINDOWS\Temp\_ex-08.exe
        O4 - HKLM\..\Run: [17947504] C:\Documents and Settings\All Users\Application Data\17947504\17947504.exe
        O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
        O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
        O4 - HKCU\..\Run: [FACE VC] C:\DOCUME~1\valou\APPLIC~1\AUDIOC~1\DASHEGGS.exe
        O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
        O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
        O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
        O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
        O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
        O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
        O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=GRxdm081YYFR
        O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-5/myWebFaceInitialSetup1.0.1.3.cab
        O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
        O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - http://fichiers.touslesdrivers.com/maconfig/MaConfig_3_5_1_0.cab
        O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
        O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
        O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
        O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
        O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
        O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
        O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
        O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
        O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
        0
        2. ric025
          Ok. Plusieurs choses.

          LopSD : Recherche :

          Il y a des infections LOP dans ton PC.

          ▶ Télécharge et enregistre lopSD sur le Bureau

          ▶ Double-clique sur Lop S&D

          ▶ Fais l'installation

          ▶ Ferme toutes les applications

          ▶ Lance-le par un double-clic sur le raccourci qui est sur le bureau

          ▶ Avec VISTA => clic-droit et => Exécuter en tant qu'administrateur

          ▶ Tape F pour français , puis presse entrée

          ▶ Tape 1

          ▶ Presse Entrée

          ▶ Le PC va redémarrer

          * Note : si l'antivirus annonce une infection dans TEMP , l'ignorer

          ▶ Attend l'apparition du rapport

          ▶ Copie le rapport et colle-le dans la réponse

          * le rapport se trouve aussi à C:\lopR

          ++
          0
          1. roms75001 Auteur
            ( 40 Processes )

            iexplore.exe ~ [PID:3596]
            iexplore.exe ~ [PID:2168]
            iexplore.exe ~ [PID:624]

            --------------------\\ Recherche avec S_Lop

            Aucun fichier / dossier Lop trouvé !

            --------------------\\ Recherche de Fichiers / Dossiers Lop

            C:\DOCUME~1\ALLUSE~1\APPLIC~1\comp two long internet
            C:\DOCUME~1\valou\Cookies\valou@advertstream[2].txt
            C:\DOCUME~1\valou\Cookies\valou@adultfriendfinder[2].txt
            C:\DOCUME~1\valou\Cookies\valou@advertising[2].txt

            --------------------\\ Verification du Registre

            [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

            [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

            ..... OK !

            --------------------\\ Verification du fichier Hosts

            Fichier Hosts PROPRE

            --------------------\\ Recherche de fichiers avec Catchme

            catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
            Rootkit scan 2009-11-14 14:14:52
            Windows 5.1.2600 Service Pack 3 NTFS
            scanning hidden processes ...
            scanning hidden files ...
            scan completed successfully
            hidden processes: 0
            hidden files: 0

            --------------------\\ Recherche d'autres infections

            Aucune autre infection trouvée !

            [F:599][D:99]-> C:\DOCUME~1\valou\LOCALS~1\Temp
            [F:201][D:0]-> C:\DOCUME~1\valou\Cookies
            [F:6853][D:10]-> C:\DOCUME~1\valou\LOCALS~1\TEMPOR~1\content.IE5

            1 - "C:\Lop SD\LopR_1.txt" - 14/11/2009|14:15 - Option : [1]

            --------------------\\ Fin du rapport a 14:15:33
            0
            1. ric025
              lopSD : nettoyage

              ▶ Relance Lop S&D

              ▶ Choisis cette fois-ci l'option 2 (Suppression)

              ▶ Ne ferme pas la fenêtre lors de la suppression !

              ▶ Poste le rapport généré (C:\lopR.txt)

              * (Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

              ==============================

              ToolbarSD : recherche

              ▶ Télécharge Toolbar-S&D (de Team IDN) sur ton Bureau

              ▶ Lance l'installation du programme en exécutant le fichier téléchargé.

              ▶ Sous XP : Double-clique sur le raccourci de Toolbar-S&D.

              ▶ Sous Vista : Fais un clic droit sur ToolbarSD et sélectionne "Exécuter en tant qu'administrateur".

              ▶ Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.

              ▶ Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.

              ▶ Poste le rapport généré. (C:\TB.txt)

              ++
              0
              1. roms75001 Auteur
                --------------------\\ Lop S&D 4.2.5-0 XP/Vista

                Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
                X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 5200+ )
                BIOS : Phoenix - AwardBIOS v6.00PG
                USER : valou ( Administrator )
                BOOT : Normal boot
                Antivirus : avast! antivirus 4.8.1351 [VPS 091113-1] 4.8.1351 (Activated)
                C:\ (Local Disk) - NTFS - Total:78 Go (Free:46 Go)
                D:\ (Local Disk) - NTFS - Total:219 Go (Free:219 Go)
                E:\ (CD or DVD)
                F:\ (USB)

                "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
                Option : [2] ( 14/11/2009|14:24 )

                \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

                Supprime! - C:\DOCUME~1\valou\Cookies\valou@advertstream[2].txt
                Supprime! - C:\DOCUME~1\valou\Cookies\valou@adultfriendfinder[2].txt
                Supprime! - C:\DOCUME~1\valou\Cookies\valou@advertising[2].txt
                Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\comp two long internet

                \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

                --------------------\\ Listing des dossiers dans APPLIC~1

                [17/09/2009|12:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{755AC846-7372-4AC8-8550-C52491DAA8BD}
                [30/09/2009|17:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\17947504
                [22/07/2009|16:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
                [17/09/2009|12:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
                [17/09/2009|12:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
                [23/09/2009|17:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ma-config.com
                [31/08/2009|10:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
                [29/10/2009|21:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype

                [22/07/2009|15:06] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

                [02/09/2009|13:08] C:\DOCUME~1\JESSII~1\APPLIC~1\Adobe
                [19/09/2009|14:01] C:\DOCUME~1\JESSII~1\APPLIC~1\AdobeUM
                [26/08/2009|11:39] C:\DOCUME~1\JESSII~1\APPLIC~1\Ahead
                [22/10/2009|14:02] C:\DOCUME~1\JESSII~1\APPLIC~1\Apple Computer
                [23/10/2009|07:49] C:\DOCUME~1\JESSII~1\APPLIC~1\dvdcss
                [25/08/2009|09:47] C:\DOCUME~1\JESSII~1\APPLIC~1\Identities
                [23/10/2009|20:39] C:\DOCUME~1\JESSII~1\APPLIC~1\LimeWire
                [25/08/2009|09:49] C:\DOCUME~1\JESSII~1\APPLIC~1\Macromedia
                [03/09/2009|12:41] C:\DOCUME~1\JESSII~1\APPLIC~1\Microsoft
                [25/08/2009|09:52] C:\DOCUME~1\JESSII~1\APPLIC~1\Mozilla
                [30/10/2009|16:18] C:\DOCUME~1\JESSII~1\APPLIC~1\Skype
                [30/10/2009|16:14] C:\DOCUME~1\JESSII~1\APPLIC~1\skypePM
                [26/08/2009|09:38] C:\DOCUME~1\JESSII~1\APPLIC~1\Sun
                [23/10/2009|10:39] C:\DOCUME~1\JESSII~1\APPLIC~1\vlc
                [26/08/2009|11:55] C:\DOCUME~1\JESSII~1\APPLIC~1\WinRAR

                [22/07/2009|15:06] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
                [23/09/2009|17:04] C:\DOCUME~1\LOCALS~1\APPLIC~1\twain_32

                [22/07/2009|15:06] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
                [24/09/2009|09:11] C:\DOCUME~1\NETWOR~1\APPLIC~1\twain_32

                [22/08/2009|21:02] C:\DOCUME~1\valou\APPLIC~1\Adobe
                [27/08/2009|13:40] C:\DOCUME~1\valou\APPLIC~1\AdobeUM
                [22/07/2009|16:19] C:\DOCUME~1\valou\APPLIC~1\Ahead
                [17/09/2009|12:27] C:\DOCUME~1\valou\APPLIC~1\Apple Computer
                [24/09/2009|16:51] C:\DOCUME~1\valou\APPLIC~1\audiocornbait
                [09/10/2009|09:36] C:\DOCUME~1\valou\APPLIC~1\dvdcss
                [22/07/2009|15:09] C:\DOCUME~1\valou\APPLIC~1\Identities
                [22/07/2009|15:10] C:\DOCUME~1\valou\APPLIC~1\Macromedia
                [03/10/2009|12:15] C:\DOCUME~1\valou\APPLIC~1\Microsoft
                [25/08/2009|14:51] C:\DOCUME~1\valou\APPLIC~1\Mozilla
                [13/11/2009|12:41] C:\DOCUME~1\valou\APPLIC~1\Skype
                [13/11/2009|08:39] C:\DOCUME~1\valou\APPLIC~1\skypePM
                [27/08/2009|13:40] C:\DOCUME~1\valou\APPLIC~1\Sun
                [24/09/2009|12:23] C:\DOCUME~1\valou\APPLIC~1\SystemRequirementsLab
                [22/10/2009|13:16] C:\DOCUME~1\valou\APPLIC~1\vlc
                [22/07/2009|15:46] C:\DOCUME~1\valou\APPLIC~1\WinRAR

                --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

                [10/11/2009 21:13][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
                [14/11/2009 10:26][--ah-----] C:\WINDOWS\tasks\SA.DAT
                [28/08/2001 15:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

                --------------------\\ Listing des dossiers dans C:\Program Files

                [22/07/2009|16:10] C:\Program Files\Adobe
                [22/07/2009|16:18] C:\Program Files\Ahead
                [22/07/2009|15:10] C:\Program Files\Alwil Software
                [17/09/2009|12:08] C:\Program Files\Apple Software Update
                [21/08/2009|13:21] C:\Program Files\ATI Technologies
                [23/09/2009|17:27] C:\Program Files\CCleaner
                [22/07/2009|15:03] C:\Program Files\ComPlus Applications
                [24/09/2009|16:52] C:\Program Files\DIFX
                [13/09/2009|14:59] C:\Program Files\DoubleD
                [29/10/2009|21:11] C:\Program Files\Fichiers communs
                [22/07/2009|15:10] C:\Program Files\Free
                [06/09/2009|07:14] C:\Program Files\FunWebProducts
                [21/08/2009|12:44] C:\Program Files\InstallShield Installation Information
                [14/10/2009|06:43] C:\Program Files\Internet Explorer
                [13/09/2009|14:59] C:\Program Files\Internet Saving Optimizer
                [17/09/2009|12:09] C:\Program Files\iPod
                [17/09/2009|12:09] C:\Program Files\iTunes
                [26/08/2009|09:39] C:\Program Files\Java
                [01/11/2009|11:34] C:\Program Files\Lavalys
                [26/08/2009|09:39] C:\Program Files\LimeWire
                [23/09/2009|17:34] C:\Program Files\ma-config.com
                [21/08/2009|12:08] C:\Program Files\Messenger
                [26/08/2009|09:02] C:\Program Files\Microsoft
                [22/07/2009|15:06] C:\Program Files\microsoft frontpage
                [06/09/2009|10:44] C:\Program Files\Microsoft Office
                [21/08/2009|13:18] C:\Program Files\Movie Maker
                [13/11/2009|21:34] C:\Program Files\Mozilla Firefox
                [24/09/2009|16:17] C:\Program Files\MSI
                [02/09/2009|13:18] C:\Program Files\MSN
                [22/07/2009|15:03] C:\Program Files\MSN Gaming Zone
                [05/09/2009|19:29] C:\Program Files\MyWebSearch
                [21/08/2009|12:04] C:\Program Files\NetMeeting
                [22/07/2009|15:03] C:\Program Files\Online Services
                [21/08/2009|19:44] C:\Program Files\Outlook Express
                [17/09/2009|12:08] C:\Program Files\QuickTime
                [21/08/2009|11:59] C:\Program Files\Realtek
                [22/07/2009|15:05] C:\Program Files\Services en ligne
                [24/09/2009|16:57] C:\Program Files\Setup Files
                [29/10/2009|21:11] C:\Program Files\Skype
                [14/11/2009|11:49] C:\Program Files\Steam
                [24/09/2009|12:23] C:\Program Files\SystemRequirementsLab
                [14/11/2009|13:52] C:\Program Files\Trend Micro
                [22/07/2009|15:09] C:\Program Files\Uninstall Information
                [03/09/2009|13:09] C:\Program Files\VideoLAN
                [21/08/2009|12:54] C:\Program Files\Winamp
                [26/08/2009|09:02] C:\Program Files\Windows Live
                [21/08/2009|12:06] C:\Program Files\Windows Media Player
                [21/08/2009|12:04] C:\Program Files\Windows NT
                [22/07/2009|15:05] C:\Program Files\WindowsUpdate
                [24/09/2009|09:23] C:\Program Files\WinPcap
                [22/07/2009|15:45] C:\Program Files\WinRAR
                [22/07/2009|15:06] C:\Program Files\xerox

                --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

                [22/07/2009|16:11] C:\Program Files\Fichiers communs\Adobe
                [22/07/2009|16:18] C:\Program Files\Fichiers communs\Ahead
                [23/09/2009|17:30] C:\Program Files\Fichiers communs\Apple
                [31/08/2009|10:48] C:\Program Files\Fichiers communs\Designer
                [21/08/2009|12:44] C:\Program Files\Fichiers communs\InstallShield
                [25/09/2009|09:31] C:\Program Files\Fichiers communs\Microsoft Shared
                [22/07/2009|15:04] C:\Program Files\Fichiers communs\MSSoap
                [22/07/2009|19:20] C:\Program Files\Fichiers communs\ODBC
                [22/07/2009|15:04] C:\Program Files\Fichiers communs\Services
                [29/10/2009|21:11] C:\Program Files\Fichiers communs\Skype
                [22/07/2009|19:20] C:\Program Files\Fichiers communs\SpeechEngines
                [31/08/2009|10:48] C:\Program Files\Fichiers communs\System
                [26/08/2009|08:58] C:\Program Files\Fichiers communs\Windows Live

                --------------------\\ Process

                ( 37 Processes )

                ... OK !

                --------------------\\ Recherche avec S_Lop

                Aucun fichier / dossier Lop trouvé !

                --------------------\\ Recherche de Fichiers / Dossiers Lop

                Aucun fichier / dossier Lop trouvé !

                --------------------\\ Verification du Registre

                ..... OK !

                --------------------\\ Verification du fichier Hosts

                Fichier Hosts PROPRE

                --------------------\\ Recherche de fichiers avec Catchme

                catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                Rootkit scan 2009-11-14 14:24:55
                Windows 5.1.2600 Service Pack 3 NTFS
                scanning hidden processes ...
                scanning hidden files ...
                scan completed successfully
                hidden processes: 0
                hidden files: 0

                --------------------\\ Recherche d'autres infections

                Aucune autre infection trouvée !

                [F:599][D:99]-> C:\DOCUME~1\valou\LOCALS~1\Temp
                [F:198][D:0]-> C:\DOCUME~1\valou\Cookies
                [F:6871][D:10]-> C:\DOCUME~1\valou\LOCALS~1\TEMPOR~1\content.IE5

                1 - "C:\Lop SD\LopR_1.txt" - 14/11/2009|14:15 - Option : [1]
                2 - "C:\Lop SD\LopR_2.txt" - 14/11/2009|14:25 - Option : [2]

                --------------------\\ Fin du rapport a 14:25:26
                0
                1. roms75001 Auteur
                  -----------\\ ToolBar S&D 1.2.9 XP/Vista

                  Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
                  X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 5200+ )
                  BIOS : Phoenix - AwardBIOS v6.00PG
                  USER : valou ( Administrator )
                  BOOT : Normal boot
                  Antivirus : avast! antivirus 4.8.1351 [VPS 091113-1] 4.8.1351 (Activated)
                  C:\ (Local Disk) - NTFS - Total:78 Go (Free:46 Go)
                  D:\ (Local Disk) - NTFS - Total:219 Go (Free:219 Go)
                  E:\ (CD or DVD)
                  F:\ (USB)

                  "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
                  Option : [1] ( 14/11/2009|14:27 )

                  -----------\\ Recherche de Fichiers / Dossiers ...

                  C:\Program Files\FunWebProducts
                  C:\Program Files\FunWebProducts\ScreenSaver
                  C:\Program Files\FunWebProducts\Shared
                  C:\Program Files\FunWebProducts\ScreenSaver\Images
                  C:\Program Files\MyWebSearch
                  C:\Program Files\MyWebSearch\bar
                  C:\Program Files\MyWebSearch\bar\History
                  C:\Program Files\MyWebSearch\bar\Settings
                  C:\Program Files\MyWebSearch\bar\History\search3
                  C:\Program Files\MyWebSearch\bar\Settings\setting2.htm
                  C:\Program Files\MyWebSearch\bar\Settings\settings.dat
                  C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat

                  -----------\\ Extensions

                  (valou) - {C2DCA7EB-22D2-4FD2-86A9-F99FCC8122BB} => fbstoolbar
                  (valou) - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} => adblockplus

                  -----------\\ [..\Internet Explorer\Main]

                  [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                  "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
                  "Start Page"="https://www.google.fr/?gws_rd=ssl"
                  "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

                  [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                  "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
                  "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                  "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                  "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
                  "Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"

                  --------------------\\ Recherche d'autres infections

                  Aucune autre infection trouvée !

                  1 - "C:\ToolBar SD\TB_1.txt" - 14/11/2009|14:28 - Option : [1]

                  -----------\\ Fin du rapport a 14:28:13,64
                  0
                  1. ric025
                    Ok. Sans vouloir être méchant, tu sembles les accumuler ! :)

                    ToolbarSD : nettoyage

                    ▶ Relance Toolbar-S&D.

                    ▶ Tape sur "2" puis valide en appuyant sur "Entrée".

                    /!\ Ne ferme pas la fenêtre lors de la suppression /!\

                    ▶ Un rapport sera généré, poste son contenu ici.

                    NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
                    Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
                    Tape explorer puis valide.

                    Attention donc aux programmes que tu installes. Jette un oeil ici également :

                    Ce qu'il faut savoir sur les toolbars (barres d'outils)

                    =======================================

                    ▶ Télécharge Malwarebytes Anti-Malware (MBAM): /// ---> Malwarebytes Anti-Malware <--- \\

                    ▶ Installe-le en vérifiant que la case de mise à jour soit bien cochée en fin d'installation.

                    ▶ Après la mise à jour, lance-le et coche "Examen Rapide". Puis "Rechercher".

                    ▶ Si MBAM trouve quelque chose: fais "Voir les résultats" puis "Supprimer la sélection".

                    ▶ Poste le rapport généré.

                    =======================================

                    ▶ Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.

                    http://images.malwareremoval.com/random/RSIT.exe

                    ▶ Double-clique sur RSIT.exe.

                    ▶ Clique sur Continue à l'écran Disclaimer.

                    ▶ Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

                    ▶ Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

                    ▶ A noter: Les rapports se trouvent également ici: C:\rsit.

                    ++
                    0
                    1. roms75001 Auteur
                      -----------\\ ToolBar S&D 1.2.9 XP/Vista

                      Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
                      X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 5200+ )
                      BIOS : Phoenix - AwardBIOS v6.00PG
                      USER : valou ( Administrator )
                      BOOT : Normal boot
                      Antivirus : avast! antivirus 4.8.1351 [VPS 091114-0] 4.8.1351 (Activated)
                      C:\ (Local Disk) - NTFS - Total:78 Go (Free:46 Go)
                      D:\ (Local Disk) - NTFS - Total:219 Go (Free:219 Go)
                      E:\ (CD or DVD)
                      F:\ (USB)

                      "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
                      Option : [2] ( 14/11/2009|14:33 )

                      -----------\\ SUPPRESSION

                      Supprime! - C:\Program Files\FunWebProducts\ScreenSaver
                      Supprime! - C:\Program Files\FunWebProducts\Shared
                      Supprime! - C:\Program Files\MyWebSearch\bar
                      Supprime! - C:\Program Files\FunWebProducts
                      Supprime! - C:\Program Files\MyWebSearch

                      -----------\\ Recherche de Fichiers / Dossiers ...

                      -----------\\ Extensions

                      (valou) - {C2DCA7EB-22D2-4FD2-86A9-F99FCC8122BB} => fbstoolbar
                      (valou) - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} => adblockplus

                      -----------\\ [..\Internet Explorer\Main]

                      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                      "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
                      "Start Page"="https://www.google.fr/?gws_rd=ssl"
                      "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

                      [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                      "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
                      "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                      "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                      "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
                      "Start Page"="https://www.msn.com/fr-fr/"

                      --------------------\\ Recherche d'autres infections

                      Aucune autre infection trouvée !

                      1 - "C:\ToolBar SD\TB_1.txt" - 14/11/2009|14:28 - Option : [1]
                      2 - "C:\ToolBar SD\TB_2.txt" - 14/11/2009|14:33 - Option : [2]

                      -----------\\ Fin du rapport a 14:33:53,26
                      0
                      1. roms75001 Auteur
                        Malwarebytes' Anti-Malware 1.41
                        Version de la base de données: 3168
                        Windows 5.1.2600 Service Pack 3

                        14/11/2009 14:43:03
                        mbam-log-2009-11-14 (14-43-03).txt

                        Type de recherche: Examen rapide
                        Eléments examinés: 110689
                        Temps écoulé: 6 minute(s), 4 second(s)

                        Processus mémoire infecté(s): 0
                        Module(s) mémoire infecté(s): 2
                        Clé(s) du Registre infectée(s): 24
                        Valeur(s) du Registre infectée(s): 5
                        Elément(s) de données du Registre infecté(s): 0
                        Dossier(s) infecté(s): 31
                        Fichier(s) infecté(s): 686

                        Processus mémoire infecté(s):
                        (Aucun élément nuisible détecté)

                        Module(s) mémoire infecté(s):
                        C:\Program Files\Internet Saving Optimizer\3.8.1.4690\NPIEAddOn.dll (Adware.DoubleD) -> Delete on reboot.
                        C:\Program Files\Internet Saving Optimizer\3.8.1.4690\NPCommon.dll (Adware.DoubleD) -> Delete on reboot.

                        Clé(s) du Registre infectée(s):
                        HKEY_CLASSES_ROOT\explorerbar.funredirector (Adware.DoubleD) -> Quarantined and deleted successfully.
                        HKEY_CLASSES_ROOT\explorerbar.funredirector.1 (Adware.DoubleD) -> Quarantined and deleted successfully.
                        HKEY_CLASSES_ROOT\Interface\{480098c6-f6ad-4c61-9b5c-2bae228a34d1} (Adware.DoubleD) -> Quarantined and deleted successfully.
                        HKEY_CLASSES_ROOT\Interface\{877f3eab-4462-44df-8475-6064eafd7fbf} (Adware.DoubleD) -> Quarantined and deleted successfully.
                        HKEY_CLASSES_ROOT\CLSID\{35b8d58c-b0cb-46b0-ba64-05b3804e4e86} (Adware.DoubleD) -> Quarantined and deleted successfully.
                        HKEY_CLASSES_ROOT\TypeLib\{c28a0312-c403-417b-a425-a915bc0519cd} (Adware.DoubleD) -> Quarantined and deleted successfully.
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{35b8d58c-b0cb-46b0-ba64-05b3804e4e86} (Adware.DoubleD) -> Quarantined and deleted successfully.
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{35b8d58c-b0cb-46b0-ba64-05b3804e4e86} (Adware.DoubleD) -> Quarantined and deleted successfully.
                        HKEY_CLASSES_ROOT\Typelib\{883dfc00-8a21-411d-956c-73a4e4b7d16f} (Adware.DoubleD) -> Quarantined and deleted successfully.
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{25b8d58c-b0cb-46b0-ba64-05b3804e4e86} (Adware.DoubleD) -> Quarantined and deleted successfully.
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{cdbfb47b-58a8-4111-bf95-06178dce326d} (Adware.DoubleD) -> Quarantined and deleted successfully.
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{cdbfb47b-58a8-4111-bf95-06178dce326d} (Adware.DoubleD) -> Quarantined and deleted successfully.
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
                        HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{19127ad2-394b-70f5-c650-b97867baa1f7} (Backdoor.Bot) -> Quarantined and deleted successfully.
                        HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{43bf8cd1-c5d5-2230-7bb2-98f22c2b7dc6} (Backdoor.Bot) -> Quarantined and deleted successfully.
                        HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{494e6cec-7483-a4ee-0938-895519a84bc7} (Backdoor.Bot) -> Quarantined and deleted successfully.
                        HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{19127ad2-394b-70f5-c650-b97867baa1f7} (Backdoor.Bot) -> Quarantined and deleted successfully.
                        HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{43bf8cd1-c5d5-2230-7bb2-98f22c2b7dc6} (Backdoor.Bot) -> Quarantined and deleted successfully.
                        HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{494e6cec-7483-a4ee-0938-895519a84bc7} (Backdoor.Bot) -> Quarantined and deleted successfully.
                        HKEY_CURRENT_USER\SOFTWARE\DoubleD (Adware.DoubleD) -> Quarantined and deleted successfully.
                        HKEY_CURRENT_USER\SOFTWARE\Internet Saving Optimizer (Adware.DoubleD) -> Quarantined and deleted successfully.
                        HKEY_CURRENT_USER\SOFTWARE\Media Access Startup (Adware.DoubleD) -> Quarantined and deleted successfully.
                        HKEY_LOCAL_MACHINE\SOFTWARE\DoubleD (Adware.DoubleD) -> Quarantined and deleted successfully.
                        HKEY_LOCAL_MACHINE\SOFTWARE\Internet Saving Optimizer (Adware.DoubleD) -> Quarantined and deleted successfully.

                        Valeur(s) du Registre infectée(s):
                        HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions\{2224e955-00e9-4613-a844-ce69fccaae91} (Adware.DoubleD) -> Quarantined and deleted successfully.
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network\UID (Malware.Trace) -> Quarantined and deleted successfully.
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\17947504 (Rogue.Multiple) -> Quarantined and deleted successfully.
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\PromoReg (Trojan.Agent) -> Quarantined and deleted successfully.
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RList (Malware.Trace) -> Quarantined and deleted successfully.

                        Elément(s) de données du Registre infecté(s):
                        (Aucun élément nuisible détecté)

                        Dossier(s) infecté(s):
                        C:\Documents and Settings\All Users\Application Data\17947504 (Rogue.Multiple) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\LocalService\Application Data\twain_32 (Trojan.Zbot) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\NetworkService\Application Data\twain_32 (Trojan.Zbot) -> Quarantined and deleted successfully.
                        C:\Program Files\DoubleD (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Program Files\DoubleD\GamingHarbor Toolbar (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Program Files\Internet Saving Optimizer (Adware.DoubleD) -> Delete on reboot.
                        C:\Program Files\Internet Saving Optimizer\3.8.1.4690 (Adware.DoubleD) -> Delete on reboot.
                        C:\Program Files\Internet Saving Optimizer\3.8.1.4690\Data (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Program Files\Internet Saving Optimizer\3.8.1.4690\FF (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Program Files\Internet Saving Optimizer\3.8.1.4690\FF\chrome (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Program Files\Internet Saving Optimizer\3.8.1.4690\FF\chrome\content (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Program Files\Internet Saving Optimizer\3.8.1.4690\FF\components (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\WINDOWS\system32\twain_32 (Backdoor.Bot) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\DoubleD (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020 (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Cache (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Skins (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690 (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\Internet Saving Optimizer (Adware.DoubleD) -> Delete on reboot.
                        C:\Documents and Settings\valou\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690 (Adware.DoubleD) -> Delete on reboot.
                        C:\Documents and Settings\valou\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690 (Adware.DoubleD) -> Files: 603 -> Delete on reboot.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Media Access Startup (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Media Access Startup\2.0.0.1050 (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\Media Access Startup (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\Media Access Startup\2.0.0.1050 (Adware.DoubleD) -> Quarantined and deleted successfully.

                        Fichier(s) infecté(s):
                        C:\Program Files\Internet Saving Optimizer\3.8.1.4690\NPIEAddOn.dll (Adware.DoubleD) -> Delete on reboot.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Temp\TMPA.tmp (Trojan.Dropper) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Temp\TMPA.tmp (Trojan.Dropper) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\All Users\Application Data\17947504\17947504 (Rogue.Multiple) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\All Users\Application Data\17947504\pc17947504ins (Rogue.Multiple) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\LocalService\Application Data\twain_32\user.ds (Trojan.Zbot) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\NetworkService\Application Data\twain_32\user.ds (Trojan.Zbot) -> Quarantined and deleted successfully.
                        C:\Program Files\Internet Saving Optimizer\3.8.1.4690\adwpx.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Program Files\Internet Saving Optimizer\3.8.1.4690\NPCommon.dll (Adware.DoubleD) -> Delete on reboot.
                        C:\Program Files\Internet Saving Optimizer\3.8.1.4690\unins000.dat (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Program Files\Internet Saving Optimizer\3.8.1.4690\unins000.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Program Files\Internet Saving Optimizer\3.8.1.4690\Data\config.md (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Program Files\Internet Saving Optimizer\3.8.1.4690\FF\chrome.manifest (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Program Files\Internet Saving Optimizer\3.8.1.4690\FF\install.rdf (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Program Files\Internet Saving Optimizer\3.8.1.4690\FF\chrome\NPAddOn.jar (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Program Files\Internet Saving Optimizer\3.8.1.4690\FF\chrome\content\NPAddOn.js (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Program Files\Internet Saving Optimizer\3.8.1.4690\FF\chrome\content\NPAddOn.xul (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Program Files\Internet Saving Optimizer\3.8.1.4690\FF\components\NPFFAddOn.dll (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Program Files\Internet Saving Optimizer\3.8.1.4690\FF\components\NPFFAddOn.xpt (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Program Files\Internet Saving Optimizer\3.8.1.4690\FF\components\NPFFHelperComponent.js (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\WINDOWS\system32\twain_32\local.ds (Backdoor.Bot) -> Quarantined and deleted successfully.
                        C:\WINDOWS\system32\twain_32\user.ds (Backdoor.Bot) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Cache\248d6576afce4ee94af42d7350131106.gif (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Cache\24a70fb875fab686b6b3c217612bc07c.gif (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Cache\2afcf6f3f2e19cc42d7f72f3b18b26ef.gif (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Cache\50bffa6936b3e661971a58e3c8bdf4cb.gif (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Cache\default1.dat (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Cache\loading.dat (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Cache\loading.gif (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\FFSearchHistory.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Cursor.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_DailyVideo.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Game.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Glitter.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Logo.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Option.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Recipe.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Ringtone.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Screensaver.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Search.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Smiley.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Smiley_Config.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Smiley_Config.mx.new (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Smiley_TellAFriend.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Wallpaper.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Web.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_WebDropdown_01.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_WebDropdown_02.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_WebDropdown_03.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_WebDropdown_04.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_WebDropdown_05.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_WebDropdown_06.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_WebDropdown_07.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\pixel.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\ProductInfo.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\profile.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\SearchEngineList.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\tbcore.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\ToolbarLayout.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\UpdateCentre.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\UpdateCentreBk.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\URLDynamic.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\URLStatic.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\About.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Component_ComboBox.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Cursor.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Cursor.png (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_DailyVideo.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Game.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Glitter.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Glitter.png (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Logo.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Option.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Recipe.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Ringtone.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Screensaver.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Search.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Smiley.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Smiley.png (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Wallpaper.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Web.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_WebDropdown_01.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_WebDropdown_01.png (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_WebDropdown_02.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_WebDropdown_02.png (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_WebDropdown_03.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_WebDropdown_03.png (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_WebDropdown_04.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_WebDropdown_04.png (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_WebDropdown_05.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_WebDropdown_05.png (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_WebDropdown_06.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_WebDropdown_06.png (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_WebDropdown_07.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_WebDropdown_07.png (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnDefault.png (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnDisplay.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnDisplay.png (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnDisplay18.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnDisplay20.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnGlitters.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnGlitters.png (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnGlitters18.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnGlitters20.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnOption.png (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnSmiley.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnSmiley.png (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnSmiley18.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnSmiley20.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnTellFd.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnTellFd.png (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnTellFd18.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnTellFd20.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnWink.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnWink.png (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnWink18.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnWink20.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Skins\myskin1.skf (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Skins\myskin2.skf (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Skins\myskin3.skf (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Skins\myskin4.skf (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Skins\TellafriendSkin.skf (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Skins\TellafriendSkin_s.skf (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Skins\ToastSkin.skf (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\config.md (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\ipdata.md (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090913-155958.296.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090913-160022.031.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090913-160040.078.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090913-160049.468.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090913-160148.781.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090913-160149.546.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090913-160240.203.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090914-150239.859.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090914-183452.375.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090914-202226.046.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090914-202311.296.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090914-203058.390.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090914-215542.953.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090916-144713.468.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090916-153322.437.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090916-200626.453.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090917-181255.281.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090917-184452.281.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090917-204427.265.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090917-211202.781.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090917-211639.468.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090917-212513.125.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090917-220556.140.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090918-082444.375.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090918-083733.875.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090918-084821.046.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090918-085101.656.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090918-085817.875.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090918-085837.343.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090918-181352.125.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-091952.890.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-100642.828.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-100907.531.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-111820.281.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-114135.953.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-120452.250.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-121652.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-145014.359.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-145420.125.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-150337.046.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-170554.609.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-171826.671.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-174653.453.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-175407.156.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-213502.140.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-213845.531.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-214129.953.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-214318.921.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-220334.875.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-231508.453.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090920-090011.687.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090920-103927.015.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090920-104739.437.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090920-105334.750.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090920-105548.390.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090920-105720.703.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090920-114331.078.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090920-115150.703.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090920-115646.062.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090920-121828.765.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090920-125428.640.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-105506.515.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-110229.640.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-113214.625.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-120321.546.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-122009.031.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-122724.421.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-124624.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-131121.828.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-201710.437.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-203726.062.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-204610.031.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-204955.687.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-213333.781.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-214630.062.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-215415.343.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-221909.062.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-222128.984.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-222129.843.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-223517.406.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-223518.312.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-223524.875.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-115630.421.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-120145.296.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-133328.625.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-133415.328.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-135625.953.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-135903.671.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-142226.828.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-171002.343.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-171356.343.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-171620.109.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-171911.281.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-172038.515.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-180342.843.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-182445.000.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-182513.000.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-183606.203.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-183607.187.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090924-101134.078.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090924-101137.578.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090924-102751.718.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090924-192637.234.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090925-161004.046.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090925-181048.156.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090925-184308.031.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090925-192216.406.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090925-192339.687.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090925-195329.765.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090925-195619.620.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090925-202531.717.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090926-131653.609.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090926-210028.312.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090926-213128.562.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090926-213214.359.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090926-213258.750.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090926-220336.671.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090926-220636.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090926-223448.953.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090926-230621.171.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090926-231439.125.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090926-232042.421.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090926-233719.437.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090926-233803.656.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090926-234207.796.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090927-000901.531.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090927-003100.421.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090927-132756.734.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090927-135347.515.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090927-151358.375.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090929-183309.859.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090930-175435.437.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090930-180404.125.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090930-181414.421.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090930-181444.640.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090930-182607.578.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090930-183037.796.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090930-190546.656.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090930-194229.125.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091001-190505.140.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091001-193821.562.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091001-200059.296.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091001-202304.687.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091001-205614.687.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091001-213443.140.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091001-214811.515.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091001-215636.343.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091002-162843.437.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091002-164415.125.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091002-175358.406.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091002-190618.437.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091002-194354.406.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091002-195625.328.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091002-214111.235.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091002-214744.929.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091002-215010.306.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091002-221835.077.log (Adware.DoubleD) -> Quarantined and deleted successfully.
                        C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091002-223323.114.log (Adware.DoubleD) -> Qua
                        0
                        1. roms75001 Auteur
                          Logfile of random's system information tool 1.06 (written by random/random)
                          Run by valou at 2009-11-14 14:47:34
                          Microsoft Windows XP Professionnel Service Pack 3
                          System drive C: has 47 GB (59%) free of 80 GB
                          Total RAM: 894 MB (46% free)

                          Logfile of Trend Micro HijackThis v2.0.2
                          Scan saved at 14:47:37, on 14/11/2009
                          Platform: Windows XP SP3 (WinNT 5.01.2600)
                          MSIE: Internet Explorer v8.00 (8.00.6001.18702)
                          Boot mode: Normal

                          Running processes:
                          C:\WINDOWS\System32\smss.exe
                          C:\WINDOWS\system32\winlogon.exe
                          C:\WINDOWS\system32\services.exe
                          C:\WINDOWS\system32\lsass.exe
                          C:\WINDOWS\system32\Ati2evxx.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\WINDOWS\System32\svchost.exe
                          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                          C:\WINDOWS\system32\Ati2evxx.exe
                          C:\Program Files\Alwil Software\Avast4\ashServ.exe
                          C:\WINDOWS\system32\spoolsv.exe
                          C:\Program Files\Java\jre6\bin\jqs.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\WINDOWS\system32\wuauclt.exe
                          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                          C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                          C:\WINDOWS\system32\wbem\wmiapsrv.exe
                          C:\WINDOWS\Explorer.EXE
                          C:\WINDOWS\RTHDCPL.EXE
                          C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                          C:\Program Files\Java\jre6\bin\jusched.exe
                          C:\Program Files\iTunes\iTunesHelper.exe
                          C:\WINDOWS\system32\ctfmon.exe
                          C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                          C:\Program Files\Messenger\msmsgs.exe
                          C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
                          C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
                          C:\Program Files\iPod\bin\iPodService.exe
                          C:\Program Files\Internet Explorer\iexplore.exe
                          C:\Program Files\Internet Explorer\iexplore.exe
                          C:\Program Files\Internet Explorer\iexplore.exe
                          C:\Documents and Settings\valou\Bureau\RSIT.exe
                          C:\Program Files\Trend Micro\HijackThis\valou.exe

                          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                          R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
                          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                          R3 - Default URLSearchHook is missing
                          F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,userinit.exe,
                          O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
                          O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
                          O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
                          O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                          O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                          O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
                          O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
                          O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
                          O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
                          O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
                          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                          O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                          O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
                          O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                          O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                          O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
                          O4 - HKCU\..\Run: [FACE VC] C:\DOCUME~1\valou\APPLIC~1\AUDIOC~1\DASHEGGS.exe
                          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                          O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
                          O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
                          O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
                          O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
                          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                          O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
                          O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - http://fichiers.touslesdrivers.com/maconfig/MaConfig_3_5_1_0.cab
                          O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                          O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
                          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                          O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                          O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                          O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                          O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                          O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                          O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                          O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
                          0
                          1. roms75001 Auteur
                            info.txt logfile of random's system information tool 1.06 2009-11-14 14:47:38

                            ======Uninstall list======

                            -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
                            Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
                            Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
                            Adobe Reader 7.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70000000000}
                            Ahead Nero Burning ROM-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
                            Apple Application Support-->MsiExec.exe /I{0C34B801-6AEC-4667-B053-03A67E2D0415}
                            Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
                            Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
                            Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
                            ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
                            ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
                            avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
                            CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
                            Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
                            Correctif pour Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
                            Counter-Strike-->"C:\Program Files\Steam\steam.exe" steam://uninstall/10
                            EVEREST Ultimate Edition v5.30-->"C:\Program Files\Lavalys\EVEREST Ultimate Edition\unins000.exe"
                            High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
                            HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
                            Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
                            Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
                            iTunes-->MsiExec.exe /I{EC2A8F27-4FBF-4E41-B27B-FE822511B761}
                            Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
                            LimeWire 5.2.13-->"C:\Program Files\LimeWire\uninstall.exe"
                            Liveupdate4-->"C:\Program Files\MSI\Live Update 4\unins000.exe"
                            Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
                            Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
                            Microsoft Office XP Professional avec FrontPage-->MsiExec.exe /I{9028040C-6000-11D3-8CFE-0050048383C9}
                            Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Lecteur Windows Media (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Lecteur Windows Media (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows Internet Explorer 8 (KB972260)-->"C:\WINDOWS\ie8updates\KB972260-IE8\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows Internet Explorer 8 (KB974455)-->"C:\WINDOWS\ie8updates\KB974455-IE8\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
                            Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB972260)-->"C:\WINDOWS\$NtUninstallKB972260$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
                            Mise à jour de sécurité pour Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
                            Mise à jour pour Windows Internet Explorer 8 (KB972636)-->"C:\WINDOWS\ie8updates\KB972636-IE8\spuninst\spuninst.exe"
                            Mise à jour pour Windows Internet Explorer 8 (KB976749)-->"C:\WINDOWS\ie8updates\KB976749-IE8\spuninst\spuninst.exe"
                            Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
                            Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
                            Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
                            Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
                            Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
                            Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
                            Mozilla Firefox (3.5.5)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
                            MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
                            Pack Vista Inspirat 2 1.0-->C:\WINDOWS\BricoPacks\Vista Inspirat 2\Remove.exe
                            Package de pilotes Windows - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)-->C:\PROGRA~1\DIFX\7B44739871F4D539FA473F57A832EA4B6A59EF06\DPInst.exe /d /u C:\WINDOWS\system32\DRVSTORE\amdk8_1F9DE4E49C97F59EE9F75C34E0E91E568FC9EEB2\amdk8.inf
                            QuickTime-->MsiExec.exe /I{A429C2AE-EBF1-4F81-A221-1C115CAADDAD}
                            REALTEK GbE & FE Ethernet PCI-E NIC Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C9BED750-1211-4480-B1A5-718A3BE15525}\setup.exe" -l0x40c -removeonly
                            Realtek High Definition Audio Driver-->RtlUpd.exe -r -m
                            Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
                            Skype web features-->MsiExec.exe /I{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}
                            Skype™ 4.1-->MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
                            Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
                            System Requirements Lab-->C:\Program Files\SystemRequirementsLab\Uninstall.exe
                            VLC media player 1.0.1-->C:\Program Files\VideoLAN\VLC\uninstall.exe
                            Winamp (remove only)-->"C:\Program Files\Winamp\UninstWA.exe"
                            Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
                            Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
                            Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
                            Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"

                            ======Security center information======

                            AV: avast! antivirus 4.8.1351 [VPS 091114-0]

                            ======System event log======

                            Computer Name: VALOUDROID
                            Event Code: 6009
                            Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 3 Multiprocessor Free.

                            Record Number: 8842
                            Source Name: EventLog
                            Time Written: 20091023131601.000000+120
                            Event Type: Informations
                            User:

                            Computer Name: VALOUDROID
                            Event Code: 6006
                            Message: Le service d'Enregistrement d'événement a été arrêté.

                            Record Number: 8841
                            Source Name: EventLog
                            Time Written: 20091023131512.000000+120
                            Event Type: Informations
                            User:

                            Computer Name: VALOUDROID
                            Event Code: 7036
                            Message: Le service Ati HotKey Poller est entré dans l'état : arrêté.

                            Record Number: 8840
                            Source Name: Service Control Manager
                            Time Written: 20091023131500.000000+120
                            Event Type: Informations
                            User:

                            Computer Name: VALOUDROID
                            Event Code: 4226
                            Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.

                            Record Number: 8839
                            Source Name: Tcpip
                            Time Written: 20091023084733.000000+120
                            Event Type: Avertissement
                            User:

                            Computer Name: VALOUDROID
                            Event Code: 4201
                            Message: Le système a détecté que la carte réseau \DEVICE\TCPIP_{7C625784-9892-4562-A4C0-A26F72BFCCC6} était connectée au réseau,
                            et a lancé une opération normale sur la carte réseau.

                            Record Number: 8838
                            Source Name: Tcpip
                            Time Written: 20091023084649.000000+120
                            Event Type: Informations
                            User:

                            =====Application event log=====

                            Computer Name: VALOUDROID
                            Event Code: 1000
                            Message: Application défaillante iexplore.exe, version 8.0.6001.18702, module défaillant kernel32.dll, version 5.1.2600.5781, adresse de défaillance 0x00012afb.

                            Record Number: 589
                            Source Name: Application Error
                            Time Written: 20090923180307.000000+120
                            Event Type: erreur
                            User:

                            Computer Name: VALOUDROID
                            Event Code: 1002
                            Message: Application bloquée iexplore.exe, version 8.0.6001.18702, module bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

                            Record Number: 588
                            Source Name: Application Hang
                            Time Written: 20090923180247.000000+120
                            Event Type: erreur
                            User:

                            Computer Name: VALOUDROID
                            Event Code: 1001
                            Message: Détecteur d'erreurs 1180947459.

                            Record Number: 587
                            Source Name: Application Hang
                            Time Written: 20090923180234.000000+120
                            Event Type: erreur
                            User:

                            Computer Name: VALOUDROID
                            Event Code: 1002
                            Message: Application bloquée iexplore.exe, version 8.0.6001.18702, module bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

                            Record Number: 586
                            Source Name: Application Hang
                            Time Written: 20090923180209.000000+120
                            Event Type: erreur
                            User:

                            Computer Name: VALOUDROID
                            Event Code: 1002
                            Message: Application bloquée iexplore.exe, version 8.0.6001.18702, module bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

                            Record Number: 585
                            Source Name: Application Hang
                            Time Written: 20090923180208.000000+120
                            Event Type: erreur
                            User:

                            ======Environment variables======

                            "ComSpec"=%SystemRoot%\system32\cmd.exe
                            "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\QuickTime\QTSystem\
                            "windir"=%SystemRoot%
                            "FP_NO_HOST_CHECK"=NO
                            "OS"=Windows_NT
                            "PROCESSOR_ARCHITECTURE"=x86
                            "PROCESSOR_LEVEL"=15
                            "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 107 Stepping 2, AuthenticAMD
                            "PROCESSOR_REVISION"=6b02
                            "NUMBER_OF_PROCESSORS"=2
                            "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
                            "TEMP"=%SystemRoot%\TEMP
                            "TMP"=%SystemRoot%\TEMP
                            "CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
                            "QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip

                            -----------------EOF-----------------
                            0
                            1. roms75001 Auteur
                              info.txt logfile of random's system information tool 1.06 2009-11-14 14:47:38

                              ======Uninstall list======

                              -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
                              Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
                              Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
                              Adobe Reader 7.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70000000000}
                              Ahead Nero Burning ROM-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
                              Apple Application Support-->MsiExec.exe /I{0C34B801-6AEC-4667-B053-03A67E2D0415}
                              Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
                              Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
                              Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
                              ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
                              ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
                              avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
                              CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
                              Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
                              Correctif pour Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
                              Counter-Strike-->"C:\Program Files\Steam\steam.exe" steam://uninstall/10
                              EVEREST Ultimate Edition v5.30-->"C:\Program Files\Lavalys\EVEREST Ultimate Edition\unins000.exe"
                              High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
                              HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
                              Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
                              Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
                              iTunes-->MsiExec.exe /I{EC2A8F27-4FBF-4E41-B27B-FE822511B761}
                              Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
                              LimeWire 5.2.13-->"C:\Program Files\LimeWire\uninstall.exe"
                              Liveupdate4-->"C:\Program Files\MSI\Live Update 4\unins000.exe"
                              Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
                              Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
                              Microsoft Office XP Professional avec FrontPage-->MsiExec.exe /I{9028040C-6000-11D3-8CFE-0050048383C9}
                              Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Lecteur Windows Media (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Lecteur Windows Media (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows Internet Explorer 8 (KB972260)-->"C:\WINDOWS\ie8updates\KB972260-IE8\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows Internet Explorer 8 (KB974455)-->"C:\WINDOWS\ie8updates\KB974455-IE8\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
                              Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB972260)-->"C:\WINDOWS\$NtUninstallKB972260$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
                              Mise à jour pour Windows Internet Explorer 8 (KB972636)-->"C:\WINDOWS\ie8updates\KB972636-IE8\spuninst\spuninst.exe"
                              Mise à jour pour Windows Internet Explorer 8 (KB976749)-->"C:\WINDOWS\ie8updates\KB976749-IE8\spuninst\spuninst.exe"
                              Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
                              Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
                              Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
                              Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
                              Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
                              Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
                              Mozilla Firefox (3.5.5)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
                              MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
                              Pack Vista Inspirat 2 1.0-->C:\WINDOWS\BricoPacks\Vista Inspirat 2\Remove.exe
                              Package de pilotes Windows - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)-->C:\PROGRA~1\DIFX\7B44739871F4D539FA473F57A832EA4B6A59EF06\DPInst.exe /d /u C:\WINDOWS\system32\DRVSTORE\amdk8_1F9DE4E49C97F59EE9F75C34E0E91E568FC9EEB2\amdk8.inf
                              QuickTime-->MsiExec.exe /I{A429C2AE-EBF1-4F81-A221-1C115CAADDAD}
                              REALTEK GbE & FE Ethernet PCI-E NIC Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C9BED750-1211-4480-B1A5-718A3BE15525}\setup.exe" -l0x40c -removeonly
                              Realtek High Definition Audio Driver-->RtlUpd.exe -r -m
                              Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
                              Skype web features-->MsiExec.exe /I{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}
                              Skype™ 4.1-->MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
                              Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
                              System Requirements Lab-->C:\Program Files\SystemRequirementsLab\Uninstall.exe
                              VLC media player 1.0.1-->C:\Program Files\VideoLAN\VLC\uninstall.exe
                              Winamp (remove only)-->"C:\Program Files\Winamp\UninstWA.exe"
                              Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
                              Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
                              Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
                              Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"

                              ======Security center information======

                              AV: avast! antivirus 4.8.1351 [VPS 091114-0]

                              ======System event log======

                              Computer Name: VALOUDROID
                              Event Code: 6009
                              Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 3 Multiprocessor Free.

                              Record Number: 8842
                              Source Name: EventLog
                              Time Written: 20091023131601.000000+120
                              Event Type: Informations
                              User:

                              Computer Name: VALOUDROID
                              Event Code: 6006
                              Message: Le service d'Enregistrement d'événement a été arrêté.

                              Record Number: 8841
                              Source Name: EventLog
                              Time Written: 20091023131512.000000+120
                              Event Type: Informations
                              User:

                              Computer Name: VALOUDROID
                              Event Code: 7036
                              Message: Le service Ati HotKey Poller est entré dans l'état : arrêté.

                              Record Number: 8840
                              Source Name: Service Control Manager
                              Time Written: 20091023131500.000000+120
                              Event Type: Informations
                              User:

                              Computer Name: VALOUDROID
                              Event Code: 4226
                              Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.

                              Record Number: 8839
                              Source Name: Tcpip
                              Time Written: 20091023084733.000000+120
                              Event Type: Avertissement
                              User:

                              Computer Name: VALOUDROID
                              Event Code: 4201
                              Message: Le système a détecté que la carte réseau \DEVICE\TCPIP_{7C625784-9892-4562-A4C0-A26F72BFCCC6} était connectée au réseau,
                              et a lancé une opération normale sur la carte réseau.

                              Record Number: 8838
                              Source Name: Tcpip
                              Time Written: 20091023084649.000000+120
                              Event Type: Informations
                              User:

                              =====Application event log=====

                              Computer Name: VALOUDROID
                              Event Code: 1000
                              Message: Application défaillante iexplore.exe, version 8.0.6001.18702, module défaillant kernel32.dll, version 5.1.2600.5781, adresse de défaillance 0x00012afb.

                              Record Number: 589
                              Source Name: Application Error
                              Time Written: 20090923180307.000000+120
                              Event Type: erreur
                              User:

                              Computer Name: VALOUDROID
                              Event Code: 1002
                              Message: Application bloquée iexplore.exe, version 8.0.6001.18702, module bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

                              Record Number: 588
                              Source Name: Application Hang
                              Time Written: 20090923180247.000000+120
                              Event Type: erreur
                              User:

                              Computer Name: VALOUDROID
                              Event Code: 1001
                              Message: Détecteur d'erreurs 1180947459.

                              Record Number: 587
                              Source Name: Application Hang
                              Time Written: 20090923180234.000000+120
                              Event Type: erreur
                              User:

                              Computer Name: VALOUDROID
                              Event Code: 1002
                              Message: Application bloquée iexplore.exe, version 8.0.6001.18702, module bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

                              Record Number: 586
                              Source Name: Application Hang
                              Time Written: 20090923180209.000000+120
                              Event Type: erreur
                              User:

                              Computer Name: VALOUDROID
                              Event Code: 1002
                              Message: Application bloquée iexplore.exe, version 8.0.6001.18702, module bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

                              Record Number: 585
                              Source Name: Application Hang
                              Time Written: 20090923180208.000000+120
                              Event Type: erreur
                              User:

                              ======Environment variables======

                              "ComSpec"=%SystemRoot%\system32\cmd.exe
                              "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\QuickTime\QTSystem\
                              "windir"=%SystemRoot%
                              "FP_NO_HOST_CHECK"=NO
                              "OS"=Windows_NT
                              "PROCESSOR_ARCHITECTURE"=x86
                              "PROCESSOR_LEVEL"=15
                              "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 107 Stepping 2, AuthenticAMD
                              "PROCESSOR_REVISION"=6b02
                              "NUMBER_OF_PROCESSORS"=2
                              "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
                              "TEMP"=%SystemRoot%\TEMP
                              "TMP"=%SystemRoot%\TEMP
                              "CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
                              "QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip

                              -----------------EOF-----------------
                              0
                              1. roms75001 Auteur
                                info.txt logfile of random's system information tool 1.06 2009-11-14 14:47:38

                                ======Uninstall list======

                                -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
                                Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
                                Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
                                Adobe Reader 7.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70000000000}
                                Ahead Nero Burning ROM-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
                                Apple Application Support-->MsiExec.exe /I{0C34B801-6AEC-4667-B053-03A67E2D0415}
                                Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
                                Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
                                Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
                                ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
                                ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
                                avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
                                CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
                                Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
                                Correctif pour Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
                                Counter-Strike-->"C:\Program Files\Steam\steam.exe" steam://uninstall/10
                                EVEREST Ultimate Edition v5.30-->"C:\Program Files\Lavalys\EVEREST Ultimate Edition\unins000.exe"
                                High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
                                HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
                                Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
                                Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
                                iTunes-->MsiExec.exe /I{EC2A8F27-4FBF-4E41-B27B-FE822511B761}
                                Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
                                LimeWire 5.2.13-->"C:\Program Files\LimeWire\uninstall.exe"
                                Liveupdate4-->"C:\Program Files\MSI\Live Update 4\unins000.exe"
                                Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
                                Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
                                Microsoft Office XP Professional avec FrontPage-->MsiExec.exe /I{9028040C-6000-11D3-8CFE-0050048383C9}
                                Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Lecteur Windows Media (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Lecteur Windows Media (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows Internet Explorer 8 (KB972260)-->"C:\WINDOWS\ie8updates\KB972260-IE8\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows Internet Explorer 8 (KB974455)-->"C:\WINDOWS\ie8updates\KB974455-IE8\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
                                Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB972260)-->"C:\WINDOWS\$NtUninstallKB972260$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
                                Mise à jour de sécurité pour Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
                                Mise à jour pour Windows Internet Explorer 8 (KB972636)-->"C:\WINDOWS\ie8updates\KB972636-IE8\spuninst\spuninst.exe"
                                Mise à jour pour Windows Internet Explorer 8 (KB976749)-->"C:\WINDOWS\ie8updates\KB976749-IE8\spuninst\spuninst.exe"
                                Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
                                Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
                                Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
                                Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
                                Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
                                Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
                                Mozilla Firefox (3.5.5)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
                                MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
                                Pack Vista Inspirat 2 1.0-->C:\WINDOWS\BricoPacks\Vista Inspirat 2\Remove.exe
                                Package de pilotes Windows - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)-->C:\PROGRA~1\DIFX\7B44739871F4D539FA473F57A832EA4B6A59EF06\DPInst.exe /d /u C:\WINDOWS\system32\DRVSTORE\amdk8_1F9DE4E49C97F59EE9F75C34E0E91E568FC9EEB2\amdk8.inf
                                QuickTime-->MsiExec.exe /I{A429C2AE-EBF1-4F81-A221-1C115CAADDAD}
                                REALTEK GbE & FE Ethernet PCI-E NIC Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C9BED750-1211-4480-B1A5-718A3BE15525}\setup.exe" -l0x40c -removeonly
                                Realtek High Definition Audio Driver-->RtlUpd.exe -r -m
                                Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
                                Skype web features-->MsiExec.exe /I{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}
                                Skype™ 4.1-->MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
                                Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
                                System Requirements Lab-->C:\Program Files\SystemRequirementsLab\Uninstall.exe
                                VLC media player 1.0.1-->C:\Program Files\VideoLAN\VLC\uninstall.exe
                                Winamp (remove only)-->"C:\Program Files\Winamp\UninstWA.exe"
                                Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
                                Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
                                Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
                                Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"

                                ======Security center information======

                                AV: avast! antivirus 4.8.1351 [VPS 091114-0]

                                ======System event log======

                                Computer Name: VALOUDROID
                                Event Code: 6009
                                Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 3 Multiprocessor Free.

                                Record Number: 8842
                                Source Name: EventLog
                                Time Written: 20091023131601.000000+120
                                Event Type: Informations
                                User:

                                Computer Name: VALOUDROID
                                Event Code: 6006
                                Message: Le service d'Enregistrement d'événement a été arrêté.

                                Record Number: 8841
                                Source Name: EventLog
                                Time Written: 20091023131512.000000+120
                                Event Type: Informations
                                User:

                                Computer Name: VALOUDROID
                                Event Code: 7036
                                Message: Le service Ati HotKey Poller est entré dans l'état : arrêté.

                                Record Number: 8840
                                Source Name: Service Control Manager
                                Time Written: 20091023131500.000000+120
                                Event Type: Informations
                                User:

                                Computer Name: VALOUDROID
                                Event Code: 4226
                                Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.

                                Record Number: 8839
                                Source Name: Tcpip
                                Time Written: 20091023084733.000000+120
                                Event Type: Avertissement
                                User:

                                Computer Name: VALOUDROID
                                Event Code: 4201
                                Message: Le système a détecté que la carte réseau \DEVICE\TCPIP_{7C625784-9892-4562-A4C0-A26F72BFCCC6} était connectée au réseau,
                                et a lancé une opération normale sur la carte réseau.

                                Record Number: 8838
                                Source Name: Tcpip
                                Time Written: 20091023084649.000000+120
                                Event Type: Informations
                                User:

                                =====Application event log=====

                                Computer Name: VALOUDROID
                                Event Code: 1000
                                Message: Application défaillante iexplore.exe, version 8.0.6001.18702, module défaillant kernel32.dll, version 5.1.2600.5781, adresse de défaillance 0x00012afb.

                                Record Number: 589
                                Source Name: Application Error
                                Time Written: 20090923180307.000000+120
                                Event Type: erreur
                                User:

                                Computer Name: VALOUDROID
                                Event Code: 1002
                                Message: Application bloquée iexplore.exe, version 8.0.6001.18702, module bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

                                Record Number: 588
                                Source Name: Application Hang
                                Time Written: 20090923180247.000000+120
                                Event Type: erreur
                                User:

                                Computer Name: VALOUDROID
                                Event Code: 1001
                                Message: Détecteur d'erreurs 1180947459.

                                Record Number: 587
                                Source Name: Application Hang
                                Time Written: 20090923180234.000000+120
                                Event Type: erreur
                                User:

                                Computer Name: VALOUDROID
                                Event Code: 1002
                                Message: Application bloquée iexplore.exe, version 8.0.6001.18702, module bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

                                Record Number: 586
                                Source Name: Application Hang
                                Time Written: 20090923180209.000000+120
                                Event Type: erreur
                                User:

                                Computer Name: VALOUDROID
                                Event Code: 1002
                                Message: Application bloquée iexplore.exe, version 8.0.6001.18702, module bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

                                Record Number: 585
                                Source Name: Application Hang
                                Time Written: 20090923180208.000000+120
                                Event Type: erreur
                                User:

                                ======Environment variables======

                                "ComSpec"=%SystemRoot%\system32\cmd.exe
                                "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\QuickTime\QTSystem\
                                "windir"=%SystemRoot%
                                "FP_NO_HOST_CHECK"=NO
                                "OS"=Windows_NT
                                "PROCESSOR_ARCHITECTURE"=x86
                                "PROCESSOR_LEVEL"=15
                                "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 107 Stepping 2, AuthenticAMD
                                "PROCESSOR_REVISION"=6b02
                                "NUMBER_OF_PROCESSORS"=2
                                "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
                                "TEMP"=%SystemRoot%\TEMP
                                "TMP"=%SystemRoot%\TEMP
                                "CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
                                "QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip

                                -----------------EOF-----------------
                                0
                                1. ric025
                                  Peux-tu faire ceci stp :

                                  Ouvre MBAM, va sur l'onglet "Rapports/Logs".
                                  Trouve le rapport que tu as posté plus haut.
                                  Clique sur "Ouvrir".
                                  Dans la nouvelle fenêtre >> Fichier >> Enregistrer sous... >> Choisis ton bureau.

                                  Poste à nouveau le rapport. Mais il est trop long pour le forum. Alors passe par un hébergeur : CI-JOINT

                                  =======================

                                  OTM :

                                  ▶ Télécharge OTM (de Old_Timer) sur ton Bureau

                                  ▶ Double-clique sur OTM.exe pour le lancer.

                                  ▶ Assure toi que la case Unregister Dll's and Ocx's soit bien cochée.

                                  ▶ Copie la liste qui se trouve en gras dans la citation ci-dessous et colle-la dans le cadre de gauche de OTM sous "Paste instructions for item to be moved".

                                  -----------------------------------------------------------------------------

                                  :reg
                                  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
                                  "FACE VC"=-

                                  :files
                                  c:\docume~1\valou\applic~1\audioc~1\dasheggs.exe

                                  :commands
                                  [purity]
                                  [emptytemp]
                                  [start explorer]

                                  -----------------------------------------------------------------------------

                                  ▶ clique sur MoveIt! pour lancer la suppression.

                                  ▶ Le résultat apparaitra dans le cadre "Results".

                                  ▶ Clique sur Exit pour fermer.

                                  ▶ Poste le rapport situé dans C:\_OTM\MovedFiles.

                                  ▶ Il te sera peut-être demandé de redémarrer le pc pour achever la suppression. Si c'est le cas accepte par Yes.

                                  ++
                                  0
                                  1. roms75001 Auteur
                                    Y a t-il d'autre indications à suivre ?
                                    0
                                    1. roms75001 Auteur
                                      http://www.cijoint.fr/cjlink.php?file=cj200911/cijWLJMGnC.txt
                                      0
                                      • 1
                                      • 2
                                      • 3

                                      Discussions similaires

                                      publicité intempestive
                                      alost

                                      5 réponses