Help Cheval de Troie sur Facebook Résolu

Question

Bonjour,
Sur Facebook, j'ai reçu un message d'un de mes contacts avec un lien vers une vidéo... je ne me suis pas méfiée... et depuis avast m'indique un virus mais impossible de le supprimer.. ce qui se traduit par des tas de problèmes sur Internet : impossible d'ouvrir certaines pages, et beaucoup de pages de pub s'ouvrent inopinément.
Après quelques recherches, j'ai obtenu les rapports suivants :
log.txt :
=========================

Logfile of random's system information tool 1.06 (written by random/random)
Run by Delphine at 2010-02-16 15:35:08
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 76 GB (50%) free of 150 GB
Total RAM: 2037 MB (63% free)


======Scheduled tasks folder======

C:\WINDOWS	asks\AppleSoftwareUpdate.job
C:\WINDOWS	asks\Google Software Updater.job
C:\WINDOWS	asks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS	asks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS	asks\GoogleUpdateTaskUserS-1-5-21-1482476501-630328440-725345543-1003Core.job
C:\WINDOWS	asks\GoogleUpdateTaskUserS-1-5-21-1482476501-630328440-725345543-1003UA.job
C:\WINDOWS	asks\GoogleUpdateTaskUserS-1-5-21-1482476501-630328440-725345543-1004Core.job
C:\WINDOWS	asks\GoogleUpdateTaskUserS-1-5-21-1482476501-630328440-725345543-1004UA.job
C:\WINDOWS	asks\Norton Security Scan for Delphine.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2009-02-04 1082880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll [2009-08-17 312928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-02-06 279664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll [2010-02-06 812528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C451C08A-EC37-45DF-AAAD-18B51AB5E837}]
PDFCreator Toolbar Helper - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll [2009-01-22 806912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-09 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-03-09 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FE063DB1-4EC0-403e-8DD8-394C54984B2C}]
Ask Toolbar BHO - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL [2008-12-27 245760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{FE063DB9-4EC0-403e-8DD8-394C54984B2C} - Ask Toolbar - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL [2008-12-27 245760]
{31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - PDFCreator Toolbar - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll [2009-01-22 806912]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-02-06 279664]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2008-11-03 134656]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2008-11-03 166912]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2008-11-03 134656]
"adiras"=adiras.exe []
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-12-09 18063872]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2008-06-19 57344]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
"F-Secure Manager"=C:\Program Files\SFR\Pack Sécurité\Common\FSM32.EXE [2008-09-23 182936]
"F-Secure TNB"=C:\Program Files\SFR\Pack Sécurité\FSGUI\TNBUtil.exe [2008-09-23 957024]
"NeroFilterCheck"=C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe [2008-06-19 570664]
"NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2008-06-08 2221352]
"BigDog303"=C:\WINDOWS\VM303_STI.EXE [2007-06-08 61440]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-09 148888]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2009-05-26 413696]
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe [2009-08-17 198160]
"eorezo"= []
"SoftwareHelper"=C:\Documents and Settings\Delphine\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe [2008-12-09 368224]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-02-11 2756488]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"sysldtray"=C:\windows\ld16.exe [2010-02-14 39936]
"sysfbtray"=C:\windows\freddy101.exe [2010-02-14 54272]
"pp"=C:\windows\pp14.exe [2010-02-15 34304]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"LightScribe Control Panel"=C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe [2008-06-09 2363392]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883856]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe [2008-06-24 1840424]
"TomTomHOME.exe"=C:\Program Files\TomTom HOME 2\HOMERunner.exe [2008-12-09 234856]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-02-04 23975720]
"Google Update"=C:\Documents and Settings\Delphine\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-05-05 133104]
"DLD.EXE"=C:\Program Files\Download Direct\DLD.exe []
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-01-06 68856]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Adobe Gamma Loader.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
DSLMON.lnk - C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE

C:\Documents and Settings\Delphine\Menu Démarrer\Programmes\Démarrage
Notification de cadeaux MSN.lnk - C:\Documents and Settings\Delphine\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
Outil de détection de support Picture Motion Browser.lnk - C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2008-11-03 205312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-08-24 133120]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\emule\emule.exe"="C:\Program Files\emule\emule.exe:*:Enabled:eMule"
"C:\Program Files\Nero\Nero 9\Nero ShowTime\ShowTime.exe"="C:\Program Files\Nero\Nero 9\Nero ShowTime\ShowTime.exe:*:Disabled:Nero ShowTime"
"C:\Program Files\eMule0.49b\emule.exe"="C:\Program Files\eMule0.49b\emule.exe:*:Enabled:eMule"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"C:\Program Files\Nero\Nero8\Nero Home\NeroHome.exe"="C:\Program Files\Nero\Nero8\Nero Home\NeroHome.exe:*:Enabled:Nero Home"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Documents and Settings\Delphine\Local Settings\Application Data\F4\ClientUpdater\ClientUpdater.exe"="C:\Documents and Settings\Delphine\Local Settings\Application Data\F4\ClientUpdater\ClientUpdater.exe:*:Enabled:F4 Game Client Updater"
"C:\Program Files\IncrediMail\bin\ImApp.exe"="C:\Program Files\IncrediMail\bin\ImApp.exe:*:Enabled:IncrediMail"
"C:\Program Files\IncrediMail\bin\IncMail.exe"="C:\Program Files\IncrediMail\bin\IncMail.exe:*:Enabled:IncrediMail"
"C:\Program Files\IncrediMail\bin\ImpCnt.exe"="C:\Program Files\IncrediMail\bin\ImpCnt.exe:*:Enabled:IncrediMail"
"C:\Program Files\SecondLife\SLVoice.exe"="C:\Program Files\SecondLife\SLVoice.exe:*:Enabled:SLVoice"
"C:\Program Files\RomuSoftomustrikeomustrike.exe"="C:\Program Files\RomuSoftomustrikeomustrike.exe:*:Enabled:romustrike"
"C:\WINDOWS\system32\dpnsvr.exe"="C:\WINDOWS\system32\dpnsvr.exe:*:Enabled:Microsoft DirectPlay8 Server"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\Metin2_France\metin2.bin"="C:\Program Files\Metin2_France\metin2.bin:*:Enabled:metin2"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\Documents and Settings\Delphine\Mes documents\Downloads\FOGDownloader-RoM_2_1_0_1871.exe"="C:\Documents and Settings\Delphine\Mes documents\Downloads\FOGDownloader-RoM_2_1_0_1871.exe:*:Enabled:FOGDownloader-RoM_2_1_0_1871"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2b5a71b8-cb9e-11de-be50-001d92f88771}]
shell\AutoRun\command - K:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3dd1536d-e57f-11dd-bbe1-001d92f88771}]
shell\AutoRun\command - J:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{928d1f0a-f45b-11dd-bc01-001d92f88771}]
shell\AutoRun\command - J:\InstallTomTomHOME.exe


======List of files/folders created in the last 1 months======

2010-02-16 15:27:12 ----D---- C:sit
2010-02-16 15:27:12 ----D---- C:\Program Files	rend micro
2010-02-16 12:27:23 ----A---- C:\WINDOWSdr_1266319639.exe
2010-02-15 22:48:13 ----A---- C:\WINDOWSdr_1266270488.exe
2010-02-15 10:27:22 ----H---- C:\WINDOWS\pp14.exe
2010-02-15 10:27:10 ----A---- C:\WINDOWS\system32\oko6.dll
2010-02-14 23:50:01 ----N---- C:\WINDOWS\freddy101.exe
2010-02-14 23:49:43 ----A---- C:\WINDOWS\ld16.exe
2010-02-12 09:22:12 ----D---- C:\Documents and Settings\All Users\Application Data\Alwil Software
2010-02-11 07:40:02 ----HDC---- C:\WINDOWS\$NtUninstallKB978262$
2010-02-11 07:39:57 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2010-02-11 07:37:56 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-02-11 07:37:49 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-02-11 07:37:44 ----HDC---- C:\WINDOWS\$NtUninstallKB978251$
2010-02-11 07:37:38 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-02-11 07:37:02 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-02-11 07:36:53 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-02-11 07:36:43 ----HDC---- C:\WINDOWS\$NtUninstallKB977165$
2010-02-04 23:00:24 ----D---- C:\Documents and Settings\Delphine\Application Data\eoRezo
2010-01-26 18:57:34 ----D---- C:\Documents and Settings\Delphine\Application Data\dvdcss
2010-01-23 17:10:19 ----D---- C:\Documents and Settings\All Users\Application Data\UAB
2010-01-23 17:10:18 ----D---- C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters
2010-01-23 17:08:30 ----D---- C:\Program Files\PC Drivers HeadQuarters
2010-01-23 16:46:20 ----A---- C:\WINDOWS\Multimedia manager.INI
2010-01-23 16:45:34 ----D---- C:\Documents and Settings\Delphine\Application Data\Samsung
2010-01-23 16:44:46 ----A---- C:\WINDOWS\system32\framedyn.dll
2010-01-23 16:42:44 ----D---- C:\Program Files\Samsung
2010-01-23 16:24:45 ----D---- C:\WINDOWS\system32\Samsung_USB_Drivers
2010-01-20 11:00:07 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-01-20 10:59:47 ----N---- C:\WINDOWS\system32\spmsg.dll
2010-01-20 10:59:46 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$

======List of files/folders modified in the last 1 months======

2010-02-16 15:35:03 ----D---- C:\WINDOWS\Prefetch
2010-02-16 15:27:12 ----D---- C:\Program Files
2010-02-16 15:18:51 ----A---- C:\WINDOWS\NeroDigital.ini
2010-02-16 15:13:09 ----D---- C:\Program Files\Mozilla Firefox
2010-02-16 14:54:10 ----SD---- C:\WINDOWS\Tasks
2010-02-16 12:41:11 ----D---- C:\WINDOWS\Temp
2010-02-16 12:27:23 ----D---- C:\WINDOWS
2010-02-16 12:27:15 ----D---- C:\WINDOWS\system32\CatRoot2
2010-02-16 12:26:58 ----D---- C:\Documents and Settings\All Users\Application Data\Google Updater
2010-02-15 23:06:36 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-02-15 10:27:10 ----D---- C:\WINDOWS\system32
2010-02-15 10:27:09 ----D---- C:\WINDOWS\system32\drivers
2010-02-14 20:46:08 ----D---- C:\WINDOWS\system32\Adobe
2010-02-14 20:45:09 ----D---- C:\WINDOWS\system32\Macromed
2010-02-14 18:01:16 ----D---- C:\WINDOWS\Minidump
2010-02-14 18:00:26 ----D---- C:\Program Files\Fichiers communs\Symantec Shared
2010-02-12 09:24:44 ----D---- C:\Program Files\Alwil Software
2010-02-12 09:22:38 ----SHD---- C:\WINDOWS\Installer
2010-02-12 09:22:37 ----D---- C:\WINDOWS\WinSxS
2010-02-11 19:53:36 ----A---- C:\WINDOWS\system32\aswBoot.exe
2010-02-11 07:40:05 ----HD---- C:\WINDOWS\inf
2010-02-11 07:40:01 ----HD---- C:\WINDOWS\$hf_mig$
2010-02-11 07:39:59 ----A---- C:\WINDOWS\imsins.BAK
2010-02-11 07:39:58 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-02-04 19:39:10 ----D---- C:\Program Files\Google
2010-02-02 22:24:23 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2010-02-02 22:23:21 ----D---- C:\Documents and Settings\Delphine\Application Data\Adobe
2010-02-01 20:26:20 ----A---- C:\WINDOWS\system32\MRT.exe
2010-02-01 17:42:14 ----D---- C:\Program Files\Dofus
2010-01-31 19:47:05 ----D---- C:\Documents and Settings\Delphine\Application Data\vlc
2010-01-27 18:40:20 ----D---- C:\Program Files\Internet Explorer
2010-01-27 18:40:14 ----D---- C:\WINDOWS\ie8updates
2010-01-23 19:10:56 ----HD---- C:\Program Files\InstallShield Installation Information
2010-01-23 17:10:06 ----RSD---- C:\WINDOWS\assembly
2010-01-23 16:44:54 ----D---- C:\WINDOWS\system32\CatRoot
2010-01-23 16:26:36 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-01-20 17:39:15 ----D---- C:\WINDOWS\AppPatch
2010-01-20 17:39:15 ----D---- C:\Program Files\Microsoft Silverlight
2010-01-19 19:44:23 ----RSD---- C:\WINDOWS\Fonts
2010-01-19 19:42:09 ----D---- C:\Program Files\AtomixMP3
2010-01-19 19:41:13 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-01-19 19:41:10 ----D---- C:\Program Files\Fichiers communs

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-02-11 28880]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-02-11 162512]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-02-11 46672]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 oko6;oko6; \??\C:\WINDOWS\system32\drivers\oko6.sys []
R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2006-07-24 5632]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-02-11 19024]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-02-11 100432]
R2 PfModNT;PfModNT; \??\C:\WINDOWS\system32\drivers\PfModNT.sys []
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-02-11 23376]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2008-11-03 6273504]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-12-11 4959232]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2006-12-14 85120]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
R3 ZSMC303;VIMICRO USB PC Camera (ZC0301PLH); C:\WINDOWS\System32\Drivers\usbVM303.sys [2007-06-08 391430]
S1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys []
S2 ADILOADER;General Purpose USB Driver (adildr.sys); C:\WINDOWS\System32\Drivers\adildr.sys [2003-07-17 46167]
S3 ac97intc;Service d'installation du pilote audio Intel(r) 82801 (WDM); C:\WINDOWS\system32\drivers\ac97intc.sys [2001-08-17 96256]
S3 adiusbaw;USB ADSL WAN Adapter; C:\WINDOWS\system32\DRIVERS\adiusbaw.sys [2003-03-27 127145]
S3 Atm.nedcees;Atm.nedcees; C:\WINDOWS\system32\drivers\Atm.nedcees.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-02-11 40384]
R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 Creative Service for CDROM Access;Creative Service for CDROM Access; C:\WINDOWS\system32\CTSvcCDA.EXE [1999-12-13 44032]
R2 FSMA;F-Secure Management Agent; C:\Program Files\SFR\Pack Sécurité\Common\FSMA32.EXE [2008-09-23 117400]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-03-09 152984]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe [2008-06-09 73728]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2008-06-08 877864]
R2 okosrv;okosrv; C:\WINDOWS\sYSteM32\SvchOst.eXE [2008-04-14 14336]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\WINDOWS\system32\IoctlSvc.exe [2006-12-19 81920]
R2 WMDM PMSP Service;WMDM PMSP Service; C:\WINDOWS\system32\MsPMSPSv.exe [2000-06-26 53520]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-02-11 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-02-11 40384]
R3 FSAUA;F-Secure Automatic Update Agent; C:\Program Files\SFR\Pack Sécurité\FSAUA\program\fsaua.exe [2008-09-23 490080]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe [2008-06-24 537896]
S2 gupdate1c9a7cae23ab360;Service Google Update (gupdate1c9a7cae23ab360); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-03-18 133104]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-26 183280]
S2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe []
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe [2008-12-27 68096]
S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S4 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe []
S4 NetTcpPortSharing;Service de partage de ports Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

info.txt :
info.txt logfile of random's system information tool 1.06 2010-02-16 15:34:51

======Uninstall list======

-->"C:\Program Files\SFR\Pack Sécurité\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Virus Client Security Installer"
-->"C:\Program Files\SFR\Pack Sécurité\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Automatic Update Agent"
-->"C:\Program Files\SFR\Pack Sécurité\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure DAAS"
-->"C:\Program Files\SFR\Pack Sécurité\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Diagnostics"
-->"C:\Program Files\SFR\Pack Sécurité\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure GateKeeper Interface"
-->"C:\Program Files\SFR\Pack Sécurité\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure GUI"
-->"C:\Program Files\SFR\Pack Sécurité\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Help"
-->"C:\Program Files\SFR\Pack Sécurité\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Localization API"
-->"C:\Program Files\SFR\Pack Sécurité\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Management Agent"
-->"C:\Program Files\SFR\Pack Sécurité\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Protocol Scanner"
-->"C:\Program Files\SFR\Pack Sécurité\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure TNB"
-->"C:\Program Files\SFR\Pack Sécurité\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Uninstall"
-->"C:\Program Files\SFR\Pack Sécurité\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Web Filter"
-->C:\Program Files\Fichiers communs\Real\Update_OB1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\Program Files\InstallShield Installation Information\{22EB2FA7-1BA0-4FFB-972F-353EC6ABA9D5}\setup.exe -runfromtemp -l0x040c -removeonly
-->C:\Program Files\InstallShield Installation Information\{28B97CAB-828F-49D8-A30A-675476F9BA92}\setup.exe -runfromtemp -l0x040c/cont -removeonly
-->C:\Program Files\InstallShield Installation Information\{4E7DC12A-3597-4A94-9429-F6C6987361B1}\setup.exe -runfromtemp -l0x040c -removeonly
-->C:\Program Files\InstallShield Installation Information\{6813C983-427E-4511-8456-E98FCAA1A125}\setup.exe -runfromtemp -l0x040c -removeonly
-->C:\Program Files\InstallShield Installation Information\{7DADB304-AF20-48C3-A780-4B4133A08817}\setup.exe -runfromtemp -l0x040c -removeonly
-->C:\Program Files\InstallShield Installation Information\{9C423CF6-2DAA-4A37-94B8-59D7ECC7DB13}\setup.exe -runfromtemp -l0x040c -removeonly
-->C:\Program Files\InstallShield Installation Information\{ACE66099-E18E-4037-83C8-9D182E5B9FA8}\setup.exe -runfromtemp -l0x040c -removeonly
-->C:\Program Files\InstallShield Installation Information\{E078134D-A344-41B6-A0F8-147AB235396E}\setup.exe -runfromtemp -l0x040c -removeonly
-->C:\Program Files\InstallShield Installation Information\{FA6CC4B4-7741-4F8D-8E81-15C4BAB9869B}\setup.exe -runfromtemp -l0x040c -removeonly
-->C:\Program Files\Nero\Nero8\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\WINDOWS\IsUn040c.exe -f"C:\Sierra\Le Retour du Prof Tim\Uninst.isu"
-->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
-->C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
-->C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->C:\WINDOWS\UNRecode.exe /UNINSTALL
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1888DAFD-C634-4BC4-865C-3455E24F6177}\setup.exe" -l0x40c 
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1888DAFD-C634-4BC4-865C-3455E24F6177}\setup.exe" -l0x40c  /remove
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5CDC05F7-83E4-4611-AD3C-A6EB2100332A}\setup.exe" -l0x40c 
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5CDC05F7-83E4-4611-AD3C-A6EB2100332A}\setup.exe" -l0x40c  /remove
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5CDDF96A-BC34-4D72-9ABA-E1FFF0C39977}\setup.exe" -l0x40c 
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67AEFC4C-69E4-11D7-85F4-00E018013273}\setup.exe" -l0x40c 
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67AEFC4C-69E4-11D7-85F4-00E018013273}\setup.exe" -l0x40c  /remove
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7A900EAB-DA37-4554-AF19-9C337476D05D}\setup.exe" -l0x40c 
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7A900EAB-DA37-4554-AF19-9C337476D05D}\setup.exe" -l0x40c  /remove
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{869D88A5-BD6C-4E39-8536-D95259EAD7E8}\setup.exe" -l0x40c 
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{869D88A5-BD6C-4E39-8536-D95259EAD7E8}\setup.exe" -l0x40c  /remove
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{881A74B3-3D17-4842-B9AF-0761C6E6C4B5}\setup.exe" -l0x40c 
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{881A74B3-3D17-4842-B9AF-0761C6E6C4B5}\setup.exe" -l0x40c  /remove
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B5BAAFAE-3561-463D-8E3F-91761A57ADB8}\setup.exe" -l0x40c 
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B5BAAFAE-3561-463D-8E3F-91761A57ADB8}\setup.exe" -l0x40c  /remove
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BB82A76F-C3A1-4EBE-9788-148240FFDEE6}\SETUP.EXE" -l0x40c 
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C6866B7D-ACFD-4C49-B77B-3B2F8CF54B96}\setup.exe" -l0x40c 
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C6866B7D-ACFD-4C49-B77B-3B2F8CF54B96}\setup.exe" -l0x40c  /remove
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe AIR-->c:\Program Files\Fichiers communs\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Photoshop CS-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EFB21DE7-8C19-4A88-BB28-A766E16493BC}\setup.exe" -l0x40c 
Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
Adobe Shockwave Player 11.5-->"C:\WINDOWS\system32\Adobe\Shockwave 11\uninstaller.exe"
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Ask Toolbar-->rundll32 C:\PROGRA~1\AskTBar\bar\1.bin\AskTBar.dll,O 
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
avast! Free Antivirus-->C:\Program Files\Alwil Software\Avast5\aswRunDll.exe "C:\Program Files\Alwil Software\Avast5\Setup\setiface.dll" RunSetup
AVS Update Manager 1.0-->"C:\Program Files\AVS4YOU\AVSUpdateManger\unins000.exe"
AVS Video Converter 6-->"C:\Program Files\AVS4YOU\AVSVideoConverter6\unins000.exe"
AVS4YOU Software Navigator 1.3-->"C:\Program Files\AVS4YOU\AVSSoftwareNavigator\unins000.exe"
Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
Combined Community Codec Pack 2007-07-22-->"C:\Program Files\Combined Community Codec Pack\unins000.exe"
Contrôle parental-->"C:\Program Files\SFR\Pack Sécurité\FSGUI\PostInstall.exe"  /tUnInstall
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB976098-v2)-->"C:\WINDOWS\$NtUninstallKB976098-v2$\spuninst\spuninst.exe"
Creative MediaSource-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{56F3E1FF-54FE-4384-A153-6CCABA097814}\SETUP.EXE" -l0x40c /remove
Dofus 1.28.0-->C:\Program Files\Dofus\uninstall.exe
Driver Detective-->MsiExec.exe /X{4640FDE1-B83A-4376-84ED-86F86BEE2D41}
DVD Decoder Pak for Windows XP-->MsiExec.exe /X{92C5DB3D-9D6F-4324-BB11-57825F4C2635}
EVEREST Ultimate Edition v4.60-->"C:\Program Files\Lavalys\EVEREST Ultimate Edition\unins000.exe"
FLV Player 1.3.3-->"C:\Program Files\FLVPlayer\uninstall.exe"
Foxit Reader-->C:\Program Files\Foxit Software\Foxit Reader\Uninstall.exe
Google SketchUp 6-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{98736A65-3C79-49EC-B7E9-A3C77774B0E6}\setup.exe" -l0x40c  -removeonly
Google SketchUp 6-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B3D8B2F8-3C2C-45BC-933E-8B60E78F6684}\setup.exe" -l0x40c  -removeonly
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_E85CDE7661A53A6A.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Google Earth-->MsiExec.exe /X{2EAF7E61-068E-11DF-953C-005056806466}
High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall  /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
Intel(R) Graphics Media Accelerator Driver-->C:\WINDOWS\system32\igxpun.exe -uninstall
InterActual Player-->C:\Program Files\InterActual\InterActual Player\inuninst.exe
Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216010FF}
LightScribe System Software  1.14.17.1-->MsiExec.exe /X{0E7DBD52-B097-4F2B-A7C7-F105B0D20FDB}
L'Internet ADSL de Cegetel-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A16E2D86-7D92-48F4-9649-6029C96D4D8F}\Setup.exe" -l0x40c 
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 French Language Pack-->MsiExec.exe /X{E3C080B0-23F5-49AF-89F8-8E8DBC89E659}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Office XP Professional avec FrontPage-->MsiExec.exe /I{9028040C-6000-11D3-8CFE-0050048383C9}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
Microsoft WSE 3.0 Runtime-->MsiExec.exe /X{E3E71D07-CD27-46CB-8448-16D4FB29AA13}
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9L$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB969897)-->"C:\WINDOWS\ie8updates\KB969897-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB972260)-->"C:\WINDOWS\ie8updates\KB972260-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB974455)-->"C:\WINDOWS\ie8updates\KB974455-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB976325)-->"C:\WINDOWS\ie8updates\KB976325-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB978207)-->"C:\WINDOWS\ie8updates\KB978207-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958215)-->"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960714)-->"C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB963027)-->"C:\WINDOWS\$NtUninstallKB963027$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969897)-->"C:\WINDOWS\$NtUninstallKB969897$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970430)-->"C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971468)-->"C:\WINDOWS\$NtUninstallKB971468$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB972270)-->"C:\WINDOWS\$NtUninstallKB972270$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973904)-->"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB975560)-->"C:\WINDOWS\$NtUninstallKB975560$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB975713)-->"C:\WINDOWS\$NtUninstallKB975713$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB977165)-->"C:\WINDOWS\$NtUninstallKB977165$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB977914)-->"C:\WINDOWS\$NtUninstallKB977914$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB978037)-->"C:\WINDOWS\$NtUninstallKB978037$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB978251)-->"C:\WINDOWS\$NtUninstallKB978251$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB978262)-->"C:\WINDOWS\$NtUninstallKB978262$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB978706)-->"C:\WINDOWS\$NtUninstallKB978706$\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB976749)-->"C:\WINDOWS\ie8updates\KB976749-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955759)-->"C:\WINDOWS\$NtUninstallKB955759$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB971737)-->"C:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB973687)-->"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
Module de prise en charge linguistique du français de Microsoft .NET Framework 3.0-->c:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 French Language Pack\setup.exe
Mozilla Firefox (3.5.7)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
MSXML 6 Service Pack 2 (KB954459)-->MsiExec.exe /I{1A528690-6A2D-4BC5-B143-8C4AE8D19D96}
Nero 8-->MsiExec.exe /X{D6C9AF27-9414-46C8-B9D8-D878BA041036}
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
NOMAD MuVo TX-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BB82A76F-C3A1-4EBE-9788-148240FFDEE6}\SETUP.EXE" -l0x40c  /remove
Norton Security Scan-->C:\Program Files\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\2.3.0.44\InstStub.exe /X
OpenAL-->"C:\Program Files\OpenAL\oalinst.exe" /U
Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
PDFCreator Toolbar-->"C:\WINDOWS\PDFCreator_Toolbar_Uninstaller_1031.exe"  _?=C:\Program Files\PDFCreator Toolbar
PDFCreator-->C:\Program Files\PDFCreator\unins000.exe
Picasa 3-->"C:\Program Files\Picasa3\Uninstall.exe"
QuickTime-->MsiExec.exe /I{C78EAC6F-7A73-452E-8134-DBB2165C5A68}
RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB1puninst.exe RealNetworks|RealPlayer|6.0
REALTEK GbE & FE Ethernet PCI NIC Driver-->C:\Program Files\InstallShield Installation Information\{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}\setup.exe -runfromtemp -l0x040c -removeonly
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m -nrg2709
Reg (DOFUS Audio Subsystem)-->msiexec /qb /x {3F900346-A316-BA88-B83C-2513F1260AD7}
Reg (DOFUS Audio Subsystem)-->MsiExec.exe /I{3F900346-A316-BA88-B83C-2513F1260AD7}
SAGEM F@st 800-840-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F}\setup.exe" -l0x40c 
SAMSUNG Mobile Modem Driver Set-->C:\WINDOWS\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe
Samsung Mobile phone USB driver Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe
SAMSUNG Mobile USB Modem 1.0 Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe
SAMSUNG Mobile USB Modem Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
SFR - Kit de connexion-->C:\Program Files\SFR\Kit\uninstall.exe
Skype™ 4.0-->MsiExec.exe /X{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}
SoftwareUpdate 1.0-->"C:\Documents and Settings\Delphine\Application Data\eoRezo\SoftwareUpdate\unins000.exe"
Sony Picture Utility-->C:\Program Files\InstallShield Installation Information\{D5068583-D569-468B-9755-5FBF5848F46F}\setup.exe -runfromtemp -l0x040c /removeonly uninstall -removeonly
TomTom HOME 2.5.2.60-->C:\Program Files\TomTom HOME 2\Uninstall TomTom HOME.exe
TV sur PC-->C:\Program Files\SFR\TV_PC\uninstall.exe
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
VLC media player 1.0.2-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
Windows Live OneCare safety scanner-->RunDll32.exe "C:\Program Files\Windows Live Safety Center\wlscCore.dll",UninstallFunction WLSC_SCANNER_PRODUCT
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Presentation Foundation Language Pack (FRA)-->MsiExec.exe /X{6901DD22-527A-41EF-9059-E81FEDE9E494}
Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Windows Workflow Foundation FR Language Pack-->MsiExec.exe /I{B84C141C-9A13-44BE-9A69-301D7B11D836}
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"

======Security center information======

AV: avast! Antivirus

======System event log======

Computer Name: DURANTON
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service NLA (Network Location Awareness).

Record Number: 35607
Source Name: Service Control Manager
Time Written: 20100123084221.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: DURANTON
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Service de découvertes SSDP.

Record Number: 35606
Source Name: Service Control Manager
Time Written: 20100123084221.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: DURANTON
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service F-Secure Automatic Update Agent.

Record Number: 35605
Source Name: Service Control Manager
Time Written: 20100123084221.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: DURANTON
Event Code: 7036
Message: Le service F-Secure Automatic Update Agent est entré dans l'état : en cours d'exécution.

Record Number: 35604
Source Name: Service Control Manager
Time Written: 20100123084221.000000+060
Event Type: Informations
User: 

Computer Name: DURANTON
Event Code: 7036
Message: Le service Gestionnaire de connexions d'accès distant est entré dans l'état : en cours d'exécution.

Record Number: 35603
Source Name: Service Control Manager
Time Written: 20100123084219.000000+060
Event Type: Informations
User: 

=====Application event log=====

Computer Name: DURANTON
Event Code: 0
Message: 
Record Number: 8270
Source Name: gusvc
Time Written: 20091009205345.000000+120
Event Type: Informations
User: 

Computer Name: DURANTON
Event Code: 0
Message: 
Record Number: 8269
Source Name: gupdate1c9a7cae23ab360
Time Written: 20091009205345.000000+120
Event Type: Informations
User: 

Computer Name: DURANTON
Event Code: 1
Message: 
Record Number: 8268
Source Name: Bonjour Service
Time Written: 20091009205345.000000+120
Event Type: Informations
User: 

Computer Name: DURANTON
Event Code: 105
Message: The service was started.

Record Number: 8267
Source Name: Creative Service for CDROM Access
Time Written: 20091009205345.000000+120
Event Type: Informations
User: 

Computer Name: DURANTON
Event Code: 0
Message: 
Record Number: 8266
Source Name: gusvc
Time Written: 20091009190241.000000+120
Event Type: Informations
User: 

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\QuickTime\QTSystem\;C:\Program Files\Samsung\Samsung PC Studio 3\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 13, GenuineIntel
"PROCESSOR_REVISION"=0f0d
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip

-----------------EOF-----------------


Est-ce que quelqu'un peut me venir en aide ????
Merci d'avance

Utilisateur anonyme · Answer

bonjour
bien infecté

Télécharge USBFix (de El Desaparecido, C_XX et Chimay8)  sur ton bureau
http://pagesperso-orange.fr/NosTools/Chiquitine29/UsbFix.txt­
ou
https://www.ionos.fr/?affiliate_id=77097 

Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d'avoir été infectées sans les ouvrir

# Double clic sur le raccourci UsbFix présent sur ton bureau .

# Sélectionne l'option 1 ( Recherche )

# Laisse travailler l'outil.

# Ensuite poste le rapport UsbFix.txt qui apparaitra.

# Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )

( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

# Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

Ced_King · Answer

Salut,

bonne continuation....

roudoude03 · Answer

Ci-dessous dberr.txt... je sais pas si c'est bien ce que tu me demandais, suis un peu perdue !!!

CatalogDB: 09:19:49 10/09/2009: Adding Catalog File:  KB956844.cat
CatalogDB: 09:19:49 10/09/2009: DONE Adding Catalog File:  KB956844.cat
CatalogDB: 09:19:51 10/09/2009: Adding Catalog File:  oem16.CAT
CatalogDB: 09:19:51 10/09/2009: DONE Adding Catalog File:  oem16.CAT
CatalogDB: 09:19:53 10/09/2009: Adding Catalog File:  KB968816.cat
CatalogDB: 09:19:53 10/09/2009: DONE Adding Catalog File:  KB968816.cat
CatalogDB: 16:40:21 27/09/2009: WAITSVC: Calling StartService():  ProtectedStorage
CatalogDB: 16:40:50 27/09/2009: WAITSVC: Service is running:  ProtectedStorage
CatalogDB: 20:11:36 02/10/2009: Adding Catalog File:  oem16.CAT
CatalogDB: 20:11:40 02/10/2009: DONE Adding Catalog File:  oem16.CAT
CatalogDB: 19:14:42 03/10/2009: Adding Catalog File:  oem17.CAT
CatalogDB: 19:14:43 03/10/2009: DONE Adding Catalog File:  oem17.CAT
CatalogDB: 20:28:24 03/10/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 20:28:24 03/10/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 20:28:41 03/10/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 20:28:41 03/10/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 18:28:11 05/10/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 18:28:12 05/10/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 18:28:35 05/10/2009: Adding Catalog File:  KB968389.cat
CatalogDB: 18:28:35 05/10/2009: DONE Adding Catalog File:  KB968389.cat
CatalogDB: 21:20:58 14/10/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 21:20:58 14/10/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 21:21:46 14/10/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 21:21:46 14/10/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 21:21:49 14/10/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 21:21:49 14/10/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 21:21:52 14/10/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 21:21:52 14/10/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 21:22:22 14/10/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 21:22:23 14/10/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 21:23:37 14/10/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 21:23:37 14/10/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 21:23:40 14/10/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 21:23:40 14/10/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 21:23:42 14/10/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 21:23:42 14/10/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 21:23:44 14/10/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 21:23:44 14/10/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 21:23:48 14/10/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 21:23:48 14/10/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 14:51:19 16/10/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 14:51:19 16/10/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 14:51:45 16/10/2009: Adding Catalog File:  KB975467.cat
CatalogDB: 14:51:45 16/10/2009: DONE Adding Catalog File:  KB975467.cat
CatalogDB: 14:51:52 16/10/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 14:51:52 16/10/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 14:51:54 16/10/2009: Adding Catalog File:  KB973525.cat
CatalogDB: 14:51:54 16/10/2009: DONE Adding Catalog File:  KB973525.cat
CatalogDB: 14:52:10 16/10/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 14:52:10 16/10/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 14:52:14 16/10/2009: Adding Catalog File:  KB971486.cat
CatalogDB: 14:52:14 16/10/2009: DONE Adding Catalog File:  KB971486.cat
CatalogDB: 14:52:30 16/10/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 14:52:30 16/10/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 14:52:32 16/10/2009: Adding Catalog File:  KB974571.cat
CatalogDB: 14:52:32 16/10/2009: DONE Adding Catalog File:  KB974571.cat
CatalogDB: 14:52:36 16/10/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 14:52:36 16/10/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 14:52:38 16/10/2009: Adding Catalog File:  KB975025.cat
CatalogDB: 14:52:38 16/10/2009: DONE Adding Catalog File:  KB975025.cat
CatalogDB: 14:52:41 16/10/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 14:52:41 16/10/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 14:52:44 16/10/2009: Adding Catalog File:  KB974112.cat
CatalogDB: 14:52:44 16/10/2009: DONE Adding Catalog File:  KB974112.cat
CatalogDB: 14:52:47 16/10/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 14:52:47 16/10/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 14:52:48 16/10/2009: Adding Catalog File:  KB954155.cat
CatalogDB: 14:52:48 16/10/2009: DONE Adding Catalog File:  KB954155.cat
CatalogDB: 14:53:04 16/10/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 14:53:04 16/10/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 14:53:07 16/10/2009: Adding Catalog File:  KB969059.cat
CatalogDB: 14:53:07 16/10/2009: DONE Adding Catalog File:  KB969059.cat
CatalogDB: 14:54:27 16/10/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 14:54:27 16/10/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 14:54:28 16/10/2009: Adding Catalog File:  KB958869.cat
CatalogDB: 14:54:28 16/10/2009: DONE Adding Catalog File:  KB958869.cat
CatalogDB: 14:54:32 16/10/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 14:54:32 16/10/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 14:54:40 16/10/2009: Adding Catalog File:  KB974455-IE8.cat
CatalogDB: 14:54:40 16/10/2009: DONE Adding Catalog File:  KB974455-IE8.cat
CatalogDB: 18:01:03 25/10/2009: WAITSVC: Calling StartService():  ProtectedStorage
CatalogDB: 18:01:37 25/10/2009: WAITSVC: Service is running:  ProtectedStorage
CatalogDB: 13:34:45 05/11/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 13:34:45 05/11/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 13:35:15 05/11/2009: Adding Catalog File:  KB976749-IE8.cat
CatalogDB: 13:35:15 05/11/2009: DONE Adding Catalog File:  KB976749-IE8.cat
CatalogDB: 17:28:49 12/11/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 17:28:49 12/11/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 17:31:34 12/11/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 17:31:34 12/11/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 11:41:17 15/11/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 11:41:17 15/11/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 11:41:44 15/11/2009: Adding Catalog File:  KB969947.cat
CatalogDB: 11:41:45 15/11/2009: DONE Adding Catalog File:  KB969947.cat
CatalogDB: 11:34:41 29/11/2009: WAITSVC: Calling StartService():  ProtectedStorage
CatalogDB: 11:35:20 29/11/2009: WAITSVC: Service is running:  ProtectedStorage
CatalogDB: 20:16:21 02/12/2009: WAITSVC: Calling StartService():  ProtectedStorage
CatalogDB: 20:16:58 02/12/2009: WAITSVC: Service is running:  ProtectedStorage
CatalogDB: 21:33:58 08/12/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 21:33:58 08/12/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 21:34:05 08/12/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 21:34:05 08/12/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 21:35:36 08/12/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 21:35:36 08/12/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 21:35:39 08/12/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 21:35:39 08/12/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 21:35:44 08/12/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 21:35:44 08/12/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 21:35:46 08/12/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 21:35:46 08/12/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 21:35:49 08/12/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 21:35:49 08/12/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 21:35:52 08/12/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 21:35:52 08/12/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 21:05:03 09/12/2009: WAITSVC: Calling StartService():  ProtectedStorage
CatalogDB: 21:05:35 09/12/2009: WAITSVC: Service is running:  ProtectedStorage
CatalogDB: 18:53:19 15/12/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 18:53:20 15/12/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 18:53:48 15/12/2009: Adding Catalog File:  KB971737.cat
CatalogDB: 18:53:48 15/12/2009: DONE Adding Catalog File:  KB971737.cat
CatalogDB: 18:53:55 15/12/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 18:53:55 15/12/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 18:53:58 15/12/2009: Adding Catalog File:  KB974392.cat
CatalogDB: 18:53:58 15/12/2009: DONE Adding Catalog File:  KB974392.cat
CatalogDB: 18:54:01 15/12/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 18:54:01 15/12/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 18:54:04 15/12/2009: Adding Catalog File:  KB973904.cat
CatalogDB: 18:54:04 15/12/2009: DONE Adding Catalog File:  KB973904.cat
CatalogDB: 18:54:08 15/12/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 18:54:08 15/12/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 18:54:11 15/12/2009: Adding Catalog File:  KB973687.cat
CatalogDB: 18:54:11 15/12/2009: DONE Adding Catalog File:  KB973687.cat
CatalogDB: 18:54:32 15/12/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 18:54:33 15/12/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 18:54:41 15/12/2009: Adding Catalog File:  KB976325-IE8.cat
CatalogDB: 18:54:41 15/12/2009: DONE Adding Catalog File:  KB976325-IE8.cat
CatalogDB: 18:54:51 15/12/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 18:54:51 15/12/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 18:54:54 15/12/2009: Adding Catalog File:  KB974318.cat
CatalogDB: 18:54:54 15/12/2009: DONE Adding Catalog File:  KB974318.cat
CatalogDB: 18:54:57 15/12/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 18:54:57 15/12/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 18:54:59 15/12/2009: Adding Catalog File:  KB976098-v2.cat
CatalogDB: 18:54:59 15/12/2009: DONE Adding Catalog File:  KB976098-v2.cat
CatalogDB: 18:55:02 15/12/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 18:55:02 15/12/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 18:55:05 15/12/2009: Adding Catalog File:  KB970430.cat
CatalogDB: 18:55:05 15/12/2009: DONE Adding Catalog File:  KB970430.cat
CatalogDB: 18:36:59 23/12/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 18:36:59 23/12/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 18:37:20 23/12/2009: Adding Catalog File:  WMFDist11.cat
CatalogDB: 18:37:20 23/12/2009: DONE Adding Catalog File:  WMFDist11.cat
CatalogDB: 22:39:59 23/12/2009: Adding Catalog File:  oem18.CAT
CatalogDB: 22:39:59 23/12/2009: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 22:40:13 23/12/2009: Adding Catalog File:  WMFDist11.cat
CatalogDB: 22:40:13 23/12/2009: DONE Adding Catalog File:  WMFDist11.cat
CatalogDB: 19:42:40 14/01/2010: WAITSVC: Calling StartService():  ProtectedStorage
CatalogDB: 19:43:13 14/01/2010: WAITSVC: Service is running:  ProtectedStorage
CatalogDB: 16:24:35 19/01/2010: WAITSVC: Calling StartService():  ProtectedStorage
CatalogDB: 16:25:03 19/01/2010: WAITSVC: Service is running:  ProtectedStorage
CatalogDB: 10:59:19 20/01/2010: Adding Catalog File:  oem13.CAT
CatalogDB: 10:59:19 20/01/2010: DONE Adding Catalog File:  oem13.CAT
CatalogDB: 10:59:47 20/01/2010: Adding Catalog File:  KB972270.cat
CatalogDB: 10:59:47 20/01/2010: DONE Adding Catalog File:  KB972270.cat
CatalogDB: 11:00:05 20/01/2010: Adding Catalog File:  oem13.CAT
CatalogDB: 11:00:05 20/01/2010: DONE Adding Catalog File:  oem13.CAT
CatalogDB: 11:00:09 20/01/2010: Adding Catalog File:  KB955759.cat
CatalogDB: 11:00:09 20/01/2010: DONE Adding Catalog File:  KB955759.cat
CatalogDB: 16:24:45 23/01/2010: Adding Catalog File:  oem13.CAT
CatalogDB: 16:24:45 23/01/2010: DONE Adding Catalog File:  oem13.CAT
CatalogDB: 16:24:46 23/01/2010: Adding Catalog File:  oem14.CAT
CatalogDB: 16:24:46 23/01/2010: DONE Adding Catalog File:  oem14.CAT
CatalogDB: 16:24:54 23/01/2010: Adding Catalog File:  oem18.CAT
CatalogDB: 16:24:54 23/01/2010: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 16:24:55 23/01/2010: Adding Catalog File:  oem19.CAT
CatalogDB: 16:24:55 23/01/2010: DONE Adding Catalog File:  oem19.CAT
CatalogDB: 16:24:55 23/01/2010: Adding Catalog File:  oem20.CAT
CatalogDB: 16:24:55 23/01/2010: DONE Adding Catalog File:  oem20.CAT
CatalogDB: 16:24:57 23/01/2010: Adding Catalog File:  oem21.CAT
CatalogDB: 16:24:57 23/01/2010: DONE Adding Catalog File:  oem21.CAT
CatalogDB: 16:24:58 23/01/2010: Adding Catalog File:  oem22.CAT
CatalogDB: 16:24:58 23/01/2010: DONE Adding Catalog File:  oem22.CAT
CatalogDB: 16:24:58 23/01/2010: Adding Catalog File:  oem23.CAT
CatalogDB: 16:24:58 23/01/2010: DONE Adding Catalog File:  oem23.CAT
CatalogDB: 16:24:59 23/01/2010: Adding Catalog File:  oem24.CAT
CatalogDB: 16:24:59 23/01/2010: DONE Adding Catalog File:  oem24.CAT
CatalogDB: 16:24:59 23/01/2010: Adding Catalog File:  oem25.CAT
CatalogDB: 16:24:59 23/01/2010: DONE Adding Catalog File:  oem25.CAT
CatalogDB: 16:24:59 23/01/2010: Adding Catalog File:  oem26.CAT
CatalogDB: 16:24:59 23/01/2010: DONE Adding Catalog File:  oem26.CAT
CatalogDB: 16:24:59 23/01/2010: Adding Catalog File:  oem27.CAT
CatalogDB: 16:24:59 23/01/2010: DONE Adding Catalog File:  oem27.CAT
CatalogDB: 16:42:48 23/01/2010: Adding Catalog File:  oem13.CAT
CatalogDB: 16:42:48 23/01/2010: DONE Adding Catalog File:  oem13.CAT
CatalogDB: 16:42:49 23/01/2010: Adding Catalog File:  oem14.CAT
CatalogDB: 16:42:49 23/01/2010: DONE Adding Catalog File:  oem14.CAT
CatalogDB: 16:42:49 23/01/2010: Adding Catalog File:  oem18.CAT
CatalogDB: 16:42:50 23/01/2010: DONE Adding Catalog File:  oem18.CAT
CatalogDB: 16:42:50 23/01/2010: Adding Catalog File:  oem19.CAT
CatalogDB: 16:42:50 23/01/2010: DONE Adding Catalog File:  oem19.CAT
CatalogDB: 16:42:50 23/01/2010: Adding Catalog File:  oem20.CAT
CatalogDB: 16:42:50 23/01/2010: DONE Adding Catalog File:  oem20.CAT
CatalogDB: 16:42:51 23/01/2010: Adding Catalog File:  oem21.CAT
CatalogDB: 16:42:51 23/01/2010: DONE Adding Catalog File:  oem21.CAT
CatalogDB: 16:42:51 23/01/2010: Adding Catalog File:  oem22.CAT
CatalogDB: 16:42:51 23/01/2010: DONE Adding Catalog File:  oem22.CAT
CatalogDB: 16:42:51 23/01/2010: Adding Catalog File:  oem23.CAT
CatalogDB: 16:42:52 23/01/2010: DONE Adding Catalog File:  oem23.CAT
CatalogDB: 16:42:53 23/01/2010: Adding Catalog File:  oem24.CAT
CatalogDB: 16:42:53 23/01/2010: DONE Adding Catalog File:  oem24.CAT
CatalogDB: 16:42:53 23/01/2010: Adding Catalog File:  oem25.CAT
CatalogDB: 16:42:53 23/01/2010: DONE Adding Catalog File:  oem25.CAT
CatalogDB: 16:42:54 23/01/2010: Adding Catalog File:  oem26.CAT
CatalogDB: 16:42:54 23/01/2010: DONE Adding Catalog File:  oem26.CAT
CatalogDB: 16:42:54 23/01/2010: Adding Catalog File:  oem27.CAT
CatalogDB: 16:42:54 23/01/2010: DONE Adding Catalog File:  oem27.CAT
CatalogDB: 16:45:03 23/01/2010: Adding Catalog File:  drm.cat
CatalogDB: 16:45:03 23/01/2010: DONE Adding Catalog File:  drm.cat
CatalogDB: 16:45:04 23/01/2010: Adding Catalog File:  WMFSDK.cat
CatalogDB: 16:45:04 23/01/2010: DONE Adding Catalog File:  WMFSDK.cat
CatalogDB: 18:39:43 27/01/2010: Adding Catalog File:  oem28.CAT
CatalogDB: 18:39:43 27/01/2010: DONE Adding Catalog File:  oem28.CAT
CatalogDB: 18:40:18 27/01/2010: Adding Catalog File:  KB978207-IE8.cat
CatalogDB: 18:40:18 27/01/2010: DONE Adding Catalog File:  KB978207-IE8.cat
CatalogDB: 17:20:24 10/02/2010: Adding Catalog File:  oem28.CAT
CatalogDB: 17:20:24 10/02/2010: DONE Adding Catalog File:  oem28.CAT
CatalogDB: 17:20:34 10/02/2010: Adding Catalog File:  oem28.CAT
CatalogDB: 17:20:35 10/02/2010: DONE Adding Catalog File:  oem28.CAT
CatalogDB: 17:23:49 10/02/2010: Adding Catalog File:  oem28.CAT
CatalogDB: 17:23:49 10/02/2010: DONE Adding Catalog File:  oem28.CAT
CatalogDB: 17:23:56 10/02/2010: Adding Catalog File:  oem28.CAT
CatalogDB: 17:23:56 10/02/2010: DONE Adding Catalog File:  oem28.CAT
CatalogDB: 17:23:59 10/02/2010: Adding Catalog File:  oem28.CAT
CatalogDB: 17:23:59 10/02/2010: DONE Adding Catalog File:  oem28.CAT
CatalogDB: 17:24:20 10/02/2010: Adding Catalog File:  oem28.CAT
CatalogDB: 17:24:20 10/02/2010: DONE Adding Catalog File:  oem28.CAT
CatalogDB: 17:24:23 10/02/2010: Adding Catalog File:  oem28.CAT
CatalogDB: 17:24:24 10/02/2010: DONE Adding Catalog File:  oem28.CAT
CatalogDB: 17:24:27 10/02/2010: Adding Catalog File:  oem28.CAT
CatalogDB: 17:24:27 10/02/2010: DONE Adding Catalog File:  oem28.CAT
CatalogDB: 17:24:30 10/02/2010: Adding Catalog File:  oem28.CAT
CatalogDB: 17:24:30 10/02/2010: DONE Adding Catalog File:  oem28.CAT
CatalogDB: 17:24:34 10/02/2010: Adding Catalog File:  oem28.CAT
CatalogDB: 17:24:34 10/02/2010: DONE Adding Catalog File:  oem28.CAT
CatalogDB: 07:36:13 11/02/2010: Adding Catalog File:  oem28.CAT
CatalogDB: 07:36:13 11/02/2010: DONE Adding Catalog File:  oem28.CAT
CatalogDB: 07:36:45 11/02/2010: Adding Catalog File:  KB977165.cat
CatalogDB: 07:36:45 11/02/2010: DONE Adding Catalog File:  KB977165.cat
CatalogDB: 07:36:52 11/02/2010: Adding Catalog File:  oem28.CAT
CatalogDB: 07:36:52 11/02/2010: DONE Adding Catalog File:  oem28.CAT
CatalogDB: 07:36:55 11/02/2010: Adding Catalog File:  KB978706.cat
CatalogDB: 07:36:55 11/02/2010: DONE Adding Catalog File:  KB978706.cat
CatalogDB: 07:36:58 11/02/2010: Adding Catalog File:  oem28.CAT
CatalogDB: 07:36:58 11/02/2010: DONE Adding Catalog File:  oem28.CAT
CatalogDB: 07:37:03 11/02/2010: Adding Catalog File:  KB977914.cat
CatalogDB: 07:37:03 11/02/2010: DONE Adding Catalog File:  KB977914.cat
CatalogDB: 07:37:35 11/02/2010: Adding Catalog File:  oem28.CAT
CatalogDB: 07:37:35 11/02/2010: DONE Adding Catalog File:  oem28.CAT
CatalogDB: 07:37:39 11/02/2010: Adding Catalog File:  KB975560.cat
CatalogDB: 07:37:39 11/02/2010: DONE Adding Catalog File:  KB975560.cat
CatalogDB: 07:37:43 11/02/2010: Adding Catalog File:  oem28.CAT
CatalogDB: 07:37:43 11/02/2010: DONE Adding Catalog File:  oem28.CAT
CatalogDB: 07:37:45 11/02/2010: Adding Catalog File:  KB978251.cat
CatalogDB: 07:37:45 11/02/2010: DONE Adding Catalog File:  KB978251.cat
CatalogDB: 07:37:48 11/02/2010: Adding Catalog File:  oem28.CAT
CatalogDB: 07:37:48 11/02/2010: DONE Adding Catalog File:  oem28.CAT
CatalogDB: 07:37:51 11/02/2010: Adding Catalog File:  KB975713.cat
CatalogDB: 07:37:51 11/02/2010: DONE Adding Catalog File:  KB975713.cat
CatalogDB: 07:37:55 11/02/2010: Adding Catalog File:  oem28.CAT
CatalogDB: 07:37:55 11/02/2010: DONE Adding Catalog File:  oem28.CAT
CatalogDB: 07:37:58 11/02/2010: Adding Catalog File:  KB978037.cat
CatalogDB: 07:37:58 11/02/2010: DONE Adding Catalog File:  KB978037.cat
CatalogDB: 07:39:56 11/02/2010: Adding Catalog File:  oem28.CAT
CatalogDB: 07:39:56 11/02/2010: DONE Adding Catalog File:  oem28.CAT
CatalogDB: 07:39:58 11/02/2010: Adding Catalog File:  KB971468.cat
CatalogDB: 07:39:58 11/02/2010: DONE Adding Catalog File:  KB971468.cat
CatalogDB: 07:40:01 11/02/2010: Adding Catalog File:  oem28.CAT
CatalogDB: 07:40:01 11/02/2010: DONE Adding Catalog File:  oem28.CAT
CatalogDB: 07:40:04 11/02/2010: Adding Catalog File:  KB978262.cat
CatalogDB: 07:40:04 11/02/2010: DONE Adding Catalog File:  KB978262.cat
CatalogDB: 09:25:11 12/02/2010: WAITSVC: Calling StartService():  CryptSvc
CatalogDB: 09:25:35 12/02/2010: WAITSVC: Service is running:  CryptSvc
CatalogDB: 18:02:03 14/02/2010: WAITSVC: Calling StartService():  CryptSvc
CatalogDB: 18:02:42 14/02/2010: WAITSVC: Service is running:  CryptSvc
CatalogDB: 10:25:54 15/02/2010: WAITSVC: Calling StartService():  CryptSvc
CatalogDB: 10:26:28 15/02/2010: WAITSVC: Service is running:  CryptSvc
CatalogDB: 16:00:18 16/02/2010: File #2 at line #1477 encountered error 0x00000057
CatalogDB: 16:00:18 16/02/2010: File #2 at line #1477 encountered error 0x00000057
CatalogDB: 16:03:08 16/02/2010: File #2 at line #1477 encountered error 0x00000057
CatalogDB: 16:04:27 16/02/2010: File #2 at line #1477 encountered error 0x00000057
CatalogDB: 16:06:29 16/02/2010: File #2 at line #1477 encountered error 0x00000057
CatalogDB: 16:07:01 16/02/2010: File #2 at line #1477 encountered error 0x00000057
CatalogDB: 16:07:22 16/02/2010: File #2 at line #1477 encountered error 0x00000057
CatalogDB: 16:22:41 16/02/2010: File #2 at line #1477 encountered error 0x00000057
CatalogDB: 16:22:41 16/02/2010: File #2 at line #1477 encountered error 0x00000057
CatalogDB: 16:22:41 16/02/2010: File #2 at line #1477 encountered error 0x00000057
CatalogDB: 16:22:41 16/02/2010: File #2 at line #1477 encountered error 0x00000057
CatalogDB: 16:22:41 16/02/2010: File #2 at line #1477 encountered error 0x00000057
CatalogDB: 16:32:41 16/02/2010: File #2 at line #1477 encountered error 0x00000057


Sinon, Ced_King m'indiquait de cliquer sur le lien suivant Télécharge Malwarebytes' Anti-Malware : 
http://www.malwarebytes.org/mbam/program/mbam-setup.exe 
mais impossible d'accéder à la page !!

Ced_King · Answer

Juste pour aider,

Sinon, Ced_King m'indiquait de cliquer sur le lien suivant Télécharge Malwarebytes' Anti-Malware :

Je men douter, c'est souvent le cas avec Koobface :
http://www.commentcamarche.net/faq/sujet-23440-koobface

Il faut désactiver le proxy installer par l'infection

Pour Internet explorer,
*menu Outils -->Options Internet.
*Onglet Connexions puis en bas, désactiver le proxy.
Puis redémarrer l'ordinateur

Pour Firefox,
# Menu Editions --> Préférences puis onglet Avancés.
# Cliquez sur Réseau et Paramètres.
# Choisir "Ne pas mettre de Proxy", puis redémarrer l'ordi

Bonne continuation avec Nathandre
.

roudoude03 · Answer

Dsl mais quand je double-clique sur UsbFix.exe qui s'est installé sur mon bureau, il me demande si je veux Exécuter ou Annuler. Je clique sur Exécuter, et là une fenêtre "Archive auto-extractible" s'ouvre avec pour dossier desination mon Bureau, je fais installer et plusieurs fichiers viennent sur bureau, et c'est tout. J'ai fait une recherche dans l'explorateur, sous C, pour trouver le UsbFix.txt, mais rien ????
Merci à toi pour ton aide.

Ced_King, en ce qui concerne les proxy sous IExplorer, j'avais déjà de coché dans Connexions "Ne jamais établir de connexion", c'est OK ?

roudoude03 · Answer

J'ai un 2nd PC à la maison, et j'ai donc pu récupérer le Malwarebytes' Anti-Malware.exe.
Après avoir procédé comme indiqué par Ced_King, voilà le rapport :

Malwarebytes' Anti-Malware 1.44
Version de la base de données: 3510
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

16/02/2010 17:31:00
mbam-log-2010-02-16 (17-31-00).txt

Type de recherche: Examen rapide
Eléments examinés: 119086
Temps écoulé: 14 minute(s), 59 second(s)

Processus mémoire infecté(s): 2
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 2
Valeur(s) du Registre infectée(s): 4
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 8

Processus mémoire infecté(s):
C:\Documents and Settings\Delphine\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe (Rogue.Eorezo) -> Unloaded process successfully.
C:\WINDOWS\pp14.exe (Worm.KoobFace) -> Unloaded process successfully.

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\EoRezo (Rogue.Eorezo) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\softwarehelper (Rogue.Eorezo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\sysldtray (Worm.KoobFace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\pp (Worm.KoobFace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\sysfbtray (Worm.KoobFace) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Documents and Settings\Delphine\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe (Rogue.Eorezo) -> Quarantined and deleted successfully.
C:\WINDOWS\bk20856.dat (KoobFace.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\010112010146114101.xxe (KoobFace.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\01011201014650115.xxe (KoobFace.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\bk23567.dat (KoobFace.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\fdgg34353edfgdfdf (KoobFace.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\ld16.exe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\WINDOWS\pp14.exe (Worm.KoobFace) -> Quarantined and deleted successfully.


Qu'en pensez-vous ?
Merci.

Ced_King · Answer

Très bien, juste que Malwarebytes n'est pas à jour

Donc, clique sur l'onglet mise à jour de MBAM et fais la mise à jour

Puis refais un scan rapide et poste le contenu du rapport...

-----------------------------

Pour USBFix, essayes avec ce lien

http://pagesperso-orange.fr/NosTools/Chiquitine29/UsbFix.exe

...

roudoude03 · Answer

Impossible de mettre à jour Malwarebytes avec mon PC vérolé... par contre je peux avec le 2nd PC mais je ne sais pas comment récupérer cette mise à jour ??? (je suis pas très douée vous avez remarqué !!).

Avec USBFix, j'ai trouvé, il fallait que je double clique sur le fichier Go.exe créé, et voilà le rapport :


############################## | UsbFix V6.095 |

User : Delphine (Administrateurs) # DURANTON
Update on 15/02/2010 by El Desaparecido , C_XX & Chimay8
Start at: 18:07:01 | 16/02/2010
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

Intel(R) Celeron(R) CPU        E1200  @ 1.60GHz
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Enabled
AV : avast! Antivirus 5.0.83886498 [ Enabled | Updated ]

C:\ -> Disque fixe local # 146,48 Go (73,79 Go free) # NTFS
D:\ -> Disque fixe local # 86,39 Go (85,24 Go free) # NTFS
E:\ -> Disque CD-ROM
F:\ -> Disque amovible
G:\ -> Disque amovible
H:\ -> Disque amovible
I:\ -> Disque amovible
J:\ -> Disque fixe local # 465,76 Go (321,37 Go free) [Expansion Drive] # NTFS
K:\ -> Disque amovible # 7,46 Go (7,45 Go free) [USB DISK] # FAT32

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\SFR\Pack Sécurité\Common\FSM32.EXE
C:\WINDOWS\VM303_STI.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\TomTom HOME 2\HOMERunner.exe
C:\Program Files\Google\Update\1.2.183.13\GoogleCrashHandler.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Documents and Settings\Delphine\Local Settings\Application Data\Google\Update\1.2.183.13\GoogleCrashHandler.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\Delphine\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTSvcCDA.EXE
C:\Program Files\SFR\Pack Sécurité\Common\FSMA32.EXE
C:\Program Files\SFR\Pack Sécurité\Common\FSMB32.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\SFR\Pack Sécurité\Common\FCH32.EXE
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\SFR\Pack Sécurité\Common\FAMEH32.EXE
C:\Program Files\SFR\Pack Sécurité\FSPC\fspc.exe
C:\WINDOWS\sYSteM32\SvchOst.eXE
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\SFR\Pack Sécurité\FSGUI\fsguidll.exe
C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
C:\Program Files\SFR\Pack Sécurité\FSAUA\program\fsaua.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\SFR\Pack Sécurité\FSAUA\program\fsus.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

################## | Elements infectieux |

J:\autorun.inf  

################## | Registre |


################## | Mountpoints2 |

HKCU\..\..\Explorer\MountPoints2\{2b5a71b8-cb9e-11de-be50-001d92f88771}
Shell\AutoRun\command =K:\LaunchU3.exe -a

HKCU\..\..\Explorer\MountPoints2\{3dd1536d-e57f-11dd-bbe1-001d92f88771}
Shell\AutoRun\command =J:\autorun.exe 

HKCU\..\..\Explorer\MountPoints2\{928d1f0a-f45b-11dd-bc01-001d92f88771}
Shell\AutoRun\command =J:\InstallTomTomHOME.exe 

################## | Vaccin |

(!) Cet ordinateur n'est pas vacciné !  

################## | ! Fin du rapport # UsbFix V6.095 ! |

roudoude03 · Answer

Tout s'est déroulé comme indiqué, voilà le rapport :


############################## | UsbFix V6.095 |

User : Delphine (Administrateurs) # DURANTON
Update on 15/02/2010 by El Desaparecido , C_XX & Chimay8
Start at: 20:53:59 | 16/02/2010
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

Intel(R) Celeron(R) CPU        E1200  @ 1.60GHz
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Enabled
AV : avast! Antivirus 5.0.83886498 [ Enabled | Updated ]

C:\ -> Disque fixe local # 146,48 Go (73,73 Go free) # NTFS
D:\ -> Disque fixe local # 86,39 Go (85,24 Go free) # NTFS
E:\ -> Disque CD-ROM
F:\ -> Disque amovible
G:\ -> Disque amovible
H:\ -> Disque amovible
I:\ -> Disque amovible
J:\ -> Disque fixe local # 465,76 Go (321,37 Go free) [Expansion Drive] # NTFS
K:\ -> Disque amovible # 7,46 Go (7,45 Go free) [USB DISK] # FAT32

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast5\setup\avast.setup
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Google\Update\1.2.183.13\GoogleCrashHandler.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTSvcCDA.EXE
C:\Program Files\SFR\Pack Sécurité\Common\FSMA32.EXE
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\SFR\Pack Sécurité\Common\FSMB32.EXE
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\SFR\Pack Sécurité\Common\FCH32.EXE
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\SFR\Pack Sécurité\Common\FAMEH32.EXE
C:\Program Files\SFR\Pack Sécurité\FSPC\fspc.exe
C:\WINDOWS\sYSteM32\SvchOst.eXE
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\SFR\Pack Sécurité\FSAUA\program\fsaua.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\SFR\Pack Sécurité\FSAUA\program\licmgr.exe
C:\Program Files\SFR\Pack Sécurité\FSAUA\program\ih8.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\SFR\Pack Sécurité\Common\fsrah32.exe

################## | Elements infectieux |

Supprimé ! C:\DOCUME~1\Delphine\LOCALS~1\Temp\73BAB2C7-2256-478C-A2F3-CEC110A1884C.exe 
Supprimé ! C:\Recycler\S-1-5-21-1482476501-630328440-725345543-1003 
Supprimé ! D:\Recycler\S-1-5-21-1482476501-630328440-725345543-1003 
Supprimé ! J:\autorun.inf 
Supprimé ! J:\Recycler\S-1-5-21-1482476501-630328440-725345543-1003 

################## | Registre |


################## | Mountpoints2 |

Supprimé ! HKCU\...\Explorer\MountPoints2\{2b5a71b8-cb9e-11de-be50-001d92f88771}\Shell\AutoRun\Command  
Supprimé ! HKCU\...\Explorer\MountPoints2\{3dd1536d-e57f-11dd-bbe1-001d92f88771}\Shell\AutoRun\Command  
Supprimé ! HKCU\...\Explorer\MountPoints2\{928d1f0a-f45b-11dd-bc01-001d92f88771}\Shell\AutoRun\Command  

################## | Listing des fichiers présent |

[26/12/2008 17:46|--a------|0] C:\AUTOEXEC.BAT 
[26/12/2008 17:42|---hs----|212] C:\boot.ini 
[07/09/2002 01:00|-rahs----|4952] C:\Bootfont.bin 
[26/12/2008 17:46|--a------|0] C:\CONFIG.SYS 
[11/08/2009 14:44|--a------|177] C:\debugInstaller.txt 
[24/05/2009 14:03|--a------|6794] C:\dj-platine.gif 
[26/12/2008 17:46|-rahs----|0] C:\IO.SYS 
[26/12/2008 17:46|-rahs----|0] C:\MSDOS.SYS 
[03/08/2004 21:38|-rahs----|47564] C:\NTDETECT.COM 
[21/08/2009 14:28|-rahs----|252240] C:
tldr 
[?|?|?] C:\pagefile.sys 
[24/05/2009 14:07|--ahs----|7680] C:\Thumbs.db 
[16/02/2010 20:58|--a------|4182] C:\UsbFix.txt 
[19/01/2010 11:03|--ahs----|27136] D:\Thumbs.db 
[16/01/2009 08:14|--a------|156312] J:\Setup.exe 
[13/08/2009 18:54|--ahs----|13824] J:\Thumbs.db 

################## | Vaccination |

# C:\autorun.inf -> Dossier créé par UsbFix (El Desaparecido). 
# D:\autorun.inf -> Dossier créé par UsbFix (El Desaparecido). 
# J:\autorun.inf -> Dossier créé par UsbFix (El Desaparecido). 
# K:\autorun.inf -> Dossier créé par UsbFix (El Desaparecido). 

################## | Upload | 

Veuillez envoyer le fichier : C:\UsbFix_Upload_Me_DURANTON.zip : https://www.ionos.fr/?affiliate_id=77097 
Merci pour votre contribution .  

################## | ! Fin du rapport # UsbFix V6.095 ! |

roudoude03 · Answer

Oui, j'ai envoyé le fichier. 
J'ai l'impression qu'il y a toujours des problèmes.
Voilà ce que j'obtiens avec RSIT.

Logfile of random's system information tool 1.06 (written by random/random)
Run by Delphine at 2010-02-16 21:17:12
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 76 GB (50%) free of 150 GB
Total RAM: 2037 MB (74% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:17:15, on 16/02/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\Update\1.2.183.13\GoogleCrashHandler.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTSvcCDA.EXE
C:\Program Files\SFR\Pack Sécurité\Common\FSMA32.EXE
C:\Program Files\SFR\Pack Sécurité\Common\FSMB32.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\SFR\Pack Sécurité\Common\FCH32.EXE
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\SFR\Pack Sécurité\Common\FAMEH32.EXE
C:\Program Files\SFR\Pack Sécurité\FSPC\fspc.exe
C:\WINDOWS\sYSteM32\SvchOst.eXE
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\SFR\Pack Sécurité\FSAUA\program\fsaua.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\SFR\Pack Sécurité\FSAUA\program\fsus.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32
otepad.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\sauvegarde\logiciels\RSIT.exe
C:\Program Files	rend micro\Delphine.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [adiras] adiras.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\SFR\Pack Sécurité\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\SFR\Pack Sécurité\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [BigDog303] C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\HOMERunner.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Delphine\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [DLD.EXE] C:\Program Files\Download Direct\DLD.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\Delphine\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\SFR\Pack Sécurité\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\SFR\Pack Sécurité\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\SFR\Pack Sécurité\FSPC\fspcmsie.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0972B098-DEE9-4279-AC7E-4BAAA029102D} (PhotoboxPhotowaysUploader5 Control) - http://assets.photobox.com/assets/aurigma/ImageUploader5.cab?20090713123819
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab
O16 - DPF: {7584C670-2274-4EFB-B00B-D6AABA6D3850} (Microsoft RDP Client Control (redist)) - http://www.mediapluspro.com/mediaplus66/Download/msrdp.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{DC22BB60-36A0-459A-9421-F59B0C589739}: NameServer = 192.168.1.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTSvcCDA.EXE
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\SFR\Pack Sécurité\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\SFR\Pack Sécurité\Common\FSMA32.EXE
O23 - Service: Service Google Update (gupdate1c9a7cae23ab360) (gupdate1c9a7cae23ab360) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Unknown owner - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe

roudoude03 · Answer

Avast s'était réactivé, je l'ai de nouveau désactivé.

Voilà le RSIT, je pense effectivement qu'il y a toujours un problème ! est-ce qu'on va s'en sortir???

Logfile of random's system information tool 1.06 (written by random/random)
Run by Delphine at 2010-02-16 22:22:40
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 76 GB (51%) free of 150 GB
Total RAM: 2037 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:22:41, on 16/02/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\Update\1.2.183.13\GoogleCrashHandler.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTSvcCDA.EXE
C:\Program Files\SFR\Pack Sécurité\Common\FSMA32.EXE
C:\Program Files\SFR\Pack Sécurité\Common\FSMB32.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\SFR\Pack Sécurité\Common\FCH32.EXE
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\SFR\Pack Sécurité\Common\FAMEH32.EXE
C:\Program Files\SFR\Pack Sécurité\FSPC\fspc.exe
C:\WINDOWS\sYSteM32\SvchOst.eXE
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\SFR\Pack Sécurité\FSAUA\program\fsaua.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\SFR\Pack Sécurité\FSAUA\program\fsus.exe
C:\WINDOWS\system32
otepad.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\SFR\Pack Sécurité\Common\FSM32.EXE
C:\WINDOWS\VM303_STI.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\TomTom HOME 2\HOMERunner.exe
C:\Program Files\SFR\Pack Sécurité\FSGUI\fsguidll.exe
C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Documents and Settings\Delphine\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Documents and Settings\Delphine\Local Settings\Application Data\Google\Update\1.2.183.13\GoogleCrashHandler.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\wscntfy.exe
C:\sauvegarde\logiciels\RSIT.exe
C:\Program Files	rend micro\Delphine.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [adiras] adiras.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\SFR\Pack Sécurité\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\SFR\Pack Sécurité\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [BigDog303] C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\HOMERunner.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Delphine\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [DLD.EXE] C:\Program Files\Download Direct\DLD.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\Delphine\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\SFR\Pack Sécurité\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\SFR\Pack Sécurité\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\SFR\Pack Sécurité\FSPC\fspcmsie.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0972B098-DEE9-4279-AC7E-4BAAA029102D} (PhotoboxPhotowaysUploader5 Control) - http://assets.photobox.com/assets/aurigma/ImageUploader5.cab?20090713123819
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab
O16 - DPF: {7584C670-2274-4EFB-B00B-D6AABA6D3850} (Microsoft RDP Client Control (redist)) - http://www.mediapluspro.com/mediaplus66/Download/msrdp.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{DC22BB60-36A0-459A-9421-F59B0C589739}: NameServer = 192.168.1.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTSvcCDA.EXE
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\SFR\Pack Sécurité\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\SFR\Pack Sécurité\Common\FSMA32.EXE
O23 - Service: Service Google Update (gupdate1c9a7cae23ab360) (gupdate1c9a7cae23ab360) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Unknown owner - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe

roudoude03 · Answer

Je ne peux pas accéder à cette page internet. J'y arrive avec "en cache", je rentre le fichier à ouvrir mais ensuite même problème, impossible d'ouvrir la page internet après avoir fait "envoyer le fichier".
J'ai remarqué qu'il y avait également un fichier nommé :
C\Windows\rdr_126619639.exe

roudoude03 · Answer

Avec google chrome, je suis réexpédiée vers cette page là, est-ce que ça peut être utile ??
http://www.paretologic.com/lp/antivirusplus/screens/index.html

roudoude03 · Answer

Tu as une autre solution ?

roudoude03 · Answer

J'ai essayé de télécharger virustotal à partir de clubic, mais quand je fais envoyer vers... échec de l'envoi.

Je désespère !!

roudoude03 · Answer

J'ai trouvé l'adresse pour envoi des fichiers suspects par serveur messagerie. Voilà le résultat :

Complete scanning result of "rdr_1266270488.exe", processed in VirusTotal at 02/16/2010 23:14:00 (CET).

[ file data ]
* name..: rdr_1266270488.exe
* size..: 195584
* md5...: e85e36c33d1563831a41ff25a37464be
* sha1..: f594c656786d8ce7f264d5a33fb3d463157bc96b
* peid..: -

[ scan result ]
a-squared 4.5.0.50/20100216 found nothing
AhnLab-V3 5.0.0.2/20100216 found nothing
AntiVir 8.2.1.170/20100216 found [TR/Drop.Agent.bncy]
Antiy-AVL 2.0.3.7/20100216 found nothing
Authentium 5.2.0.5/20100216 found nothing
Avast 4.8.1351.0/20100216 found nothing
AVG 9.0.0.730/20100216 found nothing
BitDefender 7.2/20100216 found nothing
CAT-QuickHeal 10.00/20100216 found nothing
ClamAV 0.96.0.0-git/20100216 found nothing
Comodo 3960/20100216 found nothing
DrWeb 5.0.1.12222/20100216 found nothing
eSafe 7.0.17.0/20100216 found nothing
eTrust-Vet 35.2.7307/20100216 found nothing
F-Prot 4.5.1.85/20100216 found nothing
F-Secure 9.0.15370.0/20100216 found nothing
Fortinet 4.0.14.0/20100215 found nothing
GData 19/20100216 found nothing
Ikarus T3.1.1.80.0/20100216 found nothing
Jiangmin 13.0.900/20100216 found nothing
K7AntiVirus 7.10.974/20100215 found nothing
Kaspersky 7.0.0.125/20100216 found nothing
McAfee 5894/20100216 found nothing
McAfee+Artemis 5894/20100216 found nothing
Microsoft 1.5406/20100216 found nothing
NOD32 4872/20100216 found nothing
Norman 6.04.08/20100216 found nothing
nProtect 2009.1.8.0/20100216 found nothing
Panda 10.0.2.2/20100216 found nothing
PCTools 7.0.3.5/20100216 found nothing
Prevx 3.0/20100216 found nothing
Rising 22.34.01.03/20100211 found nothing
Sophos 4.50.0/20100216 found nothing
Sunbelt 5681/20100216 found nothing
Symantec 20091.2.0.41/20100216 found [Suspicious.Insight]
TheHacker 6.5.1.4.196/20100216 found nothing
TrendMicro 9.120.0.1004/20100216 found nothing
VBA32 3.12.12.2/20100216 found nothing
ViRobot 2010.2.16.2188/20100216 found nothing
VirusBuster 5.0.21.0/20100216 found nothing
____________________________________________________________________________________

Complete scanning result of "rdr_1266319639.exe", processed in VirusTotal at 02/16/2010 23:15:30 (CET).

[ file data ]
* name..: rdr_1266319639.exe
* size..: 195584
* md5...: e85e36c33d1563831a41ff25a37464be
* sha1..: f594c656786d8ce7f264d5a33fb3d463157bc96b
* peid..: -

[ scan result ]
a-squared 4.5.0.50/20100216 found nothing
AhnLab-V3 5.0.0.2/20100216 found nothing
AntiVir 8.2.1.170/20100216 found [TR/Drop.Agent.bncy]
Antiy-AVL 2.0.3.7/20100216 found nothing
Authentium 5.2.0.5/20100216 found nothing
Avast 4.8.1351.0/20100216 found nothing
AVG 9.0.0.730/20100216 found nothing
BitDefender 7.2/20100216 found nothing
CAT-QuickHeal 10.00/20100216 found nothing
ClamAV 0.96.0.0-git/20100216 found nothing
Comodo 3960/20100216 found nothing
DrWeb 5.0.1.12222/20100216 found nothing
eSafe 7.0.17.0/20100216 found nothing
eTrust-Vet 35.2.7307/20100216 found nothing
F-Prot 4.5.1.85/20100216 found nothing
F-Secure 9.0.15370.0/20100216 found nothing
Fortinet 4.0.14.0/20100215 found nothing
GData 19/20100216 found nothing
Ikarus T3.1.1.80.0/20100216 found nothing
Jiangmin 13.0.900/20100216 found nothing
K7AntiVirus 7.10.974/20100215 found nothing
Kaspersky 7.0.0.125/20100216 found nothing
McAfee 5894/20100216 found nothing
McAfee+Artemis 5894/20100216 found nothing
Microsoft 1.5406/20100216 found nothing
NOD32 4872/20100216 found nothing
Norman 6.04.08/20100216 found nothing
nProtect 2009.1.8.0/20100216 found nothing
Panda 10.0.2.2/20100216 found nothing
PCTools 7.0.3.5/20100216 found nothing
Prevx 3.0/20100216 found nothing
Rising 22.34.01.03/20100211 found nothing
Sophos 4.50.0/20100216 found nothing
Sunbelt 5681/20100216 found nothing
Symantec 20091.2.0.41/20100216 found [Suspicious.Insight]
TheHacker 6.5.1.4.196/20100216 found nothing
TrendMicro 9.120.0.1004/20100216 found nothing
VBA32 3.12.12.2/20100216 found nothing
ViRobot 2010.2.16.2188/20100216 found nothing
VirusBuster 5.0.21.0/20100216 found nothing
______________________________________________________________________________________

pas encore la réponse pour le fichier oko6.dll

roudoude03 · Answer

Dsl mais j'arrête pour ce soir... j'espère qu'on pourra continuer demain ?

Merci beaucoup, ainsi qu'à Ced_King.

roudoude03 · Answer

Bonjour,

Voilà le rapport reçu de VirusTotal concernant le fichier oko6.dll :


Complete scanning result of "oko6.dll", processed in VirusTotal at 02/16/2010 23:19:59 (CET).

[ file data ]
* name..: oko6.dll
* size..: 102400
* md5...: c98aa6e3f113f1039a0bf44c4194cdf4
* sha1..: 619643c44a8261b89db51a57355026517da3a6dd
* peid..: -

[ scan result ]
a-squared 4.5.0.50/20100216 found [Trojan-Proxy.Win32.Koobface!IK]
AhnLab-V3 5.0.0.2/20100216 found nothing
AntiVir 8.2.1.170/20100216 found [TR/Drop.Agent.bmqd.1]
Antiy-AVL 2.0.3.7/20100216 found nothing
Authentium 5.2.0.5/20100216 found nothing
Avast 4.8.1351.0/20100216 found nothing
AVG 9.0.0.730/20100216 found nothing
BitDefender 7.2/20100216 found nothing
CAT-QuickHeal 10.00/20100216 found [TrojanDropper.Agent.bmqd]
ClamAV 0.96.0.0-git/20100216 found nothing
Comodo 3960/20100216 found [TrojWare.Win32.TrojanDropper.Agent.bmqd]
DrWeb 5.0.1.12222/20100216 found nothing
eSafe 7.0.17.0/20100216 found nothing
eTrust-Vet 35.2.7307/20100216 found nothing
F-Prot 4.5.1.85/20100216 found nothing
F-Secure 9.0.15370.0/20100216 found nothing
Fortinet 4.0.14.0/20100215 found [W32/Agent.BMQD!tr]
GData 19/20100216 found nothing
Ikarus T3.1.1.80.0/20100216 found [Trojan-Proxy.Win32.Koobface]
Jiangmin 13.0.900/20100216 found nothing
K7AntiVirus 7.10.974/20100215 found nothing
Kaspersky 7.0.0.125/20100216 found [Trojan-Dropper.Win32.Agent.bmqd]
McAfee 5894/20100216 found nothing
McAfee+Artemis 5894/20100216 found nothing
Microsoft 1.5406/20100216 found [TrojanProxy:Win32/Koobface.gen!G]
NOD32 4872/20100216 found nothing
Norman 6.04.08/20100216 found nothing
nProtect 2009.1.8.0/20100216 found nothing
Panda 10.0.2.2/20100216 found nothing
PCTools 7.0.3.5/20100216 found [Trojan.Generic]
Prevx 3.0/20100216 found [Medium Risk Malware]
Rising 22.34.01.03/20100211 found nothing
Sophos 4.50.0/20100216 found [Mal/Generic-A]
Sunbelt 5681/20100216 found nothing
Symantec 20091.2.0.41/20100216 found [Trojan Horse]
TheHacker 6.5.1.4.196/20100216 found [Trojan/Dropper.Agent.bmqd]
TrendMicro 9.120.0.1004/20100216 found nothing
VBA32 3.12.12.2/20100216 found nothing
ViRobot 2010.2.16.2188/20100216 found nothing
VirusBuster 5.0.21.0/20100216 found nothing

[ notes ]
http://info.prevx.com/aboutprogramtext.asp?PX5=12F1E14400BC9C3B904C017FE8BA7C000119E042

roudoude03 · Answer

Tu me dis :
Assure toi que la case Unregister Dll's and Ocx's soit bien cochée. 

Mais je n'ai aucune case à cocher. Je continue quand même la procédure ?

roudoude03 · Answer

Absolument aucune case. 
J'ai en haut à droite le logo OTM File mover et à gauche trois boutons : MoveIt! CleanUp! et Exit. Rien d'autre bien que j'ai relancé 2 fois le .exe

roudoude03 · Answer

Etant donné que je n'ai pas cette case d'affichée, est-ce que je fais la procédure ou non ??

roudoude03 · Answer

Voilà le rapport :

========== FILES ==========
C:\WINDOWS\rdr_1266319639.exe moved successfully.
C:\WINDOWS\rdr_1266270488.exe moved successfully.
DllUnregisterServer procedure not found in C:\WINDOWS\system32\oko6.dll
C:\WINDOWS\system32\oko6.dll moved successfully.
C:\WINDOWS\freddy101.exe moved successfully.
========== COMMANDS ==========
 
OTM by OldTimer - Version 3.1.8.0 log created on 02172010_153354

roudoude03 · Answer

Il semblerait que oui puisque le site d'avast sur lequel je ne pouvais aller hier, c'est OK.
La mise à jour de Malwarebytes que je ne pouvais pas faire hier, c'est OK aussi.
Crois-tu que je suis enfin débarassée ?

roudoude03 · Answer

Est-ce que tu penses que tout est OK maintenant ?

roudoude03 · Answer

J'ai refait un scan complet avec Malvarebytes : encore  fichier infecté, que j'ai supprimé.

Voilà le rapport :

Malwarebytes' Anti-Malware 1.44
Version de la base de données: 3751
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

17/02/2010 19:19:34
mbam-log-2010-02-17 (19-19-34).txt

Type de recherche: Examen complet (C:\|D:\|J:\|K:\|)
Eléments examinés: 246640
Temps écoulé: 50 minute(s), 10 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\System Volume Information\_restore{A12E8E8B-F4AF-4EBC-AEE1-97A1EDEA7A8E}\RP382\A0093742.exe (Trojan.Koobface) -> Quarantined and deleted successfully.

Est-ce que je peux m'estimer tirée d'affaire cette fois ?

roudoude03 · Answer

Rapport RSIT :

Logfile of random's system information tool 1.06 (written by random/random)
Run by Delphine at 2010-02-17 22:46:14
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 75 GB (50%) free of 150 GB
Total RAM: 2037 MB (61% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:46:18, on 17/02/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\SFR\Pack Sécurité\Common\FSM32.EXE
C:\WINDOWS\VM303_STI.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\TomTom HOME 2\HOMERunner.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Documents and Settings\Delphine\Local Settings\Application Data\Google\Update\1.2.183.13\GoogleCrashHandler.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Documents and Settings\Delphine\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\Update\1.2.183.13\GoogleCrashHandler.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTSvcCDA.EXE
C:\Program Files\SFR\Pack Sécurité\Common\FSMA32.EXE
C:\Program Files\SFR\Pack Sécurité\Common\FSMB32.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\SFR\Pack Sécurité\Common\FCH32.EXE
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\SFR\Pack Sécurité\Common\FAMEH32.EXE
C:\Program Files\SFR\Pack Sécurité\FSPC\fspc.exe
C:\Program Files\SFR\Pack Sécurité\FSGUI\fsguidll.exe
C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
C:\Program Files\SFR\Pack Sécurité\FSAUA\program\fsaua.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\SFR\Pack Sécurité\FSAUA\program\fsus.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\sauvegarde\logiciels\RSIT.exe
C:\Program Files	rend micro\Delphine.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sfr.fr/fr/adsl.jsp
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [adiras] adiras.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\SFR\Pack Sécurité\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\SFR\Pack Sécurité\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [BigDog303] C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\HOMERunner.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Delphine\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [DLD.EXE] C:\Program Files\Download Direct\DLD.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\Delphine\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\SFR\Pack Sécurité\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\SFR\Pack Sécurité\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\SFR\Pack Sécurité\FSPC\fspcmsie.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0972B098-DEE9-4279-AC7E-4BAAA029102D} (PhotoboxPhotowaysUploader5 Control) - http://assets.photobox.com/assets/aurigma/ImageUploader5.cab?20090713123819
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/...
O16 - DPF: {7584C670-2274-4EFB-B00B-D6AABA6D3850} (Microsoft RDP Client Control (redist)) - http://www.mediapluspro.com/mediaplus66/Download/msrdp.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{DC22BB60-36A0-459A-9421-F59B0C589739}: NameServer = 192.168.1.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTSvcCDA.EXE
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\SFR\Pack Sécurité\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\SFR\Pack Sécurité\Common\FSMA32.EXE
O23 - Service: Service Google Update (gupdate1c9a7cae23ab360) (gupdate1c9a7cae23ab360) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Unknown owner - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe

roudoude03 · Answer

Je ne comprends pas "Relance Hijackthis " ??

roudoude03 · Answer

Où je peux trouver C Cleaner ? je suis perdue avec tous ces logiciels...

roudoude03 · Answer

Rapport tools cleaner :

[ Rapport ToolsCleaner version 2.3.11 (par A.Rothstein & dj QUIOU) ]

--> Recherche: 

C:\UsbFix.txt: trouvé !
C:\_OTM: trouvé !
C:\Rsit: trouvé !
C:\Ad-remover: trouvé !
C:\Ad-Remover\BACKUP\Ad-R.exe: trouvé !
C:\Documents and Settings\Delphine\Bureau\OTM.exe: trouvé !
C:\Documents and Settings\Delphine\Bureau\Ad-R.exe: trouvé !
C:\Documents and Settings\Delphine\Bureau\UsbFix.exe: trouvé !
C:\Program Files	rend micro\HijackThis.exe: trouvé !
C:\Program Files	rend micro\hijackthis.log: trouvé !
C:\sauvegarde\logiciels\OTM.exe: trouvé !
C:\sauvegarde\logiciels\UsbFix.exe: trouvé !
C:\sauvegarde\logiciels\Rsit.exe: trouvé !

---------------------------------
--> Suppression: 

C:\Ad-Remover\BACKUP\Ad-R.exe: supprimé !
C:\Documents and Settings\Delphine\Bureau\OTM.exe: supprimé !
C:\Documents and Settings\Delphine\Bureau\Ad-R.exe: supprimé !
C:\Program Files	rend micro\HijackThis.exe: supprimé !
C:\sauvegarde\logiciels\OTM.exe: supprimé !
C:\UsbFix.txt: supprimé !
C:\Documents and Settings\Delphine\Bureau\UsbFix.exe: supprimé !
C:\Program Files	rend micro\hijackthis.log: supprimé !
C:\sauvegarde\logiciels\UsbFix.exe: supprimé !
C:\sauvegarde\logiciels\Rsit.exe: supprimé !
C:\_OTM: supprimé !
C:\Rsit: supprimé !
C:\Ad-remover: supprimé !


Je continue la procédure...

roudoude03 · Answer

Voilà, j'ai fait tout ce que tu m'as indiqué !!
J'espère que tout est OK.
Je te remercie infiniment pour ton aide précieuse.
Très cordialement.

Help Cheval de Troie sur Facebook

30 réponses

Discussions similaires

Newsletters