Matoss na pas suport2 le nouvel an

-----------\\ ToolBar S&D 1.2.9 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6002 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : TONI ( Not Administrator ! )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:224 Go (Free:192 Go)
D:\ (CD or DVD) - UDF - Total:7 Go (Free:0 Go)
E:\ (USB)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)

"C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
Option : [2] ( 06/01/2010|22:24 )

[ UAC => 0 ]

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\Windows\\system32\\blank.htm"
"Start Page"="http://www.nixud.com/"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page Redirect Cache"="https://www.msn.com/fr-fr?ocid=iehp"
"Url"="http://go.microsoft.com/fwlink/?LinkId=75720"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Local Page"="C:\\Windows\\System32\\blank.htm"
"Start Page"="https://www.msn.com/fr-fr/"


--------------------\\ Recherche d'autres infections

C:\Program Files\Live-Player
C:\Program Files\Live-Player\live-player.exe
C:\Program Files\Live-Player\SkinCrafterDll.dll
C:\Program Files\Live-Player\sqlite3.dll
C:\Users\TONI\AppData\Roaming\live-player
C:\Users\TONI\AppData\Roaming\live-player\flv.swf
C:\Users\TONI\AppData\Roaming\live-player\liveplayer.s3db

C:\Users\TONI\AppData\Local\mchnbbp.dat
C:\Users\TONI\AppData\Local\mchnbbp_nav.dat
C:\Users\TONI\AppData\Local\mchnbbp_navps.dat
C:\Users\TONI\AppData\Local\uqsgk.dat
C:\Users\TONI\AppData\Local\uqsgk_nav.dat
C:\Users\TONI\AppData\Local\uqsgk_navps.dat
[b]==> EGDACCESS <==/b



[ UAC => 1 ]


1 - "C:\ToolBar SD\TB_1.txt" - 06/01/2010|22:25 - Option : [2]

-----------\\ Fin du rapport a 22:25:52,19

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6002 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : TONI ( Not Administrator ! )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:224 Go (Free:192 Go)
D:\ (CD or DVD) - UDF - Total:7 Go (Free:0 Go)
E:\ (USB)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 06/01/2010|22:33 )

[ UAC => 1 ]

--------------------\\ Listing des dossiers dans Local

[02/09/2009|17:05] C:\Users\TONI\AppData\Local\Adobe
[01/01/2009|18:00] C:\Users\TONI\AppData\Local\Application Data
[06/01/2010|22:19] C:\Users\TONI\AppData\Local\ApplicationHistory
[18/04/2009|19:37] C:\Users\TONI\AppData\Local\Apps
[30/07/2009|11:02] C:\Users\TONI\AppData\Local\bwdamyu.bat
[08/12/2009|13:30] C:\Users\TONI\AppData\Local\d3d9caps.dat
[10/12/2009|19:55] C:\Users\TONI\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[28/04/2009|12:28] C:\Users\TONI\AppData\Local\Deployment
[15/12/2009|22:25] C:\Users\TONI\AppData\Local\eMule
[01/01/2009|18:04] C:\Users\TONI\AppData\Local\fusioncache.dat
[05/01/2010|20:42] C:\Users\TONI\AppData\Local\GDIPFONTCACHEV1.DAT
[04/12/2009|18:51] C:\Users\TONI\AppData\Local\goako.bat
[05/01/2010|20:08] C:\Users\TONI\AppData\Local\Google
[01/01/2009|18:00] C:\Users\TONI\AppData\Local\Historique
[06/01/2010|22:16] C:\Users\TONI\AppData\Local\IconCache.db
[04/12/2009|18:51] C:\Users\TONI\AppData\Local\mchnbbp.dat
[29/11/2009|14:42] C:\Users\TONI\AppData\Local\mchnbbp_nav.dat
[04/12/2009|18:51] C:\Users\TONI\AppData\Local\mchnbbp_navps.dat
[26/03/2009|15:34] C:\Users\TONI\AppData\Local\Microsoft
[25/01/2009|15:47] C:\Users\TONI\AppData\Local\Microsoft Games
[03/01/2010|18:45] C:\Users\TONI\AppData\Local\Microsoft Help
[06/01/2009|18:58] C:\Users\TONI\AppData\Local\Mozilla
[23/05/2009|10:31] C:\Users\TONI\AppData\Local\Packard Bell
[03/01/2010|19:40] C:\Users\TONI\AppData\Local\PC_Drivers_Headquarters
[03/01/2010|18:45] C:\Users\TONI\AppData\Local\PlayMovie
[19/06/2009|07:22] C:\Users\TONI\AppData\Local\PunkBuster
[18/05/2009|11:21] C:\Users\TONI\AppData\Local\Seven Zip
[06/01/2010|22:33] C:\Users\TONI\AppData\Local\Temp
[01/01/2009|18:00] C:\Users\TONI\AppData\Local\Temporary Internet Files
[04/01/2010|19:29] C:\Users\TONI\AppData\Local\Threat Expert
[03/01/2010|18:45] C:\Users\TONI\AppData\Local\TVEnhance
[03/01/2010|18:35] C:\Users\TONI\AppData\Local\uqsgk.dat
[02/01/2010|14:28] C:\Users\TONI\AppData\Local\uqsgk_nav.dat
[03/01/2010|18:34] C:\Users\TONI\AppData\Local\uqsgk_navps.dat
[01/01/2009|18:04] C:\Users\TONI\AppData\Local\VirtualStore
[10/01/2009|00:52] C:\Users\TONI\AppData\Local\Windows Live Writer

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[06/01/2010 22:32][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{2CCE66AC-201F-4AFB-8C7F-6D6F015788A9}.job
[06/01/2010 22:01][--a------] C:\Windows\tasks\Scheduled scanning task.job
[04/02/2009 19:51][--a------] C:\Windows\tasks\HDReg.job
[06/01/2010 19:29][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{F1E9850D-2CB2-4997-A15D-8579FCE27CEB}.job
[06/01/2010 22:00][--a------] C:\Windows\tasks\Extension de garantie.job
[06/01/2010 22:17][--ah-----] C:\Windows\tasks\SA.DAT
[06/01/2010 22:16][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[10/01/2009|01:21] C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[03/01/2010|18:59] C:\ProgramData\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
[17/11/2009|09:06] C:\ProgramData\Adobe
[02/11/2006|14:02] C:\ProgramData\Application Data
[03/01/2010|16:27] C:\ProgramData\AVP 2009
[09/10/2009|15:15] C:\ProgramData\Brother
[01/01/2009|17:57] C:\ProgramData\Bureau
[26/03/2009|20:04] C:\ProgramData\CyberLink
[02/11/2006|14:02] C:\ProgramData\Desktop
[02/11/2006|14:02] C:\ProgramData\Documents
[26/03/2009|18:43] C:\ProgramData\Downloaded Installations
[15/12/2009|22:25] C:\ProgramData\eMule
[21/01/2009|19:10] C:\ProgramData\EPSON
[20/02/2009|14:06] C:\ProgramData\ezsidmv.dat
[01/01/2009|17:57] C:\ProgramData\Favoris
[02/11/2006|14:02] C:\ProgramData\Favorites
[15/06/2009|11:06] C:\ProgramData\f-secure
[15/06/2009|11:04] C:\ProgramData\fssg
[28/05/2009|12:48] C:\ProgramData\Google
[08/04/2008|15:13] C:\ProgramData\InstallShield
[01/01/2009|17:57] C:\ProgramData\Menu D‚marrer
[15/01/2009|10:43] C:\ProgramData\Messenger Plus!
[16/06/2009|11:41] C:\ProgramData\Micro Application
[03/01/2010|19:48] C:\ProgramData\Microsoft
[29/10/2009|10:58] C:\ProgramData\Microsoft Help
[01/01/2009|17:57] C:\ProgramData\ModŠles
[05/01/2010|20:32] C:\ProgramData\Nero
[17/06/2009|08:33] C:\ProgramData\NOS
[06/01/2010|22:17] C:\ProgramData\NVIDIA
[06/01/2010|22:18] C:\ProgramData\nvModes.001
[06/01/2010|22:18] C:\ProgramData\nvModes.dat
[03/01/2010|19:40] C:\ProgramData\PC Drivers HeadQuarters
[26/03/2009|19:10] C:\ProgramData\PS.log
[02/01/2010|12:42] C:\ProgramData\Roxio
[26/03/2009|19:16] C:\ProgramData\Skype
[08/04/2008|15:13] C:\ProgramData\Sonic
[02/11/2006|14:02] C:\ProgramData\Start Menu
[16/09/2009|16:57] C:\ProgramData\SweetIM
[04/01/2010|19:35] C:\ProgramData\Temp
[02/11/2006|14:02] C:\ProgramData\Templates
[03/01/2010|18:59] C:\ProgramData\TuneUp Software
[26/03/2009|20:33] C:\ProgramData\TVU Networks
[04/01/2010|19:45] C:\ProgramData\UAB
[16/01/2009|18:51] C:\ProgramData\Ubisoft
[21/01/2009|19:14] C:\ProgramData\UDL
[10/07/2009|13:58] C:\ProgramData\Yahoo!
[06/01/2010|20:22] C:\ProgramData\Yahoo! Companion

--------------------\\ Listing des dossiers dans C:\Program Files

[02/09/2009|17:07] C:\Program Files\Adobe
[03/01/2010|22:05] C:\Program Files\AGEIA Technologies
[03/01/2010|16:11] C:\Program Files\Alwil Software
[03/01/2010|18:45] C:\Program Files\Anuman Interactive
[06/01/2010|20:22] C:\Program Files\CCleaner
[05/01/2010|20:29] C:\Program Files\Common Files
[26/03/2009|20:04] C:\Program Files\CyberLink
[03/01/2010|18:45] C:\Program Files\epson
[01/01/2009|17:57] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[03/01/2010|18:45] C:\Program Files\Google
[08/04/2008|15:07] C:\Program Files\HDReg
[07/02/2009|18:41] C:\Program Files\Hercules
[27/11/2009|23:09] C:\Program Files\InstallShield Installation Information
[10/12/2009|20:31] C:\Program Files\Internet Explorer
[31/12/2009|11:33] C:\Program Files\Java
[03/01/2010|18:45] C:\Program Files\Live-Player
[05/11/2009|13:28] C:\Program Files\Messenger Plus! Live
[10/01/2009|00:37] C:\Program Files\Microsoft
[02/11/2006|13:37] C:\Program Files\Microsoft Games
[29/10/2009|10:58] C:\Program Files\Microsoft Office
[02/10/2009|20:14] C:\Program Files\Microsoft Office Outlook Connector
[09/09/2009|20:37] C:\Program Files\Microsoft Silverlight
[10/01/2009|00:36] C:\Program Files\Microsoft SQL Server Compact Edition
[10/01/2009|00:36] C:\Program Files\Microsoft Sync Framework
[29/10/2009|10:57] C:\Program Files\Microsoft Works
[26/09/2009|11:44] C:\Program Files\Movie Maker
[15/06/2009|11:22] C:\Program Files\Mozilla Firefox
[02/11/2006|13:37] C:\Program Files\MSBuild
[10/01/2009|14:31] C:\Program Files\MSXML 4.0
[05/01/2010|20:38] C:\Program Files\Nero
[17/06/2009|08:33] C:\Program Files\NOS
[03/01/2010|22:07] C:\Program Files\NVIDIA Corporation
[04/11/2009|14:06] C:\Program Files\Orange
[30/10/2009|13:48] C:\Program Files\OrangeHSS
[03/01/2010|18:45] C:\Program Files\Packard Bell
[03/01/2010|19:39] C:\Program Files\PC Drivers HeadQuarters
[28/05/2009|11:31] C:\Program Files\QUAD Utilities
[03/01/2010|18:45] C:\Program Files\Real
[08/04/2008|15:03] C:\Program Files\Realtek
[02/11/2006|13:37] C:\Program Files\Reference Assemblies
[03/01/2010|16:27] C:\Program Files\RegistryDoktor 4.1
[03/01/2010|18:45] C:\Program Files\Rhapsody
[05/01/2010|19:55] C:\Program Files\Roxio
[08/04/2008|15:08] C:\Program Files\Seagate
[14/11/2009|13:25] C:\Program Files\Search Guard Plus
[14/11/2009|13:25] C:\Program Files\Search Guard PlusU
[09/01/2009|16:59] C:\Program Files\Securitoo
[03/01/2010|18:45] C:\Program Files\SGPSA
[24/11/2009|09:00] C:\Program Files\SweetIM
[06/01/2010|19:01] C:\Program Files\trend micro
[05/01/2010|21:01] C:\Program Files\TuneUp Utilities 2010
[02/11/2006|14:01] C:\Program Files\Uninstall Information
[03/01/2010|18:45] C:\Program Files\VideoLAN
[26/09/2009|11:44] C:\Program Files\Windows Calendar
[26/09/2009|11:44] C:\Program Files\Windows Collaboration
[26/09/2009|11:43] C:\Program Files\Windows Defender
[26/09/2009|11:44] C:\Program Files\Windows Journal
[02/10/2009|20:12] C:\Program Files\Windows Live
[10/01/2009|00:35] C:\Program Files\Windows Live SkyDrive
[10/12/2009|20:31] C:\Program Files\Windows Mail
[01/11/2009|20:47] C:\Program Files\Windows Media Player
[01/01/2009|17:57] C:\Program Files\Windows NT
[26/09/2009|11:44] C:\Program Files\Windows Photo Gallery
[17/11/2009|21:43] C:\Program Files\Windows Portable Devices
[26/09/2009|11:44] C:\Program Files\Windows Sidebar
[29/12/2009|16:26] C:\Program Files\Winsudate
[02/01/2010|13:15] C:\Program Files\Yahoo!
[06/04/2009|17:58] C:\Program Files\YesMessenger

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[17/11/2009|09:06] C:\Program Files\Common Files\Adobe
[02/09/2009|17:06] C:\Program Files\Common Files\Adobe AIR
[26/03/2009|19:48] C:\Program Files\Common Files\CyberLink
[29/10/2009|10:57] C:\Program Files\Common Files\DESIGNER
[09/01/2009|22:00] C:\Program Files\Common Files\France Telecom
[26/03/2009|19:00] C:\Program Files\Common Files\InstallShield
[29/10/2009|10:58] C:\Program Files\Common Files\microsoft shared
[05/01/2010|20:38] C:\Program Files\Common Files\Nero
[04/01/2010|19:36] C:\Program Files\Common Files\PC Tools
[03/01/2010|18:45] C:\Program Files\Common Files\Real
[05/01/2010|19:55] C:\Program Files\Common Files\Roxio Shared
[02/11/2006|12:18] C:\Program Files\Common Files\Services
[02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
[03/01/2010|18:45] C:\Program Files\Common Files\Symantec Shared
[02/10/2009|20:14] C:\Program Files\Common Files\System
[10/01/2009|00:28] C:\Program Files\Common Files\Windows Live
[03/01/2010|22:05] C:\Program Files\Common Files\Wise Installation Wizard
[03/01/2010|18:45] C:\Program Files\Common Files\xing shared

--------------------\\ Process

( 83 Processes )

iexplore.exe ~ [PID:776]
iexplore.exe ~ [PID:4404]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-06 22:34:35
Windows 6.0.6002 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections

C:\Program Files\Live-Player
C:\Program Files\Live-Player\live-player.exe
C:\Program Files\Live-Player\SkinCrafterDll.dll
C:\Program Files\Live-Player\sqlite3.dll
C:\Users\TONI\AppData\Roaming\live-player
C:\Users\TONI\AppData\Roaming\live-player\flv.swf
C:\Users\TONI\AppData\Roaming\live-player\liveplayer.s3db

C:\Users\TONI\AppData\Local\mchnbbp.dat
C:\Users\TONI\AppData\Local\mchnbbp_nav.dat
C:\Users\TONI\AppData\Local\mchnbbp_navps.dat
C:\Users\TONI\AppData\Local\uqsgk.dat
C:\Users\TONI\AppData\Local\uqsgk_nav.dat
C:\Users\TONI\AppData\Local\uqsgk_navps.dat
[b]==> EGDACCESS <==/b



[F:20][D:3]-> C:\Users\TONI\AppData\Local\Temp
[F:22][D:1]-> C:\Users\TONI\AppData\Roaming\MICROS~1\Windows\Cookies
[F:241][D:4]-> C:\Users\TONI\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:7][D:5]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 06/01/2010|22:36 - Option : [1]

--------------------\\ Fin du rapport a 22:36:41
[ UAC => 1 ]

chere ami j vous est envoyé les 2 rapports !!!!!!!!! j tien a vous présiser que si il faut viré plein de programes tel que e.mule et autre live player etc ce n ai pas 1 probleme
cordialement

bon mon ami
j sai que ces pa evident pour resourdr a distance 1probleme tel que ce lui ci
j vous demanderai si il y a moyen de l remetre vierge cet a dire a l etat de sorti de lemballage ?
comment faire pour retiré et revenir a l etat inicial? et si oui il y t il risque que les souci persiste?
ou alors retiré tout ce qu on a fait ?et commen faire ?
et j l emmene a l agence pour diagnostique !!!!!!!!!!!!!!!
cordialement

info.txt logfile of random's system information tool 1.06 2010-01-06 19:01:40

======Uninstall list======

-->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Spyware Scanner"
-->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Spyware"
-->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Virus Client Security Installer"
-->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Virus"
-->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Automatic Update Agent"
-->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure DAAS"
-->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure DAAS2"
-->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Diagnostics"
-->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure E-mail Scanning"
-->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure FWES"
-->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure GateKeeper Interface"
-->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Gemini"
-->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure GUI"
-->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Help"
-->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure HIPS"
-->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Internet Shield"
-->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure ISP News"
-->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Localization API"
-->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Management Agent"
-->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure ORSP Client"
-->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Pegasus Engine"
-->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Protocol Scanner"
-->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Spam Control"
-->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Spam Scanner"
-->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure TNB"
-->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Uninstall"
-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->MsiExec /X{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A450831D-25F6-4F42-9662-D000B25E0D82}\Setup.exe" -uninstall
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E4C891D6-6844-41B8-86E8-633CACCC644F}\Setup.exe" -uninstall
Acrobat.com-->C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR Application Installer.exe -uninstall com.adobe.mauby 4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
Acrobat.com-->MsiExec.exe /I{77DCDCE3-2DED-62F3-8154-05E745472D07}
Adobe AIR-->C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{00203668-8170-44A0-BE44-B632FA4D780F}
Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 9 ActiveX-->C:\Windows\system32\Macromed\Flash\FlashUtil9b.exe -uninstallDelete
Adobe Flash Player Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 8-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *AdobeReader*
Adobe Reader 9.1.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A91000000001}
Adobe Reader 9.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A92000000001}
Adobe Shockwave Player 11-->C:\Windows\system32\adobe\SHOCKW~1\UNWISE.EXE C:\Windows\system32\Adobe\SHOCKW~1\Install.log
Adobe Shockwave Player-->MsiExec.exe /X{1BDC9633-895B-4842-BCB6-8FA1EC2A3C5A}
Advertising Center-->MsiExec.exe /X{B2EC4A38-B545-4A00-8214-13FE0E915E6D}
AntiVirus Firewall-->"C:\Program Files\Orange\AntivirusFirewall\FSGUI\PostInstall.exe" /tUnInstall
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
CX4300_5500_DX4400 Manuel-->C:\Program Files\EPSON\TPMANUAL\CX4300_5500_DX4400\FRA\USE_G\DOCUNINS.EXE
DolbyFiles-->MsiExec.exe /X{B1ADF008-E898-4FE2-8A1F-690D9A06ACAF}
Driver Detective-->MsiExec.exe /X{4640FDE1-B83A-4376-84ED-86F86BEE2D41}
EPSON Logiciel imprimante-->C:\Windows\system32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
Favorit-->c:\users\toni\appdata\local\bwdamyu.bat
Firefox-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *FirefoxFR*
Flash Player 9 Internet Explorer-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *Flashplayer*
Galerie de photos Windows Live-->MsiExec.exe /X{B131E59D-202C-43C6-84C9-68F0C37541F1}
GearDrvs-->MsiExec.exe /I{206FD69B-F9FE-4164-81BD-D52552BC9C23}
GearDrvs-->MsiExec.exe /I{CB84F0F2-927B-458D-9DC5-87832E3DC653}
Gestionnaire pour appareils Windows Mobile-->MsiExec.exe /I{1F2A5DF9-40E1-4644-ADBD-D80F347BA6C8}
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_0E996B068B56FCA2.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
HDReg France-->MsiExec.exe /I{0ED40D2A-7131-4FE7-941E-5C329336F712}
Hercules WiFi Station for Livebox-->C:\Program Files\InstallShield Installation Information\{DECE22F4-EEDD-4615-BC56-2F4827FAD64B}\setup.exe -runfromtemp -l0x040c -removeonly
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Infocentre Rev. 2.0-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *Infocentre*
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
Intel(R) Graphics Media Accelerator Driver-->C:\Windows\system32\igxpun.exe -uninstall
Java(TM) 6 Update 17-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216013FF}
Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
Menu Templates - Starter Kit-->MsiExec.exe /X{B78120A0-CF84-4366-A393-4D0A59BC546C}
Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft .NET Framework 1.1 Security Update (KB953297)-->"C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
Microsoft Office Outlook Connector-->MsiExec.exe /I{95120000-0122-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint Viewer 2007 (French)-->MsiExec.exe /X{95120000-00AF-040C-0000-0000000FF1CE}
Microsoft Search Enhancement Pack-->MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Works 9 SE-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *works9se*
Microsoft Works-->MsiExec.exe /I{0214A441-A4AB-43A8-8DEF-2F73C5364673}
Mise à jour du pilote du Gestionnaire pour appareils Windows Mobile-->MsiExec.exe /X{CB8CA439-DA83-419C-A4CF-5A0A50025144}
Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
Movie Templates - Starter Kit-->MsiExec.exe /X{E498385E-1C51-459A-B45F-1721E37AA1A0}
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
Nero 9 Trial-->C:\Program Files\Common Files\Nero\Nero ProductInstaller 4\SetupX.exe REMOVESERIALNUMBER="8M01-2085-KK25-2LEE-0UHL-8MPA-6H4U-EHAL"
Nero BurnRights-->MsiExec.exe /X{7829DB6F-A066-4E40-8912-CB07887C20BB}
Nero ControlCenter-->MsiExec.exe /X{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}
Nero CoverDesigner-->MsiExec.exe /X{62AC81F6-BDD3-4110-9D36-3E9EAAB40999}
Nero Disc Copy Gadget-->MsiExec.exe /X{F1861F30-3419-44DB-B2A1-C274825698B3}
Nero DiscSpeed-->MsiExec.exe /X{869200DB-287A-4DC0-B02B-2B6787FBCD4C}
Nero DriveSpeed-->MsiExec.exe /X{33CF58F5-48D8-4575-83D6-96F574E4D83A}
Nero InfoTool-->MsiExec.exe /X{FBCDFD61-7DCF-4E71-9226-873BA0053139}
Nero Installer-->MsiExec.exe /X{E8A80433-302B-4FF1-815D-FCC8EAC482FF}
Nero PhotoSnap-->MsiExec.exe /X{9E82B934-9A25-445B-B8DF-8012808074AC}
Nero Recode-->MsiExec.exe /X{359CFC0A-BEB1-440D-95BA-CF63A86DA34F}
Nero Rescue Agent-->MsiExec.exe /X{368BA326-73AD-4351-84ED-3C0A7A52CC53}
Nero ShowTime-->MsiExec.exe /X{D9DCF92E-72EB-412D-AC71-3B01276E5F8B}
Nero StartSmart-->MsiExec.exe /X{7748AC8C-18E3-43BB-959B-088FAEA16FB2}
Nero Vision-->MsiExec.exe /X{43E39830-1826-415D-8BAE-86845787B54B}
Nero WaveEditor-->MsiExec.exe /X{A209525B-3377-43F4-B886-32F6B6E7356F}
NeroBurningROM-->MsiExec.exe /X{D025A639-B9C9-417D-8531-208859000AF8}
NeroExpress-->MsiExec.exe /X{595A3116-40BB-4E0F-A2E8-D7951DA56270}
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
Norton 360-->MsiExec.exe /I{63A6E9A9-A190-46D4-9430-2DB28654AFD8}
NVIDIA Display Control Panel-->C:\Program Files\NVIDIA Corporation\Uninstall\nvuninst.exe DisplayControlPanel
NVIDIA Drivers-->C:\Windows\system32\nvuninst.exe UninstallGUI
NVIDIA PhysX-->MsiExec.exe /X{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}
NVIDIA Stereoscopic 3D Driver-->"C:\Program Files\NVIDIA Corporation\3D Vision\nvStInst.exe" /uninstall /ask
Orange - Logiciels Internet-->C:\Program Files\OrangeHSS\installation\core\Installgui.exe -u
Orange WebTV Player 1.29418-->"C:\Program Files\Orange\Orange WebTV Player\unins000.exe"
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Picasa 2-->"C:\Program Files\Picasa2\Uninstall.exe"
Picasa 3-->"C:\Program Files\Google\Picasa3\Uninstall.exe"
Picasa2-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *Picasa_2*
PunkBuster Services-->C:\Windows\system32\pbsvc.exe -u
PVSonyDll-->MsiExec.exe /I{3D3E663D-4E7E-4577-A560-7ECDDD45548A}
RealPlayer-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Realtek HD Audio V6.0.1.5490-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *AUDIO_REALTEK*
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m
Rhapsody-->C:\PROGRA~1\Rhapsody\Unwise32.exe /A C:\PROGRA~1\Rhapsody\install.log
Search Guard Plus (My Web Tattoo)-->C:\Program Files\Search Guard Plus\uninstalSGP.exe
Search Guard Plus Updater (My Web Tattoo)-->C:\Program Files\Search Guard PlusU\uninstalSGPU.exe
SeaTools for Windows-->MsiExec.exe /I{98613C99-1399-416C-A07C-1EE1C585D872}
SetUp My PC-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *SETUPMYPC_FR*
Shockwave player 10-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *Shockwave*
Skype 3.5.2.239-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *SKYPE*
SoundTrax-->MsiExec.exe /X{C5A7CB6C-E76D-408F-BA0E-85605420FE9D}
SweetIM for Messenger 2.8-->MsiExec.exe /X{DF6F459C-8B89-4F88-B63F-A2E136BB6B79}
SweetIM Toolbar for Internet Explorer 3.6-->MsiExec.exe /X{31CF6C0E-51F0-41D2-B088-A6A143C4303C}
TuneUp Utilities-->C:\Program Files\TuneUp Utilities 2010\TUInstallHelper.exe --Trigger-Uninstall
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Video NVIDIA v163.69-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *VIDEO_NVIDIA*
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Contrôle parental-->MsiExec.exe /X{D5D81435-B8DE-4CAF-867F-7998F2B92CFC}
Windows Live FolderShare-->MsiExec.exe /X{2075CB0A-D26F-4DAA-B424-5079296B43BA}
Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}
Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
Windows Live Movie Maker-->MsiExec.exe /X{53B20C18-D8D4-4588-8737-9BBFE303C354}
Windows Live Writer-->MsiExec.exe /X{4634B21A-CC07-4396-890C-2B8168661FEA}

======Security center information======

AS: Windows Defender (disabled)

======System event log======

Computer Name: PC-de-TONI
Event Code: 1003
Message: Votre ordinateur n'a pas pu renouveler son adresse à partir du réseau (à partir du serveur DHCP) pour la carte réseau dont l'adresse réseau est 0008D33AB58B. Il s'est produit l'erreur suivante :
L'opération a été annulée par l'utilisateur.. Votre ordinateur va continuer à essayer d'obtenir sa propre adresse auprès du serveur d'adresse réseau (DHCP).
Record Number: 59437
Source Name: Microsoft-Windows-Dhcp-Client
Time Written: 20090620074455.000000-000
Event Type: Avertissement
User:

Computer Name: PC-de-TONI
Event Code: 1003
Message: Votre ordinateur n'a pas pu renouveler son adresse à partir du réseau (à partir du serveur DHCP) pour la carte réseau dont l'adresse réseau est 0008D33AB58B. Il s'est produit l'erreur suivante :
L'opération a été annulée par l'utilisateur.. Votre ordinateur va continuer à essayer d'obtenir sa propre adresse auprès du serveur d'adresse réseau (DHCP).
Record Number: 59433
Source Name: Microsoft-Windows-Dhcp-Client
Time Written: 20090620074451.000000-000
Event Type: Avertissement
User:

Computer Name: PC-de-TONI
Event Code: 1003
Message: Votre ordinateur n'a pas pu renouveler son adresse à partir du réseau (à partir du serveur DHCP) pour la carte réseau dont l'adresse réseau est 0008D33AB58B. Il s'est produit l'erreur suivante :
L'opération a été annulée par l'utilisateur.. Votre ordinateur va continuer à essayer d'obtenir sa propre adresse auprès du serveur d'adresse réseau (DHCP).
Record Number: 59428
Source Name: Microsoft-Windows-Dhcp-Client
Time Written: 20090620074448.000000-000
Event Type: Avertissement
User:

Computer Name: PC-de-TONI
Event Code: 134
Message: NtpClient n'a pas pu définir d'homologue manuel à utiliser comme source de temps en raison d'une erreur de résolution DNS sur " time.windows.com,0x9 ". NtpClient réessaiera dans 15 minutes, et à nouveau une fois le double de l'intervalle de nouvelle tentative écoulé. L'erreur était : Hôte inconnu. (0x80072AF9)
Record Number: 59402
Source Name: Microsoft-Windows-Time-Service
Time Written: 20090619162934.000000-000
Event Type: Avertissement
User:

Computer Name: PC-de-TONI
Event Code: 1003
Message: Votre ordinateur n'a pas pu renouveler son adresse à partir du réseau (à partir du serveur DHCP) pour la carte réseau dont l'adresse réseau est 0008D33AB58B. Il s'est produit l'erreur suivante :
L'opération a été annulée par l'utilisateur.. Votre ordinateur va continuer à essayer d'obtenir sa propre adresse auprès du serveur d'adresse réseau (DHCP).
Record Number: 59400
Source Name: Microsoft-Windows-Dhcp-Client
Time Written: 20090619162925.000000-000
Event Type: Avertissement
User:

=====Application event log=====

Computer Name: PC-de-TONI
Event Code: 5007
Message: Impossible d’analyser le fichier cible de la plateforme de signalement de problèmes Windows (fichier DLL contenant la liste des problèmes de l’ordinateur et nécessitant la collecte de données supplémentaires à des fins de diagnostic). Le code d’erreur était : 8014FFF9.
Record Number: 435
Source Name: WerSvc
Time Written: 20090101165700.000000-000
Event Type: Erreur
User:

Computer Name: PC-de-TONI
Event Code: 1008
Message: Le service Windows Search tente de supprimer l’ancien catalogue.

Record Number: 426
Source Name: Microsoft-Windows-Search
Time Written: 20090101165606.000000-000
Event Type: Avertissement
User:

Computer Name: LH-NYTY0HYM0DRY
Event Code: 4440
Message: Le fichier journal du CRM a initialement été créé sur un ordinateur ne portant pas le même nom. Il a été mis à jour avec le nom de l'ordinateur actuel. Si cet avertissement s'affiche lorsque le nom de l'ordinateur a été modifié, aucune action supplémentaire n'est requise. LH-NYTY0HYM0DRY

ID de l'application serveur : {02D4B3F1-FD88-11D1-960D-00805FC79235}
ID d'instance d'application serveur :
{81D92654-82D5-4482-A4F3-2C919C23E831}
Nom de l'application serveur : System Application
Version du fichier Comsvcs.dll : ENU 2001.12.6930.16386 shp
Record Number: 403
Source Name: Microsoft-Windows-Complus
Time Written: 20090101164636.000000-000
Event Type: Avertissement
User:

Computer Name: LH-NYTY0HYM0DRY
Event Code: 1036
Message: Échec de InitializePrintProvider pour le fournisseur inetpp.dll. Cela peut se produire à la suite d’une instabilité du système ou d’une insuffisance des ressources système.
Record Number: 400
Source Name: Microsoft-Windows-SpoolerSpoolss
Time Written: 20090101164414.000000-000
Event Type: Avertissement
User: AUTORITE NT\SYSTEM

Computer Name: LH-NYTY0HYM0DRY
Event Code: 5007
Message: Impossible d’analyser le fichier cible de la plateforme de signalement de problèmes Windows (fichier DLL contenant la liste des problèmes de l’ordinateur et nécessitant la collecte de données supplémentaires à des fins de diagnostic). Le code d’erreur était : 8014FFF9.
Record Number: 394
Source Name: WerSvc
Time Written: 20090101164224.000000-000
Event Type: Erreur
User:

=====Security event log=====

Computer Name: PC-de-TONI
Event Code: 4624
Message: L’ouverture de session d’un compte s’est correctement déroulée.

Sujet :
ID de sécurité : S-1-0-0
Nom du compte : -
Domaine du compte : -
ID d’ouverture de session : 0x0

Type d’ouverture de session : 0

Nouvelle ouverture de session :
ID de sécurité : S-1-5-18
Nom du compte : SYSTEM
Domaine du compte : AUTORITE NT
ID d’ouverture de session : 0x3e7
GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

Informations sur le processus :
ID du processus : 0x4
Nom du processus :

Informations sur le réseau :
Nom de la station de travail : -
Adresse du réseau source : -
Port source : -

Informations détaillées sur l’authentification :
Processus d’ouverture de session : -
Package d’authentification : -
Services en transit : -
Nom du package (NTLM uniquement) : -
Longueur de la clé : 0

Cet événement est généré lors de la création d’une ouverture de session. Il est généré sur l’ordinateur sur lequel l’ouverture de session a été effectuée.

Le champ Objet indique le compte sur le système local qui a demandé l’ouverture de session. Il s’agit le plus souvent d’un service, comme le service Serveur, ou un processus local tel que Winlogon.exe ou Services.exe.

Le champ Type d’ouverture de session indique le type d’ouverture de session qui s’est produit. Les types les plus courants sont 2 (interactif) et 3 (réseau).

Le champ Nouvelle ouverture de session indique le compte pour lequel la nouvelle ouverture de session a été créée, par exemple, le compte qui s’est connecté.

Les champs relatifs au réseau indiquent la provenance d’une demande d’ouverture de session à distance. Le nom de la station de travail n’étant pas toujours disponible, peut être laissé vide dans certains cas.

Les champs relatifs aux informations d’authentification fournissent des détails sur cette demande d’ouverture de session spécifique.
- Le GUID d’ouverture de session est un identificateur unique pouvant servir à associer cet événement à un événement KDC .
- Les services en transit indiquent les services intermédiaires qui ont participé à cette demande d’ouverture de session.
- Nom du package indique quel est le sous-protocole qui a été utilisé parmi les protocoles NTLM.
- La longueur de la clé indique la longueur de la clé de session générée. Elle a la valeur 0 si aucune clé de session n’a été demandée.
Record Number: 10728
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090305183129.469721-000
Event Type: Succès de l'audit
User:

Computer Name: PC-de-TONI
Event Code: 4608
Message: Windows démarre.

Cet événement est journalisé lorsque LSASS.EXE démarre et que le sous-système d’audit est initialisé.
Record Number: 10727
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090305183129.469721-000
Event Type: Succès de l'audit
User:

Computer Name: PC-de-TONI
Event Code: 1108
Message: Le service de journalisation des événements a rencontré une erreur lors du traitement d’un événement entrant publié à partir de Microsoft-Windows-Security-Auditing.
Record Number: 10726
Source Name: Microsoft-Windows-Eventlog
Time Written: 20090304221916.125000-000
Event Type: Succès de l'audit
User:

Computer Name: PC-de-TONI
Event Code: 1108
Message: Le service de journalisation des événements a rencontré une erreur lors du traitement d’un événement entrant publié à partir de Microsoft-Windows-Security-Auditing.
Record Number: 10725
Source Name: Microsoft-Windows-Eventlog
Time Written: 20090304221916.125000-000
Event Type: Succès de l'audit
User:

Computer Name: PC-de-TONI
Event Code: 1108
Message: Le service de journalisation des événements a rencontré une erreur lors du traitement d’un événement entrant publié à partir de Microsoft-Windows-Security-Auditing.
Record Number: 10724
Source Name: Microsoft-Windows-Eventlog
Time Written: 20090304221916.125000-000
Event Type: Succès de l'audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Common Files\Roxio Shared\9.0\DLLShared\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=x86
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 11, GenuineIntel
"PROCESSOR_REVISION"=0f0b
"NUMBER_OF_PROCESSORS"=4

-----------------EOF-----------------

Logfile of random's system information tool 1.06 (written by random/random)
Run by TONI at 2010-01-06 19:01:03
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2
System drive C: has 195 GB (85%) free of 230 GB
Total RAM: 2046 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:01:38, on 06/01/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18865)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Orange\AntivirusFirewall\Common\FSM32.EXE
C:\Program Files\Orange\AntivirusFirewall\FSGUI\fsguidll.exe
C:\Program Files\SGPSA\ie3sh.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\Program Files\SweetIM\Messenger\SweetIM.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Hercules\WiFi Station pour Livebox\WiFiLB.exe
C:\Users\TONI\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\1\AlertModule.exe
C:\Windows\system32\conime.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\OrangeHSS\systray\systrayapp.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10c.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\TONI\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5YWTQGP8\RSIT[1].exe
C:\Program Files\trend micro\TONI.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nixud.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nixud.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: BrowserHelper Class - {8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6} - C:\Program Files\SGPSA\SearchAssistant.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O2 - BHO: Search Assistant - {F0626A63-410B-45E2-99A1-3F2475B2D695} - C:\Program Files\SGPSA\BHO.dll
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [toolbar_eula_launcher] C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Orange\AntivirusFirewall\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Orange\AntivirusFirewall\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [FBSSA] C:\Program Files\SGPSA\ie3sh.exe
O4 - HKLM\..\Run: [Windows Mobile-based device management] %windir%\WindowsMobile\wmdc.exe
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Users\TONI\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Global Startup: WiFi Station pour Livebox.lnk = C:\Program Files\Hercules\WiFi Station pour Livebox\WiFiLB.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O13 - Gopher Prefix:
O16 - DPF: {9DF1C00D-8426-4337-972C-DC042D19A916} (FTMediaPlayer Class) - http://webtv.guidetv.orange.fr/resources/OCS_9418.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\Common\FSMA32.EXE
O23 - Service: F-Secure ORSP Client (FSORSPClient) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\ORSP Client\fsorsp.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: stllssvr - Unknown owner - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe (file missing)
O23 - Service: @C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe

cet a dire refaire la meme chose avec meme logiciel?

a ok § fait il me srt
c\users\toni\downloads\rsit.exe n est pas une application win32 valide

rapport envoyé j attend votre reponse
j ai pas pris en compte dernier mess

############################## | FindyKill V5.023 |

# User : TONI (Administrateurs) # PC-DE-TONI
# Update on 31/12/2009 by El Desaparecido
# Start at: 18:54:37 | 07/01/2010
# Website : http://pagesperso-orange.fr/NosTools/index.html
# Contact : FindyKill.Contact@gmail.com

# Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz
# Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6002 32-bit) # Service Pack 2
# Internet Explorer 8.0.6001.18865
# Windows Firewall Status : Enabled

# C:\ # Disque fixe local # 224,88 Go (191,09 Go free) [HDD] # NTFS
# D:\ # Disque CD-ROM
# E:\ # Disque amovible
# F:\ # Disque amovible
# G:\ # Disque amovible
# H:\ # Disque amovible
# I:\ # Disque amovible

############################## | Processus actifs |

C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\LogonUI.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsgk32st.exe
C:\Program Files\Orange\AntivirusFirewall\Common\FSMA32.EXE
C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\FSGK32.EXE
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\Program Files\Orange\AntivirusFirewall\Common\FSMB32.EXE
C:\Windows\system32\PnkBstrA.exe
C:\Windows\system32\PnkBstrB.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Orange\AntivirusFirewall\Common\FCH32.EXE
C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fssm32.exe
C:\Program Files\Orange\AntivirusFirewall\Common\FAMEH32.EXE
C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsqh.exe
C:\Program Files\Orange\AntivirusFirewall\ORSP Client\fsorsp.exe
C:\Program Files\Orange\AntivirusFirewall\FSAUA\program\fsaua.exe
C:\Program Files\Orange\AntivirusFirewall\FWES\Program\fsdfwd.exe
C:\Program Files\Orange\AntivirusFirewall\FSAUA\program\fsus.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\Program Files\Search Guard PlusU\sgpupdaters.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\runonce.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsav32.exe

################## | C: |


################## | C:\Windows |

Supprimé ! C:\Windows\Prefetch\WINUPGRO.EXE-B9E72D89.pf

################## | C:\Windows\system32 |


################## | C:\Windows\system32\drivers |


################## | C:\Users\TONI\AppData\Roaming |


################## | Autres suppressions ... |

################## | Temporary Internet Files |


################## | Registre / Clés infectieuses |


################## | Etat / Services / Informations |

# Mode sans echec : OK


# Affichage des fichiers cachés : OK

# Uac : OK

# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# EapHost -> Start = 2 ( Good = 2 | Bad = 4 )
# Wlansvc -> Start = 2 ( Good = 2 | Bad = 4 )
# SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 )
# windefend -> Start = 2 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )

################## | PEH ... |


################## | Cracks / Keygens / Serials |


################## | ! Fin du rapport # FindyKill V5.023 ! |

############################## | FindyKill V5.023 |

# User : TONI (Administrateurs) # PC-DE-TONI
# Update on 31/12/2009 by El Desaparecido
# Start at: 18:54:37 | 07/01/2010
# Website : http://pagesperso-orange.fr/NosTools/index.html
# Contact : FindyKill.Contact@gmail.com

# Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz
# Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6002 32-bit) # Service Pack 2
# Internet Explorer 8.0.6001.18865
# Windows Firewall Status : Enabled

# C:\ # Disque fixe local # 224,88 Go (191,09 Go free) [HDD] # NTFS
# D:\ # Disque CD-ROM
# E:\ # Disque amovible
# F:\ # Disque amovible
# G:\ # Disque amovible
# H:\ # Disque amovible
# I:\ # Disque amovible

############################## | Processus actifs |

C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\LogonUI.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsgk32st.exe
C:\Program Files\Orange\AntivirusFirewall\Common\FSMA32.EXE
C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\FSGK32.EXE
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\Program Files\Orange\AntivirusFirewall\Common\FSMB32.EXE
C:\Windows\system32\PnkBstrA.exe
C:\Windows\system32\PnkBstrB.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Orange\AntivirusFirewall\Common\FCH32.EXE
C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fssm32.exe
C:\Program Files\Orange\AntivirusFirewall\Common\FAMEH32.EXE
C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsqh.exe
C:\Program Files\Orange\AntivirusFirewall\ORSP Client\fsorsp.exe
C:\Program Files\Orange\AntivirusFirewall\FSAUA\program\fsaua.exe
C:\Program Files\Orange\AntivirusFirewall\FWES\Program\fsdfwd.exe
C:\Program Files\Orange\AntivirusFirewall\FSAUA\program\fsus.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\Program Files\Search Guard PlusU\sgpupdaters.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\runonce.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsav32.exe

################## | C: |


################## | C:\Windows |

Supprimé ! C:\Windows\Prefetch\WINUPGRO.EXE-B9E72D89.pf

################## | C:\Windows\system32 |


################## | C:\Windows\system32\drivers |


################## | C:\Users\TONI\AppData\Roaming |


################## | Autres suppressions ... |

################## | Temporary Internet Files |


################## | Registre / Clés infectieuses |


################## | Etat / Services / Informations |

# Mode sans echec : OK


# Affichage des fichiers cachés : OK

# Uac : OK

# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# EapHost -> Start = 2 ( Good = 2 | Bad = 4 )
# Wlansvc -> Start = 2 ( Good = 2 | Bad = 4 )
# SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 )
# windefend -> Start = 2 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )

################## | PEH ... |


################## | Cracks / Keygens / Serials |


################## | ! Fin du rapport # FindyKill V5.023 ! |

voici ce qu il m sort sinon l operation ces bien déroulé
All processes killed
Error: Unable to interpret <processes > in the current context!
Error: Unable to interpret <explorer.exe > in the current context!
Error: Unable to interpret <SweetIM.exe > in the current context!
========== FILES ==========
File/Folder C:\Program Files\SweetIM not found.
File/Folder C:\Program Files\RegistryDoktor 4.1 not found.
File/Folder C:\Windows\system32\x64 not found.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi­on\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}\ not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrateur
->Temp folder emptied: 134590611 bytes
->Temporary Internet Files folder emptied: 9422021 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: FURIA
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 51008702 bytes
->Java cache emptied: 25758671 bytes

User: Public
->Temp folder emptied: 0 bytes

User: TONI
->Temp folder emptied: 31832 bytes
->Temporary Internet Files folder emptied: 51009507 bytes
->Java cache emptied: 44287566 bytes
->FireFox cache emptied: 2973926 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 65739 bytes
%systemroot%\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 743 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 304,00 mb


OTM by OldTimer - Version 3.1.4.0 log created on 01092010_145744

Files moved on Reboot...
C:\Users\TONI\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MW30ZF3O\OTM[1].exe moved successfully.

Registry entries deleted on Reboot...

rapport deja envoyé
pas recu ? j en ai envoyer 2

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6002 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : TONI ( Not Administrator ! )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:224 Go (Free:192 Go)
D:\ (CD or DVD) - UDF - Total:7 Go (Free:0 Go)
E:\ (USB)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 06/01/2010|23:04 )

[ UAC => 0 ]


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

-
[ Fichier Hosts ] .. Restaure!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans Local

[02/09/2009|17:05] C:\Users\TONI\AppData\Local\Adobe
[01/01/2009|18:00] C:\Users\TONI\AppData\Local\Application Data
[06/01/2010|22:42] C:\Users\TONI\AppData\Local\ApplicationHistory
[18/04/2009|19:37] C:\Users\TONI\AppData\Local\Apps
[30/07/2009|11:02] C:\Users\TONI\AppData\Local\bwdamyu.bat
[08/12/2009|13:30] C:\Users\TONI\AppData\Local\d3d9caps.dat
[10/12/2009|19:55] C:\Users\TONI\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[28/04/2009|12:28] C:\Users\TONI\AppData\Local\Deployment
[15/12/2009|22:25] C:\Users\TONI\AppData\Local\eMule
[01/01/2009|18:04] C:\Users\TONI\AppData\Local\fusioncache.dat
[05/01/2010|20:42] C:\Users\TONI\AppData\Local\GDIPFONTCACHEV1.DAT
[04/12/2009|18:51] C:\Users\TONI\AppData\Local\goako.bat
[05/01/2010|20:08] C:\Users\TONI\AppData\Local\Google
[01/01/2009|18:00] C:\Users\TONI\AppData\Local\Historique
[06/01/2010|22:41] C:\Users\TONI\AppData\Local\IconCache.db
[04/12/2009|18:51] C:\Users\TONI\AppData\Local\mchnbbp.dat
[29/11/2009|14:42] C:\Users\TONI\AppData\Local\mchnbbp_nav.dat
[04/12/2009|18:51] C:\Users\TONI\AppData\Local\mchnbbp_navps.dat
[26/03/2009|15:34] C:\Users\TONI\AppData\Local\Microsoft
[25/01/2009|15:47] C:\Users\TONI\AppData\Local\Microsoft Games
[03/01/2010|18:45] C:\Users\TONI\AppData\Local\Microsoft Help
[06/01/2009|18:58] C:\Users\TONI\AppData\Local\Mozilla
[23/05/2009|10:31] C:\Users\TONI\AppData\Local\Packard Bell
[03/01/2010|19:40] C:\Users\TONI\AppData\Local\PC_Drivers_Headquarters
[03/01/2010|18:45] C:\Users\TONI\AppData\Local\PlayMovie
[19/06/2009|07:22] C:\Users\TONI\AppData\Local\PunkBuster
[18/05/2009|11:21] C:\Users\TONI\AppData\Local\Seven Zip
[06/01/2010|23:04] C:\Users\TONI\AppData\Local\Temp
[01/01/2009|18:00] C:\Users\TONI\AppData\Local\Temporary Internet Files
[04/01/2010|19:29] C:\Users\TONI\AppData\Local\Threat Expert
[03/01/2010|18:45] C:\Users\TONI\AppData\Local\TVEnhance
[03/01/2010|18:35] C:\Users\TONI\AppData\Local\uqsgk.dat
[02/01/2010|14:28] C:\Users\TONI\AppData\Local\uqsgk_nav.dat
[03/01/2010|18:34] C:\Users\TONI\AppData\Local\uqsgk_navps.dat
[01/01/2009|18:04] C:\Users\TONI\AppData\Local\VirtualStore
[10/01/2009|00:52] C:\Users\TONI\AppData\Local\Windows Live Writer

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[06/01/2010 23:02][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{2CCE66AC-201F-4AFB-8C7F-6D6F015788A9}.job
[06/01/2010 22:01][--a------] C:\Windows\tasks\Scheduled scanning task.job
[04/02/2009 19:51][--a------] C:\Windows\tasks\HDReg.job
[06/01/2010 23:03][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{F1E9850D-2CB2-4997-A15D-8579FCE27CEB}.job
[06/01/2010 22:00][--a------] C:\Windows\tasks\Extension de garantie.job
[06/01/2010 22:42][--ah-----] C:\Windows\tasks\SA.DAT
[06/01/2010 22:41][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[10/01/2009|01:21] C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[03/01/2010|18:59] C:\ProgramData\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
[17/11/2009|09:06] C:\ProgramData\Adobe
[02/11/2006|14:02] C:\ProgramData\Application Data
[03/01/2010|16:27] C:\ProgramData\AVP 2009
[09/10/2009|15:15] C:\ProgramData\Brother
[01/01/2009|17:57] C:\ProgramData\Bureau
[26/03/2009|20:04] C:\ProgramData\CyberLink
[02/11/2006|14:02] C:\ProgramData\Desktop
[02/11/2006|14:02] C:\ProgramData\Documents
[26/03/2009|18:43] C:\ProgramData\Downloaded Installations
[15/12/2009|22:25] C:\ProgramData\eMule
[21/01/2009|19:10] C:\ProgramData\EPSON
[20/02/2009|14:06] C:\ProgramData\ezsidmv.dat
[01/01/2009|17:57] C:\ProgramData\Favoris
[02/11/2006|14:02] C:\ProgramData\Favorites
[15/06/2009|11:06] C:\ProgramData\f-secure
[15/06/2009|11:04] C:\ProgramData\fssg
[28/05/2009|12:48] C:\ProgramData\Google
[08/04/2008|15:13] C:\ProgramData\InstallShield
[01/01/2009|17:57] C:\ProgramData\Menu D‚marrer
[15/01/2009|10:43] C:\ProgramData\Messenger Plus!
[16/06/2009|11:41] C:\ProgramData\Micro Application
[03/01/2010|19:48] C:\ProgramData\Microsoft
[29/10/2009|10:58] C:\ProgramData\Microsoft Help
[01/01/2009|17:57] C:\ProgramData\ModŠles
[05/01/2010|20:32] C:\ProgramData\Nero
[17/06/2009|08:33] C:\ProgramData\NOS
[06/01/2010|22:42] C:\ProgramData\NVIDIA
[06/01/2010|22:42] C:\ProgramData\nvModes.001
[06/01/2010|22:42] C:\ProgramData\nvModes.dat
[03/01/2010|19:40] C:\ProgramData\PC Drivers HeadQuarters
[26/03/2009|19:10] C:\ProgramData\PS.log
[02/01/2010|12:42] C:\ProgramData\Roxio
[26/03/2009|19:16] C:\ProgramData\Skype
[08/04/2008|15:13] C:\ProgramData\Sonic
[02/11/2006|14:02] C:\ProgramData\Start Menu
[16/09/2009|16:57] C:\ProgramData\SweetIM
[04/01/2010|19:35] C:\ProgramData\Temp
[02/11/2006|14:02] C:\ProgramData\Templates
[03/01/2010|18:59] C:\ProgramData\TuneUp Software
[26/03/2009|20:33] C:\ProgramData\TVU Networks
[04/01/2010|19:45] C:\ProgramData\UAB
[16/01/2009|18:51] C:\ProgramData\Ubisoft
[21/01/2009|19:14] C:\ProgramData\UDL
[10/07/2009|13:58] C:\ProgramData\Yahoo!
[06/01/2010|20:22] C:\ProgramData\Yahoo! Companion

--------------------\\ Listing des dossiers dans C:\Program Files

[02/09/2009|17:07] C:\Program Files\Adobe
[03/01/2010|22:05] C:\Program Files\AGEIA Technologies
[03/01/2010|16:11] C:\Program Files\Alwil Software
[03/01/2010|18:45] C:\Program Files\Anuman Interactive
[06/01/2010|20:22] C:\Program Files\CCleaner
[05/01/2010|20:29] C:\Program Files\Common Files
[26/03/2009|20:04] C:\Program Files\CyberLink
[03/01/2010|18:45] C:\Program Files\epson
[01/01/2009|17:57] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[03/01/2010|18:45] C:\Program Files\Google
[08/04/2008|15:07] C:\Program Files\HDReg
[07/02/2009|18:41] C:\Program Files\Hercules
[27/11/2009|23:09] C:\Program Files\InstallShield Installation Information
[10/12/2009|20:31] C:\Program Files\Internet Explorer
[31/12/2009|11:33] C:\Program Files\Java
[03/01/2010|18:45] C:\Program Files\Live-Player
[05/11/2009|13:28] C:\Program Files\Messenger Plus! Live
[10/01/2009|00:37] C:\Program Files\Microsoft
[02/11/2006|13:37] C:\Program Files\Microsoft Games
[29/10/2009|10:58] C:\Program Files\Microsoft Office
[02/10/2009|20:14] C:\Program Files\Microsoft Office Outlook Connector
[09/09/2009|20:37] C:\Program Files\Microsoft Silverlight
[10/01/2009|00:36] C:\Program Files\Microsoft SQL Server Compact Edition
[10/01/2009|00:36] C:\Program Files\Microsoft Sync Framework
[29/10/2009|10:57] C:\Program Files\Microsoft Works
[26/09/2009|11:44] C:\Program Files\Movie Maker
[15/06/2009|11:22] C:\Program Files\Mozilla Firefox
[02/11/2006|13:37] C:\Program Files\MSBuild
[10/01/2009|14:31] C:\Program Files\MSXML 4.0
[05/01/2010|20:38] C:\Program Files\Nero
[17/06/2009|08:33] C:\Program Files\NOS
[03/01/2010|22:07] C:\Program Files\NVIDIA Corporation
[04/11/2009|14:06] C:\Program Files\Orange
[30/10/2009|13:48] C:\Program Files\OrangeHSS
[03/01/2010|18:45] C:\Program Files\Packard Bell
[03/01/2010|19:39] C:\Program Files\PC Drivers HeadQuarters
[28/05/2009|11:31] C:\Program Files\QUAD Utilities
[03/01/2010|18:45] C:\Program Files\Real
[08/04/2008|15:03] C:\Program Files\Realtek
[02/11/2006|13:37] C:\Program Files\Reference Assemblies
[03/01/2010|16:27] C:\Program Files\RegistryDoktor 4.1
[03/01/2010|18:45] C:\Program Files\Rhapsody
[05/01/2010|19:55] C:\Program Files\Roxio
[08/04/2008|15:08] C:\Program Files\Seagate
[14/11/2009|13:25] C:\Program Files\Search Guard Plus
[14/11/2009|13:25] C:\Program Files\Search Guard PlusU
[09/01/2009|16:59] C:\Program Files\Securitoo
[03/01/2010|18:45] C:\Program Files\SGPSA
[24/11/2009|09:00] C:\Program Files\SweetIM
[06/01/2010|19:01] C:\Program Files\trend micro
[05/01/2010|21:01] C:\Program Files\TuneUp Utilities 2010
[02/11/2006|14:01] C:\Program Files\Uninstall Information
[03/01/2010|18:45] C:\Program Files\VideoLAN
[26/09/2009|11:44] C:\Program Files\Windows Calendar
[26/09/2009|11:44] C:\Program Files\Windows Collaboration
[26/09/2009|11:43] C:\Program Files\Windows Defender
[26/09/2009|11:44] C:\Program Files\Windows Journal
[02/10/2009|20:12] C:\Program Files\Windows Live
[10/01/2009|00:35] C:\Program Files\Windows Live SkyDrive
[10/12/2009|20:31] C:\Program Files\Windows Mail
[01/11/2009|20:47] C:\Program Files\Windows Media Player
[01/01/2009|17:57] C:\Program Files\Windows NT
[26/09/2009|11:44] C:\Program Files\Windows Photo Gallery
[17/11/2009|21:43] C:\Program Files\Windows Portable Devices
[26/09/2009|11:44] C:\Program Files\Windows Sidebar
[29/12/2009|16:26] C:\Program Files\Winsudate
[02/01/2010|13:15] C:\Program Files\Yahoo!
[06/04/2009|17:58] C:\Program Files\YesMessenger

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[17/11/2009|09:06] C:\Program Files\Common Files\Adobe
[02/09/2009|17:06] C:\Program Files\Common Files\Adobe AIR
[26/03/2009|19:48] C:\Program Files\Common Files\CyberLink
[29/10/2009|10:57] C:\Program Files\Common Files\DESIGNER
[09/01/2009|22:00] C:\Program Files\Common Files\France Telecom
[26/03/2009|19:00] C:\Program Files\Common Files\InstallShield
[29/10/2009|10:58] C:\Program Files\Common Files\microsoft shared
[05/01/2010|20:38] C:\Program Files\Common Files\Nero
[04/01/2010|19:36] C:\Program Files\Common Files\PC Tools
[03/01/2010|18:45] C:\Program Files\Common Files\Real
[05/01/2010|19:55] C:\Program Files\Common Files\Roxio Shared
[02/11/2006|12:18] C:\Program Files\Common Files\Services
[02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
[03/01/2010|18:45] C:\Program Files\Common Files\Symantec Shared
[02/10/2009|20:14] C:\Program Files\Common Files\System
[10/01/2009|00:28] C:\Program Files\Common Files\Windows Live
[03/01/2010|22:05] C:\Program Files\Common Files\Wise Installation Wizard
[03/01/2010|18:45] C:\Program Files\Common Files\xing shared

--------------------\\ Process

( 80 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-06 23:05:44
Windows 6.0.6002 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections

C:\Program Files\Live-Player
C:\Program Files\Live-Player\live-player.exe
C:\Program Files\Live-Player\SkinCrafterDll.dll
C:\Program Files\Live-Player\sqlite3.dll
C:\Users\TONI\AppData\Roaming\live-player
C:\Users\TONI\AppData\Roaming\live-player\flv.swf
C:\Users\TONI\AppData\Roaming\live-player\liveplayer.s3db

C:\Users\TONI\AppData\Local\mchnbbp.dat
C:\Users\TONI\AppData\Local\mchnbbp_nav.dat
C:\Users\TONI\AppData\Local\mchnbbp_navps.dat
C:\Users\TONI\AppData\Local\uqsgk.dat
C:\Users\TONI\AppData\Local\uqsgk_nav.dat
C:\Users\TONI\AppData\Local\uqsgk_navps.dat
[b]==> EGDACCESS <==/b



[F:28][D:13]-> C:\Users\TONI\AppData\Local\Temp
[F:21][D:1]-> C:\Users\TONI\AppData\Roaming\MICROS~1\Windows\Cookies
[F:5][D:2]-> C:\Users\TONI\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:7][D:5]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 06/01/2010|22:36 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 06/01/2010|23:07 - Option : [2]

--------------------\\ Fin du rapport a 23:07:52
[ UAC => 1 ]

désolé mal compris!

chere ami suite a plusieur tentative
impossible dacces site recommandé par vous navilog

uac desactivé ainsi que firewall tjour impossible

bjour! juste pour vous dire que j vais réessayer vers 6h
cordialement

ok vers 18H
franchement !!!!!!!!!!!!!!!!!!!!!!!!
respect a vous et toute l equipe


cordialement

m revoila
Fix Navipromo version 4.0.6 commencé le 07/01/2010 18:01:56,39

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 03.01.2010 à 11h00 par IL-MAFIOSO

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6002 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : TONI ( Not Administrator ! )
BOOT : Normal boot




C:\ (Local Disk) - NTFS - Total:224 Go (Free:191 Go)
D:\ (CD or DVD) - UDF - Total:7 Go (Free:0 Go)
E:\ (USB)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)


Recherche executée en mode normal

Nettoyage exécuté au redémarrage de l'ordinateur


C:\Program Files\Live-Player supprimé !
C:\Users\TONI\AppData\Roaming\Live-Player supprimé !
C:\Users\TONI\AppData\Local\bwdamyu.bat supprimé !
C:\Users\TONI\AppData\Local\mchnbbp.dat supprimé !
C:\Users\TONI\AppData\Local\mchnbbp_nav.dat supprimé !
C:\Users\TONI\AppData\Local\mchnbbp_navps.dat supprimé !
C:\Users\TONI\AppData\Local\uqsgk.dat supprimé !
C:\Users\TONI\AppData\Local\uqsgk_nav.dat supprimé !
C:\Users\TONI\AppData\Local\uqsgk_navps.dat supprimé !
C:\Users\FURIA\AppData\Local\icwgw.exe supprimé !
C:\Users\FURIA\AppData\Local\icwgw.dat supprimé !
C:\Users\FURIA\AppData\Local\icwgw_nav.dat supprimé !
C:\Users\FURIA\AppData\Local\icwgw_navps.dat supprimé !
C:\Users\FURIA\AppData\Local\icwgw.bat supprimé !


Nettoyage contenu C:\Windows\Temp effectué !
Nettoyage contenu C:\Users\TONI\AppData\Local\Temp effectué !


*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok




*** Scan terminé 07/01/2010 18:07:58,41 ***

cherLogfile of random's system information tool 1.06 (written by random/random)
Run by TONI at 2010-01-07 18:44:41
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2
System drive C: has 196 GB (85%) free of 230 GB
Total RAM: 2046 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:44:55, on 07/01/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18865)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\Windows\Explorer.EXE
C:\Program Files\Search Guard PlusU\sgpupdaters.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
C:\Program Files\Orange\AntivirusFirewall\Common\FSM32.EXE
C:\Program Files\SGPSA\ie3sh.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\1\AlertModule.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Orange\AntivirusFirewall\FSGUI\fsguidll.exe
C:\Program Files\SweetIM\Messenger\SweetIM.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Hercules\WiFi Station pour Livebox\WiFiLB.exe
C:\Users\TONI\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\OrangeHSS\systray\systrayapp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\TONI\Downloads\RSIT.exe
C:\Program Files\trend micro\TONI.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nixud.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: BrowserHelper Class - {8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6} - C:\Program Files\SGPSA\SearchAssistant.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O2 - BHO: Search Assistant - {F0626A63-410B-45E2-99A1-3F2475B2D695} - C:\Program Files\SGPSA\BHO.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [toolbar_eula_launcher] C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Orange\AntivirusFirewall\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Orange\AntivirusFirewall\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [FBSSA] C:\Program Files\SGPSA\ie3sh.exe
O4 - HKLM\..\Run: [Windows Mobile-based device management] %windir%\WindowsMobile\wmdc.exe
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Users\TONI\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Global Startup: WiFi Station pour Livebox.lnk = C:\Program Files\Hercules\WiFi Station pour Livebox\WiFiLB.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O13 - Gopher Prefix:
O16 - DPF: {9DF1C00D-8426-4337-972C-DC042D19A916} (FTMediaPlayer Class) - http://webtv.guidetv.orange.fr/resources/OCS_9418.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\Common\FSMA32.EXE
O23 - Service: F-Secure ORSP Client (FSORSPClient) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\ORSP Client\fsorsp.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: stllssvr - Unknown owner - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe (file missing)
O23 - Service: @C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe

ok jr te l envoi
Logfile of random's system information tool 1.06 (written by random/random)
Run by TONI at 2010-01-07 20:18:24
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2
System drive C: has 195 GB (85%) free of 230 GB
Total RAM: 2046 MB (44% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:18:31, on 07/01/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18865)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\conime.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
C:\Program Files\Orange\AntivirusFirewall\Common\FSM32.EXE
C:\Program Files\SGPSA\ie3sh.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\Program Files\SweetIM\Messenger\SweetIM.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Hercules\WiFi Station pour Livebox\WiFiLB.exe
C:\Users\TONI\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Orange\AntivirusFirewall\FSGUI\fsguidll.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\1\AlertModule.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\OrangeHSS\systray\systrayapp.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Users\TONI\Downloads\RSIT.exe
C:\Program Files\trend micro\TONI.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nixud.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: BrowserHelper Class - {8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6} - C:\Program Files\SGPSA\SearchAssistant.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O2 - BHO: Search Assistant - {F0626A63-410B-45E2-99A1-3F2475B2D695} - C:\Program Files\SGPSA\BHO.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [toolbar_eula_launcher] C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Orange\AntivirusFirewall\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Orange\AntivirusFirewall\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [FBSSA] C:\Program Files\SGPSA\ie3sh.exe
O4 - HKLM\..\Run: [Windows Mobile-based device management] %windir%\WindowsMobile\wmdc.exe
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Users\TONI\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Global Startup: WiFi Station pour Livebox.lnk = C:\Program Files\Hercules\WiFi Station pour Livebox\WiFiLB.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O13 - Gopher Prefix:
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\Common\FSMA32.EXE
O23 - Service: F-Secure ORSP Client (FSORSPClient) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\ORSP Client\fsorsp.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: stllssvr - Unknown owner - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe (file missing)
O23 - Service: @C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe

POUR DESINSTALLE C/\PROGRAM FILES\SGPSA IL M REFUSE M DISANT QUE J AI PAS D AUTORISATION

TOUJOUR RIEN A T IL AUTRE MOYEN D LE D ESINTALLé COMPLETEMENT?

LECOMBO EST ENREGISTRé J L LANCE?
TOOLBARD DESINTALLé A PARTIR D AJOUT OU SUPPRESSION

desole electricien69 mais j suis novice en la matiere ou est la cession dutilisateur?
mil desol2
merci d ta compréension

bonjour a toi l ami!

j essayerai d faire ce que tu ma dit

j t tien au courant vers 19H

cordialement

ok merci j ferai ca demain j suis crevé
bonne nuit l ami !!!


tes vraiment sympa ! croit moi que si on y arrive j essayerai de t remercié pour ma gratitude !!!!!!!!
cordialement ;;;;;; toni marques

just pour t inquiqué que mon pc repond beaucoup plus vite
mais TuneUp m indique Probleme ......... Peripherique non conforme "I:\"
" non conforme "usb storage-cfc"
" " " "usb storage-msc"
" " " "usb storage-sdc"
" " " "usb storage smc"


j ai fait mise a jour mais toujour pareil
merci de ton attention; cordialement

j espere y etre arrivé enfin !!!!!!!!!!!
ComboFix 10-01-04.01 - TONI 08/01/2010 23:32:38.1.4 - x86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.2046.1178 [GMT 1:00]
Lancé depuis: c:\users\TONI\Downloads\ComboFix.exe
SP: Windows Defender *disabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\$recycle.bin\S-1-5-21-2152478756-3922319563-605102323-500
c:\$recycle.bin\S-1-5-21-2769017286-758514632-1508654203-500
C:\LOG.TXT
c:\program files\QUAD Utilities
c:\program files\QUAD Utilities\QUAD Registry Cleaner\Vista Scheduler.dll
c:\program files\Search Guard Plus
c:\program files\Search Guard Plus\fbsProtection.xml
c:\program files\Search Guard Plus\fbsProtectionI.xml
c:\program files\Search Guard Plus\fbsSearchProvider.xml
c:\program files\Search Guard Plus\FbsSearchProviderIE8.exe
c:\program files\Search Guard Plus\SearchGuardPlus.exe
c:\program files\Search Guard Plus\SearchGuardPlus.ico
c:\program files\Search Guard Plus\uninstalSGP.exe
c:\program files\Search Guard PlusU
c:\program files\Search Guard PlusU\SGPU.ico
c:\program files\Search Guard PlusU\sgpUpdater.exe
c:\program files\Search Guard PlusU\sgpUpdater.xml
c:\program files\Search Guard PlusU\sgpUpdaters.exe
c:\program files\Search Guard PlusU\uninstalSGPU.exe
c:\program files\SGPSA
c:\program files\SGPSA\BHO.dll
c:\program files\SGPSA\ie3sh.exe
c:\program files\SGPSA\SeARchassistant.dll
c:\windows\system32\Ijl11.dll

.
((((((((((((((((((((((((((((( Fichiers créés du 2009-12-08 au 2010-01-08 ))))))))))))))))))))))))))))))))))))
.

2010-01-08 22:38 . 2010-01-08 22:38 -------- d-----w- c:\users\TONI\AppData\Local\temp
2010-01-08 22:38 . 2010-01-08 22:38 -------- d-----w- c:\users\FURIA\AppData\Local\temp
2010-01-08 22:38 . 2010-01-08 22:38 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-01-08 22:30 . 2010-01-08 22:30 12568 ----a-w- c:\windows\system32\drivers\PROCEXP113.SYS
2010-01-07 17:51 . 2010-01-07 18:15 -------- d-----w- C:\FindyKill
2010-01-07 16:59 . 2010-01-07 17:08 -------- d-----w- c:\program files\Navilog1
2010-01-06 21:32 . 2010-01-06 22:07 -------- d-----w- C:\Lop SD
2010-01-06 21:22 . 2010-01-06 21:25 -------- d-----w- C:\ToolBar SD
2010-01-06 19:22 . 2010-01-06 19:22 -------- d-----w- c:\program files\CCleaner
2010-01-06 19:19 . 2010-01-06 19:19 -------- d-----w- c:\users\TONI\AppData\Roaming\HTML Executable
2010-01-06 18:01 . 2010-01-07 19:18 -------- d-----w- c:\program files\trend micro
2010-01-06 18:01 . 2010-01-06 18:01 -------- d-----w- C:\rsit
2010-01-05 20:01 . 2009-12-17 19:56 30024 ----a-w- c:\windows\system32\uxtuneup.dll
2010-01-05 19:29 . 2010-01-05 19:38 -------- d-----w- c:\program files\Nero
2010-01-05 19:29 . 2010-01-05 19:32 -------- d-----w- c:\programdata\Nero
2010-01-05 19:29 . 2010-01-05 19:38 -------- d-----w- c:\program files\Common Files\Nero
2010-01-04 21:39 . 2008-08-05 11:29 44576 ----a-w- c:\windows\system32\drivers\nvhda32v.sys
2010-01-04 21:39 . 2008-08-01 09:46 122880 ----a-w- c:\windows\system32\nvcohda.dll
2010-01-04 21:39 . 2008-08-01 09:45 453152 ----a-w- c:\windows\system32\nvuhda.exe
2010-01-04 21:27 . 2010-01-04 21:27 -------- d-----w- c:\windows\system32\Lang
2010-01-04 21:27 . 2010-01-04 21:27 -------- d-----w- C:\Intel
2010-01-04 18:29 . 2010-01-04 18:29 -------- d-----w- c:\users\TONI\AppData\Local\Threat Expert
2010-01-04 18:21 . 2009-05-06 16:18 18213280 ----a-w- C:\installation_ie8-vista.exe
2010-01-04 18:20 . 2009-04-21 13:14 227224 ----a-w- C:\jre-6u13-windows-i586-p-iftw-k.exe
2010-01-04 18:13 . 2010-01-04 18:36 -------- d-----w- c:\program files\Common Files\PC Tools
2010-01-03 21:03 . 2010-01-03 21:07 -------- d-----w- c:\program files\NVIDIA Corporation
2010-01-03 21:01 . 2009-11-21 02:34 76392 ----a-w- c:\windows\system32\OpenCL.dll
2010-01-03 21:01 . 2009-11-21 02:34 4241000 ----a-w- c:\windows\system32\nvwgf2um.dll
2010-01-03 21:01 . 2009-11-21 02:34 11515752 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2010-01-03 21:01 . 2009-11-21 02:34 4001384 ----a-w- c:\windows\system32\nvcuda.dll
2010-01-03 21:01 . 2009-11-21 02:34 2243176 ----a-w- c:\windows\system32\nvcuvid.dll
2010-01-03 21:01 . 2009-11-21 02:34 1989224 ----a-w- c:\windows\system32\nvcuvenc.dll
2010-01-03 21:01 . 2009-11-21 02:34 14064232 ----a-w- c:\windows\system32\nvoglv32.dll
2010-01-03 21:01 . 2009-11-21 02:34 182888 ----a-w- c:\windows\system32\nvcod178.dll
2010-01-03 21:01 . 2009-11-21 02:34 182888 ----a-w- c:\windows\system32\nvcod.dll
2010-01-03 21:01 . 2009-11-21 02:34 11381352 ----a-w- c:\windows\system32\nvcompiler.dll
2010-01-03 21:00 . 2010-01-03 21:00 -------- d-----w- C:\NVIDIA
2010-01-03 19:22 . 2009-08-24 11:36 377344 ----a-w- c:\windows\system32\winhttp.dll
2010-01-03 19:05 . 2009-06-15 14:52 499712 ----a-w- c:\windows\system32\kerberos.dll
2010-01-03 19:05 . 2009-06-15 14:53 270848 ----a-w- c:\windows\system32\schannel.dll
2010-01-03 19:00 . 2010-01-03 19:00 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Roaming\TuneUp Software
2010-01-03 18:41 . 2010-01-04 18:45 -------- d-----w- c:\programdata\UAB
2010-01-03 18:40 . 2010-01-03 18:40 -------- d-----w- c:\programdata\PC Drivers HeadQuarters
2010-01-03 18:40 . 2010-01-03 18:40 -------- d-----w- c:\users\TONI\AppData\Local\PC_Drivers_Headquarters
2010-01-03 18:39 . 2010-01-03 18:39 -------- d-----w- c:\program files\PC Drivers HeadQuarters
2010-01-03 18:13 . 2010-01-03 18:13 -------- d-----w- c:\windows\system32\x64
2010-01-03 18:13 . 2008-07-02 09:06 920088 ----a-w- c:\windows\system32\igxpun.exe
2010-01-03 18:13 . 2006-11-10 08:25 319456 ----a-w- c:\windows\system32\difxapi.dll
2010-01-03 18:01 . 2009-12-17 20:03 30536 ----a-w- c:\windows\system32\TURegOpt.exe
2010-01-03 18:01 . 2009-12-17 19:57 21320 ----a-w- c:\windows\system32\authuitu.dll
2010-01-03 18:00 . 2010-01-03 18:00 -------- d-----w- c:\users\TONI\AppData\Roaming\TuneUp Software
2010-01-03 17:59 . 2010-01-05 20:01 -------- d-----w- c:\program files\TuneUp Utilities 2010
2010-01-03 17:59 . 2010-01-03 17:59 -------- d-----w- c:\programdata\TuneUp Software
2010-01-03 17:59 . 2010-01-03 17:59 -------- d-sh--w- c:\programdata\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
2010-01-03 15:27 . 2010-01-03 15:27 -------- d-----w- c:\programdata\AVP 2009
2010-01-03 15:27 . 2010-01-03 15:27 -------- d-----w- c:\program files\RegistryDoktor 4.1
2010-01-03 15:11 . 2010-01-03 15:11 -------- d-----w- c:\program files\Alwil Software
2009-12-31 10:46 . 2009-12-31 10:48 -------- d-----w- C:\PHOTOS
2009-12-31 10:45 . 2010-01-03 17:51 -------- d-----w- c:\users\TONI\Documents(1210)
2009-12-29 15:24 . 2010-01-03 17:45 -------- d-----w- c:\users\TONI\AppData\Roaming\Icones
2009-12-15 18:35 . 2010-01-03 17:45 -------- d-----w- c:\users\FURIA\AppData\Roaming\vlc
2009-12-15 18:34 . 2008-06-12 10:09 33088 ----a-w- c:\users\FURIA\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2009-12-12 10:32 . 2009-12-12 10:32 -------- d-----w- c:\users\FURIA\AppData\Roaming\F-Secure
2009-12-12 08:04 . 2009-12-12 08:04 -------- d-----w- c:\users\FURIA\AppData\Roaming\Template
2009-12-12 07:49 . 2009-11-09 12:31 24064 ----a-w- c:\windows\system32\nshhttp.dll
2009-12-12 07:49 . 2009-11-09 10:36 411648 ----a-w- c:\windows\system32\drivers\http.sys
2009-12-12 07:49 . 2009-11-09 12:30 30720 ----a-w- c:\windows\system32\httpapi.dll
2009-12-11 22:38 . 2009-12-11 22:38 -------- d-----w- c:\users\FURIA\AppData\Local\Google
2009-12-10 17:41 . 2009-12-10 17:41 93 ----a-w- c:\users\FURIA\AppData\Local\fusioncache.dat
2009-12-10 17:41 . 2009-12-10 17:41 -------- d-----w- c:\users\FURIA\AppData\Roaming\Roxio
2009-12-10 17:41 . 2010-01-03 17:45 -------- d-----w- c:\users\FURIA\AppData\Local\ApplicationHistory
2009-12-10 17:41 . 2009-12-10 17:41 117296 ----a-w- c:\users\FURIA\AppData\Local\GDIPFONTCACHEV1.DAT

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-08 21:37 . 2010-01-03 19:09 34800 ----a-w- c:\programdata\nvModes.dat
2010-01-08 19:29 . 2008-04-08 13:57 -------- d-----w- c:\programdata\NVIDIA
2010-01-08 19:28 . 2009-11-17 08:20 12 ----a-w- c:\windows\bthservsdp.dat
2010-01-07 20:30 . 2009-02-06 20:00 -------- d-----w- c:\program files\Yahoo!
2010-01-05 19:42 . 2009-01-01 17:04 101848 ----a-w- c:\users\TONI\AppData\Local\GDIPFONTCACHEV1.DAT
2010-01-05 18:55 . 2008-04-08 14:12 -------- d-----w- c:\program files\Common Files\Roxio Shared
2010-01-04 21:50 . 2008-04-08 23:07 685846 ----a-w- c:\windows\system32\perfh00C.dat
2010-01-04 21:50 . 2008-04-08 23:07 131042 ----a-w- c:\windows\system32\perfc00C.dat
2010-01-04 20:38 . 2009-01-26 20:05 2150 ----a-w- c:\users\TONI\AppData\Roaming\wklnhst.dat
2010-01-03 21:05 . 2009-01-30 18:15 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-01-03 21:05 . 2009-01-30 18:15 -------- d-----w- c:\program files\AGEIA Technologies
2010-01-03 17:45 . 2009-03-26 18:00 -------- d-----w- c:\users\TONI\AppData\Roaming\PowerCinema
2010-01-03 17:45 . 2009-04-19 12:46 -------- d-----w- c:\users\TONI\AppData\Roaming\dvdcss
2010-01-03 17:45 . 2009-03-26 18:22 -------- d-----w- c:\program files\VideoLAN
2010-01-03 17:45 . 2009-02-06 19:59 -------- d-----w- c:\program files\Rhapsody
2010-01-03 17:45 . 2009-02-06 18:36 -------- d-----w- c:\program files\Real
2010-01-03 17:45 . 2008-04-08 14:02 -------- d-----w- c:\program files\Packard Bell
2010-01-03 17:45 . 2009-02-06 18:36 -------- d-----w- c:\program files\Common Files\xing shared
2010-01-03 17:45 . 2009-01-21 18:06 -------- d-----w- c:\program files\epson
2010-01-03 17:45 . 2008-04-08 14:14 -------- d-----w- c:\program files\Common Files\Symantec Shared
2010-01-03 17:45 . 2008-04-08 14:13 -------- d-----w- c:\program files\Google
2010-01-03 17:45 . 2009-02-06 18:36 -------- d-----w- c:\program files\Common Files\Real
2010-01-03 17:45 . 2009-04-16 15:54 -------- d-----w- c:\program files\Anuman Interactive
2010-01-02 11:42 . 2008-04-08 14:12 -------- d-----w- c:\programdata\Roxio
2009-12-31 10:33 . 2009-04-21 13:15 -------- d-----w- c:\program files\Java
2009-12-29 15:26 . 2009-11-15 13:46 -------- d-----w- c:\program files\Winsudate
2009-12-15 21:25 . 2009-03-12 17:05 -------- d-----w- c:\programdata\eMule
2009-12-13 21:46 . 2009-12-12 08:04 238 ----a-w- c:\users\FURIA\AppData\Roaming\wklnhst.dat
2009-12-10 19:31 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-12-08 12:30 . 2009-01-30 17:43 8944 ----a-w- c:\users\TONI\AppData\Local\d3d9caps.dat
2009-12-04 17:51 . 2009-07-31 18:35 89 ----a-w- c:\users\TONI\AppData\Local\goako.bat
2009-11-28 09:26 . 2009-03-06 18:17 22328 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2009-11-28 09:26 . 2009-03-06 18:17 22328 ----a-w- c:\users\TONI\AppData\Roaming\PnkBstrK.sys
2009-11-28 09:26 . 2009-03-06 18:17 22328 ----a-w- c:\users\TONI\AppData\Roaming\PnkBstrK.sys
2009-11-28 09:26 . 2009-03-06 18:16 103736 ----a-w- c:\windows\system32\PnkBstrB.exe
2009-11-28 09:26 . 2009-03-06 18:16 66872 ----a-w- c:\windows\system32\PnkBstrA.exe
2009-11-27 22:09 . 2008-04-08 14:03 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-11-27 21:33 . 2009-11-27 21:33 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
2009-11-26 08:06 . 2009-11-26 08:06 484976 ----a-w- c:\programdata\Google\Google Toolbar\Update\gtb254D.tmp.exe
2009-11-24 08:00 . 2009-09-16 15:57 -------- d-----w- c:\program files\SweetIM
2009-11-24 07:58 . 2009-11-24 07:57 5865064 ----a-w- c:\programdata\SweetIM\Messenger\update\sweetimsetup.exe
2009-11-21 06:40 . 2009-12-10 18:55 916480 ----a-w- c:\windows\system32\wininet.dll
2009-11-21 06:34 . 2009-12-10 18:55 109056 ----a-w- c:\windows\system32\iesysprep.dll
2009-11-21 06:34 . 2009-12-10 18:55 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-11-21 04:59 . 2009-12-10 18:55 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2009-11-21 02:34 . 2010-01-03 21:01 10920 ----a-w- c:\windows\system32\drivers\nvBridge.kmd
2009-11-21 02:34 . 2009-09-27 22:12 592488 ----a-w- c:\windows\system32\nvudisp.exe
2009-11-21 02:34 . 2008-10-07 05:33 9333352 ----a-w- c:\windows\system32\nvd3dum.dll
2009-11-21 02:34 . 2008-10-07 05:33 1249896 ----a-w- c:\windows\system32\nvapi.dll
2009-11-20 19:33 . 2009-11-20 19:33 812648 ----a-w- c:\windows\system32\nvsvc.dll
2009-11-20 19:33 . 2009-11-20 19:33 1323624 ----a-w- c:\windows\system32\nvsvcr.dll
2009-11-20 19:33 . 2009-11-20 19:33 12685928 ----a-w- c:\windows\system32\nvcpl.dll
2009-11-20 19:33 . 2009-11-20 19:33 122984 ----a-w- c:\windows\system32\nvvsvc.exe
2009-11-20 19:33 . 2009-11-20 19:33 110184 ----a-w- c:\windows\system32\nvmctray.dll
2009-11-19 20:42 . 2009-01-30 18:12 592488 ----a-w- c:\windows\system32\NVUNINST.EXE
2009-11-17 20:43 . 2009-11-17 20:43 -------- d-----w- c:\program files\Windows Portable Devices
2009-11-17 20:43 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2009-11-17 20:38 . 2009-11-17 20:38 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_07_00.Wdf
2009-11-17 20:38 . 2009-11-17 20:38 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_07_00.Wdf
2009-11-17 08:06 . 2008-04-08 14:10 -------- d-----w- c:\program files\Common Files\Adobe
2009-11-17 07:44 . 2009-11-17 07:44 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdRapi_01_00_00.Wdf
2009-11-02 19:42 . 2009-10-02 18:56 195456 ------w- c:\windows\system32\MpSigStub.exe
2009-10-30 11:08 . 2009-10-30 11:07 653560 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2009-10-29 09:17 . 2009-11-25 20:34 2048 ----a-w- c:\windows\system32\tzres.dll
2009-10-11 03:17 . 2009-04-21 13:15 411368 ----a-w- c:\windows\system32\deploytk.dll
2008-04-08 23:39 . 2008-04-08 23:11 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
2009-10-19 15:15 1345336 ----a-w- c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2009-10-19 1345336]

[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2009-10-19 1345336]

[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"SmpcSys"="c:\program files\Packard Bell\SetUpMyPC\SmpSys.exe" [2007-07-19 1120568]
"ISUSPM"="c:\program files\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2006-09-11 218032]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-05-28 39408]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-19 1008184]
"RtHDVCpl"="RtHDVCpl.exe" [2007-10-01 4702208]
"toolbar_eula_launcher"="c:\program files\Packard Bell\GOOGLE_EULA\EULALauncher.exe" [2007-02-20 28672]
"F-Secure Manager"="c:\program files\Orange\AntivirusFirewall\Common\FSM32.EXE" [2008-12-04 182936]
"F-Secure TNB"="c:\program files\Orange\AntivirusFirewall\FSGUI\TNBUtil.exe" [2008-12-04 957024]
"ORAHSSSessionManager"="c:\program files\OrangeHSS\SessionManager\SessionManager.exe" [2007-12-12 107248]
"Windows Mobile-based device management"="c:\windows\WindowsMobile\wmdc.exe" [2007-01-24 563080]
"SweetIM"="c:\program files\SweetIM\Messenger\SweetIM.exe" [2009-10-20 111928]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-06-18 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-06-18 166424]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-06-18 133656]

c:\users\TONI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Notification de cadeaux MSN.lnk - c:\users\TONI\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe [2009-5-6 135680]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
WiFi Station pour Livebox.lnk - c:\program files\Hercules\WiFi Station pour Livebox\WiFiLB.exe [2009-2-8 102400]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"FilterAdministratorToken"= 1 (0x1)
"EnableUIADesktopToggle"= 0 (0x0)
"UacDisableNotify"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" -osboot
"PlayMovie"="c:\program files\CyberLink\PlayMovie\PMVService.exe"
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe"
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):86,54,18,32,97,3e,ca,01

R0 fsbts;fsbts;c:\windows\System32\drivers\fsbts.sys [15/06/2009 11:06 33920]
R1 F-Secure HIPS;F-Secure HIPS Driver;c:\program files\Orange\AntivirusFirewall\HIPS\drivers\fshs.sys [15/06/2009 11:05 67808]
R1 FSES;F-Secure Email Scanning Driver;c:\windows\System32\drivers\fses.sys [15/06/2009 11:06 35552]
R1 FSFW;F-Secure Firewall Driver;c:\windows\System32\drivers\fsdfw.sys [15/06/2009 11:06 70944]
R1 fsvista;F-Secure Vista Support Driver;c:\program files\Orange\AntivirusFirewall\Anti-Virus\minifilter\fsvista.sys [15/06/2009 11:05 12384]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [20/11/2009 19:17 240232]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [17/12/2009 21:00 1044808]
R3 F-Secure Gatekeeper;F-Secure Gatekeeper;c:\program files\Orange\AntivirusFirewall\Anti-Virus\minifilter\fsgk.sys [15/06/2009 11:05 107104]
R3 FSORSPClient;F-Secure ORSP Client;c:\program files\Orange\AntivirusFirewall\ORSP Client\fsorsp.exe [15/06/2009 11:05 55904]
R3 netr73;Hercules Wireless USB Dongle Driver for Vista;c:\windows\System32\drivers\netr73.sys [08/02/2009 13:53 256000]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\System32\drivers\nvhda32v.sys [04/01/2010 22:39 44576]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [14/10/2009 07:24 10064]
S3 FontCache;Service de cache de police Windows;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [11/01/2009 12:49 21504]
S3 fssfltr;FssFltr;c:\windows\System32\drivers\fssfltr.sys [02/10/2009 20:13 54632]
S3 fsssvc;Service Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [05/08/2009 21:48 704864]
S3 PCAMp50;PCAMp50 NDIS Protocol Driver;c:\windows\System32\drivers\PCAMp50.sys [09/01/2009 16:59 28224]
S4 F-Secure Filter;F-Secure File System Filter;c:\program files\Orange\AntivirusFirewall\Anti-Virus\win2k\fsfilter.sys [15/06/2009 11:05 39776]
S4 F-Secure Recognizer;F-Secure File System Recognizer;c:\program files\Orange\AntivirusFirewall\Anti-Virus\win2k\fsrec.sys [15/06/2009 11:05 25184]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Contenu du dossier 'Tâches planifiées'

2010-01-08 c:\windows\Tasks\Extension de garantie.job
- c:\program files\Packard Bell\SetupmyPC\PBCarNot.exe [2008-04-08 16:38]

2009-02-04 c:\windows\Tasks\HDReg.job
- c:\program files\HDReg\HDRegRem.exe [2003-07-15 07:14]

2010-01-08 c:\windows\Tasks\Scheduled scanning task.job
- c:\progra~1\Orange\ANTIVI~1\ANTI-V~1\fsav.exe [2009-06-15 13:57]

2010-01-08 c:\windows\Tasks\User_Feed_Synchronization-{2CCE66AC-201F-4AFB-8C7F-6D6F015788A9}.job
- c:\windows\system32\msfeedssync.exe [2009-12-10 04:59]

2010-01-08 c:\windows\Tasks\User_Feed_Synchronization-{F1E9850D-2CB2-4997-A15D-8579FCE27CEB}.job
- c:\windows\system32\msfeedssync.exe [2009-12-10 04:59]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.nixud.com/
mWindow Title =
uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
LSP: c:\program files\Orange\AntivirusFirewall\FSPS\program\FSLSP.DLL
Trusted Zone: real.com\rhap-app-4-0
Trusted Zone: real.com\rhapreg
.
- - - - ORPHELINS SUPPRIMES - - - -

HKLM-Run-FBSSA - c:\program files\SGPSA\ie3sh.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-08 23:38
Windows 6.0.6002 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
FBSSA = c:\program files\SGPSA\ie3sh.exe?wser Search\IE\SearchAssistant.dll?7??????????????????????????????

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_USERS\S-1-5-21-1589539437-300597815-2143627178-1002\Software\SecuROM\License information*]
"datasecu"=hex:95,42,f5,0a,23,95,f5,41,7b,76,62,dd,1a,b1,ab,22,0e,1f,43,8e,28,
94,73,ae,22,70,d8,51,66,7a,99,18,38,c7,a5,72,33,cb,63,9e,55,2f,62,cf,53,dc,\
"rkeysecu"=hex:c7,38,f6,bc,de,ca,02,93,9f,ef,93,1c,96,9a,25,ed
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(748)
c:\program files\Orange\AntivirusFirewall\FWES\Program\fsdc32.dll

- - - - - - - > 'lsass.exe'(636)
c:\program files\Orange\AntivirusFirewall\FWES\Program\fsdc32.dll

- - - - - - - > 'csrss.exe'(516)
c:\program files\Orange\AntivirusFirewall\FWES\Program\fsdc32.dll

- - - - - - - > 'csrss.exe'(588)
c:\program files\Orange\AntivirusFirewall\FWES\Program\fsdc32.dll
.
Heure de fin: 2010-01-08 23:40:41
ComboFix-quarantined-files.txt 2010-01-08 22:40

Avant-CF: 200 335 351 808 octets libres
Après-CF: 200 283 234 304 octets libres

- - End Of File - - 92696146C52BE930E31A89FA5DDD1FD2


j t suit reconaissant.....merci

mon ami desolé mais j ni arrive pas malgré le logiciel que tu ma demandé d installé qu il est sur l bureau coté administrteur j plante!!!!!!!!!!
d une sur 1 volet ume m parlr d ouvrir a winlogon
la ou sa mrd ces que se rendre a hkey local machine ............................................ ces ok!
mais demande de cliqué winlogon et il y en a pas!!!!!!!!!!

j suis desolé de vous decevoir !!!!! vraiment
et ces aces moment la qu on voit que l imformatique est vraiment complexe !!! bien plus que les femmes

j suis arrivé a faire et posé autre compte administrateur ca ces ok
sauf que quand j tape sur execut : progames files\sgpsa il m l affiche mais tjour impossibl a supprimé non atorisé