Utiliser navilog ? Help...Résolu/Fermé

Question

Bonjour,

Après une suite d'évenement par un sujet de lag Wow, j'ai fait un rapport hijackthis où tout allais bien, quands j'ai fais 
un scan panda, ils m'ont trouvé 146 fichiers infectée + 11 fichiers suspect, après ça j'ai passé un coup de Ccleaner, et j'ai réparer les erreurs 4 fois (plus de 600erreurs) j'ai repasser un coup hijackthis. Et mon problème de lague et résolu :) 
Je me connecte et ma latence varient entre 0 et 100 ce qui est exellent. J'ai oublier de préciser, qu'avant d'avoir fait tout ca j'ai nettoyer un peu l'ordinateur à ma manière : j'ai désinstaller quelque loiciel inutiile et fouiller dans mes 2 diques dure pour supprimer des fichiers inutilise : j'ai libérer en tout 40 Go : Oo 40gb de saleté dans mon ordinateur ^^. 

Je ne sais pas si il me reste des fichiers infectées car un scan panda dure 5 heures et j'ai pas envie de le refaire (1,760~millions de fichier). Donc je ne sais pas si j'ai un fichier infectée par contre j'ai remarqué que navilog était une solution, alors pour être sûre que mon problème de lag est résolue, dois-je passer un dernièr coup de Navilog ?Après le coup de Navilog, si jamais besoin, je passerais un coiup de Norton 360°, 1 coup spybot search and destroy, 1 coup de bitdefender et de panda pour être sûre à 100% que la menace est éliminée !! 

Si jamais je trouve encore des virus, je vous contacterais, mais dans ce post ma question principale est : 

Dois je faire un coup de Navilog ?? 

je vous posterais bien entendue le rapport qui a été crée. 

Cordialement, Dark_Nacco.

Frappe Misere · Answer

je dirais que ce n'est pas neccessaire.
par contre, quand tu fais un scan avec hijackthis, pense à le renommer.
certains virus le reconnaissent au nom.

Dark_Nacco · Answer

ok merci... Parce que franchement je veux etre débarrasser de ce problème définitivement...

ep44 · Answer

re 

suite a ta demande on pousse la recherche un peu plus loin que HijackThis 

Télécharge sur ton bureau DSS (ex Comboscan) de Deckard:

(choisis enregistrer, puis Bureau comme emplacement)

http://deckard.geekstogo.com/dss.exe

Ferme toutes les applications en cours.

Double-clic sur comboscan.exe pour lancer l'outil.

Une fenêtre s'ouvre, invitant à fermer toutes les applications, clique sur OK.

A la fin de l'analyse, une fenêtre s'ouvre, clique sur OK.

Le rapport Comboscan.txt va s'afficher, copie le dans ta prochaine réponse.
Si un rapport complémentaire a été créé, poste le aussi dans ta réponse.


ensuite 

Télécharge DiagHelp.zip sur ton bureau http://www.malekal.com/download/DiagHelp.zip
==> Ne double-clic pas dessus !! Fais un clic droit sur le fichier et extraire tout
==> Un nouveau dossier chercher va être créé DiagHelp
==> Ouvre le et double-clic sur go.cmd (le .cmd peut ne pas apparaître)
==> Une fenêtre va s'ouvrir, choisis l'option 1
==> L'analyse va commencer, ceci peut durer quelques minutes, laisse faire et appuie sur une touche quand on te le demande
==> Copie/colle le contenu du bloc-note qui s'ouvre, pour cela :
==> Dans le bloc-note, cliquez sur le menu Edition / Selectionner tout
==> A nouveau menu Edition / copier
==> Dans un nouveau message ici, faire un clic droit / coller
@+

Utilisateur anonyme · Answer

Prend la version d'essai de kaspersky antivirus 7.0 et fait un scan du poste de travail

Dark_Nacco · Answer

Bonjours et merci de ton aide : Voila le rapport main.txt : Deckard's System Scanner v20071014.68 Run by Dima on 2008-07-22 10:59:45 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- System Restore -------------------------------------------------------------- -- Last 5 Restore Point(s) -- 41: 2008-07-22 08:51:20 UTC - RP319 - Deckard's System Scanner Restore Point 40: 2008-07-21 13:14:50 UTC - RP318 - Supprime IKEA HomePlanner Bedroom 39: 2008-07-21 13:12:04 UTC - RP317 - Supprime Windows Live Messenger 38: 2008-07-21 13:11:37 UTC - RP316 - Supprime Ulead Photo Explorer 37: 2008-07-21 13:07:40 UTC - RP315 - Supprime Ulead PhotoImpact -- First Restore Point -- 1: 2008-06-22 06:20:01 UTC - RP279 - Software Distribution Service 3.0 Backed up registry hives. Performed disk cleanup. -- HijackThis (run as Dima.exe) ------------------------------------------------ Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:06:20, on 22/07/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16674) Boot mode: Normal Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe D:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe D:\WINDOWS\Explorer.EXE D:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe D:\WINDOWS\system32\spoolsv.exe D:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe D:\Program Files\Norton Save and Restore\Agent\NSRTray.exe D:\Program Files\Bonjour\mDNSResponder.exe D:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe D:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe D:\WINDOWS\system32\ctfmon.exe D:\WINDOWS\System32\svchost.exe D:\Program Files\Norton Save and Restore\Agent\VProSvc.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\Documents and Settings\Dima.SERGE\Desktop\comboscan.exe D:\DOCUME~1\DIMA~1.SER\Desktop\Dima.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - D:\Program Files\Orange\SearchURLHook\SearchPageURL.dll O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - D:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - D:\Program Files\HP\Smart Web Printing\hpswp_framework.dll O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - D:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - D:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - D:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O3 - Toolbar: Afficher Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - D:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll O4 - HKLM\..\Run: [Norton Save and Restore] "D:\Program Files\Norton Save and Restore\Agent\NSRTray.exe" O4 - HKLM\..\Run: [osCheck] "D:\Program Files\Norton Internet Security\osCheck.exe" O4 - HKLM\..\Run: [ccApp] D:\Program Files\Common Files\Symantec Shared\ccApp.exe O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Steam] "d:\program files\valve\steam\steam.exe" -silent O4 - HKCU\..\Run: [msnmsgr] "D:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RESEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://D:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Aeuaii eeeiia HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - D:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll O9 - Extra button: ?anoe?aiiue auai? HP - {700259D7-1666-479a-93B1-3250410481E8} - D:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - D:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - D:\WINDOWS\bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - D:\WINDOWS\bdoscandel.exe O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - D:\WINDOWS\system32\Shdocvw.dll O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20070711/qtinstall.info.apple.com/qtactivex/qtplugin.cab O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab O16 - DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} (GameLauncher Control) - http://www.acclaim.com/cabs/acclaim_v4.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - D:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: Autodesk Licensing Service - Autodesk - D:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - D:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - D:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - D:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - D:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - D:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe O23 - Service: COM Host (comHost) - Symantec Corporation - D:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - D:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - D:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: LiveUpdate - Symantec Corporation - D:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE O23 - Service: LiveUpdate Notice - Symantec Corporation - D:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe O23 - Service: NBService - Nero AG - D:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NMIndexingService - Nero AG - D:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: Norton Save and Restore - Symantec Corporation - D:\Program Files\Norton Save and Restore\Agent\VProSvc.exe O23 - Service: Orange Controle Parental (OPTENET_FILTER) - Orange - D:\Program Files\Controle Parental\bin\optproxy.exe O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - D:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe O23 - Service: Symantec Core LC - Unknown owner - D:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe End of file - 9763 bytes -- HijackThis Fixed Entries (D:\DOCUME~1\DIMA~1.SER\Desktop\backups\) ---------- backup-20080721-140008-334 O1 - Hosts: dragondima.no-ip.org 127.0.0.1 backup-20080721-140142-519 O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU) backup-20080721-140142-739 O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) backup-20080721-140317-693 O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab -- File Associations ----------------------------------------------------------- [COLOR=red].js - jsfile - DefaultIcon - "C:\Program Files\Adobe\Adobe Dreamweaver CS3\Dreamweaver.exe",7/COLOR [COLOR=red].js - jsfile - shell\open\command - "C:\Program Files\Adobe\Adobe Dreamweaver CS3\Dreamweaver.exe","%1"/COLOR [COLOR=red].scr - AutoCADScriptFile - shell\open\command - "D:\WINDOWS\system32 otepad.exe" "%1"/COLOR -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------- R0 sfdrv01 (StarForce Protection Environment Driver (version 1.x)) - d:\windows\system32\drivers\sfdrv01.sys R0 sfhlp02 (StarForce Protection Helper Driver (version 2.x)) - d:\windows\system32\drivers\sfhlp02.sys R0 sfsync02 (StarForce Protection Synchronization Driver (version 2.x)) - d:\windows\system32\drivers\sfsync02.sys R0 VOBID - d:\windows\system32\drivers\vobid.sys R1 moufiltr (Mouse Filter Driver) - d:\windows\system32\drivers\moufiltr.sys R1 oreans32 - d:\windows\system32\drivers\oreans32.sys R1 StarOpen - d:\windows\system32\drivers\staropen.sys R3 ASAPIW2K - d:\windows\system32\drivers\asapiw2k.sys S3 ASNDIS5 (ASNDIS5 Protocol Driver) - d:\windows\system32\asndis5.sys S3 NPF (WinPcap Packet Driver (NPF)) - d:\windows\system32\drivers pf.sys (file missing) S3 PCAMPR5 (PCAMPR5 NDIS Protocol Driver) - d:\windows\system32\pcampr5.sys S3 PCANDIS5 (PCANDIS5 NDIS Protocol Driver) - d:\windows\system32\pcandis5.sys S3 RT2500 (AsusTek RT2500 Wireless Driver) - d:\windows\system32\drivers t2500.sys -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled -------------------- R2 Bonjour Service (##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##) - "d:\program files\bonjour\mdnsresponder.exe" R2 FTRTSVC (France Telecom Routing Table Service) - "d:\progra~1\common~1\france telecom\shared modules\ftrtsvc\0\ftrtsvc.exe" S2 OPTENET_FILTER (Orange Controle Parental) - d:\program files\controle parental\bin\optproxy.exe S3 FLEXnet Licensing Service - "d:\program files\common files\macrovision shared\flexnet publisher\fnplicensingservice.exe" S3 NBService - d:\program files ero ero 7 ero backitup bservice.exe -- Device Manager: Disabled ---------------------------------------------------- Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318} Description: 1394 Net Adapter Device ID: V1394\NIC1394\196E3E11D800 Manufacturer: Microsoft Name: 1394 Net Adapter PNP Device ID: V1394\NIC1394\196E3E11D800 Service: NIC1394 Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318} Description: RAID Controller Device ID: PCI\VEN_105A&DEV_3373&SUBSYS_80F51043&REV_02\3&267A616A&0&40 Manufacturer: Name: RAID Controller PNP Device ID: PCI\VEN_105A&DEV_3373&SUBSYS_80F51043&REV_02\3&267A616A&0&40 Service: Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318} Description: RAID Controller Device ID: PCI\VEN_1106&DEV_3149&SUBSYS_80ED1043&REV_80\3&267A616A&0&78 Manufacturer: Name: RAID Controller PNP Device ID: PCI\VEN_1106&DEV_3149&SUBSYS_80ED1043&REV_80\3&267A616A&0&78 Service: -- Scheduled Tasks ------------------------------------------------------------- 2008-07-21 20:00:00 680 --a------ D:\WINDOWS\Tasks\Norton Internet Security - Effectuer une analyse complete du systeme - serge fr.job -- Files created between 2008-06-22 and 2008-07-22 ----------------------------- 2008-07-22 09:19:17 0 d-------- D:\Documents and Settings\Dima.SERGE\Logs 2008-07-22 09:04:32 0 d-------- D:\Program Files\Navilog1 2008-07-22 08:12:01 0 d-------- D:\Program Files\CCleaner 2008-07-21 15:39:15 0 d-------- D:\Program Files\Panda Security 2008-07-21 14:54:04 0 d-------- D:\Documents and Settings\Dima.SERGE\Application Data\MSNInstaller 2008-07-21 14:12:21 0 d-------- D:\WINDOWS\BDOSCAN8 2008-07-13 16:22:37 0 d-------- D:\WINDOWS\system32\NtmsData 2008-07-05 13:56:10 35712 --a------ D:\WINDOWS\DIIUnin.dat 2008-07-05 13:56:06 2829 --a------ D:\WINDOWS\DIIUnin.pif 2008-07-05 13:56:06 102400 --a------ D:\WINDOWS\DIIUnin.exe 2008-07-04 09:20:54 0 d-------- D:\Program Files\Freelancer Mod Manager 2008-07-03 08:44:51 0 d-------- D:\Program Files\HyCam2 2008-06-26 14:41:52 0 d-------- D:\Documents and Settings\serge fr\Application Data\Real 2008-06-26 14:35:19 0 d-------- D:\Program Files\Common Files\Logitech 2008-06-26 14:35:17 306688 --a------ D:\WINDOWS\IsUninst.exe -- Find3M Report --------------------------------------------------------------- 2008-07-22 11:04:06 0 d-------- D:\Program Files\Common Files\Symantec Shared 2008-07-21 17:04:53 0 d-------- D:\Program Files\Nouveau dossier (3) 2008-07-21 17:04:44 0 d-------- D:\Program Files\SBox FreeWare 2008-07-21 17:04:44 0 d-------- D:\Program Files\Renex3 2008-07-21 17:04:44 0 d-------- D:\Program Files\PDFStudio 2008-07-21 17:04:42 0 d-------- D:\Program Files\Palm 2008-07-21 17:04:40 0 d-------- D:\Program Files\AutoCAD 2008 2008-07-21 17:04:39 0 d-------- D:\Program Files\FlashGet 2008-07-21 16:32:17 0 d-------- D:\Program Files\Microsoft Games 2008-07-21 15:14:52 0 d-------- D:\Program Files\Common Files\Wise Installation Wizard 2008-07-21 15:10:00 0 d--h----- D:\Program Files\InstallShield Installation Information 2008-07-21 15:02:18 0 d-------- D:\Documents and Settings\Dima.SERGE\Application Data\Notepad++ 2008-07-21 14:53:32 0 d-------- D:\Program Files\Common Files 2008-07-21 14:51:16 0 d-------- D:\Program Files\Labtec 2008-07-05 14:09:01 21840 --a-----t D:\WINDOWS\system32\SIntfNT.dll 2008-07-05 14:09:01 17212 --a-----t D:\WINDOWS\system32\SIntf32.dll 2008-07-05 14:09:01 12067 --a-----t D:\WINDOWS\system32\SIntf16.dll 2008-07-02 11:05:46 0 d-------- D:\Documents and Settings\Dima.SERGE\Application Data\HPAppData 2008-06-26 14:36:32 0 d-------- D:\Program Files\Common Files\Real 2008-06-22 08:08:06 5552 --a------ D:\WINDOWS\unins000.dat 2008-06-22 08:06:30 691545 --a------ D:\WINDOWS\unins000.exe 2008-06-19 13:36:22 56 --ah----- D:\WINDOWS\system32\ezsidmv.dat 2008-06-19 13:34:17 0 d-------- D:\Program Files\Skype 2008-06-19 13:34:10 0 d-------- D:\Program Files\Common Files\Skype 2008-06-03 15:24:38 0 d-------- D:\Program Files\Symantec -- Registry Dump --------------------------------------------------------------- *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}] 02/03/2007 16:52 1298024 -ra------ D:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{053F9267-DC04-4294-A72C-58F732D338C0}] 02/03/2007 16:52 177768 -ra------ D:\Program Files\HP\Smart Web Printing\hpswp_framework.dll [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}] 24/08/2007 21:51 316784 --a------ D:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}] 31/01/2008 09:18 116088 --a------ D:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser] "{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}"= D:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll [24/08/2007 21:51 316784] [-HKEY_CLASSES_ROOT\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}] [HKEY_CLASSES_ROOT\CoIEPlg.CoToolbar.1] [HKEY_CLASSES_ROOT\CoIEPlg.CoToolbar] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Norton Save and Restore"="D:\Program Files\Norton Save and Restore\Agent\NSRTray.exe" [03/03/2006 20:36] "osCheck"="D:\Program Files\Norton Internet Security\osCheck.exe" [24/08/2007 22:53] "ccApp"="D:\Program Files\Common Files\Symantec Shared\ccApp.exe" [31/01/2008 14:15] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="D:\WINDOWS\system32\ctfmon.exe" [04/08/2004 14:00] "Steam"="d:\program files\valve\steam\steam.exe" [28/03/2008 17:06] "msnmsgr"="D:\Program Files\Windows Live\Messenger\msnmsgr.exe" [] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice] @="Service" [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] HPZ12 Pml Driver HPZ12 Net Driver HPZ12 hpdevmgmt hpqcxs08 *Newly Created Service* - COMHOST [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2bf41070-b2b1-21d1-b5c1-0305f4055515}] C:\windows\svcr.exe -- Hosts ----------------------------------------------------------------------- 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com 8774 more entries in hosts file. -- End of Deckard's System Scanner: finished at 2008-07-22 11:06:50 ------------ et Voila le rapport extra.txt : Deckard's System Scanner v20071014.68 Extra logfile - please post this as an attachment with your post. -------------------------------------------------------------------------------- -- System Information ---------------------------------------------------------- Microsoft Windows XP Professionnel (build 2600) SP 2.0 Architecture: X86; Language: English CPU 0: AMD Athlon(tm) 64 Processor 3000+ Percentage of Memory in Use: 46% Physical Memory (total/avail): 1023.23 MiB / 548.44 MiB Pagefile Memory (total/avail): 2459.96 MiB / 2059.67 MiB Virtual Memory (total/avail): 2047.88 MiB / 1915.11 MiB A: is Removable (No Media) C: is Fixed (NTFS) - 114.48 GiB total, 48.39 GiB free. D: is Fixed (NTFS) - 186.3 GiB total, 44.93 GiB free. E: is CDROM (No Media) M: is CDROM (No Media) \.\PHYSICALDRIVE0 - Maxtor 6Y120P0 - 114.49 GiB - 1 partition \PARTITION0 (bootable) - Systeme de fichiers installable - 114.48 GiB - C: \.\PHYSICALDRIVE1 - ST3200822A - 186.31 GiB - 1 partition \PARTITION0 (bootable) - Systeme de fichiers installable - 186.3 GiB - D: -- Security Center ------------------------------------------------------------- AUOptions is scheduled to auto-install. Windows Internal Firewall is disabled. FirstRunDisabled is set. FW: Norton Internet Security v15.0.0.60 (Symantec Corporation) AV: Norton Internet Security v15.0.0.60 (Symantec Corporation) [HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "D:\Program Files\Windows Live\Messenger\msnmsgr.exe"="D:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "D:\Program Files\Windows Live\Messenger\livecall.exe"="D:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)" [HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "D:\Program Files\Messenger\msmsgs.exe"="D:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger" "D:\WINDOWS\system32\sessmgr.exe"="D:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019" "D:\Program Files\Valve\Steam\SteamApps\dimazhu\counter-strike source\hl2.exe"="D:\Program Files\Valve\Steam\SteamApps\dimazhu\counter-strike source\hl2.exe:*:Disabled:hl2" "D:\WINDOWS\Network Diagnostic\xpnetdiag.exe"="D:\WINDOWS\Network Diagnostic\xpnetdiag.exe:*:Disabled:@xpsp3res.dll,-20000" "D:\Program Files\World of Warcraft\Launcher.exe"="D:\Program Files\World of Warcraft\Launcher.exe:*:Enabled:World of Warcraft" "D:\Program Files\Bonjour\mDNSResponder.exe"="D:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour" "D:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="D:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook" "D:\Program Files\FlashGet\flashget.exe"="D:\Program Files\FlashGet\flashget.exe:*:Enabled:Flashget" "D:\Program Files\Orange\Connectivity\ConnectivityManager.exe"="D:\Program Files\Orange\Connectivity\ConnectivityManager.exe:*:enabled:CSS" "D:\Program Files\Windows Live\Messenger\msnmsgr.exe"="D:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "D:\Program Files\Windows Live\Messenger\livecall.exe"="D:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)" "D:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="D:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe" "D:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="D:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe" "D:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="D:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe" "D:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="D:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe" "D:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="D:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe" "D:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="D:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe" "D:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="D:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe" "D:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="D:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe" "D:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="D:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe" "D:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe"="D:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe" "D:\Program Files\Warcraft III\Frozen Throne.exe"="D:\Program Files\Warcraft III\Frozen Throne.exe:*:Enabled:Warcraft III - The Frozen Throne" "D:\Program Files\Dofus\Dofus.exe"="D:\Program Files\Dofus\Dofus.exe:*:Enabled:Dofus" "D:\Program Files\Skype\Phone\Skype.exe"="D:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype" -- Environment Variables ------------------------------------------------------- ALLUSERSPROFILE=D:\Documents and Settings\All Users.WINDOWS APPDATA=D:\Documents and Settings\Dima.SERGE\Application Data CLIENTNAME=Console CommonProgramFiles=D:\Program Files\Common Files COMPUTERNAME=SERGE ComSpec=D:\WINDOWS\system32\cmd.exe FP_NO_HOST_CHECK=NO HOMEDRIVE=D: HOMEPATH=\Documents and Settings\Dima.SERGE LOGONSERVER=\SERGE NUMBER_OF_PROCESSORS=1 OS=Windows_NT Path=D:\WINDOWS\system32;D:\WINDOWS;D:\WINDOWS\System32\Wbem;D:\Program Files\Samsung\Samsung PC Studio 3\;D:\Program Files\Common Files\Ulead Systems\MPEG;D:\Program Files\Common Files\Ulead Systems\DVD;D:\Program Files\Common Files\Ahead\Lib\ PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH PROCESSOR_ARCHITECTURE=x86 PROCESSOR_IDENTIFIER=x86 Family 15 Model 31 Stepping 0, AuthenticAMD PROCESSOR_LEVEL=15 PROCESSOR_REVISION=1f00 ProgramFiles=D:\Program Files PROMPT=$P$G SESSIONNAME=Console SystemDrive=D: SystemRoot=D:\WINDOWS TEMP=D:\DOCUME~1\DIMA~1.SER\LOCALS~1\Temp TMP=D:\DOCUME~1\DIMA~1.SER\LOCALS~1\Temp USERDOMAIN=SERGE USERNAME=Dima USERPROFILE=D:\Documents and Settings\Dima.SERGE VS80COMNTOOLS=D:\Program Files\Microsoft Visual Studio 8\Common7\Tools\ windir=D:\WINDOWS -- User Profiles --------------------------------------------------------------- sergez.SERGE.000 [I](admin)/I serge fr [I](admin)/I Dima.SERGE [I](admin)/I fchcf autocad [I](admin)/I Administrator [I](new local, admin)/I -- Add/Remove Programs --------------------------------------------------------- --> "D:\Program Files\Symantec\LiveUpdate\LSETUP.EXE" /U --> D:\Program Files\DivX\ConverterUninstall.exe /CONVERTER --> D:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL --> D:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL --> D:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL --> D:\WINDOWS\UNNeroShowTime.exe /UNINSTALL --> D:\WINDOWS\UNNeroVision.exe /UNINSTALL --> D:\WINDOWS\UNRecode.exe /UNINSTALL --> MsiExec.exe /I{9A346205-EA92-4406-B1AB-50379DA3F057} --> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 D:\WINDOWS\INF\PCHealth.inf 32 Bit HP CIO Components Installer --> MsiExec.exe /I{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7} Ad-Aware 2007 --> MsiExec.exe /X{E31C348B-63A9-4CBF-8D7F-D932ABB63244} Adobe Anchor Service CS3 --> MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95} Adobe Asset Services CS3 --> MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61} Adobe Bridge CS3 --> MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394} Adobe Bridge Start Meeting --> MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23} Adobe Camera Raw 4.0 --> MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C} Adobe CMaps --> MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C} Adobe Color - Photoshop Specific --> MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E} Adobe Color Common Settings --> D:\Program Files\Common Files\Adobe\Installers\6c8e2cb4fd241c55406016127a6ab2e\Setup.exe Adobe Color Common Settings --> MsiExec.exe /I{6D4AC5A4-4CF9-4F90-8111-B9B53CE257BF} Adobe Color EU Recommended Settings --> MsiExec.exe /I{73B5D990-04EA-4751-B10F-5534770B91F2} Adobe Color JA Extra Settings --> MsiExec.exe /I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029} Adobe Color NA Extra Settings --> MsiExec.exe /I{FF29A7E2-FF40-4D07-B7E4-2093DE59E10A} Adobe Default Language CS3 --> MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D} Adobe Device Central CS3 --> MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD} Adobe Dreamweaver CS3 --> D:\Program Files\Common Files\Adobe\Installers\ad19d2ae8332572b119cf35fd0a30d8\Setup.exe Adobe Dreamweaver CS3 --> MsiExec.exe /I{4BDB76C6-902E-41D5-9064-68768E02886B} Adobe ExtendScript Toolkit 2 --> D:\Program Files\Common Files\Adobe\Installers\3e054d2218e7aa282c2369d939e58ff\Setup.exe Adobe ExtendScript Toolkit 2 --> MsiExec.exe /I{77D2A9D3-5800-43E3-B274-87841BC87DB2} Adobe Extension Manager CS3 --> MsiExec.exe /I{BE5F3842-8309-4754-92D5-83E02E6077A3} Adobe Flash CS3 --> MsiExec.exe /I{80FD3971-8482-49C8-BA8C-B6464A15882F} Adobe Flash CS3 Professional --> D:\Program Files\Common Files\Adobe\Installers\b2b4b1546e74314f8131ded43e4bd9d\Setup.exe Adobe Flash Player 9 ActiveX --> MsiExec.exe /X{BB65C393-C76E-4F06-9B0C-2124AA8AF97B} Adobe Flash Player 9 ActiveX --> MsiExec.exe /X{BC4F8E84-5E29-49EC-B4E7-E6F9CB50986C} Adobe Flash Player ActiveX --> D:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe Adobe Flash Player Plugin --> D:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe Adobe Fonts All --> MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B} Adobe Help Viewer CS3 --> MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245} Adobe Linguistics CS3 --> MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078} Adobe PDF Library Files --> MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C} Adobe Photoshop CS3 --> D:\Program Files\Common Files\Adobe\Installers\32e9033392a51340b32fdc6ad893ab7\Setup.exe Adobe Photoshop CS3 --> MsiExec.exe /I{BF794769-8875-4E01-B7BE-E00104604F4A} Adobe Reader 8.1.2 - Francais --> MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81200000003} Adobe Setup --> MsiExec.exe /I{64C1FA9A-FA94-4B6E-B3E4-8573738E4AD1} Adobe Setup --> MsiExec.exe /I{82503EA7-7E08-4AA8-90E9-BE4D0A6D453F} Adobe Setup --> MsiExec.exe /I{8AE03988-8C8C-40EE-BDC7-76781BEF1B1D} Adobe Setup --> MsiExec.exe /I{926DEB4E-2B0A-4C5C-AE4A-BF6C06949702} Adobe Setup --> MsiExec.exe /I{D2E18162-47FB-4216-8AB3-F420C1AF75A4} Adobe Shockwave Player --> D:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE D:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log Adobe Stock Photos CS3 --> MsiExec.exe /I{29E5EA97-5F74-4A57-B8B2-D4F169117183} Adobe SVG Viewer 3.0 --> D:\Program Files\Common Files\Adobe\SVG Viewer 3.0\Uninstall\Winstall.exe -u -fD:\Program Files\Common Files\Adobe\SVG Viewer 3.0\Uninstall\Install.log Adobe Type Support --> MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312} Adobe Update Manager CS3 --> MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8} Adobe Version Cue CS3 Client --> MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5} Adobe WinSoft Linguistics Plugin --> MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6} Adobe XMP Panels CS3 --> MsiExec.exe /I{802771A9-A856-4A41-ACF7-1450E523C923} Adobe® Photoshop® Album Edition Decouverte 3.2 --> MsiExec.exe /I{A654A805-41D9-40C7-AA46-4AF04F044D61} Alp-Facturation --> MsiExec.exe /X{6FDF1A27-9165-4463-A7B3-143A34E9843D} AppCore --> MsiExec.exe /I{EFB5B3B5-A280-4E25-BE1C-634EEFE32C1B} Archiveur WinRAR --> D:\Program Files\WinRAR\uninstall.exe ASUS WLAN Card Utilities/Driver --> RunDll32 D:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "D:\Program Files\InstallShield Installation Information\{8F722FA9-B994-4C9B-B292-FD32D6206EDF}\Setup.exe" -l0x9 AutoCAD 2008 - English --> D:\Program Files\AutoCAD 2008\Setup\Setup.exe /P {5783F2D7-6001-0409-0002-0060B0CE6BBA} /M ACAD Autodesk DWF Viewer 7 --> MsiExec.exe /I{9A346205-EA92-4406-B1AB-50379DA3F057} Belltech Business Card Designer Pro 4.6.1 --> "D:\Program Files\Belltech Business Card Designer Pro\unins000.exe" Business Card Printery 3 --> D:\WINDOWS\cadkasdeinst01e.exe "D:\Program Files\Business Card Printery 3\" ccCommon --> MsiExec.exe /I{B24E05CC-46FF-4787-BBB8-5CD516AFB118} CCleaner (remove only) --> "D:\Program Files\CCleaner\uninst.exe" Component Framework --> MsiExec.exe /I{31478BE1-CDE5-4753-A8B2-F6D4BC1FBE09} Controle Parental --> RunDll32 D:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "D:\Program Files\InstallShield Installation Information\{93094D10-9388-11D4-9886-0000B43F396D}\Setup.exe" -l0x40c Cool & Quiet --> RunDll32 D:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "D:\Program Files\InstallShield Installation Information\{1ADE1AA0-7F82-4BB1-B1BD-727DE438057B}\Setup.exe" -l0x9 Counter-Strike: Source --> "D:\program files\valve\steam\steam.exe" steam://uninstall/240 Darluok Patch --> "D:\WINDOWS\Darluok Patch\uninstall.exe" "/U:D:\Program Files\World of Warcraft\Uninstall\uninstall.xml" Diablo II --> D:\WINDOWS\DIIUnin.exe D:\WINDOWS\DIIUnin.dat DivX Codec --> D:\Program Files\DivX\DivXCodecUninstall.exe /CODEC DivX Content Uploader --> D:\Program Files\DivX\DivXContentUploaderUninstall.exe /CUPLOADER DivX Converter --> D:\Program Files\DivX\ConverterUninstall.exe /CONVERTER DivX Player --> D:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER DivX Web Player --> D:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN Freelancer --> "C:\Program Files\Microsoft Game\Freelancer\UNINSTAL.EXE" /runtemp /addremove Freewheel Client for AutoCAD-based Products --> MsiExec.exe /I{FDF95DA9-EF3F-4700-8385-F994305E6F9D} Half-Life 2: Deathmatch --> "D:\Program Files\Valve\Steam\steam.exe" steam://uninstall/320 HijackThis 2.0.2 --> "D:\Documents and Settings\Dima.SERGE\Desktop\HijackThis.exe" /uninstall Hotfix for Windows Media Format 11 SDK (KB929399) --> "D:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe" hp LaserJet 1005 --> zuninst.exe HP Smart Web Printing --> MsiExec.exe /X{415CDA53-9100-476F-A7B2-476691E117C7} HP Update --> MsiExec.exe /X{AB40272D-92AB-4F30-B36B-22EDE16F8FE5} HPSSupply --> MsiExec.exe /X{487B0B9B-DCD4-440D-89A0-A6EDE1A545A3} InstantCopy --> MsiExec.exe /I{9ACEBC7B-4D46-462A-929C-99177EC5BEA6} Java(TM) 6 Update 2 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020} Java(TM) 6 Update 3 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030} Java(TM) SE Runtime Environment 6 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160000} Labtec WebCam --> MsiExec.exe /I{0463B519-E4C8-4C16-84AA-4743D1ED91B5} Language pack for Ad-Aware SE --> C:\PROGRA~1\Lavasoft\AD-AWA~1\Plugins\Langs\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\Plugins\Langs\INSTALL.LOG livebox --> D:\Program Files\InstallShield Installation Information\{17342E3B-0818-4A6F-BFF8-99476605ADD6}\Setup.exe -runfromtemp -l0x040c -removeonly LiveUpdate (Symantec Corporation) --> MsiExec.exe /x {E80F62FF-5D3C-4A19-8409-9721F2928206} /l*v "D:\Documents and Settings\All Users.WINDOWS\Application Data\LuUninstall.LiveUpdate" LiveUpdate (Symantec Corporation) --> MsiExec.exe /X{E80F62FF-5D3C-4A19-8409-9721F2928206} Macromedia Flash Player 8 --> RunDll32 advpack.dll,LaunchINFSection D:\WINDOWS\INF\swflash.inf,DefaultUninstall,5 Marvell Miniport Driver --> MsiExec.exe /X{C950420B-4182-49EA-850A-A6A2ABF06C6B} mb Software ArCon --> RunDll32 D:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "D:\Program Files\InstallShield Installation Information\{4B742BA0-FCE2-11D4-9D17-0080C86E687A}\setup.exe" -uninst Micro Application - Cartes de visite Edition Classic --> RunDll32 D:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "D:\Program Files\InstallShield Installation Information\{5513C032-CB59-4D93-AAB8-7A0649388AB3}\SETUP.EXE" -l0x40c Microsoft Compression Client Pack 1.0 for Windows XP --> "D:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe" Microsoft Office Access MUI (French) 2007 --> MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE} Microsoft Office Excel MUI (French) 2007 --> MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE} Microsoft Office InfoPath MUI (French) 2007 --> MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE} Microsoft Office Outlook Connector --> MsiExec.exe /I{95FC84C0-9F15-4831-8605-396FDC42071D} Microsoft Office Outlook MUI (French) 2007 --> MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE} Microsoft Office PowerPoint MUI (French) 2007 --> MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE} Microsoft Office Professional Plus 2007 --> "D:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL Microsoft Office Professional Plus 2007 --> MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE} Microsoft Office Proof (Arabic) 2007 --> MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE} Microsoft Office Proof (Dutch) 2007 --> MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE} Microsoft Office Proof (English) 2007 --> MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE} Microsoft Office Proof (French) 2007 --> MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE} Microsoft Office Proof (German) 2007 --> MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE} Microsoft Office Proof (Spanish) 2007 --> MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE} Microsoft Office Proofing (French) 2007 --> MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE} Microsoft Office Publisher MUI (French) 2007 --> MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE} Microsoft Office Shared MUI (French) 2007 --> MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE} Microsoft Office Word MUI (French) 2007 --> MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE} Microsoft Platform SDK (R2) (3790.2075) --> MsiExec.exe /I{9A0ED01E-FD18-457A-AB9C-0835DCDB17BB} Microsoft Silverlight --> MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} Microsoft User-Mode Driver Framework Feature Pack 1.0 --> "D:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe" Microsoft Visual C++ 2005 Express - FRA --> D:\Program Files\Microsoft Visual Studio 8\Microsoft Visual C++ 2005 Express Edition - FRA\setup.exe Microsoft Visual C++ 2005 Redistributable --> MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} MSXML 6.0 Parser (KB933579) --> MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E} MSXML4 Parser --> MsiExec.exe /I{01501EBA-EC35-4F9F-8889-3BE346E5DA13} Navilog1 3.6.1 --> "D:\Program Files\Navilog1\unins000.exe" Nero 7 Premium --> MsiExec.exe /I{43FFE159-3199-4188-A1CD-629166AD1036} neroxml --> MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B} Norton AntiVirus --> MsiExec.exe /X{77FFBA7E-0973-4F39-BBDB-AC2F537578D2} Norton AntiVirus Help --> MsiExec.exe /I{E3EFA461-EB83-4C3B-9C47-2C1D58A01555} Norton Confidential Core --> MsiExec.exe /I{55A6283C-638A-4EE0-B491-51118554BDA2} Norton Internet Security --> MsiExec.exe /I{C1C185CA-C531-49F5-A6FA-B838405A049D} Norton Internet Security (Symantec Corporation) --> "D:\Program Files\Common Files\Symantec Shared\SymSetup\{C1C185CA-C531-49F5-A6FA-B838405A049D}_15_0_0_60\Setup.exe" /X Norton Protection Center --> MsiExec.exe /I{62120008-8E1E-4807-860D-A8B48F8552DB} Norton Save and Restore --> MsiExec.exe /X{B0255743-165B-4BD5-8DA8-37DFB993B101} Orange - Logiciels Internet --> D:\Program Files\Orange\installation\core\Installgui.exe -u Panda ActiveScan 2.0 --> D:\Program Files\Panda Security\ActiveScan 2.0\as2uninst.exe PDF Editeur 2 --> D:\WINDOWS\cadkasdeinst01f.exe "D:\Program Files\PDF Editeur 2\" PDF Settings --> MsiExec.exe /I{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5} PDF Studio --> "D:\Program Files\PDFStudio\UninstallerData\Uninstall PDF Studio.exe" PDFapps Convert PDF to Text 2.0 --> "D:\Program Files\PDFapps Convert PDF to Text 2.0\unins000.exe" PDFCreator --> D:\Program Files\PDFCreator\unins000.exe RealPlayer 7 Basic --> D:\Program Files\Common Files\Real\Update\rnuninst.exe RealNetworks|RealPlayer|6.0 Realtek AC'97 Audio --> RunDll32 D:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "D:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" REMOVE Renex III 3.0 --> "D:\Program Files\Renex3\unins000.exe" SAMSUNG CDMA Modem Driver Set --> D:\WINDOWS\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe Samsung Contacts Copier --> RunDll32 D:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "D:\Program Files\InstallShield Installation Information\{FECB001A-62F8-4E84-8FD0-4B963D039A63}\setup.exe" -l0x9 -removeonly SAMSUNG Mobile Composite Device Software --> D:\WINDOWS\system32\Samsung_USB_Drivers\6\SSBCUninstall.exe Samsung Mobile phone USB driver Software --> D:\WINDOWS\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe SAMSUNG Mobile USB Modem 1.0 Software --> D:\WINDOWS\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe SAMSUNG Mobile USB Modem Software --> D:\WINDOWS\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe Samsung PC Studio --> RunDll32 D:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "D:\Program Files\InstallShield Installation Information\{C4A4722E-79F9-417C-BD72-8D359A090C97}\setup.exe" -l0x40c -removeonly Samsung PC Studio 3 USB Driver Installer --> RunDll32 D:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "D:\Program Files\InstallShield Installation Information\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}\setup.exe" -l0x40c -removeonly Security BOX FreeWare 1.1 --> RunDll32 D:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "D:\Program Files\InstallShield Installation Information\{01080000-070D-11D3-B35B-00805F010AA5}\Setup.exe" Security Update for CAPICOM (KB931906) --> MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} Security Update for CAPICOM (KB931906) --> MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} Security Update for Excel 2007 (KB946974) --> msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {85E83E2E-AF9B-439B-B4F9-EB9B7EF6A00E} Security Update for Microsoft Office Publisher 2007 (KB950114) --> msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {F9C3CDBA-1F00-4D4D-959D-75C9D3ACDD85} Security Update for Microsoft Office system 2007 (KB951808) --> msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {8F375E11-4FD6-4B89-9E2B-A76D48B51E00} Security Update for Microsoft Office Word 2007 (KB950113) --> msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {AD72BABE-C733-4FCF-9674-4314466191B9} Security Update for Office 2007 (KB934062) --> msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {305D509B-F194-4638-9F0F-D9E4C05F9D33} Security Update for Office 2007 (KB947801) --> msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {02B5A17B-01BE-4BA6-95F1-1CBB46EBC76E} Security Update for Outlook 2007 (KB946983) --> msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {66B9496E-C0C3-4065-9868-85CCA92126C3} Security Update for the 2007 Microsoft Office System (KB936960) --> msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {5E5BD655-7AA9-47F9-BB6D-A1D8CE29AC86} Security Update for Visio 2007 (KB947590) --> msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {6BAD036C-261F-4BEF-96CF-C20678D07A41} Skype™ 3.8 --> MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82} SPBBC 32bit --> MsiExec.exe /I{77772678-817F-4401-9301-ED1D01A8DA56} Spelling Dictionaries Support For Adobe Reader 8 --> MsiExec.exe /I{AC76BA86-7AD7-5464-3428-800000000003} Spybot - Search & Destroy --> "D:\Program Files\Spybot - Search & Destroy\unins001.exe" Spybot - Search & Destroy 1.5.2.20 --> "D:\WINDOWS\unins000.exe" Steam(TM) --> MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3} SWiSHmax --> D:\WINDOWS\unvise32.exe D:\Program Files\SWiSHmax\uninstal.log TeamSpeak 2 RC2 --> "D:\Program Files\Teamspeak2_RC2\unins000.exe" Ulead Photo Explorer 8.5 --> RunDll32 D:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "D:\Program Files\InstallShield Installation Information\{025C3792-E9C6-432A-92C1-661F99D021CA}\setup.exe" -l0x40c Update for Office 2007 (KB932080) --> msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {EDC9CA29-6BC1-471C-828C-7A36109005D7} Update for Office 2007 (KB934391) --> msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {B3091818-7C56-4C45-BE7D-CA23027A5EA5} Update for Office 2007 (KB946691) --> msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {A420F522-7395-4872-9882-C591B4B92278} Update for Outlook 2007 Junk Email Filter (kb953463) --> msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {1B78D541-9FF1-4330-ADD8-CED14F0C1E8E} Visual Andfast --> MsiExec.exe /I{5E40F512-8321-405A-B313-DA6C188A809D} Windows Media Format 11 runtime --> "D:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe" World of Warcraft --> D:\Program Files\Common Files\Blizzard Entertainment\World of Warcraft\Uninstall.exe -- Application Event Log ------------------------------------------------------- Event Record #/Type29669 / Error Event Submitted/Written: 07/21/2008 02:34:13 PM Event ID/Source: 1002 / Application Hang Event Description: Application bloquee iexplore.exe, version 7.0.6000.16674, module bloque hungapp, version 0.0.0.0, adresse de blocage 0x00000000. Event Record #/Type29668 / Error Event Submitted/Written: 07/21/2008 02:34:10 PM Event ID/Source: 1002 / Application Hang Event Description: Application bloquee iexplore.exe, version 7.0.6000.16674, module bloque hungapp, version 0.0.0.0, adresse de blocage 0x00000000. Event Record #/Type29664 / Error Event Submitted/Written: 07/21/2008 01:54:41 PM Event ID/Source: 0 / Event Description: 7 Event Record #/Type29663 / Error Event Submitted/Written: 07/21/2008 01:54:41 PM Event ID/Source: 0 / Event Description: 6 Event Record #/Type29652 / Success Event Submitted/Written: 07/21/2008 00:00:45 PM Event ID/Source: 12001 / usnjsvc Event Description: -- Security Event Log ---------------------------------------------------------- No Errors/Warnings found. -- System Event Log ------------------------------------------------------------ Event Record #/Type52166 / Error Event Submitted/Written: 07/22/2008 10:56:52 AM Event ID/Source: 7000 / Service Control Manager Event Description: Le service Planificateur LiveUpdate automatique n'a pas pu demarrer en raison de l'erreur : %%1053 Event Record #/Type52165 / Error Event Submitted/Written: 07/22/2008 10:56:52 AM Event ID/Source: 7009 / Service Control Manager Event Description: Delai (30000 millisecondes) d'attente pour une connexion du service Planificateur LiveUpdate automatique. Event Record #/Type52139 / Error Event Submitted/Written: 07/22/2008 09:28:01 AM Event ID/Source: 7000 / Service Control Manager Event Description: Le service Planificateur LiveUpdate automatique n'a pas pu demarrer en raison de l'erreur : %%1053 Event Record #/Type52138 / Error Event Submitted/Written: 07/22/2008 09:28:01 AM Event ID/Source: 7009 / Service Control Manager Event Description: Delai (30000 millisecondes) d'attente pour une connexion du service Planificateur LiveUpdate automatique. Event Record #/Type52133 / Warning Event Submitted/Written: 07/21/2008 11:53:09 PM Event ID/Source: 51 / Cdrom Event Description: Une erreur a ete detectee sur le peripherique \Device\CdRom0 au cours d'une operation de pagination. -- End of Deckard's System Scanner: finished at 2008-07-22 11:06:50 ------------ Voicii les deux rapport, j'attends tes réponses avant de faire la phase 2 ! J'éspère qu'il n'y a acun document office ou texte infectée j'espere...

ep44 · Answer

Bon apparemment pas de trace sur ce rapport 

ce que je peux te dire c'est que tu n'as apparemment pas de parefeu activé 
et que tu as deux protection virale 
Norton et panda ce qui est de trop il en faut absolument un seul antivirus sinon tu es du coup mal protégé

poste le rapport de DiagHelp pour vérif

Dark_Nacco · Answer

Voila le rapport Diaghelp nommé catchme.txt :

catchme 0.3.1351 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-22 11:33:26
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden services & system hive ...

scanning hidden registry entries ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Adobe\xae Photoshop\xae Album Edition D9couverte 3.2]
"SlowInfoCache"=hex:28,02,00,00,01,00,00,00,00,10,07,01,00,00,00,00,64,bc,2b,d7,53,..
"Changed"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\Apps\"="1"
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\"="1"
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\"="1"
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\Shared_Assets\locales\"="1"
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\Shared_Assets\"="1"
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\Shared_Assets\locales\fr_fr\"=""
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\Apps\Legal\"=""
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\Shared_Assets\caticons\"=""
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\Shared_Assets\locales\fr_fr\bitmaps\"=""
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\Shared_Assets\layouts\"=""
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\Apps\AMT\"=""
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\Apps	ools\"=""
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\Shared_Assets\locales\fr_fr\upsell\"=""
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\Shared_Assets\locales\fr_fr\upsell\images\"=""
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\Shared_Assets\database\odbc\"=""
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\Shared_Assets\database\"=""
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\Shared_Assets\combined_bitmaps\"=""
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\Shared_Assets\combined_bitmaps\authoring_wiz\"=""
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\Shared_Assets\combined_bitmaps\custom_window\"=""
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\Shared_Assets\combined_bitmaps\main_window\"=""
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\Shared_Assets\combined_bitmaps	ag_palette\"=""
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\Shared_Assets\combined_bitmaps\widgets\"=""
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\Shared_Assets\combined_bitmaps\workflow_icons\"=""
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\Apps\moxplugins\"=""
"D:\Program Files\Microsoft Office\Templates\Mod8les de conception 97\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Modules externes\Filtres\Styles d'9clairage\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Modules externes\Images de r9f9rence\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Bichromie\3 encres\Gris\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Bichromie\3 encres\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Bichromie\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Bichromie\3 encres\PANTONE(R)\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Bichromie\3 encres\Primaires\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Bichromie\4 encres\Gris\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Bichromie\4 encres\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Bichromie\4 encres\PANTONE(R)\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Bichromie\4 encres\Primaires\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Bichromie\Bichromie\Gris-Noir\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Bichromie\Bichromie\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Bichromie\Bichromie\PANTONE(R)\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Bichromie\Bichromie\Primaires\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Catalogues de couleurs\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Contours\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Couleurs optimis9es\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Courbes\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Dispositions\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\D9grad9s\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Espaces de travail\1-Espaces de travail standard\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Espaces de travail\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Espaces de travail\2-Espaces de travail bas9s sur les t2ches\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Formes\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Formes personnalis9es\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Bordure pointill9e - Blanc-noir\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Bordure pointill9e - Blanc-noir\images\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Bordure pointill9e - Noir-blanc\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Bordure pointill9e - Noir-blanc\images\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Cadre centr9 1 - Base\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Cadre centr9 1 - Base\images\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Cadre centr9 1 - Infos seules\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Cadre centr9 1 - Infos seules\images\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Cadre centr9 1 - Retour\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Cadre centr9 1 - Retour\images\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Cadre centr9 2 - Retour\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Cadre centr9 2 - Retour\images\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Flash - Galerie 1\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Flash - Galerie 2\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Horizontale - Retour\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Horizontale - Retour\images\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Horizontale grise\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Horizontale grise\images\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Horizontale neutre\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Horizontale neutre\images\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Horizontale 0 diaporama\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Horizontale 0 diaporama\images\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Simple\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Simple - Tableau de vignettes\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Simple - Tableau de vignettes\images\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Simple - Vignettes horizontales\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Simple - Vignettes horizontales\images\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Simple - Vignettes verticales\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Simple - Vignettes verticales\images\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Tableau - Minimal\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Tableau - Minimal\images\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Tableau 1\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Tableau 1\images\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Tableau 2\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Tableau 2\images\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Vignettes grises\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Galerie Web Photo\Vignettes grises\images\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Motifs\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Motifs\Motifs PostScript\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\M9langeur de couches\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Noir et blanc\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Nuanciers\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Outils\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Param8tres de sortie optimis9s\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Param8tres optimis9s\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Personnalisation de menus\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Raccourcis clavier\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Scripts\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Scripts\Adapter l'image\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Scripts\Changer mode conditionnel\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Scripts\Chargement des fichiers dans la pile\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Scripts\Chargement DICOM\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Scripts\Comp. de calques en fichiers\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Scripts\Comp. de calques en GWP\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Scripts\Comp. de calques en PDF\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Scripts\Event Scripts Only\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Scripts\Event Scripts Only\Afficher le fabricant de l'appareil\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Scripts\Event Scripts Only\Avertir si RVB\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Scripts\Event Scripts Only\Bienvenue\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Scripts\Event Scripts Only\Enregistrer JPEG suppl9mentaire\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Scripts\Event Scripts Only\Mettre 0 jour les informations\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Scripts\Event Scripts Only\Redimensionner\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Scripts\Exporter les calques en fichiers\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Scripts\Fusion HDR\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Scripts\Gestionnaire d'9v9nements de script\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Scripts\Photomerge\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Scripts\Processeur d'images\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Scripts\Stack Scripts Only\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Scripts\Stack Scripts Only\CreateImageStack\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Scripts\Stack Scripts Only\LatteUI\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Scripts\Statistiques\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Scripts Photoshop\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Styles\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Textures\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Param8tres pr9d9finis\Zoomify\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Exemples\Fusion HDR\R9sultat\"=""
"C:\Program Files\Adobe\Adobe Photoshop CS3\Exemples\Photomerge\R9sultat\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\Apps\AdobeUpdater.dll"=dword:00000001
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\Apps\AMT\AUMProduct.cer"=dword:00000001
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\Apps\Discwriter.dll"=dword:00000001
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\Apps	ools\backup.pln"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\StillImage\Registered Applications]
"Photoshop Album Edition D9couverte 3.2"="D:\Program Files\Adobe\Photoshop Album Edition D&#1081;couverte\3.2\Apps\psaproxy.exe  /StiDevice:%1 /StiEvent:%2"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe\xae Photoshop\xae Album Edition D9couverte 3.2]
"DisplayName"="Adobe\xae Photoshop\xae Album Edition D&#1081;couverte 3.2"
"URLUpdateInfo"="https://www.adobe.com/products/photoshop-elements.html"
"URLInfoAbout"="https://www.adobe.com/fr/"
"UninstallString"=str(2):"MsiExec.exe /I{A654A805-41D9-40C7-AA46-4AF04F044D61}"
"Size"=""
"Readme"=str(2):"D:\Program Files\Adobe\Photoshop Album Starter Edition\3.2eadme.txt"
"Publisher"="https://www.adobe.com/fr/"
"InstallDate"=""
"HelpTelephone"=""
"HelpLink"=""
"DisplayVersion"="3.2.0"
"Contact"=""
"Comments"=""
"AuthorizedCDFPrefix"=""
"RegEulaAccepted"="0"
"PSASEVersion"="3.2.0"
"SEOEMName"=""
"PSASEVersionUpdate"="0"
"DisplayIcon"="D:\Program Files\Adobe\Photoshop Album Edition D&#1081;couverte\3.2\Apps\Photoshop Album Starter Edition.exe,-111"
"InstallLocation"="D:\Program Files\Adobe\Photoshop Album Edition D&#1081;couverte\"
"InstallPath"="D:\Program Files\Adobe\Photoshop Album Edition D&#1081;couverte\3.2\Apps"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prefetcher]
"TracesProcessed"=dword:00000530
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Accessoires\Accessibilit9]
"Order"=hex:08,00,00,00,02,00,00,00,0e,03,00,00,01,00,00,00,05,00,00,00,a6,..
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\ContrDle Parental]
"Order"=hex:08,00,00,00,02,00,00,00,aa,02,00,00,01,00,00,00,05,00,00,00,86,..
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\DK\Mon Encyclop9die d'Histoire]
"Order"=hex:08,00,00,00,02,00,00,00,34,01,00,00,01,00,00,00,02,00,00,00,88,..
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Nero 7 Premium\donn9es]
"Order"=hex:08,00,00,00,02,00,00,00,9c,01,00,00,01,00,00,00,03,00,00,00,84,..
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Nero 7 Premium\Photo et vid9o]
"Order"=hex:08,00,00,00,02,00,00,00,26,02,00,00,01,00,00,00,04,00,00,00,86,..
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Nero 7 Premium\tiquettes]
"Order"=hex:08,00,00,00,02,00,00,00,9a,00,00,00,01,00,00,00,01,00,00,00,8e,..
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\Apps\ComponentLauncher.exe"="Adobe Photoshop Album Starter Edition 3.2 (Viewer)"
"D:\Program Files\Adobe\Photoshop Album Edition D9couverte\3.2\Apps\Photoshop Album Starter Edition.exe"="Adobe Photoshop Album Starter Edition 3.2"
"D:\Program Files\Securitoo\ContrDle Parental\securitoo_controle_parental_orange_r7.exe"="InstallShield (R) Setup Launcher"

scanning hidden files ...

scan completed successfully
hidden services: 0
hidden files: 0

Voila, j'éspère qu'il n'y a rien d'anormal...

ep44 · Answer

Et bien ton rapport est propre mais du coup je ne vois plus de protection virale 

fait attention à la protection de ton PC 

Sinon ton PC est propre 

Voilà bonne chance pour la suite

Dark_Nacco · Answer

Merci beaucoup de ton aide, je vais désinstaller panda et laisser norton qui est beaucoup mieux...

ep44 · Answer

Bye

Dark_Nacco · Answer

Bye et merci encore...

Utiliser navilog ? Help...

11 réponses

Discussions similaires

Newsletters