Vive avril (virus)

rta -  
Bonjour,
es-ke kelk1 peu me guide pas a pas sur la maniere dont on efface ce virus?k'es-ke jdoit faire en premier?
Configuration: Windows Vista
Internet Explorer 7.0

11 réponses

  1. Utilisateur anonyme
    Salut,

    Télécharge random's system information tool (RSIT) par random/random et sauvegarde-le sur le Bureau.
    http://images.malwareremoval.com/random/RSIT.exe
    Double-clique sur RSIT.exe afin de lancer RSIT.
    Clique Continue à l'écran Disclaimer.
    Si l'outil HIjackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.
    Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (<<qui sera affiché)
    ainsi que de info.txt (<<qui sera réduit dans la Barre des Tâches).
    NB : Les rapports sont sauvegardés dans le dossier C:\rsit
    0
    1. lee-niguel
      slt,

      ya 2 jours j'ai eu cette attak, sur ce je te conseil kasperski 2009.
      1 tu rentre dans le setup
      2 tu recule la date de ton ordinateur
      3 tu le redemarre, installe le kapersky, à l'installation il te demandera le code d'activation.
      4une fois installé il fera les mises à jour via le net, ensuite scané et detruira les programmes intrus.
      5 repare dans le setup remets le date du jour.
      6 fin de haricots.

      NB. uniquement etre connecté à Internet.
      0
  2. rta
    mais le pc redemar des ke les parametres de bureau se charge pa moyen de copier le fichier sur le bureau car le virus le redemar tout de suite apres 5s.comment faire?
    0
    1. rta
      rebonjour! le pc redemar des ke les parametres de bureau se charge pa moyen de copier le fichier sur le bureau car le virus le redemar tout de suite apres 5s.comment faire?
      0
      1. fire
        Slt frangin.
        Je suis victime du même problème que toi.
        Confirme moi sil te plait si la solution proposée marche
        MERCI!!!
        0
    2. Utilisateur anonyme
      essai en mode sans echec + reseau :

      -> Redémarre en mode sans échec avec prise en charge reseau :

      Comment redémarrer en mode sans echec avec prise en charge reseau ?

      Tu redemarre le pc et tapote la touche F8 des le début de l allumage sans t´arrêter.
      Une fenêtre sur fond noir va s’ouvrir, tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec avec prise en charge reseau puis tape entrée.
      Une fois sur le bureau si il n y a pas toutes les couleurs et autres c´est normal!
      Ps : si F8 ne marche pas utilise la touche F5.
      0
      2. JATA
        Redemarre ton PC et entre dans le setup de la machine pour modifier la date système en la reculant. ainsi tu pourras scanner ton pc.
        0
        1. JATA
          Resultat du scan

          Logfile of random's system information tool 1.04 (written by random/random)
          Run by Administrateur at 2008-10-14 17:38:09
          Microsoft Windows XP Professionnel Service Pack 2
          System drive C: has 62 GB (81%) free of 76 GB
          Total RAM: 1014 MB (65% free)

          Logfile of Trend Micro HijackThis v2.0.2
          Scan saved at 17:38:12, on 14/10/2008
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v7.00 (7.00.6000.16735)
          Boot mode: Normal

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
          C:\Program Files\Retrospect\Retrospect 7.5\retrorun.exe
          C:\WINDOWS\system32\CAPRPCSK.EXE
          C:\WINDOWS\Explorer.EXE
          C:\WINDOWS\system32\wuauclt.exe
          C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
          C:\WINDOWS\system32\hkcmd.exe
          C:\WINDOWS\system32\igfxpers.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\Messenger\msmsgs.exe
          C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
          C:\Program Files\Internet Explorer\iexplore.exe
          C:\Program Files\Fichiers communs\Symantec Shared\NPC\npcLUStb.exe
          C:\Documents and Settings\Administrateur\Bureau\RSIT.exe
          C:\Program Files\trend micro\Administrateur.exe

          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
          O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\FICHIE~1\SYMANT~1\IDS\IPSBHO.dll
          O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
          O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
          O4 - Global Startup: Fenêtre d'état Canon LBP-800.LNK = C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = BSONDJOLE.local
          O17 - HKLM\Software\..\Telephony: DomainName = BSONDJOLE.local
          O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = BSONDJOLE.local
          O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = BSONDJOLE.local
          O23 - Service: Planificateur LiveUpdate automatique (Automatic LiveUpdate Scheduler) - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
          O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
          O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
          O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
          O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
          O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
          O23 - Service: Retrospect Launcher (RetroLauncher) - EMC Corporation - C:\Program Files\Retrospect\Retrospect 7.5\retrorun.exe
          O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\FICHIE~1\SYMANT~1\CCPD-LC\symlcsvc.exe
          0
          1. Utilisateur anonyme
            Telecharge UsbFix sur ton bureau

            --> Lance l installation avec les parametres par default

            Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d avoir été infectés sans les ouvrir

            --> Double clic sur le raccourci UsbFix sur ton bureau

            --> Le pc va redémarer

            -->Apres redémarrage post le rapport UsbFix.txt

            Note : le rapport UsbFix.txt est sauvegardé a la racine du disque
            Note : Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tapes explorer.exe et valides

            0
            1. so
              Logfile of random's system information tool 1.04 (written by random/random)
              Run by Soraya at 2008-10-14 01:29:39
              Microsoft® Windows Vista™ Édition Familiale Basique
              System drive C: has 104 GB (45%) free of 231 GB
              Total RAM: 1015 MB (36% free)

              HijackThis download failed

              ======Scheduled tasks folder======

              C:\Windows\tasks\Norton Internet Security - Analyse système complète - Soraya.job

              ======Registry dump======

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
              Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1E8A6170-7264-4D0F-BEAE-D42A53123C75}]
              c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll [2007-01-11 96936]

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
              Winamp Toolbar BHO - C:\Program Files\Winamp Toolbar\winamptb.dll [2007-12-13 1185120]

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
              Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2007-09-20 328752]

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
              Google Toolbar Helper - c:\program files\google\googletoolbar2.dll [2007-09-05 2436160]

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
              {90222687-F593-4738-B738-FBEE9C7B26DF} - Show Norton Toolbar - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll [2007-01-11 607888]
              {2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar2.dll [2007-09-05 2436160]
              {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - Winamp Toolbar - C:\Program Files\Winamp Toolbar\winamptb.dll [2007-12-13 1185120]

              [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
              "Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2007-05-15 1006264]
              "hpsysdrv"=c:\hp\support\hpsysdrv.exe [2006-09-28 65536]
              "OsdMaestro"=C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe [2007-02-15 118784]
              "RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-03-01 4390912]
              "DPService"=C:\Program Files\HP\DVDPlay\DPService.exe [2007-02-13 81920]
              "HP Software Update"=c:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2005-02-16 49152]
              "ccApp"=c:\Program Files\Common Files\Symantec Shared\ccApp.exe [2008-10-14 115816]
              ""= []
              "QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2007-06-29 286720]
              "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2007-09-26 267064]
              "Monitor"=C:\Windows\PixArt\PAC207\Monitor.exe []
              "CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2007-05-14 644696]
              "CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2007-04-03 1603152]
              "SSBkgdUpdate"=C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2006-10-25 210472]
              "OpwareSE4"=C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe [2007-02-04 79400]
              "WinampAgent"=C:\Program Files\Winamp\winampa.exe [2008-01-16 37376]
              "TomTomHOME.exe"=C:\Program Files\TomTom HOME\TomTomHOME.exe [2007-05-15 3975848]
              "IgfxTray"=C:\Windows\system32\igfxtray.exe [2008-03-25 141848]
              "HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2008-03-25 166424]
              "Persistence"=C:\Windows\system32\igfxpers.exe [2008-03-25 133656]
              "Symantec PIF AlertEng"=C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe [2008-01-29 583048]
              "cftmonn"=C:\Windows\system32\cftmonn.exe [2007-09-16 63488]
              "MisVh55"=C:\Windows\inf\ MisVh55.exe [2007-01-06 378368]
              "FrameWorkService"= []
              "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]

              [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
              "Launcher"=C:\Windows\SMINST\launcher.exe [2007-03-07 44168]

              [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
              "Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-10 1232896]
              "WindowsWelcomeCenter"=C:\Windows\system32\oobefldr.dll [2006-11-02 2159104]
              "MsnMsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2007-10-18 5724184]
              "Orb"=C:\Program Files\Winamp Remote\bin\OrbTray.exe [2008-01-07 495616]
              "svchost"=C:\Users\Soraya\Local Settings\Application Data\svchost.exe []
              "FrameWorkService"= []
              "AdobeUpdater"=C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe []
              "WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2006-11-02 201728]

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
              C:\Windows\system32\igfxdev.dll [2008-03-25 204800]

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
              "{E54729E8-BB3D-4270-9D49-7389EA579090}"=C:\Windows\system32\EZUPBH~1.DLL [2007-08-15 49152]

              [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
              "DisableLockWorkstation"=0
              "DisableTaskMgr"=0
              "DisableChangePassword"=0
              "DisableRegistryTools"=1

              [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
              "EnableLUA"=0
              "dontdisplaylastusername"=0
              "legalnoticecaption"=
              "legalnoticetext"=
              "shutdownwithoutlogon"=1
              "undockwithoutlogon"=1

              [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
              "NoLogoff"=1
              "NoClose"=0
              "NoRun"=0
              "NoFind"=0
              "NoSetFolders"=1
              "NoFolderOptions"=0
              "DisallowRun"=0

              [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

              [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

              [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5f3f8d80-42a4-11dd-b124-0007cb0000ff}]
              shell\AutoRun\command - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL J:\cftmonn.exe
              shell\setup\command - J:\cftmonn.exe

              [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{85461527-5eef-11dc-b98b-0007cb0000ff}]
              shell\Auto\command - AdobeR.exe e
              shell\AutoRun\command - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e

              [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a533adea-9abc-11dc-a1e1-0007cb0000ff}]
              shell\AutoRun\command - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL cftmonn.exe
              shell\setup\command - cftmonn.exe

              [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a533adf3-9abc-11dc-a1e1-0007cb0000ff}]
              shell\AutoRun\command - start.exe
              shell\iledefrance\command - start.exe

              [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e4b5ae09-1f43-11dd-8e19-0007cb0000ff}]
              shell\AutoRun\command - K:\InstallTomTomHOME.exe

              ======List of files/folders created in the last 1 months======

              2008-10-14 01:14:01 ----D---- C:\Program Files\UsbFix
              2008-10-14 01:10:56 ----D---- C:\Program Files\trend micro
              2008-10-14 01:10:54 ----D---- C:\rsit
              2008-10-10 12:18:06 ----D---- C:\Program Files\PhotoFiltre
              2008-10-09 18:24:05 ----D---- C:\Users\Soraya\AppData\Roaming\Nvu
              2008-10-09 18:24:05 ----D---- C:\Users\Soraya\AppData\Roaming\Mozilla
              2008-10-09 18:23:12 ----D---- C:\Program Files\Nvu
              2008-10-08 15:29:46 ----D---- C:\World of Warcraft
              2008-10-03 15:16:40 ----D---- C:\Program Files\IKEA HomePlanner
              2008-09-26 21:19:31 ----D---- C:\ProgramData\avg8
              2008-09-25 13:58:23 ----RAH---- C:\Windows\system32\grcframe.exe
              2008-09-25 13:37:23 ----A---- C:\Windows\SpotAuditor.INI
              2008-09-25 13:33:55 ----AD---- C:\ProgramData\TEMP
              2008-09-25 13:33:49 ----D---- C:\Program Files\Nsasoft
              2008-09-20 23:49:02 ----D---- C:\Users\Soraya\AppData\Roaming\LG Electronics
              2008-09-20 23:37:59 ----D---- C:\lgupload
              2008-09-20 22:52:46 ----D---- C:\Program Files\LG Electronics
              2008-09-20 22:50:04 ----D---- C:\Program Files\LG PC Suite 2
              2008-09-20 09:02:05 ----D---- C:\Program Files\Adobe
              2008-09-18 23:14:50 ----A---- C:\Users\Soraya\AppData\Roaming\svchost.exe

              ======List of files/folders modified in the last 1 months======

              2008-10-16 00:19:02 ----D---- C:\Windows\Prefetch
              2008-10-15 01:58:22 ----D---- C:\Windows\system32\config
              2008-10-15 01:58:12 ----HD---- C:\Windows\system32\drivers
              2008-10-15 01:58:12 ----D---- C:\Windows\Tasks
              2008-10-15 01:58:12 ----D---- C:\Windows\system32\Tasks
              2008-10-15 01:58:12 ----D---- C:\Windows\system32\spool
              2008-10-15 01:58:12 ----D---- C:\Windows\system32\CodeIntegrity
              2008-10-15 01:58:12 ----D---- C:\Users\Soraya\AppData\Roaming\Winamp
              2008-10-15 01:58:08 ----D---- C:\Program Files\Norton Internet Security
              2008-10-15 01:58:07 ----D---- C:\Program Files\Common Files\Symantec Shared
              2008-10-15 01:58:04 ----D---- C:\Windows\system32\wbem
              2008-10-15 01:58:04 ----D---- C:\Windows\registration
              2008-10-15 01:58:04 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
              2008-10-15 00:59:22 ----D---- C:\Windows\Minidump
              2008-10-14 15:31:02 ----D---- C:\Windows\system32\catroot2
              2008-10-14 01:26:16 ----D---- C:\Windows\SMINST
              2008-10-14 01:14:01 ----RD---- C:\Program Files
              2008-10-14 00:57:44 ----D---- C:\Windows\Temp
              2008-10-14 00:28:37 ----HD---- C:\Program Files\InstallShield Installation Information
              2008-10-14 00:28:31 ----SHD---- C:\Windows\Installer
              2008-10-14 00:28:20 ----D---- C:\Windows\System32
              2008-10-14 00:28:20 ----A---- C:\Windows\win.ini
              2008-10-14 00:28:11 ----D---- C:\Windows
              2008-10-14 00:26:01 ----D---- C:\Program Files\Common Files
              2008-10-14 00:25:56 ----D---- C:\Windows\twain_32
              2008-10-14 00:25:27 ----SHD---- C:\System Volume Information
              2008-10-14 00:13:35 ----A---- C:\Windows\system32\PerfStringBackup.INI
              2008-10-14 00:13:34 ----D---- C:\Windows\inf
              2008-10-10 20:54:26 ----SD---- C:\Users\Soraya\AppData\Roaming\Microsoft
              2008-10-07 11:20:03 ----SHD---- C:\$Recycle.Bin
              2008-10-01 10:36:09 ----D---- C:\Windows\system32\LogFiles
              2008-09-28 16:44:53 ----D---- C:\ProgramData\Symantec
              2008-09-26 21:23:18 ----HD---- C:\ProgramData
              2008-09-26 21:18:07 ----D---- C:\Windows\winsxs
              2008-09-26 21:18:01 ----D---- C:\Program Files\Common Files\microsoft shared
              2008-09-25 17:24:02 ----D---- C:\Program Files\eMule
              2008-09-23 12:24:17 ----D---- C:\ProgramData\CanonIJPLM
              2008-09-22 17:31:01 ----D---- C:\Users\Soraya\AppData\Roaming\uTorrent
              2008-09-22 14:59:03 ----D---- C:\Program Files\Messenger Plus! Live
              2008-09-21 13:15:52 ----D---- C:\Users\Soraya\AppData\Roaming\Playwize
              2008-09-21 13:10:34 ----D---- C:\Program Files\Everest Poker
              2008-09-20 23:33:03 ----D---- C:\Windows\system32\catroot
              2008-09-20 09:02:21 ----D---- C:\Program Files\Common Files\Adobe
              2008-09-20 09:02:15 ----D---- C:\ProgramData\Adobe

              ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

              R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [2007-09-04 395312]
              R1 IDSvix86;Symantec Intrusion Prevention Driver; \??\C:\PROGRA~2\Symantec\DEFINI~1\SymcData\idsdefs\20071011.001\IDSvix86.sys [2007-09-13 180272]
              R1 prodrv06;StarForce Protection Environment Driver v6; C:\Windows\System32\drivers\prodrv06.sys [2004-08-09 53920]
              R1 SRTSPX;SRTSPX; C:\Windows\System32\Drivers\SRTSPX.SYS [2007-01-11 25400]
              R1 SYMTDI;SYMTDI; C:\Windows\System32\Drivers\SYMTDI.SYS [2007-01-09 191544]
              R3 fbxusb;Carte réseau virtuelle FreeBox USB; C:\Windows\system32\DRIVERS\fbxusb32.sys [2004-10-20 21344]
              R3 GEARAspiWDM;GEARAspiWDM; C:\Windows\System32\Drivers\GEARAspiWDM.sys [2006-09-19 15664]
              R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-03-25 2307072]
              R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-03-01 1744928]
              R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-01-16 70144]
              R3 SYMDNS;SYMDNS; C:\Windows\System32\Drivers\SYMDNS.SYS [2007-01-09 12984]
              R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT.SYS [2007-09-18 123952]
              R3 SYMFW;SYMFW; C:\Windows\System32\Drivers\SYMFW.SYS [2007-01-09 145976]
              R3 SYMIDS;SYMIDS; C:\Windows\System32\Drivers\SYMIDS.SYS [2007-01-09 40120]
              R3 SYMNDISV;SYMNDISV; C:\Windows\System32\Drivers\SYMNDISV.SYS [2007-01-09 38200]
              R3 SYMREDRV;SYMREDRV; C:\Windows\System32\Drivers\SYMREDRV.SYS [2007-01-09 27576]
              R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2006-11-02 82560]
              S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2006-11-02 5632]
              S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
              S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2006-11-02 8192]
              S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 5888]
              S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 5504]
              S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2006-11-02 6016]
              S3 NAVENG;NAVENG; \??\C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20071015.009\NAVENG.SYS [2007-08-20 81232]
              S3 NAVEX15;NAVEX15; \??\C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20071015.009\NAVEX15.SYS [2007-08-20 865904]
              S3 PAC207;Trust Webcam Live; C:\Windows\system32\DRIVERS\PFC027.SYS [2007-04-12 507264]
              S3 SPBBCDrv;SPBBCDrv; \??\C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys [2007-04-14 418104]
              S3 SRTSP;SRTSP; C:\Windows\System32\Drivers\SRTSP.SYS [2007-01-11 247608]
              S3 SRTSPL;SRTSPL; C:\Windows\System32\Drivers\SRTSPL.SYS [2007-01-11 276792]
              S3 usbbus;LGE Mobile Composite USB Device; C:\Windows\system32\DRIVERS\lgusbbus.sys [2007-07-11 12416]
              S3 UsbDiag;LGE Mobile USB Serial Port; C:\Windows\system32\DRIVERS\lgusbdiag.sys [2007-07-11 19840]
              S3 USBModem;LGE Mobile USB Modem; C:\Windows\system32\DRIVERS\lgusbmodem.sys [2007-07-11 21632]
              S3 usbscan;Pilote de scanneur USB; C:\Windows\system32\DRIVERS\usbscan.sys [2006-11-02 35328]
              S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2006-11-02 39936]
              S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

              ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

              R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2007-09-06 110592]
              R2 CLTNetCnService;Symantec Lic NetConnect service; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2007-01-09 108648]
              R2 ezntsvc;EasyBits Magic Desktop Services for Windows NT; C:\Windows\system32\ezNTSvc.exe [2007-08-15 33792]
              R2 IJPLMSVC;PIXMA Extended Survey Program; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2007-04-13 101528]
              R2 LightScribeService;LightScribeService Direct Disc Labeling Service; c:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440]
              R2 LiveUpdate Notice Ex;LiveUpdate Notice Service Ex; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2007-01-09 108648]
              S2 LiveUpdate Notice Service;LiveUpdate Notice Service; C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe [2008-01-29 583048]
              S2 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe [2007-09-26 554352]
              S2 SymAppCore;Symantec AppCore Service; c:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe [2007-01-04 47712]
              S3 comHost;COM Host; c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe [2007-01-12 49248]
              S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-09-05 138168]
              S3 IDriverT;InstallDriver Table Manager; c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
              S3 iPod Service;Service de l'iPod; C:\Program Files\iPod\bin\iPodService.exe [2007-09-26 503608]
              S3 ISPwdSvc;Symantec IS Password Validation; c:\Program Files\Norton Internet Security\isPwdSvc.exe [2007-01-13 80504]
              S3 LiveUpdate;LiveUpdate; C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE [2008-10-14 2999664]
              S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
              S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
              S3 RoxMediaDB9;RoxMediaDB9; c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe [2007-03-26 887544]
              S3 stllssvr;stllssvr; c:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2007-03-08 74656]
              S3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
              S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
              S4 ccEvtMgr;Symantec Event Manager; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2007-01-09 108648]
              S4 ccSetMgr;Symantec Settings Manager; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2007-01-09 108648]
              S4 Symantec Core LC;Symantec Core LC; C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe [2007-11-06 1252232]

              -----------------EOF-----------------
              0
              1. so
                Logfile of random's system information tool 1.04 (written by random/random)
                Run by Soraya at 2008-10-14 01:29:39
                Microsoft® Windows Vista™ Édition Familiale Basique
                System drive C: has 104 GB (45%) free of 231 GB
                Total RAM: 1015 MB (36% free)

                HijackThis download failed

                ======Scheduled tasks folder======

                C:\Windows\tasks\Norton Internet Security - Analyse système complète - Soraya.job

                ======Registry dump======

                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
                Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1E8A6170-7264-4D0F-BEAE-D42A53123C75}]
                c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll [2007-01-11 96936]

                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
                Winamp Toolbar BHO - C:\Program Files\Winamp Toolbar\winamptb.dll [2007-12-13 1185120]

                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
                Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2007-09-20 328752]

                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
                Google Toolbar Helper - c:\program files\google\googletoolbar2.dll [2007-09-05 2436160]

                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
                {90222687-F593-4738-B738-FBEE9C7B26DF} - Show Norton Toolbar - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll [2007-01-11 607888]
                {2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar2.dll [2007-09-05 2436160]
                {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - Winamp Toolbar - C:\Program Files\Winamp Toolbar\winamptb.dll [2007-12-13 1185120]

                [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
                "Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2007-05-15 1006264]
                "hpsysdrv"=c:\hp\support\hpsysdrv.exe [2006-09-28 65536]
                "OsdMaestro"=C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe [2007-02-15 118784]
                "RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-03-01 4390912]
                "DPService"=C:\Program Files\HP\DVDPlay\DPService.exe [2007-02-13 81920]
                "HP Software Update"=c:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2005-02-16 49152]
                "ccApp"=c:\Program Files\Common Files\Symantec Shared\ccApp.exe [2008-10-14 115816]
                ""= []
                "QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2007-06-29 286720]
                "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2007-09-26 267064]
                "Monitor"=C:\Windows\PixArt\PAC207\Monitor.exe []
                "CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2007-05-14 644696]
                "CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2007-04-03 1603152]
                "SSBkgdUpdate"=C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2006-10-25 210472]
                "OpwareSE4"=C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe [2007-02-04 79400]
                "WinampAgent"=C:\Program Files\Winamp\winampa.exe [2008-01-16 37376]
                "TomTomHOME.exe"=C:\Program Files\TomTom HOME\TomTomHOME.exe [2007-05-15 3975848]
                "IgfxTray"=C:\Windows\system32\igfxtray.exe [2008-03-25 141848]
                "HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2008-03-25 166424]
                "Persistence"=C:\Windows\system32\igfxpers.exe [2008-03-25 133656]
                "Symantec PIF AlertEng"=C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe [2008-01-29 583048]
                "cftmonn"=C:\Windows\system32\cftmonn.exe [2007-09-16 63488]
                "MisVh55"=C:\Windows\inf\ MisVh55.exe [2007-01-06 378368]
                "FrameWorkService"= []
                "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]

                [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
                "Launcher"=C:\Windows\SMINST\launcher.exe [2007-03-07 44168]

                [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
                "Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-10 1232896]
                "WindowsWelcomeCenter"=C:\Windows\system32\oobefldr.dll [2006-11-02 2159104]
                "MsnMsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2007-10-18 5724184]
                "Orb"=C:\Program Files\Winamp Remote\bin\OrbTray.exe [2008-01-07 495616]
                "svchost"=C:\Users\Soraya\Local Settings\Application Data\svchost.exe []
                "FrameWorkService"= []
                "AdobeUpdater"=C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe []
                "WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2006-11-02 201728]

                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
                C:\Windows\system32\igfxdev.dll [2008-03-25 204800]

                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
                "{E54729E8-BB3D-4270-9D49-7389EA579090}"=C:\Windows\system32\EZUPBH~1.DLL [2007-08-15 49152]

                [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
                "DisableLockWorkstation"=0
                "DisableTaskMgr"=0
                "DisableChangePassword"=0
                "DisableRegistryTools"=1

                [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
                "EnableLUA"=0
                "dontdisplaylastusername"=0
                "legalnoticecaption"=
                "legalnoticetext"=
                "shutdownwithoutlogon"=1
                "undockwithoutlogon"=1

                [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
                "NoLogoff"=1
                "NoClose"=0
                "NoRun"=0
                "NoFind"=0
                "NoSetFolders"=1
                "NoFolderOptions"=0
                "DisallowRun"=0

                [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

                [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

                [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5f3f8d80-42a4-11dd-b124-0007cb0000ff}]
                shell\AutoRun\command - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL J:\cftmonn.exe
                shell\setup\command - J:\cftmonn.exe

                [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{85461527-5eef-11dc-b98b-0007cb0000ff}]
                shell\Auto\command - AdobeR.exe e
                shell\AutoRun\command - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e

                [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a533adea-9abc-11dc-a1e1-0007cb0000ff}]
                shell\AutoRun\command - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL cftmonn.exe
                shell\setup\command - cftmonn.exe

                [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a533adf3-9abc-11dc-a1e1-0007cb0000ff}]
                shell\AutoRun\command - start.exe
                shell\iledefrance\command - start.exe

                [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e4b5ae09-1f43-11dd-8e19-0007cb0000ff}]
                shell\AutoRun\command - K:\InstallTomTomHOME.exe

                ======List of files/folders created in the last 1 months======

                2008-10-14 01:14:01 ----D---- C:\Program Files\UsbFix
                2008-10-14 01:10:56 ----D---- C:\Program Files\trend micro
                2008-10-14 01:10:54 ----D---- C:\rsit
                2008-10-10 12:18:06 ----D---- C:\Program Files\PhotoFiltre
                2008-10-09 18:24:05 ----D---- C:\Users\Soraya\AppData\Roaming\Nvu
                2008-10-09 18:24:05 ----D---- C:\Users\Soraya\AppData\Roaming\Mozilla
                2008-10-09 18:23:12 ----D---- C:\Program Files\Nvu
                2008-10-08 15:29:46 ----D---- C:\World of Warcraft
                2008-10-03 15:16:40 ----D---- C:\Program Files\IKEA HomePlanner
                2008-09-26 21:19:31 ----D---- C:\ProgramData\avg8
                2008-09-25 13:58:23 ----RAH---- C:\Windows\system32\grcframe.exe
                2008-09-25 13:37:23 ----A---- C:\Windows\SpotAuditor.INI
                2008-09-25 13:33:55 ----AD---- C:\ProgramData\TEMP
                2008-09-25 13:33:49 ----D---- C:\Program Files\Nsasoft
                2008-09-20 23:49:02 ----D---- C:\Users\Soraya\AppData\Roaming\LG Electronics
                2008-09-20 23:37:59 ----D---- C:\lgupload
                2008-09-20 22:52:46 ----D---- C:\Program Files\LG Electronics
                2008-09-20 22:50:04 ----D---- C:\Program Files\LG PC Suite 2
                2008-09-20 09:02:05 ----D---- C:\Program Files\Adobe
                2008-09-18 23:14:50 ----A---- C:\Users\Soraya\AppData\Roaming\svchost.exe

                ======List of files/folders modified in the last 1 months======

                2008-10-16 00:19:02 ----D---- C:\Windows\Prefetch
                2008-10-15 01:58:22 ----D---- C:\Windows\system32\config
                2008-10-15 01:58:12 ----HD---- C:\Windows\system32\drivers
                2008-10-15 01:58:12 ----D---- C:\Windows\Tasks
                2008-10-15 01:58:12 ----D---- C:\Windows\system32\Tasks
                2008-10-15 01:58:12 ----D---- C:\Windows\system32\spool
                2008-10-15 01:58:12 ----D---- C:\Windows\system32\CodeIntegrity
                2008-10-15 01:58:12 ----D---- C:\Users\Soraya\AppData\Roaming\Winamp
                2008-10-15 01:58:08 ----D---- C:\Program Files\Norton Internet Security
                2008-10-15 01:58:07 ----D---- C:\Program Files\Common Files\Symantec Shared
                2008-10-15 01:58:04 ----D---- C:\Windows\system32\wbem
                2008-10-15 01:58:04 ----D---- C:\Windows\registration
                2008-10-15 01:58:04 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
                2008-10-15 00:59:22 ----D---- C:\Windows\Minidump
                2008-10-14 15:31:02 ----D---- C:\Windows\system32\catroot2
                2008-10-14 01:26:16 ----D---- C:\Windows\SMINST
                2008-10-14 01:14:01 ----RD---- C:\Program Files
                2008-10-14 00:57:44 ----D---- C:\Windows\Temp
                2008-10-14 00:28:37 ----HD---- C:\Program Files\InstallShield Installation Information
                2008-10-14 00:28:31 ----SHD---- C:\Windows\Installer
                2008-10-14 00:28:20 ----D---- C:\Windows\System32
                2008-10-14 00:28:20 ----A---- C:\Windows\win.ini
                2008-10-14 00:28:11 ----D---- C:\Windows
                2008-10-14 00:26:01 ----D---- C:\Program Files\Common Files
                2008-10-14 00:25:56 ----D---- C:\Windows\twain_32
                2008-10-14 00:25:27 ----SHD---- C:\System Volume Information
                2008-10-14 00:13:35 ----A---- C:\Windows\system32\PerfStringBackup.INI
                2008-10-14 00:13:34 ----D---- C:\Windows\inf
                2008-10-10 20:54:26 ----SD---- C:\Users\Soraya\AppData\Roaming\Microsoft
                2008-10-07 11:20:03 ----SHD---- C:\$Recycle.Bin
                2008-10-01 10:36:09 ----D---- C:\Windows\system32\LogFiles
                2008-09-28 16:44:53 ----D---- C:\ProgramData\Symantec
                2008-09-26 21:23:18 ----HD---- C:\ProgramData
                2008-09-26 21:18:07 ----D---- C:\Windows\winsxs
                2008-09-26 21:18:01 ----D---- C:\Program Files\Common Files\microsoft shared
                2008-09-25 17:24:02 ----D---- C:\Program Files\eMule
                2008-09-23 12:24:17 ----D---- C:\ProgramData\CanonIJPLM
                2008-09-22 17:31:01 ----D---- C:\Users\Soraya\AppData\Roaming\uTorrent
                2008-09-22 14:59:03 ----D---- C:\Program Files\Messenger Plus! Live
                2008-09-21 13:15:52 ----D---- C:\Users\Soraya\AppData\Roaming\Playwize
                2008-09-21 13:10:34 ----D---- C:\Program Files\Everest Poker
                2008-09-20 23:33:03 ----D---- C:\Windows\system32\catroot
                2008-09-20 09:02:21 ----D---- C:\Program Files\Common Files\Adobe
                2008-09-20 09:02:15 ----D---- C:\ProgramData\Adobe

                ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [2007-09-04 395312]
                R1 IDSvix86;Symantec Intrusion Prevention Driver; \??\C:\PROGRA~2\Symantec\DEFINI~1\SymcData\idsdefs\20071011.001\IDSvix86.sys [2007-09-13 180272]
                R1 prodrv06;StarForce Protection Environment Driver v6; C:\Windows\System32\drivers\prodrv06.sys [2004-08-09 53920]
                R1 SRTSPX;SRTSPX; C:\Windows\System32\Drivers\SRTSPX.SYS [2007-01-11 25400]
                R1 SYMTDI;SYMTDI; C:\Windows\System32\Drivers\SYMTDI.SYS [2007-01-09 191544]
                R3 fbxusb;Carte réseau virtuelle FreeBox USB; C:\Windows\system32\DRIVERS\fbxusb32.sys [2004-10-20 21344]
                R3 GEARAspiWDM;GEARAspiWDM; C:\Windows\System32\Drivers\GEARAspiWDM.sys [2006-09-19 15664]
                R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-03-25 2307072]
                R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-03-01 1744928]
                R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-01-16 70144]
                R3 SYMDNS;SYMDNS; C:\Windows\System32\Drivers\SYMDNS.SYS [2007-01-09 12984]
                R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT.SYS [2007-09-18 123952]
                R3 SYMFW;SYMFW; C:\Windows\System32\Drivers\SYMFW.SYS [2007-01-09 145976]
                R3 SYMIDS;SYMIDS; C:\Windows\System32\Drivers\SYMIDS.SYS [2007-01-09 40120]
                R3 SYMNDISV;SYMNDISV; C:\Windows\System32\Drivers\SYMNDISV.SYS [2007-01-09 38200]
                R3 SYMREDRV;SYMREDRV; C:\Windows\System32\Drivers\SYMREDRV.SYS [2007-01-09 27576]
                R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2006-11-02 82560]
                S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2006-11-02 5632]
                S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
                S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2006-11-02 8192]
                S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 5888]
                S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 5504]
                S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2006-11-02 6016]
                S3 NAVENG;NAVENG; \??\C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20071015.009\NAVENG.SYS [2007-08-20 81232]
                S3 NAVEX15;NAVEX15; \??\C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20071015.009\NAVEX15.SYS [2007-08-20 865904]
                S3 PAC207;Trust Webcam Live; C:\Windows\system32\DRIVERS\PFC027.SYS [2007-04-12 507264]
                S3 SPBBCDrv;SPBBCDrv; \??\C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys [2007-04-14 418104]
                S3 SRTSP;SRTSP; C:\Windows\System32\Drivers\SRTSP.SYS [2007-01-11 247608]
                S3 SRTSPL;SRTSPL; C:\Windows\System32\Drivers\SRTSPL.SYS [2007-01-11 276792]
                S3 usbbus;LGE Mobile Composite USB Device; C:\Windows\system32\DRIVERS\lgusbbus.sys [2007-07-11 12416]
                S3 UsbDiag;LGE Mobile USB Serial Port; C:\Windows\system32\DRIVERS\lgusbdiag.sys [2007-07-11 19840]
                S3 USBModem;LGE Mobile USB Modem; C:\Windows\system32\DRIVERS\lgusbmodem.sys [2007-07-11 21632]
                S3 usbscan;Pilote de scanneur USB; C:\Windows\system32\DRIVERS\usbscan.sys [2006-11-02 35328]
                S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2006-11-02 39936]
                S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

                ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2007-09-06 110592]
                R2 CLTNetCnService;Symantec Lic NetConnect service; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2007-01-09 108648]
                R2 ezntsvc;EasyBits Magic Desktop Services for Windows NT; C:\Windows\system32\ezNTSvc.exe [2007-08-15 33792]
                R2 IJPLMSVC;PIXMA Extended Survey Program; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2007-04-13 101528]
                R2 LightScribeService;LightScribeService Direct Disc Labeling Service; c:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440]
                R2 LiveUpdate Notice Ex;LiveUpdate Notice Service Ex; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2007-01-09 108648]
                S2 LiveUpdate Notice Service;LiveUpdate Notice Service; C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe [2008-01-29 583048]
                S2 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe [2007-09-26 554352]
                S2 SymAppCore;Symantec AppCore Service; c:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe [2007-01-04 47712]
                S3 comHost;COM Host; c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe [2007-01-12 49248]
                S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-09-05 138168]
                S3 IDriverT;InstallDriver Table Manager; c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
                S3 iPod Service;Service de l'iPod; C:\Program Files\iPod\bin\iPodService.exe [2007-09-26 503608]
                S3 ISPwdSvc;Symantec IS Password Validation; c:\Program Files\Norton Internet Security\isPwdSvc.exe [2007-01-13 80504]
                S3 LiveUpdate;LiveUpdate; C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE [2008-10-14 2999664]
                S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
                S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
                S3 RoxMediaDB9;RoxMediaDB9; c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe [2007-03-26 887544]
                S3 stllssvr;stllssvr; c:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2007-03-08 74656]
                S3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
                S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
                S4 ccEvtMgr;Symantec Event Manager; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2007-01-09 108648]
                S4 ccSetMgr;Symantec Settings Manager; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2007-01-09 108648]
                S4 Symantec Core LC;Symantec Core LC; C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe [2007-11-06 1252232]

                -----------------EOF-----------------
                0
                1. so
                  nfo.txt logfile of random's system information tool 1.04 2008-10-14 01:11:24

                  ======Uninstall list======

                  -->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
                  2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
                  2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
                  2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
                  2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {5A2F65A4-808F-4A1E-973E-92E17824982D}
                  2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
                  2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
                  2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {430971B1-C31E-45DA-81E0-72C095BAB72C}
                  2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {B3F4DC34-7F60-4B7C-A79F-1C13012D99D4}
                  2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {F7A31780-33C4-4E39-951A-5EC9B91D7BF1}
                  2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-00A1-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
                  2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
                  Activation Assistant for the 2007 Microsoft Office suites-->"C:\ProgramData\{623D32E9-0C62-4453-AD44-98B31F52A5E1}\Microsoft Office Activation Assistant.exe" REMOVE=TRUE MODIFY=FALSE
                  Adobe Flash Player 9 ActiveX-->C:\Windows\system32\Macromed\Flash\FlashUtil9b.exe -uninstallDelete
                  Adobe Flash Player ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
                  Adobe Reader 8.1.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81200000003}
                  AppCore-->MsiExec.exe /I{EFB5B3B5-A280-4E25-BE1C-634EEFE32C1B}
                  Apple Mobile Device Support-->MsiExec.exe /I{3EBD3749-304E-4A4C-9575-C00E5F015217}
                  Apple Software Update-->MsiExec.exe /I{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}
                  Assistant de connexion Windows Live-->MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986}
                  Atomic Betty-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{681D27E6-6DA4-4A9A-8B36-112D39E40CAD}\setup.exe" -l0x40c -removeonly
                  AV-->MsiExec.exe /I{F4DB525F-A986-4249-B98B-42A8066251CA}
                  Avanquest update-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}\Setup.exe" -l0x40c
                  Canon MP Navigator EX 1.0-->"C:\Program Files\Canon\MP Navigator EX 1.0\Maint.exe" /UninstallRemove C:\Program Files\Canon\MP Navigator EX 1.0\uninst.ini
                  Canon MP210 series-->"C:\Windows\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series\DelDrv.exe" /U:{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series /L0x000c
                  Canon My Printer-->C:\Program Files\Canon\MyPrinter\uninst.exe uninst.ini
                  Canon Utilities Easy-PhotoPrint EX-->C:\Program Files\Canon\Easy-PhotoPrint EX\uninst.exe uninst.ini
                  Canon Utilities Solution Menu-->C:\Program Files\Canon\SolutionMenu\uninst.exe uninst.ini
                  ccCommon-->MsiExec.exe /I{3CCAD2EF-CFF2-4637-82AA-AABF370282D3}
                  CE project - Devis / Facture-->MsiExec.exe /I{CDB34103-570E-4F88-A448-B4B14FFAFACC}
                  DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
                  DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
                  DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
                  DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
                  DVD Play-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{45D707E9-F3C4-11D9-A373-0050BAE317E1}\Setup.exe" -uninstall
                  EasyBits Magic Desktop-->C:\Windows\system32\ezMDUninstall.exe
                  eMule-->"C:\Program Files\eMule\Uninstall.exe"
                  eMusic - 50 Free MP3 offer-->"C:\Program Files\Winamp\eMusic\Uninst-eMusic-promotion.exe"
                  Enregistrement utilisateur de Canon MP210 series-->C:\Program Files\Canon\IJEREG\MP210 series\UNINST.EXE
                  Everest Casino (Remove Only)-->C:\Program Files\Everest Casino\cstart.exe /uninstall
                  Everest Poker (Remove Only)-->C:\Program Files\Everest Poker\cstart.exe /uninstall
                  Football Manager 2006-->MsiExec.exe /X{49CFD5D9-0556-4037-B7D6-E13ED4BEA4C5}
                  Football Manager 2008-->"C:\Program Files\Sports Interactive\Football Manager 2008\Uninstall_Football Manager 2008\Uninstall Football Manager 2008.exe"
                  FreeUndelete-->C:\Program Files\FreeUndelete\GLFB720.exe /handle:fru
                  Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
                  Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar2.dll"
                  GVAO-->C:\Windows\unin040c.exe -f"C:\Program Files\Ord-ixSofts\GVAO\DeIsL1.isu" -c"C:\Program Files\Ord-ixSofts\GVAO\_ISREG32.DLL"
                  HP Customer Experience Enhancements-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AB5E289E-76BF-4251-9F3F-9B763F681AE0}\setup.exe" -l0x9 -removeonly
                  HP Customer Feedback-->MsiExec.exe /I{9DBA770F-BF73-4D39-B1DF-6035D95268FC}
                  HP Easy Setup - Frontend-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{40F7AED3-0C7D-4582-99F6-484A515C73F2}\setup.exe" -l0x9 -removeonly
                  HP On-Screen Cap/Num/Scroll Lock Indicator-->C:\Windows\system32\OsdRemove.exe
                  HP Photosmart Essential 2.0-->C:\Program Files\HP\Digital Imaging\PhotoSmartEssential\hpzscr01.exe -datfile hpqbud13.dat
                  HP Update-->MsiExec.exe /X{8C6027FD-53DC-446D-BB75-CACD7028A134}
                  Intel(R) Graphics Media Accelerator Driver-->C:\Windows\system32\igxpun.exe -uninstall
                  iTunes-->MsiExec.exe /I{B045B608-4A47-4C77-9EAD-06C394503306}
                  K-Lite Mega Codec Pack 3.4.0-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
                  LG PC Suite-->C:\Program Files\InstallShield Installation Information\{993960EE-CA4D-443F-8F88-E24260DD5FD2}\setup.exe -runfromtemp -l0x040c -removeonly
                  LG USB Modem driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C3ABE126-2BB2-4246-BFE1-6797679B3579}\setup.exe" -l0x40c LG -removeonly
                  LiveUpdate 3.2 (Symantec Corporation)-->"C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE" /U
                  LiveUpdate Notice (Symantec Corporation)-->MsiExec.exe /X{DBA4DB9D-EE51-4944-A419-98AB1F1249C8}
                  Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
                  Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
                  Microsoft Office Home and Student 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
                  Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
                  Microsoft Office Language Pack 2007 Service Pack 1 (SP1)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {EC50B538-CBE1-42E6-B7FE-87AA540AADFB}
                  Microsoft Office OneNote MUI (French) 2007-->MsiExec.exe /X{90120000-00A1-040C-0000-0000000FF1CE}
                  Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
                  Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
                  Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
                  Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
                  Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
                  Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
                  Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
                  Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
                  Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
                  Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
                  Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
                  Microsoft Works-->MsiExec.exe /I{6B1CB38D-E2E4-4a30-933D-EFDEBA76AD9C}
                  Motorola Phone Tools-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BAD8CA9C-77C0-4663-B00B-A8D3B13C341B}\setup.exe" -l0x40c -removeonly
                  MSRedist-->MsiExec.exe /I{B7C61755-DB48-4003-948F-3D34DB8EAF69}
                  MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
                  MSXML 4.0 SP2 (KB941833)-->MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}
                  muvee autoProducer 6.0-->C:\Program Files\InstallShield Installation Information\{6AF49698-949A-4C89-9B31-041D2CCB5FBD}\setup.exe -runfromtemp -l0x040c -removeonly
                  Norton AntiVirus-->MsiExec.exe /X{830D8CBD-C668-49e2-A969-C2C2106332E0}
                  Norton Confidential Browser Component-->MsiExec.exe /I{4843B611-8FCB-4428-8C23-31D0A5EAE164}
                  Norton Confidential Web Protection Component-->MsiExec.exe /I{D353CC51-430D-4C6F-9B7E-52003DA1E05A}
                  Norton Internet Security (Symantec Corporation)-->"C:\Program Files\Common Files\Symantec Shared\SymSetup\{5AA2CD16-706F-41f3-87C5-2B5A031F2B3B}_10_2_0_30\{5AA2CD16-706F-41f3-87C5-2B5A031F2B3B}.exe" /X
                  Norton Internet Security-->MsiExec.exe /I{48185814-A224-447A-81DA-71BD20580E1B}
                  Norton Internet Security-->MsiExec.exe /I{5AA2CD16-706F-41f3-87C5-2B5A031F2B3B}
                  Norton Internet Security-->MsiExec.exe /I{E3EFA461-EB83-4C3B-9C47-2C1D58A01555}
                  Norton Internet Security-->MsiExec.exe /I{E5EE9939-259F-4DE2-8023-5C49E16A4F43}
                  Norton Protection Center-->MsiExec.exe /I{9A129ABC-A53A-4209-A21E-D5DEDFB7CCA8}
                  Outils de diagnostic du matériel-->C:\Program Files\PC-Doctor 5 for Windows\uninst.exe
                  PartoucheWize-->C:\Program Files\InstallShield Installation Information\{ADF0CD64-84E4-4DFD-AC9D-7172D8A77C7E}\setup.exe -runfromtemp -l0x040c -removeonly
                  PC Inspector File Recovery-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0DD140D3-9563-481E-AA75-BA457CBDAEF2}\Setup.exe" -l0x40c
                  PIXMA Extended Survey Program-->C:\Program Files\Canon\IJPLM\SETUP.EXE -R
                  Poker Superstars II-->C:\PROGRA~1\FUNKIT~1\POKERS~1\UNWISE.EXE C:\PROGRA~1\FUNKIT~1\POKERS~1\INSTALL.LOG
                  Post Mortem-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\Microids\Post Mortem\Uninstall\Setup.exe" -l0x40c
                  Python 2.4.3-->MsiExec.exe /I{75E71ADD-042C-4F30-BFAC-A9EC42351313}
                  QuickTime-->MsiExec.exe /I{95A890AA-B3B1-44B6-9C18-A8F7AB3EE7FC}
                  Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x40c -removeonly
                  Roxio Activation Module-->MsiExec.exe /I{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}
                  Roxio Creator Audio-->MsiExec.exe /X{83FFCFC7-88C6-41c6-8752-958A45325C82}
                  Roxio Creator Basic v9-->MsiExec.exe /X{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}
                  Roxio Creator Copy-->MsiExec.exe /X{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}
                  Roxio Creator Data-->MsiExec.exe /X{0D397393-9B50-4c52-84D5-77E344289F87}
                  Roxio Creator EasyArchive-->MsiExec.exe /X{11F93B4B-48F0-4A4E-AE77-DFA96A99664B}
                  Roxio Creator Tools-->MsiExec.exe /X{0394CDC8-FABD-4ed8-B104-03393876DFDF}
                  Roxio Express Labeler 3-->MsiExec.exe /X{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
                  Roxio MyDVD Basic v9-->MsiExec.exe /X{938B1CD7-7C60-491E-AA90-1F1888168240}
                  ScanSoft OmniPage SE 4-->MsiExec.exe /X{DEE88727-779B-47A9-ACEF-F87CA5F92A65}
                  Security Update for 2007 Microsoft Office System (KB951596)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {1AFF2298-CC00-4A3B-866A-C62B8373794E}
                  Security Update for Microsoft Office Excel 2007 (KB951546)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7399DD71-8E24-4E60-B6A8-6CED89C0AC26}
                  Security Update for Microsoft Office PowerPoint 2007 (KB951338)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {558B709B-821B-4FC5-90FC-9A8890641E77}
                  Security Update for Microsoft Office system 2007 (KB951808)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {8F375E11-4FD6-4B89-9E2B-A76D48B51E00}
                  Security Update for Microsoft Office Word 2007 (KB950113)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {AD72BABE-C733-4FCF-9674-4314466191B9}
                  Security Update for Visio 2007 (KB947590)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {6BAD036C-261F-4BEF-96CF-C20678D07A41}
                  Singles-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5628829F-3318-4DDA-988D-D301832F1611}\setup.exe" -l0x40c -removeonly
                  SPBBC 32bit-->MsiExec.exe /I{77772678-817F-4401-9301-ED1D01A8DA56}
                  SpotAuditor 3.7.8-->"C:\Program Files\Nsasoft\SpotAuditor\unins000.exe"
                  SymNet-->MsiExec.exe /I{2DA85B02-13C0-4E6D-9A76-22E6B3DD0CB2}
                  TomTom HOME-->C:\Program Files\InstallShield Installation Information\{CE325D55-FCAF-4273-BB79-069BB8747270}\setup.exe -runfromtemp -l0x040c -removeonly -removeonly
                  Ultimate ZIP Cracker Trial version-->C:\Program Files\UZC Trial\UZC.EXE /uninstall
                  Update for Office 2007 (KB946691)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {A420F522-7395-4872-9882-C591B4B92278}
                  Winamp Remote-->"C:\Program Files\Winamp Remote\uninstall.exe"
                  Winamp Toolbar for Internet Explorer-->"C:\Program Files\Winamp Toolbar\uninstall.exe"
                  Winamp-->"C:\Program Files\Winamp\UninstWA.exe"
                  Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
                  Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
                  WinRAR archiver-->C:\Program Files\WinRAR\uninstall.exe
                  World of Warcraft-->C:\Program Files\Common Files\Blizzard Entertainment\World of Warcraft\Uninstall.exe
                  Wow Cartographe 1.07-->C:\Users\Soraya\Documents\ely\World of Warcraft\WowCartographe\uninst.exe
                  Zapu - The Share Accelerator-->C:\PROGRA~1\Zapu\DIVI@H~1\UNWISE.EXE C:\PROGRA~1\Zapu\DIVI@H~1\INSTALL.LOG

                  ======Security center information======

                  AV: Norton Internet Security (outdated)
                  FW: Norton Internet Security
                  AS: Windows Defender
                  AS: Norton Internet Security (outdated)

                  ======Environment variables======

                  "ComSpec"=%SystemRoot%\system32\cmd.exe
                  "FP_NO_HOST_CHECK"=NO
                  "OS"=Windows_NT
                  "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\hp\bin\Python;c:\Program Files\Common Files\Roxio Shared\DLLShared\;c:\Program Files\Common Files\Roxio Shared\DLLShared\;c:\Program Files\Common Files\Roxio Shared\9.0\DLLShared\;C:\Program Files\QuickTime\QTSystem\
                  "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
                  "PROCESSOR_ARCHITECTURE"=x86
                  "TEMP"=%SystemRoot%\TEMP
                  "TMP"=%SystemRoot%\TEMP
                  "USERNAME"=SYSTEM
                  "windir"=%SystemRoot%
                  "PROCESSOR_LEVEL"=6
                  "PROCESSOR_IDENTIFIER"=x86 Family 6 Model 22 Stepping 1, GenuineIntel
                  "PROCESSOR_REVISION"=1601
                  "NUMBER_OF_PROCESSORS"=1
                  "RoxioCentral"=c:\Program Files\Common Files\Roxio Shared\9.0\Roxio Central33\
                  "PLATFORM"=HPD
                  "PCBRAND"=Presario
                  "OnlineServices"=Services en ligne
                  "CLASSPATH"=.;C:\Program Files\QuickTime\QTSystem\QTJava.zip
                  "QTJAVA"=C:\Program Files\QuickTime\QTSystem\QTJava.zip

                  -----------------EOF-----------------
                  0
                  1. Utilisateur anonyme
                    elecharge UsbFix sur ton bureau

                    --> Lance l installation avec les parametres par default

                    Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d avoir été infectés sans les ouvrir

                    --> Double clic sur le raccourci UsbFix sur ton bureau

                    --> Le pc va redémarer

                    -->Apres redémarrage post le rapport UsbFix.txt

                    Note : le rapport UsbFix.txt est sauvegardé a la racine du disque
                    Note : Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tapes explorer.exe et valides

                    0

                    Discussions similaires

                    Softonic,est-ce un virus ?
                    techmel1

                    6 réponses
                    Chrome://newtab
                    Nova

                    14 réponses
                    Désinstaller Softonic
                    Diguimette

                    5 réponses
                    vive mon casino
                    trap78

                    15 réponses