Virus méchant, rien ne s ouvre plus

Fermé
Helloween77 Messages postés 93 Date d'inscription jeudi 24 septembre 2009 Statut Membre Dernière intervention 14 mai 2015 - Modifié par Helloween77 le 26/12/2010 à 20:02
Helloween77 Messages postés 93 Date d'inscription jeudi 24 septembre 2009 Statut Membre Dernière intervention 14 mai 2015 - 29 déc. 2010 à 20:56
Bonjour,

J'ai chopé un virus et mes antivirus, antispyware - et tout les programmes me semble-t-il ne s'ouvrent plus... Impossible de restaurer également... Y a-t-il quelque chose à faire????

A voir également:

27 réponses

Destrio5 Messages postés 85985 Date d'inscription dimanche 11 juillet 2010 Statut Modérateur Dernière intervention 17 février 2023 10 297
29 déc. 2010 à 17:14
Réinstalle les applications qui ne fonctionnent plus.

Bagle n'est plus actif.

Fais un scan complet avec Avast.
0
Helloween77 Messages postés 93 Date d'inscription jeudi 24 septembre 2009 Statut Membre Dernière intervention 14 mai 2015 1
29 déc. 2010 à 18:07
J'ai trouvé des vers "beagle" après avoir mis ComboFix, alors je doute qu'il ne soit plus actif?
C'est justement impossible de réinstaller... Enfin chaque fois que je lance un fichier .exe, il me dit que c'est une application Win32 non valide, n'est ce pas un souci lié au virus?
0
Destrio5 Messages postés 85985 Date d'inscription dimanche 11 juillet 2010 Statut Modérateur Dernière intervention 17 février 2023 10 297
29 déc. 2010 à 18:13
Je pense que s'il aurait été actif, tu n'aurais pas pu réinstaller Avast.

--> Refais un scan OTL et poste le rapport.
0
Helloween77 Messages postés 93 Date d'inscription jeudi 24 septembre 2009 Statut Membre Dernière intervention 14 mai 2015 1
29 déc. 2010 à 19:46
OTL logfile created on: 29/12/2010 19:43:20 - Run 3
OTL by OldTimer - Version 3.2.18.0 Folder = D:\Documents and Settings\Anthony\Bureau
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

1 023,00 Mb Total Physical Memory | 533,00 Mb Available Physical Memory | 52,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 86,00% Paging File free
Paging file location(s): C:\pagefile.sys 0 0 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 141,23 Gb Total Space | 49,52 Gb Free Space | 35,06% Space Free | Partition Type: NTFS
Drive D: | 149,05 Gb Total Space | 96,13 Gb Free Space | 64,49% Space Free | Partition Type: NTFS

Computer Name: tuswoman | User Name: Anthony | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - D:\Documents and Settings\Anthony\Bureau\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)
PRC - C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple, Inc.)
PRC - C:\WINDOWS\system32\HPZipm12.exe (HP)
PRC - C:\APPS\Softex\OmniPass\OPXPApp.exe ()
PRC - C:\APPS\Softex\OmniPass\OmniServ.exe (Softex Inc.)
PRC - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe (Cyberlink)
PRC - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe (Cyberlink)
PRC - c:\APPS\Powercinema\Kernel\TV\CLSched.exe ()
PRC - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe ()
PRC - c:\APPS\HIDSERVICE\HidService.exe ()
PRC - C:\Program Files\Wanadoo\EspaceWanadoo.exe (France Télécom R&D)
PRC - C:\Program Files\Wanadoo\ComComp.exe (France Télécom R&D)
PRC - C:\Program Files\Wanadoo\TaskBarIcon.exe ()
PRC - C:\Program Files\Wanadoo\Watch.exe (France Télécom R&D)
PRC - C:\Program Files\Wanadoo\CnxMon.exe ()
PRC - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe (Ulead Systems, Inc.)
PRC - C:\Program Files\Thomson\SpeedTouch USB\dragdiag.exe (THOMSON Telecom Belgium)
PRC - C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe (Microsoft Corporation)
PRC - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe (SEIKO EPSON CORPORATION)


[color=#E56717]========== Modules (SafeList) ==========[/color]

MOD - D:\Documents and Settings\Anthony\Bureau\OTL.exe (OldTimer Tools)


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV - (AppMgmt) -- C:\WINDOWS\System32\appmgmts.dll File not found
SRV - (navapsvc) -- C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe (Symantec Corporation)
SRV - (SPBBCSvc) -- C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe (Symantec Corporation)
SRV - (ISSVC) -- C:\Program Files\Norton Internet Security\ISSVC.exe (Symantec Corporation)
SRV - (SNDSrvc) -- C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe (Symantec Corporation)
SRV - (ccSetMgr) -- C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe (Symantec Corporation)
SRV - (ccProxy) -- C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe (Symantec Corporation)
SRV - (ccEvtMgr) -- C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe (Symantec Corporation)
SRV - (SAVScan) -- C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe (Symantec Corporation)
SRV - (avast! Web Scanner) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (avast! Mail Scanner) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (avast! Antivirus) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (WPFFontCache_v0400) -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_32) -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (SeaPort) -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)
SRV - (odserv) -- C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (Apple Mobile Device) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple, Inc.)
SRV - (Pml Driver HPZ12) -- C:\WINDOWS\system32\HPZipm12.exe (HP)
SRV - (ose) -- C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (omniserv) -- C:\APPS\Softex\OmniPass\OmniServ.exe (Softex Inc.)
SRV - (CyberLink Media Library Service) -- C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe (Cyberlink)
SRV - (CLSched) CyberLink Task Scheduler (CTS) -- c:\APPS\Powercinema\Kernel\TV\CLSched.exe ()
SRV - (CLCapSvc) CyberLink Background Capture Service (CBCS) -- c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe ()
SRV - (KodakCCS) -- C:\WINDOWS\system32\drivers\KodakCCS.exe (Eastman Kodak Company)
SRV - (GenericHidService) -- c:\APPS\HIDSERVICE\HidService.exe ()
SRV - (MysqlInventime) -- C:\APPS\Inventime\mysql\bin\mysqld-nt.exe ()
SRV - (ccPwdSvc) -- C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe (Symantec Corporation)
SRV - (UleadBurningHelper) -- C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe (Ulead Systems, Inc.)
SRV - (MDM) -- C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe (Microsoft Corporation)
SRV - (EPSONStatusAgent2) -- C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe (SEIKO EPSON CORPORATION)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - (wanatw) WAN Miniport (ATW) -- C:\WINDOWS\System32\DRIVERS\wanatw4.sys File not found
DRV - (SYMTDI) -- C:\WINDOWS\System32\Drivers\SYMTDI.SYS File not found
DRV - (SYMREDRV) -- C:\WINDOWS\System32\Drivers\SYMREDRV.SYS File not found
DRV - (SYMNDIS) -- C:\WINDOWS\System32\Drivers\SYMNDIS.SYS File not found
DRV - (SYMIDS) -- C:\WINDOWS\System32\Drivers\SYMIDS.SYS File not found
DRV - (SYMFW) -- C:\WINDOWS\System32\Drivers\SYMFW.SYS File not found
DRV - (SymEvent) -- C:\Program Files\Symantec\SYMEVENT.SYS File not found
DRV - (SYMDNS) -- C:\WINDOWS\System32\Drivers\SYMDNS.SYS File not found
DRV - (NAVEX15) -- C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20070702.017\NavEx15.Sys File not found
DRV - (NAVENG) -- C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20070702.017\NAVENG.Sys File not found
DRV - (catchme) -- D:\DOCUME~1\Tustus\LOCALS~1\Temp\catchme.sys File not found
DRV - (SYMIDSCO) -- C:\Program Files\Fichiers communs\Symantec Shared\SymcData\idsdefs\20101215.003\SymIDSCo.sys (Symantec Corporation)
DRV - (aswTdi) -- C:\WINDOWS\System32\drivers\aswTdi.sys (AVAST Software)
DRV - (aswSP) -- C:\WINDOWS\System32\drivers\aswSP.sys (AVAST Software)
DRV - (aswRdr) -- C:\WINDOWS\System32\drivers\aswRdr.sys (AVAST Software)
DRV - (aswMon2) -- C:\WINDOWS\System32\drivers\aswmon2.sys (AVAST Software)
DRV - (aswFsBlk) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys (AVAST Software)
DRV - (Aavmker4) -- C:\WINDOWS\System32\drivers\aavmker4.sys (AVAST Software)
DRV - (SASENUM) -- C:\Program Files\SUPERAntiSpyware\SASENUM.SYS ( SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASDIFSV) -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASKUTIL) -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (WsAudioDevice_383) -- C:\WINDOWS\system32\drivers\WsAudioDevice_383.sys (Wondershare)
DRV - (MPE) -- C:\WINDOWS\system32\drivers\mpe.sys (Microsoft Corporation)
DRV - (amdagp) -- C:\WINDOWS\system32\DRIVERS\amdagp.sys (Advanced Micro Devices, Inc.)
DRV - (sisagp) -- C:\WINDOWS\system32\DRIVERS\sisagp.sys (Silicon Integrated Systems Corporation)
DRV - (driverhardwarev2) -- C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys (Ma-Config.com)
DRV - (CAM1210) -- C:\WINDOWS\system32\drivers\cam1210.sys (USB Generic Camera)
DRV - (ALCXWDM) Service for Realtek AC97 Audio (WDM) -- C:\WINDOWS\system32\drivers\alcxwdm.sys (Realtek Semiconductor Corp.)
DRV - (nv) -- C:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation)
DRV - (DcCam) -- C:\WINDOWS\system32\drivers\DcCam.sys (Eastman Kodak Company)
DRV - (3xHybrid) -- C:\WINDOWS\system32\drivers\3xHybrid.sys (Philips Semiconductors GmbH)
DRV - (Exportit) -- C:\WINDOWS\system32\drivers\ExportIt.sys (Eastman Kodak Company)
DRV - (DcPTP) -- C:\WINDOWS\system32\drivers\DcPtp.sys (Eastman Kodak Company)
DRV - (DcLps) -- C:\WINDOWS\system32\drivers\DcLps.sys (Eastman Kodak Company)
DRV - (DCFS2K) -- C:\WINDOWS\system32\drivers\DCFS2k.sys (Eastman Kodak Company)
DRV - (DcFpoint) -- C:\WINDOWS\system32\drivers\DcFpoint.sys (Eastman Kodak Company)
DRV - (ATSWPDRV) AuthenTec TruePrint USB Driver (AES2500) -- C:\WINDOWS\system32\drivers\ATSwpDrv.sys (AuthenTec, Inc.)
DRV - (AmdK8) -- C:\WINDOWS\system32\drivers\AmdK8.sys (Advanced Micro Devices)
DRV - (RTL8023xp) -- C:\WINDOWS\system32\drivers\Rtlnicxp.sys (Realtek Semiconductor Corporation )
DRV - (SAVRTPEL) -- C:\Program Files\Norton Internet Security\Norton AntiVirus\Savrtpel.sys (Symantec Corporation)
DRV - (SAVRT) -- C:\Program Files\Norton Internet Security\Norton AntiVirus\savrt.sys (Symantec Corporation)
DRV - (SPBBCDrv) -- C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCDrv.sys (Symantec Corporation)
DRV - (MosIrUsb) -- C:\WINDOWS\system32\drivers\MosIrUsb.sys ()
DRV - (alcan5wn) SpeedTouch USB ADSL PPP Networking Driver (NDISWAN) -- C:\WINDOWS\system32\drivers\alcan5wn.sys (THOMSON)
DRV - (alcaudsl) -- C:\WINDOWS\system32\drivers\alcaudsl.sys (THOMSON)
DRV - (viaagp) -- C:\WINDOWS\System32\DRIVERS\viaagp1.sys (VIA Technologies, Inc.)
DRV - (VIAPFD) -- C:\WINDOWS\System32\Drivers\VIAPFD.SYS (VIA Technologies. Inc.)
DRV - (CmdIde) -- C:\WINDOWS\system32\DRIVERS\cmdide.sys (CMD Technology, Inc.)
DRV - (Sparrow) -- C:\WINDOWS\system32\DRIVERS\sparrow.sys (Adaptec, Inc.)
DRV - (sym_u3) -- C:\WINDOWS\system32\DRIVERS\sym_u3.sys (LSI Logic)
DRV - (sym_hi) -- C:\WINDOWS\system32\DRIVERS\sym_hi.sys (LSI Logic)
DRV - (symc8xx) -- C:\WINDOWS\system32\DRIVERS\symc8xx.sys (LSI Logic)
DRV - (symc810) -- C:\WINDOWS\system32\DRIVERS\symc810.sys (Symbios Logic Inc.)
DRV - (ultra) -- C:\WINDOWS\system32\DRIVERS\ultra.sys (Promise Technology, Inc.)
DRV - (ql12160) -- C:\WINDOWS\system32\DRIVERS\ql12160.sys (QLogic Corporation)
DRV - (ql1080) -- C:\WINDOWS\system32\DRIVERS\ql1080.sys (QLogic Corporation)
DRV - (ql1280) -- C:\WINDOWS\system32\DRIVERS\ql1280.sys (QLogic Corporation)
DRV - (dac2w2k) -- C:\WINDOWS\system32\DRIVERS\dac2w2k.sys (Mylex Corporation)
DRV - (mraid35x) -- C:\WINDOWS\system32\DRIVERS\mraid35x.sys (American Megatrends Inc.)
DRV - (asc) -- C:\WINDOWS\system32\DRIVERS\asc.sys (Advanced System Products, Inc.)
DRV - (asc3550) -- C:\WINDOWS\system32\DRIVERS\asc3550.sys (Advanced System Products, Inc.)
DRV - (AliIde) -- C:\WINDOWS\system32\DRIVERS\aliide.sys (Acer Laboratories Inc.)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.com/?gws_rd=ssl
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.com/?gws_rd=ssl
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://ww12.cherche.us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = cherche.us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://ww12.cherche.us{searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page_bak = https://www.google.com/?gws_rd=ssl
IE - HKCU\..\URLSearchHook: {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Wanadoo\SearchPageURL.dll ()
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.search.defaultenginename: "Fast Browser Search"
FF - prefs.js..browser.search.defaultthis.engineName: "Fast Browser Search"
FF - prefs.js..browser.search.defaulturl: "http://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=19&q="
FF - prefs.js..browser.search.order.1: "Fast Browser Search"
FF - prefs.js..browser.search.selectedEngine: "Fast Browser Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..keyword.URL: "http://ww12.cherche.us"
FF - prefs.js..browser.startup.homepage: "http://ww12.cherche.us"

FF - HKLM\software\mozilla\Firefox\Extensions\\{3112ca9c-de6d-4884-a869-9855de68056c}: D:\Documents and Settings\All Users\Application Data\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c} [2010/02/06 21:58:57 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/02/06 21:58:48 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/02/06 21:58:47 | 000,000,000 | ---D | M]

[2009/05/18 16:28:36 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Anthony\Application Data\Mozilla\Extensions
[2010/02/12 23:24:19 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Anthony\Application Data\Mozilla\Firefox\Profiles\f68dyirz.default\extensions
[2010/02/12 23:24:17 | 000,000,000 | ---D | M] (No name found) -- D:\Documents and Settings\Anthony\Application Data\Mozilla\Firefox\Profiles\f68dyirz.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/02/12 23:24:19 | 000,000,000 | ---D | M] (No name found) -- D:\Documents and Settings\Anthony\Application Data\Mozilla\Firefox\Profiles\f68dyirz.default\extensions\{C2DCA7EB-22D2-4FD2-86A9-F99FCC8122BB}
[2010/02/12 23:24:17 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Anthony\Application Data\Mozilla\Firefox\Profiles\f68dyirz.default\extensions\staged-xpis
[2010/10/02 18:06:58 | 000,001,575 | ---- | M] () -- D:\Documents and Settings\Anthony\Application Data\Mozilla\Firefox\Profiles\f68dyirz.default\searchplugins\cherche.xml
[2010/02/12 23:24:24 | 000,005,462 | ---- | M] () -- D:\Documents and Settings\Anthony\Application Data\Mozilla\Firefox\Profiles\f68dyirz.default\searchplugins\fast-browser-search.xml
[2010/02/12 23:24:19 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2008/04/24 21:43:03 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2008/12/26 00:05:26 | 000,000,000 | ---D | M] (peer2Peer-FR2 Toolbar) -- C:\Program Files\Mozilla Firefox\extensions\{9f23e207-7e05-4ee2-a90e-50cf3ae9b03f}
[2007/12/15 12:29:00 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\google-cjk@partners.mozilla.com
[2008/04/24 21:43:03 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\google-gzfb@partners.mozilla.com
[2006/03/06 21:44:09 | 001,312,392 | ---- | M] () -- C:\Program Files\Mozilla Firefox\plugins\NPSWF32.dll
[2009/12/22 04:51:01 | 000,001,516 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazon-france.xml
[2009/12/22 04:51:01 | 000,001,822 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\cnrtl-tlfi-fr.xml
[2009/12/22 04:51:01 | 000,000,757 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-france.xml
[2009/12/22 04:51:01 | 000,001,426 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-fr.xml
[2009/12/22 04:51:01 | 000,000,652 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-france.xml

O1 HOSTS File: ([2010/12/29 13:40:13 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Aide pour le lien d'Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Programme d'aide de l'Assistant de connexion Windows Live) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll (Google Inc.)
O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Norton Internet Security) - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (no name) - {1BB22D38-A411-4B13-A746-C2A4F4EC7344} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Norton AntiVirus) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NAVShExt.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Barre d'outils MSN) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - Reg Error: Value error. File not found
O3 - HKCU\..\Toolbar\ShellBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKCU\..\Toolbar\ShellBrowser: (Norton AntiVirus) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NAVShExt.dll (Symantec Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Internet Security) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll (Symantec Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [ccApp] C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [SpeedTouch USB Diagnostics] C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe (THOMSON Telecom Belgium)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [WooCnxMon] C:\Program Files\Wanadoo\CnxMon.exe ()
O4 - HKLM..\Run: [WOOTASKBARICON] C:\Program Files\Wanadoo\TaskBarIcon.exe ()
O4 - HKCU..\Run: [AdobeUpdater] C:\Program Files\Fichiers communs\Adobe\Updater5\AdobeUpdater.exe (Adobe Systems Incorporated)
O4 - HKCU..\Run: [msnmsgr] C:\Program Files\Windows Live\Messenger\msnmsgr.exe File not found
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe File not found
O4 - Startup: D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\HP Digital Imaging Monitor.lnk.disabled ()
O4 - Startup: D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Kodak software updater.lnk.disabled ()
O4 - Startup: D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Logiciel Kodak EasyShare.lnk.disabled ()
O4 - Startup: D:\Documents and Settings\Anthony\Menu Démarrer\Programmes\Démarrage\binternet.lnk = D:\Documents and Settings\Anthony\binternet.exe File not found
O4 - Startup: D:\Documents and Settings\Anthony\Menu Démarrer\Programmes\Démarrage\OpenOffice.org 2.0.lnk.disabled ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 95 00 00 00 [binary data]
O15 - HKCU\..Trusted Domains: chat-land.org ([]* in Trusted sites)
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} http://download.divx.com/player/DivXBrowserPlugin.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_02-windows-i586.cab (Java Plug-in 1.5.0_02)
O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Java Plug-in 1.5.0_06)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Fichiers communs\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\OPXPGina: DllName - C:\Apps\Softex\OmniPass\opxpgina.dll - C:\APPS\Softex\OmniPass\OPXPGina.dll ()
O24 - Desktop Components:0 () - file:///D:/DOCUME~1/Anthony/LOCALS~1/Temp/msohtml1/01/clip_image002.jpg
O24 - Desktop Components:1 (Ma page d'accueil) - About:Home
O24 - Desktop WallPaper: D:\Documents and Settings\Anthony\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
O24 - Desktop BackupWallPaper: D:\Documents and Settings\Anthony\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2010/12/29 14:24:15 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010/12/29 13:33:38 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2010/12/29 13:24:43 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2010/12/29 13:24:43 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2010/12/29 13:24:43 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2010/12/28 20:15:43 | 000,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\fwc
[2010/12/28 19:45:44 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Anthony\Application Data\GetRightToGo
[2010/12/28 17:56:56 | 000,017,744 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2010/12/28 17:56:55 | 000,165,584 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2010/12/28 17:56:54 | 000,023,376 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2010/12/28 17:56:53 | 000,046,672 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2010/12/28 17:56:52 | 000,100,176 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2010/12/28 17:56:52 | 000,094,544 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2010/12/28 17:56:51 | 000,028,880 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2010/12/28 17:56:41 | 000,167,592 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2010/12/28 17:56:41 | 000,038,848 | ---- | C] (AVAST Software) -- C:\WINDOWS\avastSS.scr
[2010/12/27 12:14:37 | 000,000,000 | ---D | C] -- C:\FyK
[2010/12/26 20:04:07 | 000,602,624 | ---- | C] (OldTimer Tools) -- D:\Documents and Settings\Anthony\Bureau\OTL.exe
[2010/12/26 18:46:42 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2010/12/19 19:36:40 | 000,719,872 | ---- | C] (Abysmal Software) -- C:\WINDOWS\System32\devil.dll
[2010/12/19 19:36:40 | 000,369,152 | ---- | C] (The Public) -- C:\WINDOWS\System32\avisynth.dll
[2010/12/19 19:36:39 | 000,070,656 | ---- | C] (www.helixcommunity.org) -- C:\WINDOWS\System32\i420vfw.dll
[2010/12/19 19:36:39 | 000,000,000 | ---D | C] -- C:\Program Files\AviSynth 2.5
[2010/12/19 19:21:22 | 000,186,880 | RHS- | C] (RadLight) -- C:\WINDOWS\System32\RLOgg.ax
[2010/12/19 19:21:22 | 000,092,672 | RHS- | C] (RadLight) -- C:\WINDOWS\System32\RLVorbisDec.ax
[2010/12/19 19:21:22 | 000,090,112 | RHS- | C] (-) -- C:\WINDOWS\System32\TTADSSplitter.ax
[2010/12/19 19:21:22 | 000,090,112 | RHS- | C] (-) -- C:\WINDOWS\System32\TTADSDecoder.ax
[2010/12/19 19:21:22 | 000,067,584 | RHS- | C] (RadLight, LLC) -- C:\WINDOWS\System32\RLTheoraDec.ax
[2010/12/19 19:21:21 | 000,216,064 | RHS- | C] (MONOGRAM Multimedia, s.r.o.) -- C:\WINDOWS\System32\nbDX.dll
[2010/12/19 19:21:21 | 000,179,200 | RHS- | C] (Gabest) -- C:\WINDOWS\System32\DiracSplitter.ax
[2010/12/19 19:21:21 | 000,169,472 | RHS- | C] (Gabest) -- C:\WINDOWS\System32\MatroskaDX.ax
[2010/12/19 19:21:21 | 000,163,328 | RHS- | C] (Gabest) -- C:\WINDOWS\System32\flvDX.dll
[2010/12/19 19:21:21 | 000,161,792 | RHS- | C] (Gabest) -- C:\WINDOWS\System32\RealMediaDX.ax
[2010/12/19 19:21:21 | 000,123,904 | RHS- | C] (CoreCodec) -- C:\WINDOWS\System32\AVCDX.ax
[2010/12/19 19:21:21 | 000,031,232 | RHS- | C] (Hans Mayerl) -- C:\WINDOWS\System32\msfDX.dll
[2010/12/19 19:21:14 | 000,000,000 | ---D | C] -- C:\Program Files\eRightSoft
[2010/12/16 14:20:47 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Anthony\Local Settings\Application Data\WMTools Downloaded Files
[2010/12/14 13:37:11 | 000,000,000 | ---D | C] -- C:\Program Files\FWeb
[2007/11/23 18:21:39 | 003,966,288 | ---- | C] (Patchou) -- C:\Program Files\MsgPlusLive-423.exe
[2007/09/29 21:12:43 | 020,256,064 | ---- | C] (Apple Inc.) -- C:\Program Files\QuickTimeInstaller.exe
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[13 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 D:\Documents and Settings\Anthony\*.tmp files -> D:\Documents and Settings\Anthony\*.tmp -> ]

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2010/12/29 19:41:22 | 000,029,204 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2010/12/29 19:41:19 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/12/29 19:37:22 | 000,001,000 | ---- | M] () -- C:\WINDOWS\tasks\Google Software Updater.job
[2010/12/29 19:37:03 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/12/29 19:37:02 | 1073,139,712 | -HS- | M] () -- C:\hiberfil.sys
[2010/12/29 17:17:01 | 000,000,366 | ---- | M] () -- C:\WINDOWS\tasks\Symantec NetDetect.job
[2010/12/29 13:40:13 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010/12/29 13:33:42 | 000,000,359 | RHS- | M] () -- C:\BOOT.INI
[2010/12/28 22:08:11 | 000,000,011 | ---- | M] () -- D:\Documents and Settings\Anthony\logie
[2010/12/28 22:08:11 | 000,000,011 | ---- | M] () -- D:\Documents and Settings\Anthony\logff
[2010/12/28 18:02:32 | 000,000,599 | ---- | M] () -- D:\Documents and Settings\Anthony\Menu Démarrer\Programmes\Démarrage\binternet.lnk
[2010/12/28 17:56:56 | 000,001,589 | ---- | M] () -- D:\Documents and Settings\All Users\Bureau\avast! Free Antivirus.lnk
[2010/12/28 17:56:52 | 000,003,121 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2010/12/28 17:36:19 | 000,556,230 | ---- | M] () -- C:\WINDOWS\System32\perfh00C.dat
[2010/12/28 17:36:19 | 000,485,246 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010/12/28 17:36:19 | 000,095,550 | ---- | M] () -- C:\WINDOWS\System32\perfc00C.dat
[2010/12/28 17:36:19 | 000,080,590 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010/12/28 17:09:48 | 000,000,330 | ---- | M] () -- C:\Boot.bak
[2010/12/27 12:14:26 | 001,401,213 | ---- | M] () -- D:\Documents and Settings\Anthony\Bureau\Setup.exe
[2010/12/26 20:04:18 | 000,602,624 | ---- | M] (OldTimer Tools) -- D:\Documents and Settings\Anthony\Bureau\OTL.exe
[2010/12/26 14:34:14 | 000,200,192 | ---- | M] () -- D:\Documents and Settings\Anthony\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/12/20 18:09:00 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/12/20 18:08:40 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/12/20 01:08:37 | 000,503,632 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/12/08 21:12:14 | 000,015,872 | ---- | M] () -- D:\Documents and Settings\Anthony\Bureau\Reglement.docx
[2010/12/08 20:58:15 | 000,014,024 | ---- | M] () -- D:\Documents and Settings\Anthony\Bureau\Programme.docx
[2010/12/08 20:57:02 | 000,012,965 | ---- | M] () -- D:\Documents and Settings\Anthony\Bureau\Inscription.docx
[2010/12/05 16:36:48 | 000,002,209 | ---- | M] () -- C:\b.mscz
[2010/12/03 19:03:36 | 000,002,092 | ---- | M] () -- C:\a.mscz
[2010/12/03 18:40:12 | 000,002,549 | ---- | M] () -- C:\.a.mscz,
[2010/12/02 17:25:22 | 009,108,160 | ---- | M] () -- D:\Documents and Settings\Anthony\Bureau\This Autumn Day.mp3
[2010/11/30 14:16:13 | 000,130,780 | ---- | M] () -- D:\Documents and Settings\Anthony\Bureau\Stratovarius_Discografia__www_heavytorrents_tk_.torrent
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[13 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 D:\Documents and Settings\Anthony\*.tmp files -> D:\Documents and Settings\Anthony\*.tmp -> ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2010/12/29 13:24:43 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010/12/29 13:24:43 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010/12/29 13:24:43 | 000,089,088 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010/12/29 13:24:43 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010/12/29 13:24:43 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010/12/28 17:56:56 | 000,001,589 | ---- | C] () -- D:\Documents and Settings\All Users\Bureau\avast! Free Antivirus.lnk
[2010/12/27 12:14:26 | 001,401,213 | ---- | C] () -- D:\Documents and Settings\Anthony\Bureau\Setup.exe
[2010/12/19 19:21:22 | 000,107,520 | RHS- | C] () -- C:\WINDOWS\System32\RLMPCDec.ax
[2010/12/19 19:21:22 | 000,051,712 | RHS- | C] () -- C:\WINDOWS\System32\RLSpeexDec.ax
[2010/12/19 19:21:21 | 000,227,328 | RHS- | C] () -- C:\WINDOWS\System32\ac3DX.ax
[2010/12/19 19:21:21 | 000,175,104 | RHS- | C] () -- C:\WINDOWS\System32\CoreAAC.ax
[2010/12/19 19:21:21 | 000,120,832 | RHS- | C] () -- C:\WINDOWS\System32\MPCDx.ax
[2010/12/19 19:21:21 | 000,097,280 | RHS- | C] () -- C:\WINDOWS\System32\FLACDX.ax
[2010/12/19 19:21:21 | 000,081,920 | RHS- | C] () -- C:\WINDOWS\System32\aac_parser.ax
[2010/12/19 19:21:21 | 000,070,656 | RHS- | C] () -- C:\WINDOWS\System32\RLAPEDec.ax
[2010/12/08 20:38:15 | 000,015,872 | ---- | C] () -- D:\Documents and Settings\Anthony\Bureau\Reglement.docx
[2010/12/08 20:38:13 | 000,012,965 | ---- | C] () -- D:\Documents and Settings\Anthony\Bureau\Inscription.docx
[2010/12/08 20:34:52 | 000,014,024 | ---- | C] () -- D:\Documents and Settings\Anthony\Bureau\Programme.docx
[2010/12/05 16:36:48 | 000,002,209 | ---- | C] () -- C:\b.mscz
[2010/12/03 18:40:12 | 000,002,549 | ---- | C] () -- C:\.a.mscz,
[2010/12/03 18:40:12 | 000,002,092 | ---- | C] () -- C:\a.mscz
[2010/12/02 17:25:21 | 009,108,160 | ---- | C] () -- D:\Documents and Settings\Anthony\Bureau\This Autumn Day.mp3
[2010/11/30 14:16:13 | 000,130,780 | ---- | C] () -- D:\Documents and Settings\Anthony\Bureau\Stratovarius_Discografia__www_heavytorrents_tk_.torrent
[2010/08/02 23:00:51 | 000,707,719 | ---- | C] () -- D:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-75017042-3997265084-919806112-1009-0.dat
[2010/08/01 19:24:05 | 000,327,546 | ---- | C] () -- D:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-System.dat
[2009/09/22 17:30:37 | 000,000,325 | ---- | C] () -- C:\WINDOWS\KillProcess.INI
[2009/04/20 01:55:26 | 000,795,648 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009/04/20 01:55:26 | 000,130,048 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009/04/20 01:55:25 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2009/04/20 01:55:24 | 000,067,584 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2008/08/20 11:19:57 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2008/02/05 12:47:06 | 000,077,824 | R--- | C] () -- C:\WINDOWS\System32\HPZIDS01.dll
[2008/02/05 12:38:12 | 000,000,749 | ---- | C] () -- D:\Documents and Settings\All Users\Application Data\hpzinstall.log
[2007/12/13 19:01:50 | 000,000,028 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2007/09/29 21:01:57 | 010,753,204 | ---- | C] () -- C:\Program Files\Satsuki.Decoder.Quicktime.Module.exe
[2007/09/29 20:57:22 | 000,000,026 | ---- | C] () -- C:\WINDOWS\System32\satsukidecodersettings.ini
[2007/09/29 20:55:56 | 007,582,826 | ---- | C] () -- C:\Program Files\Satsuki.Decoder.Pack.3.1.1.7.exe
[2007/07/03 14:19:15 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\gspnDll.dll
[2007/07/03 14:19:14 | 000,102,400 | ---- | C] () -- C:\WINDOWS\System32\instDll.dll
[2007/07/03 14:19:14 | 000,002,063 | ---- | C] () -- C:\WINDOWS\wwdslcfg.ini
[2006/09/14 18:30:40 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2006/07/24 15:46:54 | 000,031,232 | ---- | C] () -- C:\WINDOWS\System32\cam1210.dll
[2006/06/29 15:37:18 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\Cam1210M.dll
[2006/04/21 10:06:44 | 000,003,712 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2006/03/28 14:09:34 | 000,000,067 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2006/03/25 19:02:09 | 000,000,342 | ---- | C] () -- C:\WINDOWS\hpipcopy.INI
[2006/03/16 20:01:51 | 000,000,112 | ---- | C] () -- C:\WINDOWS\ActiveSkin.INI
[2006/03/01 19:01:51 | 000,000,165 | ---- | C] () -- C:\WINDOWS\KPCMS.INI
[2006/03/01 19:01:50 | 000,006,144 | ---- | C] () -- C:\WINDOWS\System32\ImgLibLead.dll
[2006/03/01 19:01:49 | 000,100,864 | ---- | C] () -- C:\WINDOWS\System32\Dc50ip32.dll
[2006/03/01 19:01:49 | 000,065,864 | ---- | C] () -- C:\WINDOWS\System32\Digita.sys
[2006/02/03 22:05:01 | 000,000,360 | ---- | C] () -- C:\WINDOWS\ULEAD32.INI
[2006/02/03 21:58:23 | 000,210,944 | ---- | C] () -- C:\WINDOWS\System32\MSVCRT10.DLL
[2006/01/22 14:42:55 | 000,200,192 | ---- | C] () -- D:\Documents and Settings\Anthony\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006/01/21 18:26:25 | 000,157,696 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2006/01/21 18:26:20 | 000,019,968 | ---- | C] () -- C:\WINDOWS\System32\cpuinf32.dll
[2006/01/21 18:15:23 | 000,089,088 | ---- | C] () -- C:\WINDOWS\System32\hpgt33.dll
[2006/01/21 17:42:56 | 000,015,360 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll
[2006/01/11 20:10:26 | 000,000,135 | ---- | C] () -- D:\Documents and Settings\Anthony\Local Settings\Application Data\fusioncache.dat
[2006/01/11 13:31:29 | 000,005,606 | ---- | C] () -- C:\WINDOWS\System32\stci.dll
[2005/12/06 16:36:56 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2005/12/06 16:24:57 | 000,000,488 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2005/12/06 16:23:44 | 000,198,144 | ---- | C] () -- C:\WINDOWS\System32\_psisdecd.dll
[2005/12/06 16:21:12 | 000,000,501 | ---- | C] () -- C:\WINDOWS\System32\SETUPPC.INI
[2005/12/06 16:14:58 | 000,007,584 | ---- | C] () -- C:\WINDOWS\HDReg.ini
[2005/12/06 16:12:20 | 000,003,072 | R--- | C] () -- C:\WINDOWS\System32\34CoInstaller.dll
[2005/12/06 16:06:02 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini
[2005/12/06 16:06:00 | 000,157,184 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2004/08/16 18:25:16 | 000,000,829 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2004/08/16 17:56:59 | 000,004,205 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2004/06/23 13:14:44 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2001/07/07 03:00:00 | 000,003,279 | ---- | C] () -- C:\WINDOWS\System32\HPTCPMON.INI
[2000/09/08 17:53:50 | 000,073,839 | ---- | C] () -- C:\WINDOWS\System32\KodakOneTouch.dll
[1980/01/01 00:00:00 | 001,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[1980/01/01 00:00:00 | 001,466,368 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[1980/01/01 00:00:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[1980/01/01 00:00:00 | 000,540,672 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll
[1980/01/01 00:00:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[1980/01/01 00:00:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[1980/01/01 00:00:00 | 000,020,736 | ---- | C] () -- C:\WINDOWS\System32\drivers\MosIrUsb.sys

[color=#E56717]========== LOP Check ==========[/color]

[2006/01/21 17:43:47 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\ACD Systems
[2010/12/28 17:56:36 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\Alwil Software
[2008/06/08 22:37:23 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\Emjysoft
[2009/09/27 20:01:12 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\GamesBar
[2009/02/23 15:25:50 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\JollyBear
[2007/07/03 12:23:00 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\Live Bind Fork Help
[2006/06/03 16:21:57 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\Messenger Plus!
[2009/09/22 12:11:43 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\OD2
[2010/01/23 17:07:58 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\Skyline
[2009/09/24 15:21:36 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\TEMP
[2005/12/07 22:29:40 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\Ulead Systems
[2005/12/07 22:29:40 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\VadeRetro
[2005/12/07 22:29:40 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\Viewpoint
[2009/11/10 23:02:38 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Anthony\Application Data\.ABC
[2006/01/21 21:10:41 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Anthony\Application Data\ACD Systems
[2010/12/17 18:00:00 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Anthony\Application Data\Audacity
[2009/01/05 17:42:57 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Anthony\Application Data\CamfrogWEB
[2010/02/14 18:35:06 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Anthony\Application Data\FMZilla
[2010/12/28 19:46:06 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Anthony\Application Data\GetRightToGo
[2010/08/01 18:10:05 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Anthony\Application Data\Jeskola
[2006/06/19 18:21:48 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Anthony\Application Data\Leadertech
[2008/04/01 14:29:47 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Anthony\Application Data\ma-config.com
[2010/08/13 19:35:06 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Anthony\Application Data\MusE
[2006/01/20 22:00:36 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Anthony\Application Data\Norman
[2006/01/11 20:13:25 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Anthony\Application Data\OD2
[2006/03/22 23:14:16 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Anthony\Application Data\Ulead Systems
[2006/02/15 20:39:36 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Anthony\Application Data\VadeRetro
[2008/09/10 12:09:26 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Anthony\Application Data\Viewpoint
[2010/04/25 13:02:38 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Anthony\Application Data\Xi
[2006/01/27 23:22:50 | 000,000,194 | ---- | M] () -- C:\WINDOWS\Tasks\HDReg.job

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 127 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:9E22BBE8
@Alternate Data Stream - 110 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2

< End of report >
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Destrio5 Messages postés 85985 Date d'inscription dimanche 11 juillet 2010 Statut Modérateur Dernière intervention 17 février 2023 10 297
29 déc. 2010 à 19:58
Quelles applications ne fonctionnent plus ?
0
Helloween77 Messages postés 93 Date d'inscription jeudi 24 septembre 2009 Statut Membre Dernière intervention 14 mai 2015 1
Modifié par Helloween77 le 29/12/2010 à 21:17
Je n'ai pas pu réinstaller certains antispywares, ni msn (certains fichiers en rapport avec ces applications sont en quarantaine dans Findykill, je ne sais pas si ça peut jouer?).
Sinon même après avoir pu installer avast, l'icone du firewall n'a jamais réapparu, et la restauration système était toujours impossible.
0
Helloween77 Messages postés 93 Date d'inscription jeudi 24 septembre 2009 Statut Membre Dernière intervention 14 mai 2015 1
Modifié par Helloween77 le 29/12/2010 à 21:25
Peut-être que c'est bon finalement... J'ai rereréessayé avec une autre version de msn, et pas de message d'erreur, un vrai mystère =D
Par contre je me demande pourquoi la restauration n'avait pas marché... Y a t-il autre chose à faire à ce sujet? J'ai lu qu'il valait mieux désactiver puis réactiver la restauration système?
En tout cas, merci beaucoup pour votre aide !
0