Quelqu'un pourrait analyser ce LOG Hijackthis

Résolu
Bonjour,
Est-ce que quelu'un pourrais me dire quoi supprimer avec Hijackthis

Voici le LOG,

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:00:51, on 2009-07-26
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Dell\DellDock\DellDock.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\System32\WLTRAY.EXE
C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Steam\Steam.exe
C:\Program Files\MétéoMédia\MétéoÉclair\WeatherEye.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
c:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10b.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.ca
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.dealsplus.com/karmaloop-coupons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Megaupload Toolbar - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
O2 - BHO: Mega Manager IE Click Monitor - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O3 - Toolbar: Megaupload Toolbar - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\Windows\system32\WLTRAY.exe
O4 - HKLM\..\Run: [DELL Webcam Manager] "C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe" /s
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [WeatherEye] C:\Program Files\MétéoMédia\MétéoÉclair\WeatherEye.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\Windows\System32\Adobe\SHOCKW~1\SWHELP~2.EXE -Update -1103472 -"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; Trident/4.0; GTB6; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; MEGAUPLOAD 3.0; .NET CLR 3.5.30729; .NET CLR 3.0.30618; OfficeLiveConnector.1.3; OfficeLivePatch.0.0)" -"http://www.spineworld.com/s?method=register"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: QuickSet.lnk = C:\Program Files\Dell\QuickSet\quickset.exe
O8 - Extra context menu item: Download Link Using Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O13 - Gopher Prefix:
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/VistaMSNPUpldfr-ca.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-CA/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://128.210.72.31/activex/AxisCamControl.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL,C:\PROGRA~1\KASPER~1\KASPER~1.0\r3hook.dll
O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\system32\aestsrv.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Anti-Virus 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Google Desktop Manager 5.7.801.7324 (GoogleDesktopManager-010708-104812) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\STacSV.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Windows\System32\WLTRYSVC.EXE
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 15825 bytes
Configuration: Windows Vista Internet Explorer 7.0

34 réponses

Résumé de la discussion

Analyse d’un log HijackThis publié sous Windows Vista, montrant de nombreuses entrées de démarrage, de services et d’extensions de navigateur susceptibles d’être indésirables. Des éléments centraux tels que des BHO, des outils Google Desktop, Megaupload et des composants matériels apparaissent mêlés à des processus légitimes, rendant l’interprétation du log complexe. Plusieurs réponses évoquent la difficulté de poster des informations système et discutent des risques liés à la sécurité, sans proposer une solution unique ou normative. En outre, des extraits parlent de logs supplémentaires et d’outils annexes, sans aboutir à une conclusion sur l’état du fil ou sur les mesures correctives prévues.

Bobot (l’IA à votre service)
  1. salut pourquoi veux-tu supprimer quelque chose ?
    0
    1. Je veux suprimer les virus de mon ordi parce que j'ai plein d'erreurs qui arrive et de bug...mais je ne sais pas qu'est-ce qui pourrait être un virus dans mon LOg hijackthis
      0
      1. ok

        j'ai plein d'erreurs qui arrive et de bug...

        tu peux en dire plus ?
        0
        1. et bien...a mettons...que je joue a des petits jeux en ligne...ou meme à des jeux sur mon ordi...ou seulement surfer sur le net, defois moi ordi ferme tout seul d'une claque. Et quand je le rédémare, ca dit recherche windows essait de trouver et de corriger les erreurs, et cela prend environ 15 mins à chaque fois!!! CE genre d'erreur là là..je n'avais pas cela il y a quelques semianes.
          0
          1. quel age a le pc ?

            Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.

            ! Déconnecte toi et FERME TOUTES TES APPLICATIONS EN COURS !

            Double-clique sur " RSIT.exe " pour le lancer .

            ▶ Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .

            ▶ Devant l'option "List files/folders created ..." , tu choisis : 2 months

            ▶ clique ensuite sur " Continue " pour lancer l'analyse ...

            ▶ laisse faire le scan et ne touche pas au PC ...

            Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-note).

            Poste le contenu de " log.txt " (c'est celui qui apparait à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...

            Important : poste un rapport, puis l'autre dans la réponse suivante
            Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum

            ( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )
            0
            1. Le pc a 1 an et 3 mois! pas très vieux disons c'est un DELL inspirion 1525 ...voici le log

              Logfile of random's system information tool 1.06 (written by random/random)
              Run by Alex at 2009-12-08 10:56:18
              Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
              System drive C: has 124 GB (55%) free of 226 GB
              Total RAM: 3061 MB (47% free)

              Logfile of Trend Micro HijackThis v2.0.2
              Scan saved at 10:56:20, on 2009-12-08
              Platform: Windows Vista SP1 (WinNT 6.00.1905)
              MSIE: Internet Explorer v8.00 (8.00.6001.18828)
              Boot mode: Normal

              Running processes:
              C:\Windows\system32\taskeng.exe
              C:\Windows\system32\Dwm.exe
              C:\Windows\Explorer.EXE
              C:\Program Files\Dell\DellDock\DellDock.exe
              C:\Program Files\Windows Defender\MSASCui.exe
              C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe
              C:\Windows\System32\hkcmd.exe
              C:\Windows\System32\igfxpers.exe
              C:\Windows\system32\igfxsrvc.exe
              C:\Windows\System32\WLTRAY.EXE
              C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe
              C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
              C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
              C:\Program Files\DellTPad\Apoint.exe
              C:\Program Files\iTunes\iTunesHelper.exe
              C:\Program Files\Windows Live\Messenger\msnmsgr.exe
              C:\Windows\ehome\ehtray.exe
              C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
              C:\Users\Alex\AppData\Local\MétéoMédia\MétéoÉclair\WeatherEye.exe
              C:\Windows\ehome\ehmsas.exe
              C:\Program Files\Windows Media Player\wmpnscfg.exe
              C:\Windows\system32\conime.exe
              C:\Program Files\DellTPad\ApMsgFwd.exe
              C:\Program Files\DellTPad\HidFind.exe
              C:\Program Files\DellTPad\Apntex.exe
              C:\Program Files\Windows Live\Contacts\wlcomm.exe
              C:\Windows\system32\wuauclt.exe
              C:\Users\Alex\Desktop\RSIT.exe
              C:\Program Files\Trend Micro\HijackThis\Alex.exe

              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.ca
              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.lockerz.com/connect_landing
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
              R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
              R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell
              R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
              O1 - Hosts: ::1 localhost
              O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
              O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
              O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
              O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll
              O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
              O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
              O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
              O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
              O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
              O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
              O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
              O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
              O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
              O4 - HKLM\..\Run: [SigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe
              O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
              O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
              O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\Windows\system32\WLTRAY.exe
              O4 - HKLM\..\Run: [DELL Webcam Manager] "C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe" /s
              O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
              O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
              O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
              O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
              O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe
              O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
              O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
              O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
              O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
              O4 - HKCU\..\Run: [WeatherEye] C:\Users\Alex\AppData\Local\MétéoMédia\MétéoÉclair\WeatherEye.exe
              O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
              O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\Windows\system32\Adobe\Shockwave 11\SwHelper_1151601.exe -Update -1151601 -"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; Trident/4.0; GTB6; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.5.30729; .NET CLR 3.0.30618; OfficeLiveConnector.1.3; OfficeLivePatch.0.0)" -"https://www.king.com/"
              O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
              O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
              O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
              O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe
              O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
              O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
              O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
              O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
              O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll
              O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
              O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
              O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
              O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
              O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
              O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
              O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
              O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
              O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
              O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
              O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
              O13 - Gopher Prefix:
              O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
              O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
              O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
              O16 - DPF: {4A85DBE0-BFB2-4119-8401-186A7C6EB653} - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/mjss/MJSS.cab109791.cab
              O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/VistaMSNPUpldfr-ca.cab
              O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-CA/a-UNO1/GAME_UNO1.cab
              O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
              O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
              O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
              O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
              O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://128.210.72.31/activex/AxisCamControl.cab
              O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
              O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
              O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
              O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
              O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
              O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll
              O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll
              O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\system32\aestsrv.exe
              O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
              O23 - Service: Kaspersky Anti-Virus (avp) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
              O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
              O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe
              O23 - Service: Google Desktop Manager 5.7.801.7324 (GoogleDesktopManager-010708-104812) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
              O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe
              O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
              O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
              O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
              O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\STacSV.exe
              O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
              O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
              O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Windows\System32\WLTRYSVC.EXE
              O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
              0
              1. SCUSE-moi javais pas vu pour 2 MOIS voice les truv installer depuis les 2 derniers mois

                =====File associations======

                .js - edit - C:\Windows\System32\Notepad.exe %1
                .js - open - C:\Windows\System32\WScript.exe "%1" %*

                ======List of files/folders created in the last 2 months======

                2009-12-08 10:48:53 ----D---- C:\rsit
                2009-12-03 17:09:45 ----D---- C:\Program Files\Guitar Pro 5
                2009-12-03 09:29:41 ----D---- C:\ProgramData\Real
                2009-12-01 11:55:13 ----D---- C:\ProgramData\SafeNet Sentinel
                2009-12-01 11:53:22 ----D---- C:\ProgramData\SPSS
                2009-12-01 11:53:16 ----D---- C:\Program Files\Common Files\SPSS
                2009-12-01 11:53:01 ----D---- C:\Program Files\Common Files\SPSSInc
                2009-12-01 11:52:17 ----D---- C:\Program Files\SPSSInc
                2009-12-01 11:52:07 ----A---- C:\Windows\system32\sysprs7.dll
                2009-12-01 11:52:07 ----A---- C:\Windows\system32\lsprst7.dll
                2009-11-30 11:46:55 ----D---- C:\Windows\Minidump
                2009-11-26 07:40:28 ----A---- C:\Windows\system32\tzres.dll
                2009-11-25 07:32:13 ----A---- C:\Windows\system32\msxml6.dll
                2009-11-25 07:32:13 ----A---- C:\Windows\system32\msxml3.dll
                2009-11-22 22:01:42 ----D---- C:\Program Files\PokerStars
                2009-11-14 09:01:41 ----A---- C:\Windows\system32\WSDApi.dll
                2009-11-06 09:27:05 ----A---- C:\Windows\system32\wups2.dll
                2009-11-06 09:27:05 ----A---- C:\Windows\system32\wucltux.dll
                2009-11-06 09:27:05 ----A---- C:\Windows\system32\wuaueng.dll
                2009-11-06 09:27:05 ----A---- C:\Windows\system32\wuauclt.exe
                2009-11-06 09:26:49 ----A---- C:\Windows\system32\wups.dll
                2009-11-06 09:26:49 ----A---- C:\Windows\system32\wudriver.dll
                2009-11-06 09:26:49 ----A---- C:\Windows\system32\wuapi.dll
                2009-11-06 09:26:43 ----A---- C:\Windows\system32\wuwebv.dll
                2009-11-06 09:26:43 ----A---- C:\Windows\system32\wuapp.exe
                2009-11-04 07:36:48 ----D---- C:\Program Files\iPod
                2009-11-04 07:36:46 ----D---- C:\Program Files\iTunes
                2009-11-03 07:35:46 ----A---- C:\Windows\system32\mshtml.dll
                2009-10-28 06:37:02 ----A---- C:\Windows\system32\wmp.dll
                2009-10-28 06:37:01 ----A---- C:\Windows\system32\unregmp2.exe
                2009-10-28 06:36:59 ----A---- C:\Windows\system32\wmploc.DLL
                2009-10-26 09:58:13 ----D---- C:\Program Files\AXIS Communications
                2009-10-14 08:02:03 ----A---- C:\Windows\system32\msv1_0.dll
                2009-10-14 08:01:58 ----A---- C:\Windows\system32\ntoskrnl.exe
                2009-10-14 08:01:58 ----A---- C:\Windows\system32\ntkrnlpa.exe
                2009-10-14 08:01:39 ----A---- C:\Windows\system32\EncDec.dll
                2009-10-14 08:01:38 ----A---- C:\Windows\system32\psisdecd.dll
                2009-10-14 08:01:33 ----A---- C:\Windows\system32\iertutil.dll
                2009-10-14 08:01:33 ----A---- C:\Windows\system32\ieframe.dll
                2009-10-14 08:01:32 ----A---- C:\Windows\system32\wininet.dll
                2009-10-14 08:01:32 ----A---- C:\Windows\system32\urlmon.dll
                2009-10-14 08:01:32 ----A---- C:\Windows\system32\occache.dll
                2009-10-14 08:01:32 ----A---- C:\Windows\system32\msfeeds.dll
                2009-10-14 08:01:32 ----A---- C:\Windows\system32\iedkcs32.dll
                2009-10-14 08:01:31 ----A---- C:\Windows\system32\msfeedssync.exe
                2009-10-14 08:01:31 ----A---- C:\Windows\system32\msfeedsbs.dll
                2009-10-14 08:01:31 ----A---- C:\Windows\system32\jsproxy.dll
                2009-10-14 08:01:31 ----A---- C:\Windows\system32\ieUnatt.exe
                2009-10-14 08:01:31 ----A---- C:\Windows\system32\ieui.dll
                2009-10-14 08:01:31 ----A---- C:\Windows\system32\iesysprep.dll
                2009-10-14 08:01:31 ----A---- C:\Windows\system32\iesetup.dll
                2009-10-14 08:01:31 ----A---- C:\Windows\system32\iernonce.dll
                2009-10-14 08:01:31 ----A---- C:\Windows\system32\iepeers.dll
                2009-10-14 08:01:31 ----A---- C:\Windows\system32\ie4uinit.exe
                2009-10-14 08:01:30 ----A---- C:\Windows\system32\msasn1.dll
                2009-10-14 08:01:27 ----A---- C:\Windows\system32\WMSPDMOD.DLL
                2009-10-12 18:42:24 ----A---- C:\Windows\system32\GEARAspi.dll
                2009-10-12 18:41:20 ----D---- C:\ProgramData\{755AC846-7372-4AC8-8550-C52491DAA8BD}
                2009-10-12 18:38:51 ----D---- C:\Program Files\QuickTime

                ======List of files/folders modified in the last 2 months======

                2009-12-08 11:00:09 ----D---- C:\Windows\temp
                2009-12-08 10:59:41 ----SHD---- C:\System Volume Information
                2009-12-08 10:49:04 ----D---- C:\Windows\Prefetch
                2009-12-08 10:35:56 ----SHD---- C:\Windows\Installer
                2009-12-08 10:35:56 ----D---- C:\Program Files
                2009-12-08 10:02:30 ----D---- C:\Windows\System32
                2009-12-08 10:02:29 ----A---- C:\Windows\system32\PerfStringBackup.INI
                2009-12-08 10:02:28 ----D---- C:\Windows\inf
                2009-12-08 09:58:26 ----D---- C:\ProgramData\Kaspersky Lab
                2009-12-07 16:05:55 ----D---- C:\Program Files\Steam
                2009-12-07 11:20:09 ----D---- C:\Program Files\Common Files\Steam
                2009-12-03 17:09:46 ----RSD---- C:\Windows\Fonts
                2009-12-03 09:29:41 ----HD---- C:\ProgramData
                2009-12-03 09:29:37 ----D---- C:\Users\Alex\AppData\Roaming\Real
                2009-12-03 07:08:18 ----D---- C:\Windows\system32\catroot2
                2009-12-01 11:53:16 ----D---- C:\Program Files\Common Files
                2009-11-30 11:46:55 ----D---- C:\Windows
                2009-11-28 08:40:59 ----D---- C:\Users\Alex\AppData\Roaming\Template
                2009-11-26 12:16:05 ----D---- C:\Windows\rescache
                2009-11-26 11:58:14 ----D---- C:\Windows\system32\fr-FR
                2009-11-26 07:42:25 ----D---- C:\Windows\winsxs
                2009-11-26 07:41:59 ----D---- C:\Windows\system32\catroot
                2009-11-17 11:34:12 ----D---- C:\Program Files\Mozilla Firefox
                2009-11-15 17:20:04 ----D---- C:\Program Files\Windows Mail
                2009-11-05 12:36:21 ----A---- C:\Windows\system32\mrt.exe
                2009-11-04 07:36:47 ----D---- C:\Program Files\Common Files\Apple
                2009-11-02 20:42:06 ----N---- C:\Windows\system32\MpSigStub.exe
                2009-10-28 16:49:05 ----D---- C:\Program Files\Windows Media Player
                2009-10-28 16:49:05 ----D---- C:\Program Files\Internet Explorer
                2009-10-28 13:39:38 ----RD---- C:\Users
                2009-10-26 09:59:59 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
                2009-10-26 09:59:56 ----D---- C:\Windows\system32\drivers
                2009-10-22 20:40:08 ----D---- C:\Users\Alex\AppData\Roaming\Apple Computer
                2009-10-19 11:00:28 ----D---- C:\DELL
                2009-10-18 19:49:48 ----D---- C:\ProgramData\Microsoft Help
                2009-10-16 12:50:07 ----D---- C:\Windows\Microsoft.NET
                2009-10-15 12:49:39 ----RSD---- C:\Windows\assembly
                2009-10-14 22:36:29 ----D---- C:\Windows\system32\migration
                2009-10-14 22:36:29 ----D---- C:\Windows\ehome
                2009-10-13 18:26:32 ----SD---- C:\Windows\Downloaded Program Files
                2009-10-12 20:35:51 ----D---- C:\Users\Alex\AppData\Roaming\Image Zone Express
                2009-10-12 18:42:23 ----DC---- C:\Windows\system32\DRVSTORE

                ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                R1 kl1;kl1; C:\Windows\system32\DRIVERS\kl1.sys [2008-07-21 121872]
                R1 KLIF;Kaspersky Lab Driver; C:\Windows\system32\DRIVERS\klif.sys [2009-08-27 239120]
                R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter; C:\Windows\system32\DRIVERS\klim6.sys [2008-07-09 20496]
                R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
                R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2007-09-06 39936]
                R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-09-06 42496]
                R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2007-09-06 37376]
                R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2006-08-04 8192]
                R3 ApfiltrService;Alps Touch Pad Filter Driver for Windows 2000/XP/Vista; C:\Windows\system32\DRIVERS\Apfiltr.sys [2008-05-04 164400]
                R3 BCM43XX;Pilote de la carte réseau local sans fil Wireless de Dell; C:\Windows\system32\DRIVERS\bcmwl6.sys [2008-05-16 1044984]
                R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-20 14208]
                R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\System32\Drivers\GEARAspiWDM.sys [2009-05-18 26600]
                R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2006-11-02 986624]
                R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2006-11-02 206848]
                R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-03-06 2016256]
                R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI Service; C:\Windows\system32\drivers\IntcHdmi.sys [2008-03-06 111616]
                R3 OEM02Dev;Creative Camera OEM002 Driver; C:\Windows\system32\DRIVERS\OEM02Dev.sys [2008-03-04 235648]
                R3 OEM02Vfx;Creative Camera OEM002 Video VFX Driver; C:\Windows\system32\DRIVERS\OEM02Vfx.sys [2008-03-04 7424]
                R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-20 88576]
                R3 STHDA;SigmaTel High Definition Audio CODEC; C:\Windows\system32\drivers\stwrt.sys [2007-11-12 330240]
                R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2006-11-02 659968]
                R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-20 11264]
                R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2007-12-06 298496]
                S3 ac277tsr;ac277tsr; C:\Windows\system32\drivers\ac277tsr.sys []
                S3 BCM42RLY;BCM42RLY; C:\Windows\system32\drivers\BCM42RLY.sys []
                S3 BthEnum;Service d'énumérateur Bluetooth; C:\Windows\system32\DRIVERS\BthEnum.sys [2008-04-28 19456]
                S3 BthPan;Périphérique Bluetooth (réseau personnel); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-20 92160]
                S3 BTHPORT;Pilote de port Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2008-04-28 220160]
                S3 BTHUSB;Pilote USB radio Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2008-04-28 29184]
                S3 btwaudio;Périphérique audio Bluetooth; C:\Windows\system32\drivers\btwaudio.sys [2006-11-06 78128]
                S3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\drivers\btwavdt.sys [2006-11-06 80176]
                S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2006-11-06 16560]
                S3 Dot4;Pilote MS IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-20 131584]
                S3 Dot4Print;Pilote de classe Imprimante pour IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-20 16384]
                S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-20 36864]
                S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-20 5632]
                S3 e1express;Pilote de la connexion réseau Intel(R) PRO/1000 PCI Express; C:\Windows\system32\DRIVERS\e1e6032.sys [2008-01-20 220672]
                S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2009-08-05 54632]
                S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-20 8192]
                S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-20 5888]
                S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-20 5504]
                S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-20 6016]
                S3 R300;R300; C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-02 2028032]
                S3 RFCOMM;Périphérique Bluetooth (TDI protocole RFCOMM); C:\Windows\system32\DRIVERS\rfcomm.sys [2008-01-20 49664]
                S3 SymIMMP;SymIMMP; C:\Windows\system32\DRIVERS\SymIM.sys []
                S3 UMPass;Pilote Microsoft UMPass; C:\Windows\system32\DRIVERS\umpass.sys [2008-01-20 7680]
                S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2009-05-29 39424]
                S3 usbscan;Pilote de scanneur USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-20 35328]
                S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-20 39936]
                S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-20 83328]
                S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-20 6656]
                S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-20 386616]

                ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                R2 AESTFilters;Andrea ST Filters Service; C:\Windows\system32\aestsrv.exe [2007-11-12 73728]
                R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-05-29 144712]
                R2 avp;Kaspersky Anti-Virus; C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe [2009-08-27 208616]
                R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
                R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-20 21504]
                R2 DockLoginService;Dock Login Service; C:\Program Files\Dell\DellDock\DockLogin.exe [2008-04-28 161048]
                R2 hpqddsvc;Service HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2008-01-20 21504]
                R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe [2007-03-21 355096]
                R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-20 21504]
                R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-20 21504]
                R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
                R2 STacSV;SigmaTel Audio Service; C:\Windows\system32\STacSV.exe [2007-11-12 102400]
                R2 wltrysvc;Dell Wireless WLAN Tray Service; C:\Windows\System32\WLTRYSVC.EXE [2008-05-16 24064]
                R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2006-08-04 386560]
                R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2008-01-20 21504]
                R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2009-10-28 545568]
                S3 fsssvc;Service Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-08-05 704864]
                S3 GoogleDesktopManager-010708-104812;Google Desktop Manager 5.7.801.7324; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2008-07-18 29744]
                S3 GoToAssist;GoToAssist; C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe [2008-07-18 16680]
                S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-06-13 182768]
                S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
                S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
                S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
                S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2009-12-07 320760]
                S3 stllssvr;stllssvr; C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2007-12-02 74384]

                -----------------EOF-----------------
                0
                1. Le fichier info.txt ne veut pas se poster sur le forum
                  0
                  1. info.txt logfile of random's system information tool 1.06 2009-12-08 10:49:13

                    ======Uninstall list======

                    -->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
                    -->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
                    -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{88564CEF-20A5-4EF2-A05F-309F2EBA9B06}\setup.exe" -l0x40c
                    -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A1A5BA3E-9ABF-4037-820B-6151022B8ACB}\setup.exe" -l0x40c
                    -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A82F10CB-18B5-4EAC-AEF2-FA49CD565626}\setup.exe" -l0x40c
                    -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D5BA7C09-E523-478C-9C37-A1D86C76383E}\setup.exe" -l0x40c
                    -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F6366726-BA44-4D6A-8ECE-476E2E616AD1}\setup.exe" -l0x40c
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-00A1-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
                    32 Bit HP CIO Components Installer-->MsiExec.exe /I{2614F54E-A828-49FA-93BA-45A3F756BFAA}
                    Adobe ExtendScript Toolkit 2-->C:\Program Files\Common Files\Adobe\Installers\3e054d2218e7aa282c2369d939e58ff\Setup.exe
                    Adobe ExtendScript Toolkit 2-->MsiExec.exe /I{24D7346D-D4B4-45E8-98EA-75EC14B42DD8}
                    Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
                    Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
                    Adobe Reader 9.1.3 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A91000000001}
                    Adobe Setup-->MsiExec.exe /I{B3C02EC1-A7B0-4987-9A43-8789426AAA7D}
                    Adobe Shockwave Player 11.5-->"C:\Windows\system32\Adobe\Shockwave 11\uninstaller.exe"
                    Advanced Audio FX Engine-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{88564CEF-20A5-4EF2-A05F-309F2EBA9B06}\setup.exe" -l0x40c /remove
                    Advanced Video FX Engine-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D5BA7C09-E523-478C-9C37-A1D86C76383E}\setup.exe" -l0x40c /remove
                    Apple Application Support-->MsiExec.exe /I{B607C354-CD79-4D22-86D1-92DC94153F42}
                    Apple Mobile Device Support-->MsiExec.exe /I{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}
                    Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
                    Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
                    Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
                    AXIS Camera Control 2.40-->"C:\Program Files\AXIS Communications\AXIS Camera Control\unins000.exe"
                    Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
                    Browser Address Error Redirector-->MsiExec.exe /I{62230596-37E5-4618-A329-0D21F529A86F}
                    Carte réseau local sans fil Wireless de Dell-->"C:\Program Files\Dell\Dell Wireless WLAN Card\bcmwlu00.exe" verbose /rootkey="Software\Broadcom\802.11\UninstallInfo" /rootdir="C:\Program Files\Dell\Dell Wireless WLAN Card"
                    CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
                    Cisco EAP-FAST Module-->MsiExec.exe /I{BF53252E-4AB2-4C7F-A0FD-6100755745E3}
                    Cisco LEAP Module-->MsiExec.exe /I{76F9CF97-FC4B-4E20-B363-D127C888448F}
                    Cisco PEAP Module-->MsiExec.exe /I{4E5386F5-C0F6-4532-A54A-374865AEAB71}
                    Conexant HDA D330 MDC V.92 Modem-->C:\Program Files\CONEXANT\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2C06&SUBSYS_14F1000F\HXFSETUP.EXE -U -Idel000fz.inf
                    Counter-Strike: Source-->"C:\Program Files\Steam\steam.exe" steam://uninstall/240
                    Counter-Strike: Source-->MsiExec.exe /I{9580813D-94B1-4C28-9426-A441E2BB29A5}
                    Dell Dock-->MsiExec.exe /I{F6CB42B9-F033-4152-8813-FF11DA8E6A78}
                    Dell Support Center-->MsiExec.exe /X{E3BFEE55-39E2-4BE0-B966-89FE583822C1}
                    Dell Touchpad-->C:\Program Files\DellTPad\Uninstap.exe ADDREMOVE
                    Dell Webcam Center-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A1A5BA3E-9ABF-4037-820B-6151022B8ACB}\setup.exe" -l0x40c /remove
                    Dell Webcam Manager-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F6366726-BA44-4D6A-8ECE-476E2E616AD1}\setup.exe" -l0x40c /remove
                    Digital Line Detect-->C:\Program Files\InstallShield Installation Information\{E646DCF0-5A68-11D5-B229-002078017FBF}\setup.exe -runfromtemp -l0x0c0c -removeonly
                    DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
                    DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
                    DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
                    DivX Plus DirectShow Filters-->C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
                    DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
                    EDocs-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6B7B6D4D-8F9B-4CB3-8CA4-BCA9CC4C1A22}\setup.exe"
                    ESET Online Scanner v3-->C:\Program Files\ESET\ESET Online Scanner\OnlineScannerUninstaller.exe
                    Galerie de photos Windows Live-->MsiExec.exe /X{B131E59D-202C-43C6-84C9-68F0C37541F1}
                    Google Desktop-->C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
                    Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_0E996B068B56FCA2.exe" /uninstall
                    Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
                    GoToAssist 8.0.0.514-->C:\Program Files\Citrix\GoToAssist\514\G2AUninstaller.exe /uninstall
                    Guide de mise en route Dell-->MsiExec.exe /I{9954484F-6EE4-4040-94E3-4B380646F867}
                    Guitar Pro 5.2-->"C:\Program Files\Guitar Pro 5\unins000.exe"
                    Half-Life 2: Deathmatch-->"C:\Program Files\Steam\steam.exe" steam://uninstall/320
                    Half-Life 2: Lost Coast-->"C:\Program Files\Steam\steam.exe" steam://uninstall/340
                    HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
                    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
                    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
                    HP Customer Participation Program 8.0-->C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
                    HP Imaging Device Functions 8.0-->C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
                    HP OCR Software 8.0-->C:\Program Files\HP\Digital Imaging\OCR\hpzscr01.exe -datfile hpqbud11.dat
                    HP Photosmart Essential-->MsiExec.exe /X{EB21A812-671B-4D08-B974-2A347F0D8F70}
                    HP Photosmart.All-In-One Driver Software 8.0 .A-->C:\Program Files\HP\Digital Imaging\{282E5AB2-8E47-4571-B6FA-6B512555B557}\setup\hpzscr01.exe -datfile hposcr18.dat -onestop -showdisconnect -forcereboot
                    HP Product Assistant-->MsiExec.exe /I{36FDBE6E-6684-462B-AE98-9A39A1B200CC}
                    HP Solution Center 8.0-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
                    HP Update-->MsiExec.exe /X{FE57DE70-95DE-4B64-9266-84DA811053DB}
                    HPSSupply-->MsiExec.exe /X{EB75DE50-5754-4F6F-875D-126EDF8E4CB3}
                    HyperCam 2-->"C:\Program Files\HyCam2\UnHyCam2.exe"
                    Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
                    Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
                    Intel(R) Matrix Storage Manager-->C:\Windows\System32\Imsmudlg.exe
                    iTunes-->MsiExec.exe /I{D1A74FBB-CA8D-4CCA-9B89-BAAA436DB178}
                    Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
                    Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
                    Kaspersky Anti-Virus 2009-->MsiExec.exe /I{6580C5A3-2336-4EC5-85F1-3448C5F6208A}
                    Kaspersky Anti-Virus 2009-->MsiExec.exe /I{6580C5A3-2336-4EC5-85F1-3448C5F6208A}
                    Laptop Integrated Webcam Driver (1.04.01.1011) -->C:\Windows\CtDrvIns.exe -uninstall -script OEM002.uns -plugin OEM02Pin.dll -pluginres OEM02Pin.crl -nodisconprompt -langid 0x040C
                    Live! Cam Avatar Creator-->C:\Program Files\InstallShield Installation Information\{65D0C510-D7B6-4438-9FC8-E6B91115AB0D}\setup.exe -runfromtemp -l0x040c -removeonly /remove
                    Live! Cam Avatar-->C:\Program Files\InstallShield Installation Information\{1D5E29AD-39A9-4D0A-A8B6-46A6FCD8C995}\setup.exe -runfromtemp -l0x040c -removeonly /remove
                    Logitech Desktop Messenger-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}\setup.exe" -l0x40c UNINSTALL
                    Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
                    MediaDirect-->C:\Program Files\InstallShield Installation Information\{9C6978E8-B6D0-4AB7-A7A0-D81A74FBF745}\setup.exe -runfromtemp -l0x040c -cluninstall
                    Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
                    Microsoft .NET Framework 3.5 SP1-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
                    Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
                    Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
                    Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
                    Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
                    Microsoft Office Home and Student 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
                    Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
                    Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
                    Microsoft Office OneNote MUI (French) 2007-->MsiExec.exe /X{90120000-00A1-040C-0000-0000000FF1CE}
                    Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
                    Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
                    Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
                    Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
                    Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
                    Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
                    Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
                    Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
                    Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {14809F99-C601-4D4A-9391-F1E8FAA964C5}
                    Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
                    Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
                    Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}
                    Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
                    Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9}
                    Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
                    Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
                    Microsoft Search Enhancement Pack-->MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
                    Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
                    Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
                    Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
                    Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
                    Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
                    Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
                    Microsoft Works-->MsiExec.exe /I{3B160861-7250-451E-B5EE-8B92BF30A710}
                    Mise à jour Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {B761869A-B85C-40E2-994C-A1CE78AC8F2C}
                    Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {C3DCA38E-005E-41BA-A52A-7C3429F351C3}
                    Mise à jour Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {81536A04-DBFB-4DB3-978F-0F284590C223}
                    Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
                    Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
                    Mozilla Firefox (3.5.5)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
                    MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
                    MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
                    MSXML 4.0 SP2 (KB941833)-->MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}
                    MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
                    MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
                    NetWaiting-->C:\Program Files\InstallShield Installation Information\{3F92ABBB-6BBF-11D5-B229-002078017FBF}\setup.exe -runfromtemp -l0x0c0c -removeonly
                    Opera 9.52-->MsiExec.exe /X{E1A88DE8-BD36-4DEA-8DD8-E35EF475ADC7}
                    Outil de diagnostic de modem-->MsiExec.exe /I{F63A3748-B93D-4360-9AD4-B064481A5C7B}
                    Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
                    OutlookAddinSetup-->MsiExec.exe /I{9BDEF074-020E-458D-ADC5-8FF68E0C9B56}
                    Panda ActiveScan 2.0-->C:\Program Files\Panda Security\ActiveScan 2.0\as2uninst.exe
                    Panneau de configuration MobileMe-->MsiExec.exe /I{6DA9102E-199F-43A0-A36B-6EF48081A658}
                    PASW Statistics 18-->MsiExec.exe /I{C25215FC-5900-48B0-B93C-8D3379027312}
                    PokerStars-->"C:\Program Files\PokerStars\PokerStarsUninstall.exe" /u:PokerStars
                    QuickSet-->MsiExec.exe /I{4B6AD248-D3BF-426A-8D64-847288154F13}
                    QuickTime-->MsiExec.exe /I{A429C2AE-EBF1-4F81-A221-1C115CAADDAD}
                    RealPlayer-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
                    Roxio Creator Audio-->MsiExec.exe /I{73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}
                    Roxio Creator Copy-->MsiExec.exe /I{B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}
                    Roxio Creator Data-->MsiExec.exe /I{08E81ABD-79F7-49C2-881F-FD6CB0975693}
                    Roxio Creator DE-->C:\ProgramData\Uninstall\{09760D42-E223-42AD-8C3E-55B47D0DDAC3}\setup.exe /x {09760D42-E223-42AD-8C3E-55B47D0DDAC3}
                    Roxio Creator DE-->MsiExec.exe /I{ED439A64-F018-4DD4-8BA5-328D85AB09AB}
                    Roxio Creator Tools-->MsiExec.exe /I{1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}
                    Roxio Express Labeler 3-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
                    Roxio Update Manager-->MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
                    Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
                    Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
                    Security Update for 2007 Microsoft Office System (KB960003)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {F04F8702-18D0-458D-921E-146FB7CD38CF}
                    Security Update for Microsoft Office Excel 2007 (KB959997)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {9EAC3AEC-5C81-4856-A05B-DE9DC236D740}
                    Security Update for Microsoft Office OneNote 2007 (KB950130)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {F1B2401C-B610-4BF2-AA1C-52C55827A8F4}
                    Security Update for Microsoft Office PowerPoint 2007 (KB951338)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {558B709B-821B-4FC5-90FC-9A8890641E77}
                    Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
                    Security Update for Microsoft Office system 2007 (KB956828)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {885E081B-72BD-4E76-8E98-30B4BE468FAC}
                    Security Update for Microsoft Office Word 2007 (KB956358)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {4551666D-0FD6-4C69-8A81-1C6F2E64517C}
                    Skype™ 3.8-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
                    Spelling Dictionaries Support For Adobe Reader 8-->MsiExec.exe /I{AC76BA86-7AD7-5464-3428-800000000003}
                    Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
                    Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
                    Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
                    VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}
                    WIDCOMM Bluetooth Software 6.0.1.3100-->MsiExec.exe /X{A13E07E1-A423-44FB-9DEE-B24C75C1BAF2}
                    Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
                    Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
                    Windows Live Contrôle parental-->MsiExec.exe /X{D5D81435-B8DE-4CAF-867F-7998F2B92CFC}
                    Windows Live FolderShare-->MsiExec.exe /X{2075CB0A-D26F-4DAA-B424-5079296B43BA}
                    Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}
                    Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
                    Windows Live Movie Maker-->MsiExec.exe /X{53B20C18-D8D4-4588-8737-9BBFE303C354}
                    Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
                    Windows Live Writer-->MsiExec.exe /X{4634B21A-CC07-4396-890C-2B8168661FEA}
                    Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}

                    =====HijackThis Backups=====

                    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" [2009-07-27]
                    O4 - Global Startup: QuickSet.lnk = C:\Program Files\Dell\QuickSet\quickset.exe [2009-07-27]
                    O4 - Global Startup: BTTray.lnk = ? [2009-07-27]
                    O2 - BHO: Mega Manager IE Click Monitor - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll [2009-07-27]
                    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime [2009-07-27]
                    O3 - Toolbar: Megaupload Toolbar - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL [2009-07-27]
                    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2009-07-27]
                    O2 - BHO: Megaupload Toolbar - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL [2009-07-27]
                    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-07-27]
                    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2009-07-27]
                    O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent [2009-07-27]
                    O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file) [2009-07-27]
                    O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe [2009-07-27]
                    O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file) [2009-07-27]
                    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) [2009-07-27]
                    O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup [2009-07-27]

                    ======Security center information======

                    AS: Windows Defender

                    ======System event log======

                    Computer Name: PC-de-Alex
                    Event Code: 7000
                    Message: Le service BCM42RLY n'a pas pu démarrer en raison de l'erreur :
                    Le fichier spécifié est introuvable.
                    Record Number: 132526
                    Source Name: Service Control Manager
                    Time Written: 20091208145802.000000-000
                    Event Type: Erreur
                    User:

                    Computer Name: PC-de-Alex
                    Event Code: 7000
                    Message: Le service BCM42RLY n'a pas pu démarrer en raison de l'erreur :
                    Le fichier spécifié est introuvable.
                    Record Number: 132527
                    Source Name: Service Control Manager
                    Time Written: 20091208145802.000000-000
                    Event Type: Erreur
                    User:

                    Computer Name: PC-de-Alex
                    Event Code: 7000
                    Message: Le service BCM42RLY n'a pas pu démarrer en raison de l'erreur :
                    Le fichier spécifié est introuvable.
                    Record Number: 132528
                    Source Name: Service Control Manager
                    Time Written: 20091208145803.000000-000
                    Event Type: Erreur
                    User:

                    Computer Name: PC-de-Alex
                    Event Code: 7000
                    Message: Le service BCM42RLY n'a pas pu démarrer en raison de l'erreur :
                    Le fichier spécifié est introuvable.
                    Record Number: 132530
                    Source Name: Service Control Manager
                    Time Written: 20091208145803.000000-000
                    Event Type: Erreur
                    User:

                    Computer Name: PC-de-Alex
                    Event Code: 20
                    Message: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070663 : Mise à jour de sécurité pour Microsoft Office System 2007 (KB972581).
                    Record Number: 132550
                    Source Name: Microsoft-Windows-WindowsUpdateClient
                    Time Written: 20091208150311.028284-000
                    Event Type: Erreur
                    User: AUTORITE NT\SYSTEM

                    =====Application event log=====

                    Computer Name: PC-de-Alex
                    Event Code: 10
                    Message: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
                    Record Number: 24485
                    Source Name: Microsoft-Windows-WMI
                    Time Written: 20091207170657.000000-000
                    Event Type: Erreur
                    User:

                    Computer Name: PC-de-Alex
                    Event Code: 10
                    Message: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
                    Record Number: 24567
                    Source Name: Microsoft-Windows-WMI
                    Time Written: 20091207210832.000000-000
                    Even
                    0
                    1. où son les posts 8,9 et 11?
                      0
                      1. Merci! pour la restauration de mon post....désolé pour les copie de post, je croyais qu'ils n'étaient seulement pas présent sur le forum!
                        0
                        1. ▶ Désactivez le contrôle des comptes utilisateurs avant utilisation de cet outil:

                          ▶ Allez dans "Démarrer" puis Panneau de configuration.
                          ▶ Double Cliquez sur l'icône Comptes d'utilisateurs et sur "Activer ou désactiver le contrôle des comptes d'utilisateurs".
                          ▶ Décochez la case Utiliser le contrôle des comptes d'utilisateurs pour vous aider à protéger votre ordinateur.
                          ▶ Validez par OK et redémarrez .

                          ensuite

                          ▶ Télécharge Ad-remover ( de C_XX ) sur ton bureau :

                          ▶ Déconnecte toi et ferme toutes applications en cours !

                          ▶ clic droit sur "Ad-R.exe" en tant qu'administrateur pour lancer l'installation et laisse les paramètres d'installation par défaut .

                          ▶ clic droit sur le raccourci Ad-remover en tant qu'administrateur qui est sur ton bureau pour lancer l'outil .

                          ▶ Au menu principal choisis l'option "L" et tape sur [entrée] .

                          ▶ Laisse travailler l'outil et ne touche à rien ...

                          ▶ Poste le rapport qui apparait à la fin , sur le forum ...

                          ( Le rapport est sauvegardé aussi sous C:\Ad-report.log )
                          ( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

                          ▶ Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
                          Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
                          Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

                          ensuite :

                          desinstalle AD-Remover

                          ensuite :

                          Desactive ton antivirus le temps de la manip ainsi que ton parefeu si présent

                          ▶ Télécharge List&Kill'em et enregistre le sur ton bureau

                          ▶ dezippe-le , (clic droit/ extraire.....)

                          Il ne necessite pas d'installation

                          ▶ double clic (clic droit "executer en tant qu'administrateur" pour Vista) pour lancer le scan

                          choisis la langue puis choisis l'option 1 = Mode Recherche

                          ▶ laisse travailler l'outil

                          un rapport du nom de catchme apparait sur ton bureau , ignore-le , mais ne le supprime pas pour l instant

                          ▶ Poste le contenu du rapport qui s'ouvre

                          0
                          1. salut, juste pour ton information, je ne peut faire de clean avec ad remover....à chaque fois que je démare le clean, mon ordi s'étteint apres aproximativement 5 mins ...le même genre de bug que je te parlais!
                            0
                            1. Veut tu que je fasse le clean en mode sans echec? ou tu veux que je passe a la prochaine etape
                              0
                              1. oui en mose sans echec il passera surement
                                0
                                1. voici le log de ad remover

                                  .
                                  ======= LOGFILE OF AD-REMOVER 1.1.4.6_E | ONLY XP/VISTA/7 =======
                                  .
                                  Updated by C_XX on 07.12.2009 at 21:14
                                  Contact: AdRemover.contact@gmail.com
                                  Website: http://pagesperso-orange.fr/NosTools/ad_remover.html
                                  .
                                  Launch at: 12:23:16, 2009-12-09 | Safe Mode | Option: CLEAN
                                  Executed from: C:\Program Files\Ad-Remover\
                                  Operating system: Microsoft® Windows Vista™ Home Premium Service Pack 1 v6.0.6001
                                  Computer Name: PC-DE-ALEX | Current user: Alex
                                  .
                                  ============== NEUTRALIZED ELEMENT(S) ==============
                                  .

                                  C:\ProgramData\Trymedia

                                  (!) -- Temp files deleted.

                                  .
                                  HKLM\Software\Classes\TypeLib\{937936AF-28CA-4973-B8AE-F250406149A2}
                                  HKLM\Software\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}
                                  HKLM\Software\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}
                                  HKLM\software\Trymedia Systems
                                  .
                                  HKCU\..\Toolbar\WebBrowser\\{A057A204-BACC-4D26-C39E-35F1D2A32EC8} (Orphan registry key)
                                  .
                                  ============== Added scan ==============
                                  .
                                  .
                                  * Mozilla FireFox Version 3.5.5 [fr] *
                                  .
                                  ProfilePath: b53mi062.default (Alex)
                                  .
                                  (Alex, prefs.js) Browser.download.dir, C:\Users\Alex\Downloads
                                  (Alex, prefs.js) Browser.download.lastDir, C:\Users\Alex\Downloads
                                  .
                                  .
                                  * Internet Explorer Version 8.0.6001.18828 *
                                  .
                                  [HKEY_CURRENT_USER\..\Internet Explorer\Main]
                                  .
                                  Do404Search: 01000000
                                  Local Page: C:\Windows\system32\blank.htm
                                  Show_ToolBar: yes
                                  Enable Browser Extensions: yes
                                  Start Page: hxxp://fr.msn.com/
                                  Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                                  Default_search_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                                  Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
                                  .
                                  [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
                                  .
                                  Start Page: hxxp://fr.msn.com/
                                  Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                                  Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                                  Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                                  Delete_Temp_Files_On_Exit: yes
                                  Local Page: C:\Windows\System32\blank.htm
                                  Search bar: hxxp://search.msn.com/spbasic.htm
                                  .
                                  [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
                                  .
                                  Tabs: res://ieframe.dll/tabswelcome.htm
                                  .
                                  ============== Suspect (Cracks, Serials, ...) ==============
                                  .
                                  C:\Users\Alex\Downloads\CS 1.6 Full. BOT. LANPatch.exe
                                  C:\Users\Alex\Downloads\cs16patch_full_V18B.exe
                                  C:\Users\Alex\Music\Monopoly 2008 (Installer + No CD Patch) ONLY 25 MB!\MonopolyPBInstall.exe
                                  C:\Users\Alex\Music\Monopoly 2008 (Installer + No CD Patch) ONLY 25 MB!\NoCDPatch.exe
                                  C:\Users\Alex\Videos\Monopoly 2008 (Installer + No CD Patch) ONLY 25 MB!.torrent
                                  C:\Users\All Users\Kaspersky Lab\AVP8\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav8exec\8.0.0.506\avp.exe
                                  C:\Users\All Users\Kaspersky Lab\AVP8\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav8exec\8.0.0.506\wmias.exe
                                  C:\Users\All Users\Kaspersky Lab\AVP8\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav8exec\8.0.0.506\wmiav.exe
                                  .
                                  ===================================
                                  .
                                  518 Byte(s) - C:\Ad-Report-CLEAN[1].log
                                  518 Byte(s) - C:\Ad-Report-CLEAN[2].log
                                  518 Byte(s) - C:\Ad-Report-CLEAN[3].log
                                  518 Byte(s) - C:\Ad-Report-CLEAN[4].log
                                  3301 Byte(s) - C:\Ad-Report-CLEAN[5].log
                                  .
                                  0 File(s) - C:\Users\Alex\AppData\Local\Temp
                                  0 File(s) - C:\Windows\Temp
                                  .
                                  24 File(s) - C:\Program Files\Ad-Remover\BACKUP
                                  5 File(s) - C:\Program Files\Ad-Remover\QUARANTINE
                                  .
                                  End at: 12:27:02 | 2009-12-09 - CLEAN[5]
                                  .
                                  ============== E.O.F ==============
                                  .
                                  0
                                  1. voici celui de ton program list'em

                                    List'em by g3n-h@ckm@n 1.1.4.1

                                    Thx to Chiquitine29.....& CCM team

                                    User : Alex (Administrateurs) # PC-DE-ALEX
                                    Update on 09/12/2009 by g3n-h@ckm@n ::::: 17:00
                                    Start at: 12:35:47 | 2009-12-09
                                    Contact : g3n-h@ckm@n sur CCM

                                    Intel(R) Core(TM)2 Duo CPU T5750 @ 2.00GHz
                                    Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6001 32-bit) # Service Pack 1
                                    Internet Explorer 8.0.6001.18828
                                    Windows Firewall Status : Disabled

                                    C:\ -> Disque fixe local | 220,58 Go (122,29 Go free) [OS] | NTFS
                                    D:\ -> Disque fixe local | 9,77 Go (5,56 Go free) [RECOVERY] | NTFS
                                    E:\ -> Disque CD-ROM
                                    G:\ -> Disque CD-ROM

                                    ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

                                    C:\Windows\System32\smss.exe 516
                                    C:\Windows\system32\csrss.exe 656
                                    C:\Windows\system32\csrss.exe 700
                                    C:\Windows\system32\wininit.exe 708
                                    C:\Windows\system32\services.exe 752
                                    C:\Windows\system32\lsass.exe 768
                                    C:\Windows\system32\lsm.exe 780
                                    C:\Windows\system32\winlogon.exe 852
                                    C:\Windows\system32\svchost.exe 972
                                    C:\Windows\system32\svchost.exe 1040
                                    C:\Windows\System32\svchost.exe 1084
                                    C:\Windows\System32\svchost.exe 1220
                                    C:\Windows\System32\svchost.exe 1272
                                    C:\Windows\system32\svchost.exe 1292
                                    C:\Windows\system32\svchost.exe 1400
                                    C:\Windows\system32\SLsvc.exe 1428
                                    C:\Windows\system32\svchost.exe 1456
                                    C:\Program Files\Dell\DellDock\DockLogin.exe 1572
                                    C:\Windows\System32\WLTRYSVC.EXE 1776
                                    C:\Windows\System32\bcmwltry.exe 1796
                                    C:\Windows\system32\WLANExt.exe 1832
                                    C:\Windows\System32\spoolsv.exe 1924
                                    C:\Windows\system32\svchost.exe 1960
                                    C:\Windows\system32\aestsrv.exe 664
                                    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe 704
                                    C:\Program Files\Bonjour\mDNSResponder.exe 1256
                                    C:\Windows\system32\svchost.exe 1496
                                    C:\Windows\system32\svchost.exe 1648
                                    C:\Windows\system32\svchost.exe 2052
                                    C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe 2080
                                    C:\Windows\System32\svchost.exe 2112
                                    C:\Windows\System32\svchost.exe 2184
                                    C:\Windows\system32\svchost.exe 2196
                                    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe 2252
                                    C:\Windows\system32\STacSV.exe 2452
                                    C:\Windows\system32\svchost.exe 2968
                                    C:\Windows\System32\svchost.exe 3048
                                    C:\Windows\system32\SearchIndexer.exe 3104
                                    C:\Windows\system32\DRIVERS\xaudio.exe 3152
                                    C:\Windows\system32\Dwm.exe 3304
                                    C:\Windows\Explorer.EXE 3320
                                    C:\Program Files\Dell\DellDock\DellDock.exe 3328
                                    C:\Windows\system32\taskeng.exe 3400
                                    C:\Windows\system32\taskeng.exe 3728
                                    C:\Windows\system32\conime.exe 3960
                                    C:\Program Files\Windows Defender\MSASCui.exe 3984
                                    C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe 4024
                                    C:\Windows\System32\hkcmd.exe 4036
                                    C:\Windows\System32\igfxpers.exe 4044
                                    C:\Windows\System32\WLTRAY.EXE 4060
                                    C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe 2152
                                    C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe 2628
                                    C:\Windows\system32\igfxsrvc.exe 816
                                    C:\Program Files\DellTPad\Apoint.exe 2676
                                    C:\Program Files\iTunes\iTunesHelper.exe 2668
                                    C:\Program Files\Windows Live\Messenger\msnmsgr.exe 820
                                    C:\Windows\ehome\ehtray.exe 3076
                                    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 3092
                                    C:\Windows\ehome\ehmsas.exe 2920
                                    C:\Users\Alex\AppData\Local\MétéoMédia\MétéoÉclair\WeatherEye.exe 2908
                                    C:\Program Files\Windows Media Player\wmpnscfg.exe 2280
                                    C:\Program Files\DellTPad\ApMsgFwd.exe 1952
                                    C:\Program Files\DellTPad\HidFind.exe 3972
                                    C:\Program Files\DellTPad\Apntex.exe 3932
                                    C:\Windows\system32\wbem\wmiprvse.exe 5604
                                    C:\Program Files\Windows Media Player\wmpnetwk.exe 2928
                                    C:\Program Files\iPod\bin\iPodService.exe 4648
                                    C:\Windows\System32\alg.exe 248
                                    C:\Windows\system32\wuauclt.exe 2704
                                    C:\Users\Alex\Desktop\List_Killem\List_Kill'em.exe 2780
                                    C:\Windows\system32\cmd.exe 5724
                                    C:\Windows\system32\wbem\wmiprvse.exe 912
                                    C:\Users\Alex\AppData\Local\Temp\D806.tmp\pv.exe 4432

                                    ======================
                                    Keys "Run"
                                    ======================
                                    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                                    MsnMsgr REG_SZ "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
                                    ehTray.exe REG_SZ C:\Windows\ehome\ehTray.exe
                                    swg REG_SZ "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
                                    WeatherEye REG_SZ C:\Users\Alex\AppData\Local\MétéoMédia\MétéoÉclair\WeatherEye.exe
                                    WMPNSCFG REG_SZ C:\Program Files\Windows Media Player\WMPNSCFG.exe

                                    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                                    Windows Defender REG_EXPAND_SZ %ProgramFiles%\Windows Defender\MSASCui.exe -hide
                                    SigmatelSysTrayApp REG_EXPAND_SZ %ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe
                                    HotKeysCmds REG_SZ C:\Windows\system32\hkcmd.exe
                                    Persistence REG_SZ C:\Windows\system32\igfxpers.exe
                                    Broadcom Wireless Manager UI REG_SZ C:\Windows\system32\WLTRAY.exe
                                    DELL Webcam Manager REG_SZ "C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe" /s
                                    IAAnotif REG_SZ "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
                                    Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                                    AVP REG_SZ "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
                                    QuickTime Task REG_SZ "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                                    Apoint REG_SZ C:\Program Files\DellTPad\Apoint.exe
                                    iTunesHelper REG_SZ "C:\Program Files\iTunes\iTunesHelper.exe"
                                    HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents

                                    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]

                                    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]

                                    =====================
                                    Other Keys
                                    =====================
                                    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
                                    ConsentPromptBehaviorAdmin REG_DWORD 2 (0x2)
                                    ConsentPromptBehaviorUser REG_DWORD 1 (0x1)
                                    EnableInstallerDetection REG_DWORD 1 (0x1)
                                    EnableLUA REG_DWORD 0 (0x0)
                                    EnableSecureUIAPaths REG_DWORD 1 (0x1)
                                    EnableVirtualization REG_DWORD 1 (0x1)
                                    PromptOnSecureDesktop REG_DWORD 1 (0x1)
                                    ValidateAdminCodeSignatures REG_DWORD 0 (0x0)
                                    dontdisplaylastusername REG_DWORD 0 (0x0)
                                    legalnoticecaption REG_SZ
                                    legalnoticetext REG_SZ
                                    scforceoption REG_DWORD 0 (0x0)
                                    shutdownwithoutlogon REG_DWORD 1 (0x1)
                                    undockwithoutlogon REG_DWORD 1 (0x1)
                                    FilterAdministratorToken REG_DWORD 0 (0x0)
                                    EnableUIADesktopToggle REG_DWORD 0 (0x0)
                                    HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system\UIPI

                                    ===============
                                    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

                                    ===============
                                    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

                                    ===============
                                    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
                                    AppInit_DLLS REG_SZ C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll

                                    ===============
                                    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\GoToAssist]
                                    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\igfxcui]
                                    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\klogon]

                                    ===============
                                    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

                                    ===============
                                    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

                                    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

                                    ===============
                                    BHO :
                                    ======
                                    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
                                    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
                                    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
                                    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
                                    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
                                    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
                                    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
                                    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
                                    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
                                    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{CA6319C0-31B7-401E-A518-A07C3DB8F777}]
                                    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]

                                    ================
                                    Internet Explorer :
                                    ================
                                    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                                    Start Page REG_SZ https://www.msn.com/fr-fr

                                    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                                    Start Page REG_SZ https://www.msn.com/fr-fr

                                    ========
                                    Services
                                    ========
                                    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services]

                                    Ndisuio : 0x3
                                    EapHost : 0x3
                                    Wlansvc : 0x2
                                    SharedAccess : 0x2
                                    windefend : 0x2
                                    wuauserv : 0x2
                                    wscsvc : 0x2

                                    =========

                                    =======
                                    Drive :
                                    =======

                                    D‚fragmenteur de disque Windows
                                    Copyright (c) 2006 Microsoft Corp.

                                    Rapport d'analyse pour le volume C: OS

                                    Taille du volume = 221 Go
                                    Espace libre = 122 Go
                                    tendue d'espace libre la plus grande = 86.57 Go
                                    Pourcentage de fragmentation des fichiers = 0 %

                                    Remarqueÿ: sur les volumes NTFS, les fragments de fichiers de plus de 64ÿMo ne sont pas inclus dans les statistiques de fragmentation.

                                    Il n'est pas n‚cessaire de d‚fragmenter ce volume.

                                    ==========
                                    Programs
                                    ==========

                                    Ad-Remover
                                    Adobe
                                    Apple Software Update
                                    AXIS Communications
                                    BitComet
                                    BitComet Accelerator
                                    Bonjour
                                    CCleaner
                                    Cisco
                                    Citrix
                                    Common Files
                                    CONEXANT
                                    Creative
                                    Creative Live! Cam
                                    CyberLink
                                    DAEMON Tools Lite
                                    Dell
                                    Dell Support Center
                                    DellTPad
                                    desktop.ini
                                    Digital Line Detect
                                    DivX
                                    ElcomSoft
                                    ESET
                                    Family Feud 2
                                    Fichiers communs
                                    Google
                                    Guitar Pro 5
                                    Hewlett-Packard
                                    HP
                                    HyCam2
                                    InstallShield Installation Information
                                    Intel
                                    Internet Explorer
                                    iPod
                                    iTunes
                                    iWin
                                    Java
                                    Kaspersky Lab
                                    Logitech
                                    Malwarebytes' Anti-Malware
                                    Microsoft
                                    Microsoft Games
                                    Microsoft Office
                                    Microsoft Silverlight
                                    Microsoft SQL Server Compact Edition
                                    Microsoft Sync Framework
                                    Microsoft Works
                                    Microsoft.NET
                                    Modem Diagnostic Tool
                                    Movie Maker
                                    Mozilla Firefox
                                    MP3 WAV Converter
                                    MpcStar
                                    MSBuild
                                    MSXML 4.0
                                    M‚t‚oM‚dia
                                    NetWaiting
                                    NOS
                                    Ontrack
                                    Opera
                                    Panda Security
                                    PokerStars
                                    QuickTime
                                    Real
                                    Recovery for Word
                                    Reference Assemblies
                                    Roxio
                                    Shockwave.com
                                    Sigmatel
                                    Skype
                                    SPSSInc
                                    Steam
                                    SUPERAntiSpyware
                                    Trend Micro
                                    Uninstall Information
                                    Virtual Hypnotist
                                    WIDCOMM
                                    Windows Calendar
                                    Windows Collaboration
                                    Windows Defender
                                    Windows Journal
                                    Windows Live
                                    Windows Live SkyDrive
                                    Windows Mail
                                    Windows Media Player
                                    Windows NT
                                    Windows Photo Gallery
                                    Windows Sidebar
                                    WinRAR
                                    Yahoo! Games
                                    YouTube Downloader

                                    ¤¤¤¤¤¤¤¤¤¤ Files/folders :

                                    ¤¤¤¤¤¤¤¤¤¤ Keys :

                                    =========
                                    Rootkits
                                    =========

                                    catchme 0.3.1398.3 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                                    Rootkit scan 2009-12-09 12:45:13
                                    Windows 6.0.6001 Service Pack 1 NTFS

                                    scanning hidden processes ...

                                    scanning hidden services & system hive ...

                                    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\001fe1ddd04a]
                                    "00e091f920e2"=hex:ff,10,aa,b8,c4,dd,20,53,bf,b4,64,ad,dd,55,a3,7a
                                    "00249086808d"=hex:d5,48,a5,91,57,bc,21,a5,1c,ee,2a,23,9c,04,99,c9
                                    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
                                    "s1"=dword:2df9c43f
                                    "s2"=dword:110480d0
                                    "h0"=dword:00000001

                                    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
                                    "p0"="C:\Program Files\DAEMON Tools Lite\"
                                    "h0"=dword:00000000
                                    "khjeh"=hex:bf,0e,55,c3,5e,29,65,29,5d,78,23,1b,50,d5,23,ec,a1,6c,58,43,cd,..

                                    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
                                    "a0"=hex:20,01,00,00,a0,e2,e3,bc,51,cd,cd,ec,d0,a5,fe,34,f4,62,16,ad,36,..
                                    "khjeh"=hex:5a,b9,9f,a0,84,70,37,97,f5,46,c6,60,b4,1f,57,92,db,32,0d,43,da,..

                                    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
                                    "khjeh"=hex:8d,fc,78,1a,8b,9b,49,9f,7c,c4,37,aa,a1,60,43,81,ba,44,56,ac,9f,..
                                    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet030\Services\BTHPORT\Parameters\Keys\001fe1ddd04a]
                                    "00e091f920e2"=hex:ff,10,aa,b8,c4,dd,20,53,bf,b4,64,ad,dd,55,a3,7a
                                    "00249086808d"=hex:d5,48,a5,91,57,bc,21,a5,1c,ee,2a,23,9c,04,99,c9
                                    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet030\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
                                    "p0"="C:\Program Files\DAEMON Tools Lite\"
                                    "h0"=dword:00000000
                                    "khjeh"=hex:bf,0e,55,c3,5e,29,65,29,5d,78,23,1b,50,d5,23,ec,a1,6c,58,43,cd,..

                                    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet030\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
                                    "a0"=hex:20,01,00,00,a0,e2,e3,bc,51,cd,cd,ec,d0,a5,fe,34,f4,62,16,ad,36,..
                                    "khjeh"=hex:5a,b9,9f,a0,84,70,37,97,f5,46,c6,60,b4,1f,57,92,db,32,0d,43,da,..

                                    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet030\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
                                    "khjeh"=hex:8d,fc,78,1a,8b,9b,49,9f,7c,c4,37,aa,a1,60,43,81,ba,44,56,ac,9f,..

                                    scanning hidden registry entries ...

                                    scanning hidden files ...

                                    scan completed successfully
                                    hidden processes: 0
                                    hidden services: 0
                                    hidden files: 0

                                    Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

                                    device: opened successfully
                                    user: MBR read successfully
                                    kernel: MBR read successfully
                                    user & kernel MBR OK

                                    ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
                                    0
                                    1. ▶ Relance List&Kill'em comme tu as fait pour l'option 1 (soit en clic droit pour vista),

                                      mais cette fois-ci :

                                      ▶ choisis l'option 2 = Mode Destruction

                                      laisse travailler l'outil.

                                      en fin de scan un rapport s'ouvre

                                      ▶ colle le contenu dans ta reponse

                                      ensuite :

                                      ########### [ Option 1 ( Recherche ) ]

                                      ▶ Télécharge FindyKill de Chiquitine29 sur ton bureau :

                                      http://pagesperso-orange.fr/NosTools/Chiquitine29/Setup.exe

                                      ! Déconnecte toi et ferme toutes applications en cours !

                                      ▶ Double clique (clic droit "en tant qu'administrateur" pour Vista) sur "FindyKill.exe" pour lancer l'installation et laisse les paramètres d'instalation par défaut .

                                      ▶ Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...)

                                      ▶ Double-clique (clic droit "en tant qu'administrateur" pour Vista)sur le raccourci FindyKill qui est sur ton bureau pour lancer l'outil .

                                      ▶ Au menu principal choisis l'option " F " pour français et tape sur [entrée] .

                                      ▶ Au second menu Choisis l'option " 1 " (recherche) et tape sur [entrée]

                                      ▶ Laisse travailler l'outil et ne touche à rien ...

                                      ▶ Poste le rapport qui apparait à la fin , sur le forum ...

                                      ( le rapport est sauvegardé aussi sous C:\FindyKill.txt )
                                      ( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )
                                      0
                                      1. Kill'em by g3n-h@ckm@n 1.1.4.1

                                        User : Alex (Administrateurs) # PC-DE-ALEX
                                        Update on 09/12/2009 by g3n-h@ckm@n ::::: 17:00
                                        Start at: 14:07:57 | 2009-12-09
                                        Contact : g3n-h@ckm@n sur CCM

                                        Intel(R) Core(TM)2 Duo CPU T5750 @ 2.00GHz
                                        Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6001 32-bit) # Service Pack 1
                                        Internet Explorer 8.0.6001.18828
                                        Windows Firewall Status : Disabled

                                        C:\ -> Disque fixe local | 220,58 Go (123,93 Go free) [OS] | NTFS
                                        D:\ -> Disque fixe local | 9,77 Go (5,56 Go free) [RECOVERY] | NTFS
                                        E:\ -> Disque CD-ROM
                                        G:\ -> Disque CD-ROM

                                        ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

                                        C:\Windows\System32\smss.exe 516
                                        C:\Windows\system32\csrss.exe 656
                                        C:\Windows\system32\csrss.exe 700
                                        C:\Windows\system32\wininit.exe 708
                                        C:\Windows\system32\services.exe 752
                                        C:\Windows\system32\lsass.exe 768
                                        C:\Windows\system32\lsm.exe 780
                                        C:\Windows\system32\winlogon.exe 852
                                        C:\Windows\system32\svchost.exe 972
                                        C:\Windows\system32\svchost.exe 1040
                                        C:\Windows\System32\svchost.exe 1084
                                        C:\Windows\System32\svchost.exe 1220
                                        C:\Windows\System32\svchost.exe 1272
                                        C:\Windows\system32\svchost.exe 1292
                                        C:\Windows\system32\svchost.exe 1400
                                        C:\Windows\system32\SLsvc.exe 1428
                                        C:\Windows\system32\svchost.exe 1456
                                        C:\Program Files\Dell\DellDock\DockLogin.exe 1572
                                        C:\Windows\System32\WLTRYSVC.EXE 1776
                                        C:\Windows\System32\bcmwltry.exe 1796
                                        C:\Windows\system32\WLANExt.exe 1832
                                        C:\Windows\System32\spoolsv.exe 1924
                                        C:\Windows\system32\svchost.exe 1960
                                        C:\Windows\system32\aestsrv.exe 664
                                        C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe 704
                                        C:\Program Files\Bonjour\mDNSResponder.exe 1256
                                        C:\Windows\system32\svchost.exe 1496
                                        C:\Windows\system32\svchost.exe 1648
                                        C:\Windows\system32\svchost.exe 2052
                                        C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe 2080
                                        C:\Windows\System32\svchost.exe 2112
                                        C:\Windows\System32\svchost.exe 2184
                                        C:\Windows\system32\svchost.exe 2196
                                        C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe 2252
                                        C:\Windows\system32\STacSV.exe 2452
                                        C:\Windows\system32\svchost.exe 2968
                                        C:\Windows\System32\svchost.exe 3048
                                        C:\Windows\system32\SearchIndexer.exe 3104
                                        C:\Windows\system32\DRIVERS\xaudio.exe 3152
                                        C:\Windows\system32\Dwm.exe 3304
                                        C:\Windows\Explorer.EXE 3320
                                        C:\Program Files\Dell\DellDock\DellDock.exe 3328
                                        C:\Windows\system32\taskeng.exe 3400
                                        C:\Windows\system32\taskeng.exe 3728
                                        C:\Windows\system32\conime.exe 3960
                                        C:\Program Files\Windows Defender\MSASCui.exe 3984
                                        C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe 4024
                                        C:\Windows\System32\hkcmd.exe 4036
                                        C:\Windows\System32\igfxpers.exe 4044
                                        C:\Windows\System32\WLTRAY.EXE 4060
                                        C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe 2152
                                        C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe 2628
                                        C:\Windows\system32\igfxsrvc.exe 816
                                        C:\Program Files\DellTPad\Apoint.exe 2676
                                        C:\Program Files\iTunes\iTunesHelper.exe 2668
                                        C:\Program Files\Windows Live\Messenger\msnmsgr.exe 820
                                        C:\Windows\ehome\ehtray.exe 3076
                                        C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 3092
                                        C:\Windows\ehome\ehmsas.exe 2920
                                        C:\Users\Alex\AppData\Local\MétéoMédia\MétéoÉclair\WeatherEye.exe 2908
                                        C:\Program Files\Windows Media Player\wmpnscfg.exe 2280
                                        C:\Program Files\DellTPad\ApMsgFwd.exe 1952
                                        C:\Program Files\DellTPad\HidFind.exe 3972
                                        C:\Program Files\DellTPad\Apntex.exe 3932
                                        C:\Program Files\Windows Media Player\wmpnetwk.exe 2928
                                        C:\Program Files\iPod\bin\iPodService.exe 4648
                                        C:\Windows\System32\alg.exe 248
                                        C:\Windows\system32\wuauclt.exe 2704
                                        C:\Windows\system32\rundll32.exe 5120
                                        C:\Windows\system32\SearchProtocolHost.exe 5124
                                        C:\Windows\system32\SearchFilterHost.exe 5536
                                        C:\Windows\system32\FirewallControlPanel.exe 1728
                                        C:\Users\Alex\Desktop\List_Killem\List_Kill'em.exe 2648
                                        C:\Windows\system32\cmd.exe 584
                                        C:\Windows\system32\wbem\wmiprvse.exe 5416
                                        C:\Users\Alex\AppData\Local\Temp\565B.tmp\pv.exe 3004

                                        Detections :
                                        ==========

                                        ¤¤¤¤¤¤¤¤¤¤ Files/folders :

                                        ¤¤¤¤¤¤¤¤¤¤ Files/folders deleted :

                                        Quarantine :

                                        ==============
                                        host file OK !
                                        ==============

                                        ========
                                        Registry
                                        ========

                                        ============
                                        Disk Cleaned
                                        ============

                                        ================
                                        Prefetch cleaned :
                                        ================

                                        AgAppLaunch.db
                                        AgCx_SC1.db
                                        AgCx_SC1.db.trx
                                        AgCx_SC2.db
                                        AgGlFaultHistory.db
                                        AgGlFgAppHistory.db
                                        AgGlGlobalHistory.db
                                        AgGlUAD_P_S-1-5-21-1163731851-2969585075-2157050625-1000.db
                                        AgGlUAD_S-1-5-21-1163731851-2969585075-2157050625-1000.db
                                        AgRobust.db
                                        Layout.ini
                                        NTOSBOOT-B00DFAAD.pf
                                        PfSvPerfStats.bin
                                        ReadyBoot

                                        ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
                                        0
                                        • 1
                                        • 2