Ordi «gèle» quand je lance Avira AntiVir

Bonjour!

Voici le premier rapport

Logfile of random's system information tool 1.06 (written by random/random)
Run by Isabelle at 2009-11-27 07:50:45
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2
System drive C: has 245 GB (82%) free of 300 GB
Total RAM: 894 MB (19% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 07:51:33, on 2009-11-27
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18828)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\hp\support\hpsysdrv.exe
C:\hp\KBD\kbd.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\HP\HP Software Update\hpwuschd2.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\HP Connections\6811507\Program\HP Connections.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\Users\Isabelle\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
C:\Windows\ehome\ehmsas.exe
C:\Users\Isabelle\AppData\Roaming\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10c.exe
C:\Users\Isabelle\Desktop\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Isabelle.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.lapresse.ca
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://hp-consumer.my.aol.qc.ca/?icid=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://hp-consumer.my.aol.qc.ca/?icid=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.fr.msn.ca/0SEFRCA/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Yahoo! Barre d'outils - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SMSTray] C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Load owns] "C:\ProgramData\link boob boob.pq3d7"
O4 - HKCU\..\Run: [stupid creative poll axis] "C:\ProgramData\OPTION WAY SURF.rn7ol"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: Outil de notification Live Search.lnk = C:\Users\Isabelle\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
O4 - Global Startup: Connexions HP.lnk = C:\Program Files\HP Connections\6811507\Program\HP Connections.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: stllssvr - Unknown owner - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe (file missing)
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

Voici le deuxième!

info.txt logfile of random's system information tool 1.06 2009-11-27 07:35:36

======Uninstall list======

32 Bit HP CIO Components Installer-->MsiExec.exe /I{2614F54E-A828-49FA-93BA-45A3F756BFAA}
Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 9.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A92000000001}
Apple Application Support-->MsiExec.exe /I{B607C354-CD79-4D22-86D1-92DC94153F42}
Apple Mobile Device Support-->MsiExec.exe /I{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Ask.com Search Assistant 1.0.1-->C:\Program Files\Ask Search Assistant\uninst.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
CDex extraction audio-->"C:\Program Files\CDex_170b2\uninstall.exe"
Connexions HP (Supprimer uniquement)-->C:\Windows\HPCPCUninstall-6811507\HPBWSetup.exe -appid 6811507 -uninstall
DivX-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
Galerie de photos Windows Live-->MsiExec.exe /X{B131E59D-202C-43C6-84C9-68F0C37541F1}
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
HP Advisor-->MsiExec.exe /X{73A43E42-3658-4DD9-8551-FACDA3632538}
HP Customer Experience Enhancements-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AB5E289E-76BF-4251-9F3F-9B763F681AE0}\setup.exe" -l0x9 -removeonly
HP Customer Participation Program 8.0-->C:\Program Files\Hewlett-Packard\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
HP Easy Setup - Core-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F94234DB-FD06-42C3-B88D-6FC4DC9F988C}\setup.exe" -l0x9
HP Easy Setup - Frontend-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{40F7AED3-0C7D-4582-99F6-484A515C73F2}\setup.exe" -l0x9 -removeonly
HP Imaging Device Functions 8.0-->C:\Program Files\Hewlett-Packard\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
HP OCR Software 8.0-->C:\Program Files\Hewlett-Packard\Digital Imaging\OCR\hpzscr01.exe -datfile hpqbud11.dat
HP Photosmart Essential 2.5-->C:\Program Files\Hewlett-Packard\Digital Imaging\PhotoSmartEssential\hpzscr01.exe -datfile hpqbud13.dat
HP Photosmart Essential-->MsiExec.exe /X{EB21A812-671B-4D08-B974-2A347F0D8F70}
HP Photosmart.All-In-One Driver Software 8.0 .A-->C:\Program Files\Hewlett-Packard\Digital Imaging\{282E5AB2-8E47-4571-B6FA-6B512555B557}\setup\hpzscr01.exe -datfile hposcr18.dat -onestop -showdisconnect -forcereboot
HP Picasso Media Center Add-In-->MsiExec.exe /I{55979C41-7D6A-49CC-B591-64AC1BBE2C8B}
HP Product Assistant-->MsiExec.exe /I{36FDBE6E-6684-462B-AE98-9A39A1B200CC}
HP Solution Center 8.0-->C:\Program Files\Hewlett-Packard\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
HP Update-->MsiExec.exe /X{818ABC3C-635C-4651-8183-D0E9640B7DD1}
HPSSupply-->MsiExec.exe /X{EB75DE50-5754-4F6F-875D-126EDF8E4CB3}
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
iTunes-->MsiExec.exe /I{D1A74FBB-CA8D-4CCA-9B89-BAAA436DB178}
Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
Menus intelligents (Windows Live Toolbar)-->MsiExec.exe /X{0CC70FEF-5068-4CD5-B4DE-86FFD98EC929}
Messenger Plus! Live & Sponsor (CiD)-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
Microsoft Office XP Professional avec FrontPage-->MsiExec.exe /I{9028040C-6000-11D3-8CFE-0050048383C9}
Microsoft Search Enhancement Pack-->MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Works-->MsiExec.exe /I{6B1CB38D-E2E4-4A30-933D-EFDEBA76AD9C}
MobileMe Control Panel-->MsiExec.exe /I{3AC54383-31D1-4907-961B-B12CBB1D0AE8}
Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
Mozilla Firefox (3.0.10)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB941833)-->MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
muvee autoProducer 5.0-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B83A15A7-2BD5-4416-BC43-AF5F9A4B08A9}\setup.exe" -l0x40c
NVIDIA Drivers-->C:\Windows\system32\NVUNINST.EXE UninstallGUI
OcxSetup-->MsiExec.exe /I{C3DC29BC-A8CF-4578-9DFC-37F049C44771}
OGA Notifier 2.0.0048.0-->MsiExec.exe /I{B2544A03-10D0-4E5E-BA69-0362FFC20D18}
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Outils de diagnostic du matériel-->C:\Program Files\PC-Doctor 5 for Windows\uninst.exe
Python 2.4.3-->MsiExec.exe /I{75E71ADD-042C-4F30-BFAC-A9EC42351313}
QuickTime-->MsiExec.exe /I{A429C2AE-EBF1-4F81-A221-1C115CAADDAD}
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m
Safari-->MsiExec.exe /I{D90AFDE3-3E67-407A-ACA8-F0BAAD012F08}
Samsung Media Studio 5-->"C:\Program Files\InstallShield Installation Information\{C20CE592-B0F8-4D20-BF31-0151CA6331A6}\Setup.exe" -runfromtemp -l0x040c -removeonly
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Soft Data Fax Modem with SmartCP-->C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SUBSYS_200C14F1\UIU32m.exe -U -ITrx200Cz.INF
Solution de clavier multimédia amélioré-->C:\HP\KBD\Install.exe /u
Spelling Dictionaries Support For Adobe Reader 9-->MsiExec.exe /I{AC76BA86-7AD7-5464-3428-900000000004}
Unity Web Player-->C:\Program Files\Unity\WebPlayer\Uninstall.exe
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Contrôle parental-->MsiExec.exe /X{D5D81435-B8DE-4CAF-867F-7998F2B92CFC}
Windows Live FolderShare-->MsiExec.exe /X{2075CB0A-D26F-4DAA-B424-5079296B43BA}
Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}
Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
Windows Live Movie Maker-->MsiExec.exe /X{53B20C18-D8D4-4588-8737-9BBFE303C354}
Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
Windows Live Writer-->MsiExec.exe /X{4634B21A-CC07-4396-890C-2B8168661FEA}
Yahoo! Barre d'outils avec bloqueur de fenêtres pop-up-->C:\PROGRA~1\Yahoo!\Common\unyt.exe

=====HijackThis Backups=====

O4 - HKCU\..\Run: [Load owns] "C:\ProgramData\link boob boob.d1whf8" [2008-02-21]
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) [2008-02-21]
O4 - HKCU\..\Run: [stupid creative poll axis] "C:\ProgramData\Atom Intra Idle.2sdtw" [2008-02-21]

======Security center information======

AS: Avira AntiVir PersonalEdition
AS: Windows Defender

======System event log======

Computer Name: PC-de-Isabelle
Event Code: 15016
Message: Impossible d’initialiser le package de sécurité Kerberos pour l’authentification côté serveur. Le champ de données contient le numéro de l’erreur.
Record Number: 139589
Source Name: Microsoft-Windows-HttpEvent
Time Written: 20090802105406.396146-000
Event Type: Erreur
User:

Computer Name: PC-de-Isabelle
Event Code: 7022
Message: Le service Service HP CUE DeviceDiscovery est en attente de démarrage.
Record Number: 139500
Source Name: Service Control Manager
Time Written: 20090801102117.000000-000
Event Type: Erreur
User:

Computer Name: PC-de-Isabelle
Event Code: 7000
Message: Le service Planificateur LiveUpdate automatique n'a pas pu démarrer en raison de l'erreur :
Le chemin d'accès spécifié est introuvable.
Record Number: 139472
Source Name: Service Control Manager
Time Written: 20090801102116.000000-000
Event Type: Erreur
User:

Computer Name: PC-de-Isabelle
Event Code: 7000
Message: Le service Parallel port driver n'a pas pu démarrer en raison de l'erreur :
Le service ne peut pas être démarré parce qu'il est désactivé ou qu'aucun périphérique activé ne lui est associé.
Record Number: 139461
Source Name: Service Control Manager
Time Written: 20090801102116.000000-000
Event Type: Erreur
User:

Computer Name: PC-de-Isabelle
Event Code: 15016
Message: Impossible d’initialiser le package de sécurité Kerberos pour l’authentification côté serveur. Le champ de données contient le numéro de l’erreur.
Record Number: 139425
Source Name: Microsoft-Windows-HttpEvent
Time Written: 20090801101941.542562-000
Event Type: Erreur
User:

=====Application event log=====

Computer Name: PC-de-Isabelle
Event Code: 1530
Message: Windows a détecté que votre fichier de Registre est toujours utilisé par d'autres applications ou services. Le fichier va être déchargé. Les applications ou services qui ont accès à votre Registre risquent de ne pas fonctionner correctement après cela.

DÉTAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-1170938411-227009039-1612273977-1000_Classes:
Process 872 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-1170938411-227009039-1612273977-1000_CLASSES

Record Number: 1291
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20070308092418.000000-000
Event Type: Avertissement
User: AUTORITE NT\SYSTEM

Computer Name: PC-de-Isabelle
Event Code: 1530
Message: Windows a détecté que votre fichier de Registre est toujours utilisé par d'autres applications ou services. Le fichier va être déchargé. Les applications ou services qui ont accès à

Une chance que tu m'a dit d'être patiente! Voici le rapport:


--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6002 ) Service Pack 2
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4200+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Isabelle ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:292 Go (Free:239 Go)
D:\ (Local Disk) - NTFS - Total:5 Go (Free:0 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (USB)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 2009-11-27|11:20 )

[ UAC => 0 ]


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\ProgramData\Memo save stupid creative\Idle Eq.dat
Supprime! - C:\ProgramData\Memo save stupid creative\Idle Eq.exe
Supprime! - C:\Program Files\Circle Developement\Uninstall.exe
Supprime! - C:\ProgramData\link boob boob.pq3d7
Supprime! - C:\ProgramData\OPTION WAY SURF.rn7ol
Supprime! - C:\ProgramData\link boob boob.v6ew91y
Supprime! - C:\Users\Isabelle\AppData\Local\Temp\bisEBA6.exe
Supprime! - C:\ProgramData\Memo save stupid creative
Supprime! - C:\Program Files\Circle Developement
-
[ Fichier Hosts ] .. Restaure!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans Local

[2009-03-20|05:09] C:\Users\Isabelle\AppData\Local\Adobe
[2009-01-18|08:24] C:\Users\Isabelle\AppData\Local\Apple
[2009-11-09|20:26] C:\Users\Isabelle\AppData\Local\Apple Computer
[2007-02-18|15:22] C:\Users\Isabelle\AppData\Local\Application Data
[2009-09-07|15:38] C:\Users\Isabelle\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007-03-08|04:26] C:\Users\Isabelle\AppData\Local\GDIPFONTCACHEV1.DAT
[2009-10-11|18:36] C:\Users\Isabelle\AppData\Local\Hewlett-Packard
[2007-02-18|15:22] C:\Users\Isabelle\AppData\Local\Historique
[2007-12-02|13:57] C:\Users\Isabelle\AppData\Local\HP
[2009-11-27|11:12] C:\Users\Isabelle\AppData\Local\IconCache.db
[2009-09-07|15:22] C:\Users\Isabelle\AppData\Local\Microsoft
[2009-05-07|19:38] C:\Users\Isabelle\AppData\Local\Microsoft Games
[2008-02-22|05:41] C:\Users\Isabelle\AppData\Local\Mozilla
[2009-11-27|11:21] C:\Users\Isabelle\AppData\Local\Temp
[2007-02-18|15:22] C:\Users\Isabelle\AppData\Local\Temporary Internet Files
[2007-12-02|14:19] C:\Users\Isabelle\AppData\Local\VirtualStore

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[2009-11-27 05:39][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{1039285E-A463-4152-981B-F61988909220}.job
[2009-11-08 12:07][--a------] C:\Windows\tasks\HPCeeScheduleForIsabelle.job
[2009-11-27 11:14][--ah-----] C:\Windows\tasks\SA.DAT
[2009-11-27 11:12][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[2009-03-16|17:07] C:\ProgramData\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}
[2009-09-14|09:56] C:\ProgramData\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009-05-11|10:44] C:\ProgramData\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2008-02-12|21:23] C:\ProgramData\addr_file.html
[2009-11-19|05:39] C:\ProgramData\Adobe
[2009-08-29|14:00] C:\ProgramData\Apple
[2009-01-18|08:27] C:\ProgramData\Apple Computer
[2006-11-02|08:02] C:\ProgramData\Application Data
[2009-06-28|07:04] C:\ProgramData\Avira
[2007-02-18|15:19] C:\ProgramData\Bureau
[2008-01-11|21:12] C:\ProgramData\CheckPoint
[2006-11-02|08:02] C:\ProgramData\Desktop
[2006-11-02|08:02] C:\ProgramData\Documents
[2007-02-18|15:19] C:\ProgramData\Favoris
[2006-11-02|08:02] C:\ProgramData\Favorites
[2009-10-11|18:26] C:\ProgramData\Hewlett-Packard
[2007-12-03|18:58] C:\ProgramData\HP
[2008-11-17|13:18] C:\ProgramData\HP Product Assistant
[2007-12-03|14:53] C:\ProgramData\HPSSUPPLY
[2009-06-10|20:10] C:\ProgramData\hpzinstall.log
[2007-02-18|08:30] C:\ProgramData\InstallShield
[2007-02-18|15:19] C:\ProgramData\Menu Démarrer
[2007-11-29|19:21] C:\ProgramData\Messenger Plus!
[2009-02-18|22:52] C:\ProgramData\Microsoft
[2007-02-18|15:19] C:\ProgramData\Modèles
[2008-10-15|15:50] C:\ProgramData\NVIDIA
[2009-10-12|05:55] C:\ProgramData\Office Genuine Advantage
[2007-02-18|08:24] C:\ProgramData\Sonic
[2006-11-02|08:02] C:\ProgramData\Start Menu
[2009-11-26|20:59] C:\ProgramData\TEAM INSIDE HOLE
[2006-11-02|08:02] C:\ProgramData\Templates
[2007-12-03|14:56] C:\ProgramData\WEBREG
[2008-11-29|09:12] C:\ProgramData\WLInstaller

--------------------\\ Listing des dossiers dans C:\Program Files

[2009-05-17|07:22] C:\Program Files\Adobe
[2009-01-18|08:23] C:\Program Files\Apple Software Update
[2009-04-23|20:37] C:\Program Files\Ask Search Assistant
[2009-06-28|07:04] C:\Program Files\Avira
[2009-01-26|18:19] C:\Program Files\Bonjour
[2009-02-22|10:31] C:\Program Files\CCleaner
[2008-02-18|07:38] C:\Program Files\CDex_170b2
[2009-03-12|20:45] C:\Program Files\Common Files
[2007-02-18|08:12] C:\Program Files\CONEXANT
[2007-02-18|08:25] C:\Program Files\DivX
[2007-02-18|15:19] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[2009-10-11|18:26] C:\Program Files\Hewlett-Packard
[2008-02-17|17:05] C:\Program Files\Hijackthis Version Française
[2009-09-06|16:09] C:\Program Files\HP
[2007-02-18|08:28] C:\Program Files\HP Connections
[2008-10-22|16:21] C:\Program Files\InstallShield Installation Information
[2009-11-21|06:54] C:\Program Files\Internet Explorer
[2009-11-02|18:36] C:\Program Files\iPod
[2009-11-02|18:37] C:\Program Files\iTunes
[2008-12-26|21:35] C:\Program Files\Lop SD
[2008-02-20|05:44] C:\Program Files\Lopxp
[2008-10-22|16:21] C:\Program Files\MarkAny
[2009-11-26|20:58] C:\Program Files\Messenger Plus! Live
[2009-01-15|18:18] C:\Program Files\Microsoft
[2007-05-09|02:03] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[2006-11-02|07:37] C:\Program Files\Microsoft Games
[2007-03-08|04:19] C:\Program Files\Microsoft Office
[2009-09-09|04:54] C:\Program Files\Microsoft Silverlight
[2009-01-15|18:15] C:\Program Files\Microsoft SQL Server Compact Edition
[2009-01-15|18:17] C:\Program Files\Microsoft Sync Framework
[2009-10-15|04:47] C:\Program Files\Microsoft Works
[2009-11-21|06:54] C:\Program Files\Movie Maker
[2009-06-19|04:43] C:\Program Files\Mozilla Firefox
[2006-11-02|07:37] C:\Program Files\MSBuild
[2007-02-18|15:50] C:\Program Files\MSXML 4.0
[2007-02-18|08:25] C:\Program Files\muvee Technologies
[2007-02-18|08:41] C:\Program Files\PC-Doctor 5 for Windows
[2009-09-14|09:53] C:\Program Files\QuickTime
[2008-10-19|11:08] C:\Program Files\Realtek
[2006-11-02|07:37] C:\Program Files\Reference Assemblies
[2009-03-16|17:39] C:\Program Files\Safari
[2008-10-22|16:21] C:\Program Files\Samsung
[2007-02-18|08:31] C:\Program Files\Services en ligne
[2008-02-17|17:07] C:\Program Files\Trend Micro
[2006-11-02|08:01] C:\Program Files\Uninstall Information
[2009-09-25|19:13] C:\Program Files\Unity
[2009-11-27|11:06] C:\Program Files\Unlocker
[2009-11-21|06:54] C:\Program Files\Windows Calendar
[2009-11-21|06:54] C:\Program Files\Windows Collaboration
[2009-11-21|06:53] C:\Program Files\Windows Defender
[2009-11-21|06:53] C:\Program Files\Windows Journal
[2009-10-02|04:47] C:\Program Files\Windows Live
[2009-01-15|18:14] C:\Program Files\Windows Live SkyDrive
[2009-01-15|06:43] C:\Program Files\Windows Live Toolbar
[2009-11-21|06:54] C:\Program Files\Windows Mail
[2009-11-21|06:54] C:\Program Files\Windows Media Player
[2007-02-18|15:19] C:\Program Files\Windows NT
[2009-11-21|06:53] C:\Program Files\Windows Photo Gallery
[2009-11-23|06:04] C:\Program Files\Windows Portable Devices
[2009-11-21|06:54] C:\Program Files\Windows Sidebar
[2007-02-18|08:32] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[2009-11-18|20:57] C:\Program Files\Common Files\Adobe
[2009-11-02|18:36] C:\Program Files\Common Files\Apple
[2007-03-08|04:20] C:\Program Files\Common Files\Designer
[2007-12-03|14:47] C:\Program Files\Common Files\Hewlett-Packard
[2007-12-03|14:52] C:\Program Files\Common Files\HP
[2007-02-18|08:38] C:\Program Files\Common Files\InstallShield
[2007-02-18|08:25] C:\Program Files\Common Files\LightScribe
[2007-02-18|08:25] C:\Program Files\Common Files\LS Getting Started
[2009-06-28|06:41] C:\Program Files\Common Files\microsoft shared
[2007-02-18|08:25] C:\Program Files\Common Files\muvee Technologies
[2008-01-12|07:16] C:\Program Files\Common Files\Roxio Shared
[2006-11-02|06:18] C:\Program Files\Common Files\Services
[2006-11-02|06:18] C:\Program Files\Common Files\SpeechEngines
[2009-11-27|11:00] C:\Program Files\Common Files\Symantec Shared
[2009-11-21|06:53] C:\Program Files\Common Files\System
[2009-01-15|06:06] C:\Program Files\Common Files\Windows Live
[2008-02-20|18:02] C:\Program Files\Common Files\WindowsLiveInstaller

--------------------\\ Process

( 72 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-11-27 11:44:14
Windows 6.0.6002 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 69

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:51][D:7]-> C:\Users\Isabelle\AppData\Local\Temp
[F:159][D:1]-> C:\Users\Isabelle\AppData\Roaming\MICROS~1\Windows\Cookies
[F:1402][D:6]-> C:\Users\Isabelle\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:4][D:3]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 2009-11-28| 0:18 - Option : [2]

--------------------\\ Fin du rapport a 0:18:19
[ UAC => 1 ]

Voilà!


############################## | UsbFix V6.058 |

User : Isabelle (Administrateurs) # PC-DE-ISABELLE
Update on 26/11/2009 by Chiquitine29, C_XX & Chimay8
Start at: 08:34:26 | 2009-11-28
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

AMD Athlon(tm) 64 X2 Dual Core Processor 4200+
Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6002 32-bit) # Service Pack 2
Internet Explorer 8.0.6001.18828
Windows Firewall Status : Enabled

C:\ -> Disque fixe local # 292,74 Go (234,13 Go free) [HP] # NTFS
D:\ -> Disque fixe local # 5,35 Go (899,37 Mo free) [Recovery] # NTFS
E:\ -> Disque CD-ROM
F:\ -> Disque amovible
G:\ -> Disque amovible
H:\ -> Disque amovible
I:\ -> Disque amovible
J:\ -> Disque amovible

############################## | Processus actifs |

C:\Windows\System32\smss.exe 412
C:\Windows\system32\csrss.exe 544
C:\Windows\system32\wininit.exe 596
C:\Windows\system32\csrss.exe 608
C:\Windows\system32\services.exe 644
C:\Windows\system32\lsass.exe 656
C:\Windows\system32\lsm.exe 668
C:\Windows\system32\winlogon.exe 740
C:\Windows\system32\svchost.exe 852
C:\Windows\system32\nvvsvc.exe 916
C:\Windows\system32\svchost.exe 944
C:\Windows\System32\svchost.exe 980
C:\Windows\System32\svchost.exe 1072
C:\Windows\System32\svchost.exe 1140
C:\Windows\system32\svchost.exe 1172
C:\Windows\system32\svchost.exe 1264
C:\Windows\system32\SLsvc.exe 1288
C:\Windows\system32\svchost.exe 1328
C:\Windows\system32\rundll32.exe 1396
C:\Windows\system32\svchost.exe 1564
C:\Windows\System32\spoolsv.exe 1776
C:\Program Files\Avira\AntiVir Desktop\sched.exe 1812
C:\Windows\system32\taskeng.exe 1832
C:\Windows\system32\svchost.exe 1840
C:\Windows\system32\Dwm.exe 1888
C:\Windows\system32\taskeng.exe 1948
C:\Windows\Explorer.EXE 2000
C:\Windows\system32\runonce.exe 636
C:\Windows\system32\conime.exe 2056
C:\Program Files\Avira\AntiVir Desktop\avguard.exe 2296
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe 2328
C:\Program Files\Bonjour\mDNSResponder.exe 2348
C:\Windows\system32\svchost.exe 2396
c:\Program Files\Common Files\LightScribe\LSSrvc.exe 2420
C:\Windows\System32\svchost.exe 2508
C:\Windows\System32\svchost.exe 2576
C:\Windows\system32\svchost.exe 2588
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe 2608
C:\Windows\system32\svchost.exe 2696
C:\Windows\System32\svchost.exe 2740
C:\Windows\system32\SearchIndexer.exe 2760
C:\Windows\system32\DRIVERS\xaudio.exe 2840
C:\Windows\system32\SearchProtocolHost.exe 3472
C:\Windows\system32\SearchFilterHost.exe 3484
C:\Windows\system32\wbem\wmiprvse.exe 3828

################## | Fichiers # Dossiers infectieux |


################## | Registre # Clés infectieuses |


################## | Registre # Mountpoints2 |

Supprimé ! HKCU\...\Explorer\MountPoints2\L\Shell\AutoRun\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\{ac05c54d-6d72-11dd-8889-000ea6f6e384}\Shell\AutoRun\Command

################## | Listing des fichiers présent |

[2007-02-18 08:25|--a------|74] C:\autoexec.bat
[2009-04-11 01:36|-rahs----|333257] C:\bootmgr
[2007-02-18 17:06|-ra-s----|8192] C:\BOOTSECT.BAK
[2008-02-14 18:02|--a------|10308] C:\ComboFix.txt
[2006-09-18 16:43|--a------|10] C:\config.sys
[2009-10-11 18:29|--a------|64] C:\FINIS_IT.TXT
[?|?|?] C:\hiberfil.sys
[2009-11-28 00:18|--a------|10829] C:\lopR.txt
[?|?|?] C:\pagefile.sys
[2008-10-19 11:10|--a------|477] C:\RHDSetup.log
[2009-09-06 16:09|--a------|909] C:\updatedatfix.log
[2009-11-28 08:40|--a------|3617] C:\UsbFix.txt
[2006-10-03 18:02|---hs----|438328] D:\boo.mgr
[2006-11-01 19:53|---hs----|438840] D:\bootmgr
[2006-10-13 09:00|---hs----|1322] D:\Desktop.ini
[2007-04-08 13:49|--ahs----|22] D:\HPCD.sys
[2007-04-08 13:43|---hs----|188] D:\MASTER.LOG
[2007-02-18 15:26|--ah-----|487] D:\pcdr.ini
[2002-09-10 07:58|---hs----|181616] D:\Protect.ed
[2007-04-08 13:12|-r-hs----|26] D:\RCBoot.sys
[2007-02-18 18:13|---hs----|44] D:\RESTORE.INI
[2006-10-18 05:09|---hs----|34] D:\SystemRecovery.txt

################## | Vaccination |

# C:\autorun.inf -> Dossier créé par UsbFix.
# D:\autorun.inf -> Dossier créé par UsbFix.

################## | Suspect | https://www.virustotal.com/gui/ |


################## | Cracks / Keygens / Serials |


################## | ! Fin du rapport # UsbFix V6.058 ! |

Le rapport:

.
======= LOGFILE OF AD-REMOVER 1.1.4.6_D | ONLY XP/VISTA/7 =======
.
Updated by C_XX on 28.11.2009 at 13:56
Contact: AdRemover.contact@gmail.com
Website: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Launch at: 10:38:28, 2009-11-28 | Normal Boot | Option: SCAN
Executed from: C:\Program Files\Ad-Remover\
Operating system: Microsoft® Windows Vista™ Home Premium Service Pack 2 v6.0.6002
Computer Name: PC-DE-ISABELLE | Current user: Isabelle
.
============== FOUND ELEMENT(S) ==============
.
C:\Users\Isabelle\AppData\Roaming\DesktopIcon
C:\Program Files\Ask Search Assistant
C:\Users\Isabelle\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Ebay.lnk
C:\Users\Isabelle\AppData\Roaming\MICROS~1\Windows\STARTM~1\Ebay.lnk
C:\Users\Isabelle\Desktop\Ebay.lnk
C:\Users\Isabelle\AppData\Roaming\MICROS~1\Windows\Cookies\Low\isabelle@partypoker[1].txt
C:\Users\Isabelle\AppData\Roaming\MICROS~1\Windows\Cookies\Low\isabelle@www.partypoker[1].txt
.
HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\AskSearchAsst.exe
HKLM\software\microsoft\windows\currentversion\uninstall\Ask.com Search Assistant
.
============== Added scan ==============
.
.
* Mozilla FireFox Version 3.0.10 [fr] *
.
ProfilePath: xhzhihxw.default (Isabelle)
.
(Isabelle, prefs.js) Browser.download.dir, C:\Users\Isabelle\Downloads
(Isabelle, prefs.js) Browser.download.lastDir, C:\Users\Isabelle\Desktop
(Isabelle, prefs.js) Browser.search.defaultenginename, Live Search
(Isabelle, prefs.js) Browser.search.defaulturl, hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
(Isabelle, prefs.js) Browser.search.selectedEngine, Ask
(Isabelle, prefs.js) Browser.startup.homepage, hxxp://www.plusnetwork.com
.
.
* Internet Explorer Version 8.0.6001.18828 *
.
[HKEY_CURRENT_USER\..\Internet Explorer\Main]
.
Start Page: hxxp://www.cyberpresse.ca/
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
.
Start Page: hxxp://fr.msn.com/
Default_Page_URL: hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_CA&c=71&bd=Pavilion&pf=desktop
Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
.
Tabs: res://ieframe.dll/tabswelcome.htm
.
===================================
.
2426 Byte(s) - C:\Ad-Report-SCAN[1].log
.
65 File(s) - C:\Users\Isabelle\AppData\Local\Temp
12 File(s) - C:\Windows\Temp
.
2 File(s) - C:\Program Files\Ad-Remover\BACKUP
0 File(s) - C:\Program Files\Ad-Remover\QUARANTINE
.
End at: 10:44:32 | 2009-11-28 - SCAN[1]
.
============== E.O.F ==============
.

Le voici:
.
======= LOGFILE OF AD-REMOVER 1.1.4.6_D | ONLY XP/VISTA/7 =======
.
Updated by C_XX on 28.11.2009 at 13:56
Contact: AdRemover.contact@gmail.com
Website: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Launch at: 13:16:24, 2009-11-28 | Normal Boot | Option: CLEAN
Executed from: C:\Program Files\Ad-Remover\
Operating system: Microsoft® Windows Vista™ Home Premium Service Pack 2 v6.0.6002
Computer Name: PC-DE-ISABELLE | Current user: Isabelle
.
============== NEUTRALIZED ELEMENT(S) ==============
.
C:\Users\Isabelle\AppData\Roaming\DesktopIcon
C:\Program Files\Ask Search Assistant
C:\Users\Isabelle\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Ebay.lnk
C:\Users\Isabelle\AppData\Roaming\MICROS~1\Windows\STARTM~1\Ebay.lnk
C:\Users\Isabelle\Desktop\Ebay.lnk
C:\Users\Isabelle\AppData\Roaming\MICROS~1\Windows\Cookies\Low\isabelle@partypoker[1].txt
C:\Users\Isabelle\AppData\Roaming\MICROS~1\Windows\Cookies\Low\isabelle@www.partypoker[1].txt

(!) -- Temp files deleted.

.
HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\AskSearchAsst.exe
HKLM\software\microsoft\windows\currentversion\uninstall\Ask.com Search Assistant
.
============== Added scan ==============
.
.
* Mozilla FireFox Version 3.0.10 [fr] *
.
ProfilePath: xhzhihxw.default (Isabelle)
.
(Isabelle, prefs.js) Browser.download.dir, C:\Users\Isabelle\Downloads
(Isabelle, prefs.js) Browser.download.lastDir, C:\Users\Isabelle\Desktop
(Isabelle, prefs.js) Browser.search.defaultenginename, Live Search
(Isabelle, prefs.js) Browser.search.defaulturl, hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
(Isabelle, prefs.js) Browser.search.selectedEngine, Ask
(Isabelle, prefs.js) Browser.startup.homepage, hxxp://www.plusnetwork.com
.
.
* Internet Explorer Version 8.0.6001.18828 *
.
[HKEY_CURRENT_USER\..\Internet Explorer\Main]
.
Start Page: hxxp://fr.msn.com/
Default_search_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Default_page_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
.
Start Page: hxxp://fr.msn.com/
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://search.msn.com/spbasic.htm
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
.
Tabs: res://ieframe.dll/tabswelcome.htm
.
===================================
.
2654 Byte(s) - C:\Ad-Report-CLEAN[1].log
2745 Byte(s) - C:\Ad-Report-SCAN[1].log
.
24 File(s) - C:\Users\Isabelle\AppData\Local\Temp
9 File(s) - C:\Windows\Temp
.
21 File(s) - C:\Program Files\Ad-Remover\BACKUP
11 File(s) - C:\Program Files\Ad-Remover\QUARANTINE
.
End at: 13:21:56 | 2009-11-28 - CLEAN[1]
.
============== E.O.F ==============
.

le voici!

Logfile of random's system information tool 1.06 (written by random/random)
Run by Isabelle at 2009-11-28 14:43:03
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2
System drive C: has 240 GB (80%) free of 300 GB
Total RAM: 894 MB (29% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:43:16, on 2009-11-28
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18828)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\HP Connections\6811507\Program\HP Connections.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\Users\Isabelle\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
C:\Users\Isabelle\AppData\Roaming\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Windows\explorer.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Users\Isabelle\Desktop\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Isabelle.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.fr.msn.ca/0SEFRCA/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Yahoo! Barre d'outils - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SMSTray] C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: Outil de notification Live Search.lnk = C:\Users\Isabelle\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
O4 - Global Startup: Connexions HP.lnk = C:\Program Files\HP Connections\6811507\Program\HP Connections.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O13 - Gopher Prefix:
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: stllssvr - Unknown owner - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe (file missing)
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

J'ai refait la procédure pour Norton :-) J'attends la suite

Malwarebytes' Anti-Malware 1.41
Version de la base de données: 3252
Windows 6.0.6002 Service Pack 2

2009-11-28 23:30:30
mbam-log-2009-11-28 (23-30-30).txt

Type de recherche: Examen complet (C:\|D:\|E:\|)
Eléments examinés: 247320
Temps écoulé: 1 hour(s), 15 minute(s), 59 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Salut,

Mon ordi ne gèle plus et je n,ai plus de pop-up :-))

Un gros merci!

C'est fait!

Merci infiniment et bonne journée à toi aussi :-))