Probleme pop up, virus?

-----------------------[ Lop S&D 4.2.0-9 XP/Vista ]---------------------

[ Windows 'Longhorn' (NT 6.0) Workstation Build 6000 ]
[ USER : c‚line ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 28/05/2008 | 20:00:07,41 ] [ PC : PC-DE-CLINE ]
[ MAJ : 16-05-2008 | 23:35 ]
[ UAC => 0 ]

-------------[ Listing des dossiers dans Application Data ]------------

[10/10/2007|14:16] C:\Users\CLINE~1\AppData\Roaming\ACD Systems\ACDSee

[03/02/2008|12:08] C:\Users\CLINE~1\AppData\Roaming\Adobe\Flash Player
[10/10/2007|12:25] C:\Users\CLINE~1\AppData\Roaming\Adobe\Linguistics
[03/10/2007|18:24] C:\Users\CLINE~1\AppData\Roaming\Adobe\Acrobat

[07/10/2007|12:14] C:\Users\CLINE~1\AppData\Roaming\Creative\WebCam Center

[18/10/2007|16:43] C:\Users\CLINE~1\AppData\Roaming\DivX\DivX Codec

[17/04/2008|13:36] C:\Users\CLINE~1\AppData\Roaming\Google\Local Search History
[25/11/2007|00:09] C:\Users\CLINE~1\AppData\Roaming\Google\GoogleEarth

[03/10/2007|18:23] C:\Users\CLINE~1\AppData\Roaming\Hewlett-Packard\HP Software UI
[03/10/2007|18:15] C:\Users\CLINE~1\AppData\Roaming\Hewlett-Packard\Vista Default Settings

[03/10/2007|18:24] C:\Users\CLINE~1\AppData\Roaming\Identities\{22721329-5A4A-4639-9A50-6ACCBFAC0B7B}

[03/10/2007|18:21] C:\Users\CLINE~1\AppData\Roaming\Macromedia\Flash Player

[11/03/2008|20:28] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Templates
[02/03/2008|21:34] C:\Users\CLINE~1\AppData\Roaming\Microsoft\CLR Security Config
[02/02/2008|20:31] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Crypto
[30/12/2007|17:38] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Office
[30/12/2007|17:38] C:\Users\CLINE~1\AppData\Roaming\Microsoft\PowerPoint
[30/12/2007|17:33] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Clip Organizer
[30/12/2007|16:30] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Word
[29/11/2007|12:36] C:\Users\CLINE~1\AppData\Roaming\Microsoft\CLView
[05/11/2007|19:00] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Speech
[04/11/2007|12:55] C:\Users\CLINE~1\AppData\Roaming\Microsoft\MSN Messenger
[26/10/2007|11:00] C:\Users\CLINE~1\AppData\Roaming\Microsoft\MMC
[15/10/2007|11:57] C:\Users\CLINE~1\AppData\Roaming\Microsoft\UProof
[10/10/2007|21:36] C:\Users\CLINE~1\AppData\Roaming\Microsoft\HTML Help
[10/10/2007|14:03] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Outlook
[10/10/2007|13:52] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Signatures
[10/10/2007|13:52] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Stationery
[10/10/2007|13:01] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Internet Explorer
[09/10/2007|00:02] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Excel
[08/10/2007|22:54] C:\Users\CLINE~1\AppData\Roaming\Microsoft\QuickStyles
[08/10/2007|22:52] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Proof
[08/10/2007|22:51] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Document Building Blocks
[07/10/2007|12:07] C:\Users\CLINE~1\AppData\Roaming\Microsoft\AddIns
[03/10/2007|19:36] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Windows
[03/10/2007|19:25] C:\Users\CLINE~1\AppData\Roaming\Microsoft\WLTB Custom Buttons
[03/10/2007|19:21] C:\Users\CLINE~1\AppData\Roaming\Microsoft\IdentityCRL
[03/10/2007|18:14] C:\Users\CLINE~1\AppData\Roaming\Microsoft\SystemCertificates
[03/10/2007|18:12] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Protect
[03/10/2007|18:12] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Credentials

[06/01/2008|17:50] C:\Users\CLINE~1\AppData\Roaming\Movie Torrent\dht
[06/01/2008|17:38] C:\Users\CLINE~1\AppData\Roaming\Movie Torrent\logs
[06/01/2008|17:27] C:\Users\CLINE~1\AppData\Roaming\Movie Torrent\torrents
[06/01/2008|17:22] C:\Users\CLINE~1\AppData\Roaming\Movie Torrent\shares
[06/01/2008|17:22] C:\Users\CLINE~1\AppData\Roaming\Movie Torrent\plugins
[06/01/2008|17:22] C:\Users\CLINE~1\AppData\Roaming\Movie Torrent\tmp

[25/11/2007|00:10] C:\Users\CLINE~1\AppData\Roaming\Mozilla\Firefox

[28/03/2008|15:25] C:\Users\CLINE~1\AppData\Roaming\Nero\Nero8

[02/12/2007|20:13] C:\Users\CLINE~1\AppData\Roaming\Roxio\MediaManager9
[02/12/2007|20:04] C:\Users\CLINE~1\AppData\Roaming\Roxio\RoxioCentral
[02/12/2007|20:04] C:\Users\CLINE~1\AppData\Roaming\Roxio\RoxioCentral33
[10/10/2007|15:37] C:\Users\CLINE~1\AppData\Roaming\Roxio\Dragon


[25/11/2007|00:10] C:\Users\CLINE~1\AppData\Roaming\Talkback\MozillaOrg

[08/10/2007|22:38] C:\Users\CLINE~1\AppData\Roaming\vlc\cache

[27/10/2007|15:31] C:\Users\CLINE~1\AppData\Roaming\WeatherDPA\Weather


----------------[ Tâches planifiées dans C:\Windows\tasks ]---------------

[28/05/2008 19:30][--a------] C:\Windows\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[28/05/2008 19:10][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{759D656D-A6E0-44C9-8B55-4DA0230EE5BF}.job
[28/05/2008 19:26][--ah-----] C:\Windows\tasks\SA.DAT
[28/05/2008 19:25][--a------] C:\Windows\tasks\SCHEDLGU.TXT

------[ Listing des dossiers dans C:\ProgramData ]------

[27/10/2007|15:31] C:\ProgramData\2ACA5CC3-0F83-453D-A079-1076FE1A8B65
[10/10/2007|14:15] C:\ProgramData\ACD Systems
[18/04/2008|11:49] C:\ProgramData\Adobe
[02/11/2006|14:59] C:\ProgramData\Application Data
[06/12/2006|20:35] C:\ProgramData\Bureau
[02/11/2006|14:59] C:\ProgramData\Desktop
[18/10/2007|17:10] C:\ProgramData\Diskeeper Corporation
[02/11/2006|14:59] C:\ProgramData\Documents
[06/12/2006|20:35] C:\ProgramData\Favoris
[02/11/2006|14:59] C:\ProgramData\Favorites
[09/03/2008|19:35] C:\ProgramData\Google
[28/05/2008|19:01] C:\ProgramData\Google Updater
[27/10/2007|15:39] C:\ProgramData\HotbarSA
[08/01/2007|01:05] C:\ProgramData\InstallShield
[17/04/2008|14:33] C:\ProgramData\Lavasoft
[03/10/2007|20:35] C:\ProgramData\LUInstall.LiveUpdate
[06/12/2006|20:35] C:\ProgramData\Menu D‚marrer
[02/03/2008|19:17] C:\ProgramData\Microsoft
[13/05/2008|21:33] C:\ProgramData\Microsoft Help
[06/12/2006|20:35] C:\ProgramData\ModŠles
[24/11/2007|23:53] C:\ProgramData\Mozilla
[10/10/2007|14:26] C:\ProgramData\Nero
[08/01/2007|01:11] C:\ProgramData\Roxio
[10/10/2007|15:34] C:\ProgramData\Sonic
[02/11/2006|14:59] C:\ProgramData\Start Menu
[09/10/2007|21:44] C:\ProgramData\Symantec
[02/11/2006|14:59] C:\ProgramData\Templates
[18/10/2007|16:37] C:\ProgramData\TERMINAL Studio
[18/10/2007|16:25] C:\ProgramData\Trymedia
[18/10/2007|16:24] C:\ProgramData\WinZip
[02/03/2008|21:21] C:\ProgramData\WLInstaller
[08/10/2007|17:55] C:\ProgramData\Yahoo! Companion

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[07/10/2007|12:32] C:\Program Files\A.S.C
[10/10/2007|14:14] C:\Program Files\ACD Systems
[18/04/2008|11:49] C:\Program Files\Adobe
[18/10/2007|16:58] C:\Program Files\Alcohol Soft
[03/10/2007|18:45] C:\Program Files\Alwil Software
[08/01/2007|00:51] C:\Program Files\Analog Devices
[18/10/2007|16:35] C:\Program Files\BFG
[12/10/2007|12:01] C:\Program Files\CDex_170b2
[10/05/2008|11:32] C:\Program Files\Common Files
[05/10/2007|18:08] C:\Program Files\Creative
[03/10/2007|19:54] C:\Program Files\desktop.ini
[11/02/2008|16:46] C:\Program Files\Diskeeper Corporation
[10/10/2007|15:05] C:\Program Files\DivX
[06/12/2006|20:35] C:\Program Files\Fichiers communs [c:\Program Files\Common Files]
[08/01/2007|01:36] C:\Program Files\Fingerprint Sensor
[19/10/2007|11:35] C:\Program Files\Free Audio Pack
[17/04/2008|14:00] C:\Program Files\Google
[08/01/2007|01:36] C:\Program Files\Hewlett-Packard
[08/01/2007|01:01] C:\Program Files\Hp
[08/01/2007|01:21] C:\Program Files\HPQ
[05/10/2007|18:09] C:\Program Files\InstallShield Installation Information
[09/04/2008|18:55] C:\Program Files\Internet Explorer
[03/10/2007|18:13] C:\Program Files\InterVideo
[08/01/2007|00:55] C:\Program Files\Java
[18/10/2007|16:39] C:\Program Files\KC Softwares
[10/05/2008|11:33] C:\Program Files\Lavasoft
[03/10/2007|18:14] C:\Program Files\Macrovision Corp
[03/05/2008|11:24] C:\Program Files\Mahjong Holidays 2005
[05/10/2007|18:03] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[02/11/2006|14:35] C:\Program Files\Microsoft Games
[06/10/2007|22:27] C:\Program Files\Microsoft Office
[23/05/2008|11:34] C:\Program Files\Microsoft Silverlight
[02/03/2008|21:46] C:\Program Files\Microsoft SQL Server Compact Edition
[06/10/2007|22:27] C:\Program Files\Microsoft Visual Studio
[06/10/2007|22:19] C:\Program Files\Microsoft Visual Studio 8
[06/10/2007|22:28] C:\Program Files\Microsoft Works
[06/10/2007|22:25] C:\Program Files\Microsoft.NET
[02/11/2006|14:40] C:\Program Files\Movie Maker
[06/01/2008|17:22] C:\Program Files\Movie Torrent
[17/04/2008|15:22] C:\Program Files\Mozilla Firefox
[06/10/2007|22:28] C:\Program Files\MSBuild
[02/11/2006|14:35] C:\Program Files\MSN
[03/10/2007|18:48] C:\Program Files\MSXML 4.0
[18/10/2007|16:53] C:\Program Files\MUSK Codec Pack v5
[10/10/2007|14:26] C:\Program Files\Nero
[03/10/2007|18:29] C:\Program Files\Neuf
[18/10/2007|17:32] C:\Program Files\PC Wizard 2007
[14/04/2008|17:48] C:\Program Files\Picasa2
[02/11/2006|14:35] C:\Program Files\Reference Assemblies
[18/10/2007|16:01] C:\Program Files\ReflexiveArcade
[18/10/2007|16:40] C:\Program Files\RegCleaner
[08/01/2007|01:14] C:\Program Files\Roxio
[09/10/2007|21:43] C:\Program Files\Symantec
[08/01/2007|01:17] C:\Program Files\Synaptics
[18/10/2007|16:36] C:\Program Files\The Rise of Atlantis
[02/11/2006|14:58] C:\Program Files\Uninstall Information
[03/10/2007|18:47] C:\Program Files\VideoLAN
[03/10/2007|18:18] C:\Program Files\WIDCOMM
[09/03/2008|19:42] C:\Program Files\Winamp
[03/10/2007|19:39] C:\Program Files\Windows Calendar
[02/11/2006|14:40] C:\Program Files\Windows Collaboration
[03/10/2007|19:39] C:\Program Files\Windows Defender
[04/03/2008|00:37] C:\Program Files\Windows Live
[01/12/2007|20:03] C:\Program Files\Windows Live Toolbar
[13/05/2008|21:34] C:\Program Files\Windows Mail
[10/10/2007|13:05] C:\Program Files\Windows Media Player
[06/12/2006|20:35] C:\Program Files\Windows NT
[02/11/2006|14:40] C:\Program Files\Windows Photo Gallery
[11/01/2008|00:24] C:\Program Files\Windows Sidebar
[18/10/2007|16:56] C:\Program Files\WinRAR
[18/10/2007|16:24] C:\Program Files\WinZip
[10/10/2007|14:35] C:\Program Files\XP Codec Pack
[10/10/2007|14:36] C:\Program Files\XviD
[07/10/2007|12:40] C:\Program Files\Yahoo!

------[ Listing des dossiers dans C:\Program Files\Common Files ]------

[10/10/2007|14:15] C:\Program Files\Common Files\ACD Systems
[18/04/2008|11:49] C:\Program Files\Common Files\Adobe
[06/10/2007|22:27] C:\Program Files\Common Files\DESIGNER
[03/10/2007|18:13] C:\Program Files\Common Files\InstallShield
[08/01/2007|00:55] C:\Program Files\Common Files\Java
[18/10/2007|15:58] C:\Program Files\Common Files\LightScribe
[17/04/2008|14:49] C:\Program Files\Common Files\microsoft shared
[10/10/2007|14:32] C:\Program Files\Common Files\Nero
[10/10/2007|15:05] C:\Program Files\Common Files\PX Storage Engine
[08/01/2007|01:11] C:\Program Files\Common Files\Roxio Shared
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[08/01/2007|01:12] C:\Program Files\Common Files\Sonic Shared
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[08/01/2007|01:14] C:\Program Files\Common Files\SureThing Shared
[09/10/2007|21:46] C:\Program Files\Common Files\Symantec Shared
[06/10/2007|22:18] C:\Program Files\Common Files\System
[02/03/2008|21:34] C:\Program Files\Common Files\WindowsLiveInstaller
[10/05/2008|11:32] C:\Program Files\Common Files\Wise Installation Wizard

---------------------------[ Process ]--------------------------

... 69

... OK !

----------------------[ Recherche avec S_Lop ]---------------------

Aucun fichier / dossier Lop trouvé !

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

Aucun fichier / dossier Lop trouvé !

----------------------[ Verification du Registre ]----------------------

..... OK !

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts PROPRE


----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-28 20:00:30
Windows 6.0.6000 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

C:\Windows\system32\nvs2.inf
[b]! EGDACCESS !/b



[F:5][D:3]-> C:\Users\CLINE~1\AppData\Local\Temp
[F:54][D:1]-> C:\Users\CLINE~1\AppData\Roaming\MICROS~1\Windows\Cookies
[F:1758][D:13]-> C:\Users\CLINE~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:8][D:4]-> C:\$Recycle.Bin

[ UAC => 1 ]

--------------------[ Fin du rapport a 20:01:20,57 ]----------------------







pour vundo, il a rien trouvé et rien sauvegarder dans son dossier (dossier vide)
merci :)

-----------------------[ Lop S&D 4.2.0-9 XP/Vista ]---------------------

[ Windows 'Longhorn' (NT 6.0) Workstation Build 6000 ]
[ USER : c‚line ] [ "C:\Lop SD" ] [ Selection : 2 ]
[ 28/05/2008 | 20:37:45,68 ] [ PC : PC-DE-CLINE ]
[ MAJ : 16-05-2008 | 23:35 ]
[ UAC => 0 ]


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

Restauré! - Fichier Hosts

//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


-------------[ Listing des dossiers dans Application Data ]------------

[10/10/2007|14:16] C:\Users\CLINE~1\AppData\Roaming\ACD Systems\ACDSee

[03/02/2008|12:08] C:\Users\CLINE~1\AppData\Roaming\Adobe\Flash Player
[10/10/2007|12:25] C:\Users\CLINE~1\AppData\Roaming\Adobe\Linguistics
[03/10/2007|18:24] C:\Users\CLINE~1\AppData\Roaming\Adobe\Acrobat

[07/10/2007|12:14] C:\Users\CLINE~1\AppData\Roaming\Creative\WebCam Center

[18/10/2007|16:43] C:\Users\CLINE~1\AppData\Roaming\DivX\DivX Codec

[17/04/2008|13:36] C:\Users\CLINE~1\AppData\Roaming\Google\Local Search History
[25/11/2007|00:09] C:\Users\CLINE~1\AppData\Roaming\Google\GoogleEarth

[03/10/2007|18:23] C:\Users\CLINE~1\AppData\Roaming\Hewlett-Packard\HP Software UI
[03/10/2007|18:15] C:\Users\CLINE~1\AppData\Roaming\Hewlett-Packard\Vista Default Settings

[03/10/2007|18:24] C:\Users\CLINE~1\AppData\Roaming\Identities\{22721329-5A4A-4639-9A50-6ACCBFAC0B7B}

[03/10/2007|18:21] C:\Users\CLINE~1\AppData\Roaming\Macromedia\Flash Player

[11/03/2008|20:28] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Templates
[02/03/2008|21:34] C:\Users\CLINE~1\AppData\Roaming\Microsoft\CLR Security Config
[02/02/2008|20:31] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Crypto
[30/12/2007|17:38] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Office
[30/12/2007|17:38] C:\Users\CLINE~1\AppData\Roaming\Microsoft\PowerPoint
[30/12/2007|17:33] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Clip Organizer
[30/12/2007|16:30] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Word
[29/11/2007|12:36] C:\Users\CLINE~1\AppData\Roaming\Microsoft\CLView
[05/11/2007|19:00] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Speech
[04/11/2007|12:55] C:\Users\CLINE~1\AppData\Roaming\Microsoft\MSN Messenger
[26/10/2007|11:00] C:\Users\CLINE~1\AppData\Roaming\Microsoft\MMC
[15/10/2007|11:57] C:\Users\CLINE~1\AppData\Roaming\Microsoft\UProof
[10/10/2007|21:36] C:\Users\CLINE~1\AppData\Roaming\Microsoft\HTML Help
[10/10/2007|14:03] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Outlook
[10/10/2007|13:52] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Signatures
[10/10/2007|13:52] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Stationery
[10/10/2007|13:01] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Internet Explorer
[09/10/2007|00:02] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Excel
[08/10/2007|22:54] C:\Users\CLINE~1\AppData\Roaming\Microsoft\QuickStyles
[08/10/2007|22:52] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Proof
[08/10/2007|22:51] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Document Building Blocks
[07/10/2007|12:07] C:\Users\CLINE~1\AppData\Roaming\Microsoft\AddIns
[03/10/2007|19:36] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Windows
[03/10/2007|19:25] C:\Users\CLINE~1\AppData\Roaming\Microsoft\WLTB Custom Buttons
[03/10/2007|19:21] C:\Users\CLINE~1\AppData\Roaming\Microsoft\IdentityCRL
[03/10/2007|18:14] C:\Users\CLINE~1\AppData\Roaming\Microsoft\SystemCertificates
[03/10/2007|18:12] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Protect
[03/10/2007|18:12] C:\Users\CLINE~1\AppData\Roaming\Microsoft\Credentials

[06/01/2008|17:50] C:\Users\CLINE~1\AppData\Roaming\Movie Torrent\dht
[06/01/2008|17:38] C:\Users\CLINE~1\AppData\Roaming\Movie Torrent\logs
[06/01/2008|17:27] C:\Users\CLINE~1\AppData\Roaming\Movie Torrent\torrents
[06/01/2008|17:22] C:\Users\CLINE~1\AppData\Roaming\Movie Torrent\shares
[06/01/2008|17:22] C:\Users\CLINE~1\AppData\Roaming\Movie Torrent\plugins
[06/01/2008|17:22] C:\Users\CLINE~1\AppData\Roaming\Movie Torrent\tmp

[25/11/2007|00:10] C:\Users\CLINE~1\AppData\Roaming\Mozilla\Firefox

[28/03/2008|15:25] C:\Users\CLINE~1\AppData\Roaming\Nero\Nero8

[02/12/2007|20:13] C:\Users\CLINE~1\AppData\Roaming\Roxio\MediaManager9
[02/12/2007|20:04] C:\Users\CLINE~1\AppData\Roaming\Roxio\RoxioCentral
[02/12/2007|20:04] C:\Users\CLINE~1\AppData\Roaming\Roxio\RoxioCentral33
[10/10/2007|15:37] C:\Users\CLINE~1\AppData\Roaming\Roxio\Dragon


[25/11/2007|00:10] C:\Users\CLINE~1\AppData\Roaming\Talkback\MozillaOrg

[08/10/2007|22:38] C:\Users\CLINE~1\AppData\Roaming\vlc\cache

[27/10/2007|15:31] C:\Users\CLINE~1\AppData\Roaming\WeatherDPA\Weather


----------------[ Tâches planifiées dans C:\Windows\tasks ]---------------

[28/05/2008 19:30][--a------] C:\Windows\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[28/05/2008 19:10][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{759D656D-A6E0-44C9-8B55-4DA0230EE5BF}.job
[28/05/2008 20:37][--ah-----] C:\Windows\tasks\SA.DAT
[28/05/2008 20:36][--a------] C:\Windows\tasks\SCHEDLGU.TXT

------[ Listing des dossiers dans C:\ProgramData ]------

[27/10/2007|15:31] C:\ProgramData\2ACA5CC3-0F83-453D-A079-1076FE1A8B65
[10/10/2007|14:15] C:\ProgramData\ACD Systems
[18/04/2008|11:49] C:\ProgramData\Adobe
[02/11/2006|14:59] C:\ProgramData\Application Data
[06/12/2006|20:35] C:\ProgramData\Bureau
[02/11/2006|14:59] C:\ProgramData\Desktop
[18/10/2007|17:10] C:\ProgramData\Diskeeper Corporation
[02/11/2006|14:59] C:\ProgramData\Documents
[06/12/2006|20:35] C:\ProgramData\Favoris
[02/11/2006|14:59] C:\ProgramData\Favorites
[09/03/2008|19:35] C:\ProgramData\Google
[28/05/2008|19:01] C:\ProgramData\Google Updater
[27/10/2007|15:39] C:\ProgramData\HotbarSA
[08/01/2007|01:05] C:\ProgramData\InstallShield
[17/04/2008|14:33] C:\ProgramData\Lavasoft
[03/10/2007|20:35] C:\ProgramData\LUInstall.LiveUpdate
[06/12/2006|20:35] C:\ProgramData\Menu D‚marrer
[02/03/2008|19:17] C:\ProgramData\Microsoft
[13/05/2008|21:33] C:\ProgramData\Microsoft Help
[06/12/2006|20:35] C:\ProgramData\ModŠles
[24/11/2007|23:53] C:\ProgramData\Mozilla
[10/10/2007|14:26] C:\ProgramData\Nero
[08/01/2007|01:11] C:\ProgramData\Roxio
[10/10/2007|15:34] C:\ProgramData\Sonic
[02/11/2006|14:59] C:\ProgramData\Start Menu
[09/10/2007|21:44] C:\ProgramData\Symantec
[02/11/2006|14:59] C:\ProgramData\Templates
[18/10/2007|16:37] C:\ProgramData\TERMINAL Studio
[18/10/2007|16:25] C:\ProgramData\Trymedia
[18/10/2007|16:24] C:\ProgramData\WinZip
[02/03/2008|21:21] C:\ProgramData\WLInstaller
[08/10/2007|17:55] C:\ProgramData\Yahoo! Companion

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[07/10/2007|12:32] C:\Program Files\A.S.C
[10/10/2007|14:14] C:\Program Files\ACD Systems
[18/04/2008|11:49] C:\Program Files\Adobe
[18/10/2007|16:58] C:\Program Files\Alcohol Soft
[03/10/2007|18:45] C:\Program Files\Alwil Software
[08/01/2007|00:51] C:\Program Files\Analog Devices
[18/10/2007|16:35] C:\Program Files\BFG
[12/10/2007|12:01] C:\Program Files\CDex_170b2
[10/05/2008|11:32] C:\Program Files\Common Files
[05/10/2007|18:08] C:\Program Files\Creative
[03/10/2007|19:54] C:\Program Files\desktop.ini
[11/02/2008|16:46] C:\Program Files\Diskeeper Corporation
[10/10/2007|15:05] C:\Program Files\DivX
[06/12/2006|20:35] C:\Program Files\Fichiers communs [c:\Program Files\Common Files]
[08/01/2007|01:36] C:\Program Files\Fingerprint Sensor
[19/10/2007|11:35] C:\Program Files\Free Audio Pack
[17/04/2008|14:00] C:\Program Files\Google
[08/01/2007|01:36] C:\Program Files\Hewlett-Packard
[08/01/2007|01:01] C:\Program Files\Hp
[08/01/2007|01:21] C:\Program Files\HPQ
[05/10/2007|18:09] C:\Program Files\InstallShield Installation Information
[09/04/2008|18:55] C:\Program Files\Internet Explorer
[03/10/2007|18:13] C:\Program Files\InterVideo
[08/01/2007|00:55] C:\Program Files\Java
[18/10/2007|16:39] C:\Program Files\KC Softwares
[10/05/2008|11:33] C:\Program Files\Lavasoft
[03/10/2007|18:14] C:\Program Files\Macrovision Corp
[03/05/2008|11:24] C:\Program Files\Mahjong Holidays 2005
[05/10/2007|18:03] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[02/11/2006|14:35] C:\Program Files\Microsoft Games
[06/10/2007|22:27] C:\Program Files\Microsoft Office
[23/05/2008|11:34] C:\Program Files\Microsoft Silverlight
[02/03/2008|21:46] C:\Program Files\Microsoft SQL Server Compact Edition
[06/10/2007|22:27] C:\Program Files\Microsoft Visual Studio
[06/10/2007|22:19] C:\Program Files\Microsoft Visual Studio 8
[06/10/2007|22:28] C:\Program Files\Microsoft Works
[06/10/2007|22:25] C:\Program Files\Microsoft.NET
[02/11/2006|14:40] C:\Program Files\Movie Maker
[06/01/2008|17:22] C:\Program Files\Movie Torrent
[17/04/2008|15:22] C:\Program Files\Mozilla Firefox
[06/10/2007|22:28] C:\Program Files\MSBuild
[02/11/2006|14:35] C:\Program Files\MSN
[03/10/2007|18:48] C:\Program Files\MSXML 4.0
[18/10/2007|16:53] C:\Program Files\MUSK Codec Pack v5
[10/10/2007|14:26] C:\Program Files\Nero
[03/10/2007|18:29] C:\Program Files\Neuf
[18/10/2007|17:32] C:\Program Files\PC Wizard 2007
[14/04/2008|17:48] C:\Program Files\Picasa2
[02/11/2006|14:35] C:\Program Files\Reference Assemblies
[18/10/2007|16:01] C:\Program Files\ReflexiveArcade
[18/10/2007|16:40] C:\Program Files\RegCleaner
[08/01/2007|01:14] C:\Program Files\Roxio
[09/10/2007|21:43] C:\Program Files\Symantec
[08/01/2007|01:17] C:\Program Files\Synaptics
[18/10/2007|16:36] C:\Program Files\The Rise of Atlantis
[02/11/2006|14:58] C:\Program Files\Uninstall Information
[03/10/2007|18:47] C:\Program Files\VideoLAN
[03/10/2007|18:18] C:\Program Files\WIDCOMM
[09/03/2008|19:42] C:\Program Files\Winamp
[03/10/2007|19:39] C:\Program Files\Windows Calendar
[02/11/2006|14:40] C:\Program Files\Windows Collaboration
[03/10/2007|19:39] C:\Program Files\Windows Defender
[04/03/2008|00:37] C:\Program Files\Windows Live
[01/12/2007|20:03] C:\Program Files\Windows Live Toolbar
[13/05/2008|21:34] C:\Program Files\Windows Mail
[10/10/2007|13:05] C:\Program Files\Windows Media Player
[06/12/2006|20:35] C:\Program Files\Windows NT
[02/11/2006|14:40] C:\Program Files\Windows Photo Gallery
[11/01/2008|00:24] C:\Program Files\Windows Sidebar
[18/10/2007|16:56] C:\Program Files\WinRAR
[18/10/2007|16:24] C:\Program Files\WinZip
[10/10/2007|14:35] C:\Program Files\XP Codec Pack
[10/10/2007|14:36] C:\Program Files\XviD
[07/10/2007|12:40] C:\Program Files\Yahoo!

------[ Listing des dossiers dans C:\Program Files\Common Files ]------

[10/10/2007|14:15] C:\Program Files\Common Files\ACD Systems
[18/04/2008|11:49] C:\Program Files\Common Files\Adobe
[06/10/2007|22:27] C:\Program Files\Common Files\DESIGNER
[03/10/2007|18:13] C:\Program Files\Common Files\InstallShield
[08/01/2007|00:55] C:\Program Files\Common Files\Java
[18/10/2007|15:58] C:\Program Files\Common Files\LightScribe
[17/04/2008|14:49] C:\Program Files\Common Files\microsoft shared
[10/10/2007|14:32] C:\Program Files\Common Files\Nero
[10/10/2007|15:05] C:\Program Files\Common Files\PX Storage Engine
[08/01/2007|01:11] C:\Program Files\Common Files\Roxio Shared
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[08/01/2007|01:12] C:\Program Files\Common Files\Sonic Shared
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[08/01/2007|01:14] C:\Program Files\Common Files\SureThing Shared
[09/10/2007|21:46] C:\Program Files\Common Files\Symantec Shared
[06/10/2007|22:18] C:\Program Files\Common Files\System
[02/03/2008|21:34] C:\Program Files\Common Files\WindowsLiveInstaller
[10/05/2008|11:32] C:\Program Files\Common Files\Wise Installation Wizard

---------------------------[ Process ]--------------------------

... 48

... OK !

----------------------[ Recherche avec S_Lop ]---------------------

Aucun fichier / dossier Lop trouvé !

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

Aucun fichier / dossier Lop trouvé !

----------------------[ Verification du Registre ]----------------------

..... OK !

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts PROPRE


----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-28 20:38:29
Windows 6.0.6000 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

C:\Windows\system32\nvs2.inf
[b]! EGDACCESS !/b



[F:4][D:3]-> C:\Users\CLINE~1\AppData\Local\Temp
[F:54][D:1]-> C:\Users\CLINE~1\AppData\Roaming\MICROS~1\Windows\Cookies
[F:1758][D:13]-> C:\Users\CLINE~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:8][D:4]-> C:\$Recycle.Bin

[ UAC => 1 ]

--------------------[ Fin du rapport a 20:41:46,12 ]----------------------





Search Navipromo version 3.5.7 commencé le 28/05/2008 à 20:48:36,35

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "céline"

Mise à jour le 11.05.2008 à 18h00 par IL-MAFIOSO

Microsoft Windows Vista 6.0.6000
Internet Explorer : 7.0.6000.16643
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***


*** Recherche dossiers dans "C:\Windows" ***


*** Recherche dossiers dans "C:\Program Files" ***


*** Recherche dossiers dans "C:\ProgramData" ***


*** Recherche dossiers dans "c:\progra~2\micros~1\windows\startm~1\programs" ***


*** Recherche dossiers dans "c:\users\cline~1\appdata\roaming\micros~1\windows\startm~1\programs" ***


*** Recherche dossiers dans "C:\Users\c‚line\AppData\Local\virtualstore\Program Files" ***


*** Recherche dossiers dans "C:\Users\CLINE~1\AppData\Roaming" ***

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Fichier(s) caché(s) :

C:\Users\céline\AppData\Local\qethze.dat
C:\Users\céline\AppData\Local\qethze.exe
C:\Users\céline\AppData\Local\qethze_nav.dat
C:\Users\céline\AppData\Local\qethze_navps.dat


*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\Windows\system32" *

* Recherche dans "C:\Users\c‚line\AppData\Local\Microsoft" *

* Recherche dans "C:\Users\c‚line\AppData\Local" *

Fichiers trouvés :

qethze.exe trouvé !



*** Recherche fichiers ***


C:\Windows\system32\nvs2.inf trouvé !

*** Recherche clés spécifiques dans le Registre ***

HKEY_CURRENT_USER\Software\Lanconfig trouvé !

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\Windows\system32" :


* Dans "C:\Users\c‚line\AppData\Local\Microsoft" :


* Dans "C:\Users\c‚line\AppData\Local" :

qethze.dat trouvé !

3)Recherche Certificats :

Certificat Egroup trouvé !
Certificat Electronic-Group trouvé !
Certificat OOO-Favorit trouvé !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :



*** Analyse terminée le 28/05/2008 à 21:00:03,68 ***


remerci :)

Clean Navipromo version 3.5.7 commencé le 30/05/2008 à 15:36:22,73

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "céline"

Mise à jour le 11.05.2008 à 18h00 par IL-MAFIOSO

Microsoft Windows Vista 6.0.6000
Internet Explorer : 7.0.6000.16643
Système de fichiers : NTFS

Mode suppression automatique
avec prise en charge résultats Catchme et GNS


Nettoyage exécuté au redémarrage de l'ordinateur


*** Creation backups fichiers trouvés par Catchme ***

Copie vers "C:\Program Files\navilog1\Backupnavi"


*** Suppression des fichiers trouvés avec Catchme ***


** 2ème passage avec résultats Catchme **

* Dans "C:\Windows\system32" *


* Dans "C:\Users\c‚line\AppData\Local\Microsoft" *


* Dans "C:\Users\c‚line\AppData\Local" *


qethze.exe trouvé !
Copie qethze.exe réalisée avec succès !
qethze.exe supprimé !

qethze.dat trouvé !
Copie qethze.dat réalisée avec succès !
qethze.dat supprimé !

qethze_nav.dat trouvé !
Copie qethze_nav.dat réalisée avec succès !
qethze_nav.dat supprimé !

qethze_navps.dat trouvé !
Copie qethze_navps.dat réalisée avec succès !
qethze_navps.dat supprimé !

*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans "C:\Windows\System32" *


* Suppression dans "C:\Users\c‚line\AppData\Local\Microsoft" *


* Suppression dans "C:\Users\c‚line\AppData\Local" *



*** Suppression dossiers dans "C:\Windows" ***


*** Suppression dossiers dans "C:\Program Files" ***


*** Suppression dossiers dans "C:\ProgramData" ***


*** Suppression dossiers dans "c:\progra~2\micros~1\windows\startm~1\programs" ***


*** Suppression dossiers dans c:\users\cline~1\appdata\roaming\micros~1\windows\startm~1\programs ***


*** Suppression dossiers dans "C:\Users\c‚line\AppData\Local\virtualstore\Program Files" ***


*** Suppression dossiers dans "C:\Users\c‚line\AppData\Roaming" ***



*** Suppression fichiers ***

C:\Windows\system32\nvs2.inf supprimé !

*** Suppression fichiers temporaires ***

Nettoyage contenu C:\Windows\Temp effectué !
Nettoyage contenu C:\Users\CLINE~1\AppData\Local\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :


* Dans "C:\Windows\system32" *


* Dans "C:\Users\c‚line\AppData\Local\Microsoft" *


* Dans "C:\Users\c‚line\AppData\Local" *


*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok


*** Certificats ***

Certificat Egroup supprimé !
Certificat Electronic-Group supprimé !
Certificat OOO-Favorit supprimé !
Certificat Sunny-Day-Design-Ltdt absent !

*** Nettoyage terminé le 30/05/2008 à 15:40:37,93 ***

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:25:38, on 31/05/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16643)
Boot mode: Normal

Running processes:
c:\Program Files\Hewlett-Packard\IAM\bin\asghost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Hp\HP Software Update\hpwuSchd2.exe
C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHosttr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Java\jre1.6.0\bin\jusched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPStart.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\igfxsrvc.exe
C:\PROGRA~1\HEWLET~1\Shared\HPQTOA~1.EXE
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\céline\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://actus.sfr.fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Credential Manager for HP ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - c:\Program Files\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [HP Software Update] c:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [PTHOSTTR] C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [HP Health Check Scheduler] C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe c:\PROGRA~1\HEWLET~1\IAM\Bin\ASTSVCC.dll,RegisterModule
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0\bin\jusched.exe"
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ISUSPM Startup] c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O13 - Gopher Prefix:
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Roxio\Roxio MyDVD Basic v9\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe