Problèmes après des mises à jour !!!!

Résolu
Bonsoir,

Plus moyens d'accéder à mes Favoris, la mise à jour de l'historique ne se fait plus ....:((

Je poste un rapport Hijack This et vous remercie de le consulter pour savoir si mon ordi est infectée.

Merci


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:27:27, on 13/11/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\wpcumi.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Windows\vsnpstd3.exe
C:\Windows\FixCamera.exe
C:\Windows\tsnpstd3.exe
C:\Program Files\Olivetti\ANY_WAY\olDvcStatus.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Windows\System32\mobsync.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\LogMeIn\x86\LMIGuardian.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\IncrediMail\bin\IMApp.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Boukraa\mes documents ou fichiers télécharger\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.magentic.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Users\Boukraa\Desktop\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Windows Live OneCare Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Contrôle parental\fssbho.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Easy Gif Animator Toolbar Helper - {96372AB6-15EB-4316-B497-71C741BC548C} - C:\Program Files\Easy Gif Animator Extension\v3.3.0.1\EasyGifAnimator_Toolbar.dll
O2 - BHO: ooVoo Toolbar - {A057A204-BACC-4D26-8087-36EE87E26986} - C:\PROGRA~1\OOVOOT~1\OOVOOT~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Easy Gif Animator Toolbar - {35065594-9169-4A34-B167-FC4865038E53} - C:\Program Files\Easy Gif Animator Extension\v3.3.0.1\EasyGifAnimator_Toolbar.dll
O3 - Toolbar: ooVoo Toolbar - {A057A204-BACC-4D26-8087-36EE87E26986} - C:\PROGRA~1\OOVOOT~1\OOVOOT~1.DLL
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [WPCUMI] C:\Windows\system32\WpcUmi.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [snpstd3] C:\Windows\vsnpstd3.exe
O4 - HKLM\..\Run: [FixCamera] C:\Windows\FixCamera.exe
O4 - HKLM\..\Run: [tsnpstd3] C:\Windows\tsnpstd3.exe
O4 - HKLM\..\Run: [OlStatusMon] "C:\Program Files\Olivetti\ANY_WAY\olDvcStatus.exe" dvcStatusMinimize
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Users\Boukraa\Desktop\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O13 - Gopher Prefix:
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Olivetti Monitor Service (olMntrService) - Olivetti - C:\Program Files\Olivetti\ANY_WAY\olMntrService.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

--
End of file - 10738 bytes

--
*Pour qu'on ne puisse abuser du pouvoir, il faut que, par la disposition des choses, le pouvoir arrête le pouvoir. * Montesquieu
Configuration: Windows Vista
Firefox 2.0.0.18

77 réponses

Résumé de la discussion

Le problème décrit est l’impossibilité d’accéder aux Favoris et une mise à jour de l’historique qui ne se fait plus, avec un rapport HijackThis fourni pour évaluer une éventuelle infection. Plusieurs éléments du log indiquent des modifications de page d'accueil et de moteur de recherche, des barres d'outils potentiellement indésirables et des composants BHO. Pour répondre, la meilleure approche consiste à nettoyer les entrées suspectes, restaurer les paramètres du navigateur et des proxies, puis effectuer une analyse antivirus et antispyware complémentaires avant de redémarrer. Des vérifications supplémentaires sur les logiciels de démarrage et les services actifs permettent d'identifier d'autres entrées susceptibles de provoquer une réinfection.

Bobot (l’IA à votre service)
  1. Contributeur sécurité
    Salut,

    Supprimes tout ce qui se trouve dans la quarantaien d' AntiVir .

    Puis fais ceci pour commencer :

    1- protocole à suivre pour Windows Vista :

    *Désactiver le contrôle des comptes utilisateurs ou UAC (le réactiver seulement à la fin de la désinfection) :

    Aller dans "démarrer" puis "panneau de configuration" :
    --->Sur la droite de la fenêtre , cliques sur " affichage classique "
    --->Double-Cliquer sur l'icône "Comptes d'utilisateurs"
    --->Cliquer ensuite sur "Activer ou désactiver le contrôle ..." .
    --->Décocher la case "utlisiser le contrôle ..." et cliquer sur OK .
    Puis redémarrer le PC quand il le vous saura demandé ...

    Tuto : https://forum.malekal.com/viewtopic.php?f=59&t=6517

    * Important :
    Pour installer ou pour lancer les outils, que tu utiliseras au court de la désinfection, fait toujours ainsi :
    cliques DROIT ( sur le setup d'installe ou l'outil )-> choisis " Exécuter entant qu'administrateur " .
    Fais ce-ci systématiquement ! ...

    une fois ceci fait et pris en compte , commences par ce qui suit :

    2-Vas dans panneau de config/ajout et suppression de prg .
    Regardes dans la liste si tu trouves un prg comme : " CID Help ", "Circle Developement" ou
    "Adverts" --->si ils s'y trouvent , supprimes les .

    3-Télécharges Lop S&D :
    https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

    Déconnetes toi et fermes toutes tes applications en cours .

    Double cliques sur sur l'.exe que tu viens de télécharger pour lancer l'installe .

    Une fois l'installation faite, cliques sur le raccourci pour lancer l'outil .

    Là,laisses toi guider:
    --->choisis l'option 1 (recherche) et valides.

    (Tu ne fais pas l'option de nettoyage ( 2 ou 3) ).

    Une fois le scan terminer ,le Bloc-Notes contenant le rapport va s'ouvrir.
    Postes ce rapport dans ta prochaine réponse pour analyse .

    Tuto : https://sites.google.com/site/eric71mespages/lop.sd.exe
    1
    1. Je n'ai pas trouvé les programmes " CID Help ", "Circle Developement" ou
      "Adverts"

      --------------------\\ Lop S&D 4.2.4-9c XP/Vista

      Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
      X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) D CPU 3.00GHz )
      BIOS : Phoenix - AwardBIOS v6.00PG
      USER : Boukraa ( Not Administrator ! )
      BOOT : Normal boot
      Antivirus : Norton 360 2007 (Not Activated)
      Firewall : Norton 360 2007 (Activated)
      C:\ (Local Disk) - NTFS - Total:141 Go (Free:77 Go)
      D:\ (CD or DVD)
      F:\ (USB)
      G:\ (USB)
      H:\ (USB)
      I:\ (USB)
      J:\ (USB)

      "C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
      Option : [1] ( 14/11/2008| 2:10 )

      [ UAC => 0 ]

      --------------------\\ Listing des dossiers dans Local

      [24/07/2008|15:46] C:\Users\Boukraa\AppData\Local\Adobe
      [31/01/2008|23:15] C:\Users\Boukraa\AppData\Local\Apple
      [03/09/2008|19:03] C:\Users\Boukraa\AppData\Local\Apple Computer
      [27/12/2007|21:18] C:\Users\Boukraa\AppData\Local\Application Data
      [17/02/2008|12:21] C:\Users\Boukraa\AppData\Local\ApplicationHistory
      [29/12/2007|23:39] C:\Users\Boukraa\AppData\Local\CyberLink
      [14/10/2008|06:30] C:\Users\Boukraa\AppData\Local\d3d9caps.dat
      [15/10/2008|22:14] C:\Users\Boukraa\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
      [27/12/2007|21:31] C:\Users\Boukraa\AppData\Local\fusioncache.dat
      [28/08/2008|01:13] C:\Users\Boukraa\AppData\Local\GDIPFONTCACHEV1.DAT
      [08/06/2008|11:30] C:\Users\Boukraa\AppData\Local\Google
      [27/12/2007|21:18] C:\Users\Boukraa\AppData\Local\Historique
      [16/01/2008|09:24] C:\Users\Boukraa\AppData\Local\hxqrbuunxx.dat
      [14/11/2008|02:01] C:\Users\Boukraa\AppData\Local\IconCache.db
      [15/04/2008|20:13] C:\Users\Boukraa\AppData\Local\ilnpd.bat
      [15/04/2008|21:45] C:\Users\Boukraa\AppData\Local\ilnpd.dat
      [08/06/2008|11:38] C:\Users\Boukraa\AppData\Local\IM
      [27/08/2008|18:51] C:\Users\Boukraa\AppData\Local\LogMeIn
      [08/06/2008|11:21] C:\Users\Boukraa\AppData\Local\Magentic
      [29/12/2007|23:39] C:\Users\Boukraa\AppData\Local\MagicSports
      [26/10/2008|21:16] C:\Users\Boukraa\AppData\Local\Microsoft
      [28/12/2007|11:12] C:\Users\Boukraa\AppData\Local\Microsoft Games
      [17/09/2008|07:14] C:\Users\Boukraa\AppData\Local\Microsoft Help
      [28/12/2007|12:15] C:\Users\Boukraa\AppData\Local\MigWiz
      [27/12/2007|22:48] C:\Users\Boukraa\AppData\Local\Mozilla
      [20/09/2008|15:16] C:\Users\Boukraa\AppData\Local\P2P_Energy
      [27/12/2007|22:56] C:\Users\Boukraa\AppData\Local\Packard Bell
      [29/12/2007|23:38] C:\Users\Boukraa\AppData\Local\PowerCinema
      [14/11/2008|02:09] C:\Users\Boukraa\AppData\Local\Temp
      [27/12/2007|21:18] C:\Users\Boukraa\AppData\Local\Temporary Internet Files
      [14/01/2008|15:59] C:\Users\Boukraa\AppData\Local\VirtualStore
      [18/04/2008|09:46] C:\Users\Boukraa\AppData\Local\Windows Live Writer

      --------------------\\ Tâches planifiées dans C:\Windows\tasks

      [13/11/2008 12:32][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{BC6D5F3A-869A-4BA6-9410-92594F81D17B}.job
      [13/11/2008 15:42][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{3D830653-F2B6-4714-B051-A2E9E19AC63C}.job
      [14/11/2008 02:00][--a------] C:\Windows\tasks\Extension de garantie.job
      [14/11/2008 02:02][--ah-----] C:\Windows\tasks\SA.DAT
      [14/11/2008 02:01][--a------] C:\Windows\tasks\SCHEDLGU.TXT

      --------------------\\ Listing des dossiers dans C:\ProgramData

      [05/08/2007|15:39] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
      [29/10/2008|12:35] C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
      [27/08/2008|18:44] C:\ProgramData\Adobe
      [31/01/2008|23:13] C:\ProgramData\Apple
      [03/09/2008|19:02] C:\ProgramData\Apple Computer
      [02/11/2006|14:02] C:\ProgramData\Application Data
      [23/07/2008|02:54] C:\ProgramData\Avira
      [11/06/2008|20:58] C:\ProgramData\AWEM
      [17/10/2008|12:38] C:\ProgramData\B3E85FAA-C316-40E0-BB3C-BF07959CAB7A
      [17/04/2008|14:22] C:\ProgramData\BOONTY
      [27/12/2007|21:14] C:\ProgramData\Bureau
      [02/11/2006|14:02] C:\ProgramData\Desktop
      [02/11/2006|14:02] C:\ProgramData\Documents
      [27/10/2008|01:34] C:\ProgramData\eMule
      [19/01/2008|19:07] C:\ProgramData\ezsid.dat
      [13/07/2008|12:23] C:\ProgramData\ezsidmv.dat
      [27/12/2007|21:14] C:\ProgramData\Favoris
      [02/11/2006|14:02] C:\ProgramData\Favorites
      [27/08/2008|20:49] C:\ProgramData\FLEXnet
      [05/08/2007|15:27] C:\ProgramData\Google
      [13/11/2008|20:44] C:\ProgramData\Google Updater
      [08/06/2008|11:07] C:\ProgramData\IM
      [08/06/2008|11:06] C:\ProgramData\IncrediMail
      [05/08/2007|15:26] C:\ProgramData\InstallShield
      [27/08/2008|18:51] C:\ProgramData\LogMeIn
      [11/07/2008|19:07] C:\ProgramData\Malwarebytes
      [27/12/2007|21:14] C:\ProgramData\Menu D‚marrer
      [31/08/2008|16:00] C:\ProgramData\Messenger Plus!
      [10/02/2008|11:47] C:\ProgramData\Microsoft
      [13/11/2008|21:32] C:\ProgramData\Microsoft Help
      [27/12/2007|21:14] C:\ProgramData\ModŠles
      [27/10/2008|00:16] C:\ProgramData\ntuser.pol
      [19/08/2008|02:07] C:\ProgramData\Office Genuine Advantage
      [13/02/2008|09:38] C:\ProgramData\PlayFirst
      [31/01/2008|22:15] C:\ProgramData\QuickTime
      [05/08/2007|15:43] C:\ProgramData\Roxio
      [19/01/2008|19:03] C:\ProgramData\Skype
      [05/08/2007|15:26] C:\ProgramData\Sonic
      [21/07/2008|15:21] C:\ProgramData\Spybot - Search & Destroy
      [02/11/2006|14:02] C:\ProgramData\Start Menu
      [23/07/2008|01:24] C:\ProgramData\Symantec
      [10/11/2008|14:08] C:\ProgramData\TEMP
      [02/11/2006|14:02] C:\ProgramData\Templates
      [17/04/2008|14:23] C:\ProgramData\TERMINAL Studio
      [10/06/2008|01:03] C:\ProgramData\Trymedia
      [21/01/2008|01:28] C:\ProgramData\WLInstaller
      [19/03/2008|12:24] C:\ProgramData\Xerox
      [03/05/2008|15:38] C:\ProgramData\Zylom

      --------------------\\ Listing des dossiers dans C:\Program Files

      [05/08/2007|15:39] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
      [27/08/2008|18:45] C:\Program Files\Adobe
      [02/07/2008|06:55] C:\Program Files\adslTV
      [23/07/2008|02:37] C:\Program Files\Alwil Software
      [22/09/2008|16:36] C:\Program Files\Apple Software Update
      [23/07/2008|02:54] C:\Program Files\Avira
      [10/06/2008|01:02] C:\Program Files\BFG
      [22/09/2008|16:17] C:\Program Files\Bonjour
      [17/05/2008|21:07] C:\Program Files\BoontyGames
      [28/01/2008|15:40] C:\Program Files\CCleaner
      [16/10/2008|17:08] C:\Program Files\Circle Developement
      [27/10/2008|01:11] C:\Program Files\Common Files
      [19/09/2008|01:54] C:\Program Files\Conduit
      [31/01/2008|22:25] C:\Program Files\CosmoSoftware
      [26/10/2008|23:15] C:\Program Files\CyberLink
      [19/09/2008|09:12] C:\Program Files\DivX
      [02/07/2008|07:08] C:\Program Files\Dofus
      [14/06/2008|19:13] C:\Program Files\Easy Gif Animator Extension
      [27/10/2008|01:34] C:\Program Files\eMule
      [27/12/2007|21:14] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
      [22/08/2008|18:44] C:\Program Files\FileZilla FTP Client
      [10/07/2008|09:07] C:\Program Files\Gamenext
      [30/07/2008|06:35] C:\Program Files\Google
      [22/05/2008|14:58] C:\Program Files\GoPets Ltd
      [05/08/2007|15:19] C:\Program Files\HDReg
      [13/06/2008|10:34] C:\Program Files\Incredijeux
      [29/10/2008|09:55] C:\Program Files\IncrediMail
      [27/10/2008|19:38] C:\Program Files\InstallShield Installation Information
      [25/07/2008|20:46] C:\Program Files\Internet Explorer
      [29/10/2008|12:35] C:\Program Files\iPod
      [29/10/2008|12:35] C:\Program Files\iTunes
      [04/01/2008|13:33] C:\Program Files\Jasc Software Inc
      [26/10/2008|21:44] C:\Program Files\Java
      [10/01/2008|12:17] C:\Program Files\Jeune Styliste
      [27/10/2008|19:36] C:\Program Files\JS World
      [24/07/2008|17:22] C:\Program Files\Lavalys
      [27/08/2008|18:51] C:\Program Files\LogMeIn
      [22/07/2008|02:10] C:\Program Files\Macrogaming
      [07/06/2008|16:41] C:\Program Files\MediaInfo
      [26/10/2008|20:27] C:\Program Files\Messenger
      [19/10/2008|10:11] C:\Program Files\Messenger Plus! Live
      [16/01/2008|09:08] C:\Program Files\Microsoft CAPICOM 2.1.0.2
      [02/11/2006|13:37] C:\Program Files\Microsoft Games
      [29/12/2007|11:44] C:\Program Files\Microsoft Office
      [21/01/2008|01:37] C:\Program Files\Microsoft SQL Server Compact Edition
      [29/12/2007|11:45] C:\Program Files\Microsoft Visual Studio
      [29/12/2007|11:41] C:\Program Files\Microsoft Visual Studio 8
      [05/08/2007|15:38] C:\Program Files\Microsoft Works
      [05/08/2007|15:37] C:\Program Files\Microsoft.NET
      [25/07/2008|20:46] C:\Program Files\Movie Maker
      [13/11/2008|16:42] C:\Program Files\Mozilla Firefox
      [29/12/2007|11:46] C:\Program Files\MSBuild
      [16/01/2008|08:43] C:\Program Files\MSXML 4.0
      [28/12/2007|12:55] C:\Program Files\Olivetti
      [28/07/2008|09:39] C:\Program Files\oovooToolbar
      [24/02/2008|15:32] C:\Program Files\Packard Bell
      [17/10/2008|12:38] C:\Program Files\Platrium
      [22/09/2008|16:33] C:\Program Files\QuickTime
      [13/02/2008|09:15] C:\Program Files\Real
      [05/08/2007|15:15] C:\Program Files\Realtek
      [02/11/2006|13:37] C:\Program Files\Reference Assemblies
      [05/08/2007|15:26] C:\Program Files\Roxio
      [13/07/2008|12:22] C:\Program Files\Skype
      [21/07/2008|15:30] C:\Program Files\Spybot - Search & Destroy
      [09/11/2008|02:25] C:\Program Files\SpywareBlaster
      [27/10/2008|01:14] C:\Program Files\SpywareGuard
      [22/07/2008|14:37] C:\Program Files\Sun
      [27/10/2008|10:44] C:\Program Files\Trend Micro
      [02/11/2006|14:01] C:\Program Files\Uninstall Information
      [28/01/2008|15:14] C:\Program Files\uTorrent
      [28/01/2008|15:23] C:\Program Files\VideoLAN
      [09/05/2008|16:26] C:\Program Files\Visicom Media
      [25/07/2008|20:46] C:\Program Files\Windows Calendar
      [25/07/2008|20:46] C:\Program Files\Windows Collaboration
      [25/07/2008|20:46] C:\Program Files\Windows Defender
      [25/07/2008|20:46] C:\Program Files\Windows Journal
      [28/02/2008|08:29] C:\Program Files\Windows Live
      [15/10/2008|22:44] C:\Program Files\Windows Live Safety Center
      [23/07/2008|03:32] C:\Program Files\Windows Live Toolbar
      [16/10/2008|03:05] C:\Program Files\Windows Mail
      [25/07/2008|20:46] C:\Program Files\Windows Media Player
      [27/12/2007|21:14] C:\Program Files\Windows NT
      [25/07/2008|20:46] C:\Program Files\Windows Photo Gallery
      [25/07/2008|20:46] C:\Program Files\Windows Sidebar
      [17/08/2008|07:17] C:\Program Files\WinRAR
      [12/11/2008|08:10] C:\Program Files\Yahoo!
      [28/01/2008|13:46] C:\Program Files\YesMessenger

      --------------------\\ Listing des dossiers dans C:\Program Files\Common Files

      [27/08/2008|18:43] C:\Program Files\Common Files\Adobe
      [22/09/2008|16:32] C:\Program Files\Common Files\Apple
      [17/04/2008|14:22] C:\Program Files\Common Files\BOONTY Shared
      [05/08/2007|15:38] C:\Program Files\Common Files\DESIGNER
      [05/08/2007|15:28] C:\Program Files\Common Files\InstallShield
      [27/08/2008|18:29] C:\Program Files\Common Files\Macrovision Shared
      [11/07/2008|07:52] C:\Program Files\Common Files\microsoft shared
      [03/05/2008|13:26] C:\Program Files\Common Files\Oberon Media
      [11/05/2008|14:10] C:\Program Files\Common Files\PX Storage Engine
      [15/02/2008|11:07] C:\Program Files\Common Files\Real
      [05/08/2007|15:26] C:\Program Files\Common Files\Roxio Shared
      [02/11/2006|12:18] C:\Program Files\Common Files\Services
      [13/07/2008|12:22] C:\Program Files\Common Files\Skype
      [27/02/2008|12:39] C:\Program Files\Common Files\snpstd3
      [05/08/2007|15:26] C:\Program Files\Common Files\Sonic Shared
      [02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
      [05/08/2007|15:26] C:\Program Files\Common Files\SureThing Shared
      [23/07/2008|01:25] C:\Program Files\Common Files\Symantec Shared
      [25/07/2008|20:46] C:\Program Files\Common Files\System
      [15/01/2008|12:32] C:\Program Files\Common Files\WindowsLiveInstaller
      [15/02/2008|11:07] C:\Program Files\Common Files\xing shared

      --------------------\\ Process

      ( 67 Processes )

      ... OK !

      --------------------\\ Recherche avec S_Lop

      Aucun fichier / dossier Lop trouvé !

      --------------------\\ Recherche de Fichiers / Dossiers Lop

      C:\Program Files\Circle Developement

      --------------------\\ Verification du Registre

      ..... OK !

      --------------------\\ Verification du fichier Hosts

      Fichier Hosts PROPRE

      --------------------\\ Recherche de fichiers avec Catchme

      catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2008-11-14 02:10:58
      Windows 6.0.6001 Service Pack 1 NTFS
      scanning hidden processes ...
      scanning hidden files ...
      scan completed successfully
      hidden processes: 0
      hidden files: 143

      --------------------\\ Recherche d'autres infections

      Aucune autre infection trouvée !

      [F:204][D:15]-> C:\Users\Boukraa\AppData\Local\Temp
      [F:22][D:1]-> C:\Users\Boukraa\AppData\Roaming\MICROS~1\Windows\Cookies
      [F:67][D:4]-> C:\Users\Boukraa\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
      [F:144][D:59]-> C:\$Recycle.Bin

      1 - "C:\Lop SD\LopR_1.txt" - 14/11/2008| 2:14 - Option : [1]

      --------------------\\ Fin du rapport a 2:14:07
      [ UAC => 1 ]

      0
    2. @BOTTIsam1965Une information supplémentaire, je ne sais s'il elle sera utile ?

      Je remarque que tout mes historiques disparaissent, même sur ccm quand je veux accéder à un pseudo pour envoyé un MP par exemple et que je recherche dans la fenêtre prévu pour, habituellement dès qu'on rentre une lettre on commence par avoir la liste des pseudos correspondants à celle-çi, or là je n'ai plus rien aussi :(

      Idem pour toutes les recherches automatisés.

      0
  2. Contributeur sécurité
    Vu ... ^^

    plusieurs choses ....

    commences par ceci :

    Télécharges ToolBar S&D ( de Eric_71/Team IDN ) :
    https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

    ( Tuto : https://sites.google.com/site/toolbarsd/aideenimages )

    !! Déconnectes toi et fermes toute tes applications en cours le temps de la manipe !!

    * double-cliques sur l'.exe pour lancer l'installe et laisses toi guider ...
    * Une fois fait, cliques sur le raccourci créé sur ton bureau pour lancer l'outil .
    * Choisis l'option 1 ( "recherche") et tapes "entrée" .
    * Une fois le scan finit , un rapport va apparaître, copie/colles l'intégralité
    de son contenu dans ta prochaine réponse ...
    ( le rapport est en outre sauvegardé ici -> C:\TB.txt )
    1
    1. arfff les femmes lol
      1
      1. t avais des disque (cd) dans les lecteurs ??

        tu as été "hacked by godzilla" ?? : MS32DLL.dll.vbs

        Affiche tous les fichiers et dossiers :
        Pour cela :
        Clique sur démarrer/panneau de configuration/option des dossiers/affichage

        Cocher afficher les dossiers cacher

        Décoche la case "Masquer les fichiers protégés du système d'exploitation (recommandé)"

        Décocher masquer les extensions dont le type est connu

        Puis fais «appliquer» pour valider les changements.

        Et OK

        Rends toi sur ce site :

        https://www.virustotal.com/gui/

        Clique sur parcourir et cherche ce fichier : D:\GANTT.exe

        Clique sur Send File.

        Un rapport va s'élaborer ligne à ligne.

        Attends la fin. Il doit comprendre la taille du fichier envoyé.

        Sauvegarde le rapport avec le bloc-note.

        Copie le dans ta réponse.

        1
        1. t es a poil ..,, ?? t as une tof ??? mdr

          fais ceci :

          # Démarre en mode sans échec :
          Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter
          Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée.
          Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal !
          (Si F8 ne marche pas utilise la touche F5).
          ----------------------------------------------------------------------------
          # Relance le programme Smitfraud :
          Cette fois choisit l’option 2, (executer en admin) répond oui a tous ;
          Sauvegarde le rapport, Redémarre en mode normal, copie/colle le rapport sauvegardé sur le forum et remet tes protections

          biz
          1
          1. Contributeur sécurité
            de retour sur le PC .... fais ce chiqui t'a donné .... mais pour que cela marche , il faut - être nu devant le PC .... ^^
            ( désactives tes défenses durant la manipe ... )

            On attends le résultat ( et une photo ... )
            1
            1. Hey Sami

              >>>>>>Toolbar is drug ....
              1
              1. Hey mon beau breton :DDDD

                Tout marche :D

                Bon à part les réponses tardives de sKe ...........Je vais lui conseiller un pti coup de défragmentation, ça donne du punch et çà revitalise Grave, plus efficace que le Viagra ce truc là..... ;;))

                0
            2. Contributeur sécurité
              Il me semblais que c'était des Fantomes ... ^^

              tu peux réactiver l'UAC ! ...

              prb résolu donc :
              http://www.commentcamarche.net/faq/sujet 11365 mettre son poste en probleme resolu

              potasses ceci :

              Des informations intéressantes pour toi et ton PC :

              => Comportement à adopter avec son PC : http://assiste.com.free.fr/p/abc/a/safe_cex.html
              et pourquoi ( exemple ) : http://assiste.com.free.fr/p/abc/a/zombies_et_botnets.html

              => Surveillance :
              Effectue des scan réguliers de surveillance (une fois tous les 15 jours, par exemple) avec ton antivirus puis avec ton anti-spyware (après les avoir mis à jour bien sur !) et supprime ce qu'ils peuvent trouver (où mets en quarantaine, en pensant à la vider ultérieurement).

              Pourquoi ? Pour éviter de se retrouver dans ce genre de situation ( peu commune mais ...) :
              -> http://secubox.aldria.com/topic-2373.html

              =============================================================

              => Il faut mettre a jour la console Java régulièrement aussi :

              Rends toi sur https://www.java.com/fr/download/manual.jsp et télécharge la dernière version (si ta version actuelle n'est pas à jour) ou ici https://filehippo.com/download_jre_32/?ex=CORE-116.0
              Après avoir installé la dernière version, désinstalle les anciennes versions (de Java) afin d’éliminer les failles de sécurité présentes dans ces anciennes versions.
              via Démarrer / Paramètres / Panneau de config / et dans Ajout/Suppression de programmes navigue jusqu'aux anciennes versions de la console Java qui s'y trouvent, puis clique sur « Supprimer », suis les invites de commandes dans la boite de dialogue qui va s'ouvrir afin d'amener la désinstallation à son terme.
              Fais cela pour chacune d'elles, une à une, fais redémarrer ton PC quand cela te sera demandé .
              Retourne ensuite chez Java ci-dessus et clique sur le bouton "Vérifier l'installation" pour t'assurer que tout est en ordre.

              =============================================================

              => Afin d’éviter les autres failles de sécurité des différents programmes présents sur ton PC :

              Vérifie tes mises à jours des différents softs régulièrement ici et mets à jour ce qui ne l’est pas. https://www.flexera.com/products/operations/software-vulnerability-management.html
              -Tuto https://www.malekal.com/tester-la-vulnerabilite-de-son-systeme-2/
              -Autre possibilité, t'abonner gratuitement a "la lettre hebdomadaire de secuser.com" ici http://www.secuser.com/ a gauche en bas de page.

              ===========================================================

              * testes l'efficacité de ton pare-feu ici ( à titre indicatif ):
              http://www.zebulon.fr/outils/scanports/test-securite.php

              * tests firewall: http://www.matousec.com/index.html

              => Un complément au pare-feu pour fermer les ports risqués (dangereux, s’ils restent ouverts) :

              ZebProtect (application ne nécessitant pas d’installation à lancer et paramétrer une unique fois) http://telechargement.zebulon.fr/123.html

              -Tuto https://www.zebulon.fr/dossiers/autres/40-zebprotect.html

              ================================================================

              --> Pour une meilleur sécurité lorsque tu surfes , je te conseille d'utiliser FireFox :
              télécharges le ici -> http://www.commentcamarche.net/telecharger/telecharger 111 firefox

              ( Attention : toujours garder IE sur son PC ! Il est indispensable pour les mises à jour de ton système ainsi que pour pas mal de choses, comme les scan d'antivirus en ligne, ect... )

              --> Tutorial pour sécuriser Firefox ( si tu utilises ce navigateur ) :
              https://forum.zebulon.fr/topic/69628-s%C3%A9curiser-un-peu-plus-firefox/

              =================================================================
              => Rappel sur les principales causes d'infection :

              * L'utilisation de cracks ou keygens est à proscrire, de même que le surf sur les sites de téléchargement de ceux-ci :

              Les dangers des cracks : http://forum.malekal.com/ftopic893.php

              ->Le crack dans toute sa splendeur, journal d'une infection attendue :
              https://forum.zebulon.fr/topic/93281-pr%C3%A9vention-le-crack-dans-toute-sa-splendeur/

              ->autre exemple en image , où comment s'infiltre une infection par un pseudo crack :
              http://secuboxlabs.fr/archives/computertoday.html

              * Le P2P ( l'utilisation de logiciels comme eMule, Sharazaa, LimeWire, Bit torrent):

              Les conséquences du P2P : https://forum.zebulon.fr/topic/85544-pr%C3%A9vention-le-p2p-et-ses-cons%C3%A9quences/

              Pourquoi éviter le P2P :
              > http://www.libellules.ch/...
              > http://www.speedweb1.org/forum-tesgaz/viewtopic.php?t=1793
              > https://lexpansion.lexpress.fr/actualite-economique/

              * Faire attention avec les ActiveX :
              http://assiste.com.free.fr/p/abc/a/activex_dangers.html
              et comment :
              http://assiste.com.free.fr/p/abc/c/anti_activex.html

              * Prévention sur deux autres types d'infection d'actualité :

              MSN prévention :
              https://forum.zebulon.fr/topic/130590-infection-par-msn-ou-wlm/
              -> autre danger grandissant , le " phishing " (= hameçonnage ) :
              http://msnfix.changelog.fr/index.php/2008/05/18/32-alerte

              Infection par supports amovibles (clefs usb, flash, DD externes ..) :
              https://forum.zebulon.fr/topic/131959-infections-par-supports-amovibles/
              https://forum.malekal.com/viewtopic.php?f=45&t=5544

              =================================================================
              ( merci le sioux )

              Voilou miss ....

              Bonne continuation à toi .... =)

              Bon surf .... ( et arrêtes le P2P ;) )

              A+
              1
              1. mdr la chieuse non mé ho
                1
                1. Contributeur
                  Bonsoir,

                  C'est peut être à cause de ça :
                  O2 - BHO: ooVoo Toolbar - {A057A204-BACC-4D26-8087-36EE87E26986} - C:\PROGRA~1\OOVOOT~1\OOVOOT~1.DLL

                  Utilises tu ce programmes ?
                  C:\Program Files\Easy Gif Animator Extension\v3.3.0.1\EasyGifAnimator_Toolbar.dll

                  @+
                  0
                  1. Rebonsoir,

                    Merci de ta réponse et excuse le retard de la réponse, j'effectuais un Scan Antivir, qui a détecté :

                    TR/Droper.Gen Trojan
                    TR/Swizzor.AAm Trojan
                    TR/Proxy.Hort.aae.5 Trojan
                    Et un code GEN/PRmdZIP

                    Et les a mit en quarantaine..

                    Pour le programme Easy Gif Animator Extension, la réponse est oui.
                    0
                  2. @BOTTIsam1965Voiçi le rapport Antivir :

                    Avira AntiVir Personal
                    Report file date: jeudi 13 novembre 2008 23:10

                    Scanning for 1034249 virus strains and unwanted programs.

                    Licensed to: Avira AntiVir PersonalEdition Classic
                    Serial number: 0000149996-ADJIE-0001
                    Platform: Windows Vista
                    Windows version: (Service Pack 1) [6.0.6001]
                    Boot mode: Normally booted
                    Username: SYSTEM
                    Computer name: PC-DE-BOUKRAA

                    Version information:
                    BUILD.DAT : 8.2.0.336 16933 Bytes 30/10/2008 11:40:00
                    AVSCAN.EXE : 8.1.4.7 315649 Bytes 26/06/2008 08:57:53
                    AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 07:56:40
                    LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 12:44:19
                    LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 07:58:52
                    ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 00:41:58
                    ANTIVIR1.VDF : 7.1.0.56 411136 Bytes 09/11/2008 17:39:11
                    ANTIVIR2.VDF : 7.1.0.57 2048 Bytes 09/11/2008 17:39:11
                    ANTIVIR3.VDF : 7.1.0.83 190976 Bytes 13/11/2008 17:39:12
                    Engineversion : 8.2.0.31
                    AEVDF.DLL : 8.1.0.6 102772 Bytes 15/10/2008 16:37:42
                    AESCRIPT.DLL : 8.1.1.15 332156 Bytes 11/11/2008 17:40:01
                    AESCN.DLL : 8.1.1.5 123251 Bytes 08/11/2008 17:40:36
                    AERDL.DLL : 8.1.1.3 438645 Bytes 05/11/2008 17:38:42
                    AEPACK.DLL : 8.1.3.4 393591 Bytes 11/11/2008 17:39:58
                    AEOFFICE.DLL : 8.1.0.30 196986 Bytes 08/11/2008 17:40:34
                    AEHEUR.DLL : 8.1.0.71 1487222 Bytes 08/11/2008 17:40:32
                    AEHELP.DLL : 8.1.1.3 119157 Bytes 08/11/2008 17:40:26
                    AEGEN.DLL : 8.1.1.0 319859 Bytes 08/11/2008 17:40:24
                    AEEMU.DLL : 8.1.0.9 393588 Bytes 15/10/2008 16:37:27
                    AECORE.DLL : 8.1.4.1 172405 Bytes 08/11/2008 17:40:22
                    AEBB.DLL : 8.1.0.3 53618 Bytes 15/10/2008 16:37:23
                    AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 08:40:05
                    AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 09:28:01
                    AVREP.DLL : 8.0.0.2 98344 Bytes 31/07/2008 14:44:53
                    AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 11:26:40
                    AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23
                    AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 12:27:49
                    SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
                    SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 12:49:40
                    NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10
                    RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 13:48:07
                    RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 13:34:37

                    Configuration settings for the scan:
                    Jobname..........................: Complete system scan
                    Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
                    Logging..........................: low
                    Primary action...................: interactive
                    Secondary action.................: ignore
                    Scan master boot sector..........: on
                    Scan boot sector.................: on
                    Boot sectors.....................: C:,
                    Process scan.....................: on
                    Scan registry....................: on
                    Search for rootkits..............: off
                    Scan all files...................: Intelligent file selection
                    Scan archives....................: on
                    Recursion depth..................: 20
                    Smart extensions.................: on
                    Macro heuristic..................: on
                    File heuristic...................: medium

                    Start of the scan: jeudi 13 novembre 2008 23:10

                    The scan of running processes will be started
                    Scan process 'TrustedInstaller.exe' - '0' Module(s) have been scanned
                    Scan process 'avscan.exe' - '1' Module(s) have been scanned
                    Scan process 'WmiPrvSE.exe' - '1' Module(s) have been scanned
                    Scan process 'avcenter.exe' - '1' Module(s) have been scanned
                    Scan process 'taskeng.exe' - '1' Module(s) have been scanned
                    Scan process 'iPodService.exe' - '1' Module(s) have been scanned
                    Scan process 'ImApp.exe' - '1' Module(s) have been scanned
                    Scan process 'LMIGuardian.exe' - '1' Module(s) have been scanned
                    Scan process 'sidebar.exe' - '1' Module(s) have been scanned
                    Scan process 'ONENOTEM.EXE' - '1' Module(s) have been scanned
                    Scan process 'ehmsas.exe' - '1' Module(s) have been scanned
                    Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
                    Scan process 'ehtray.exe' - '1' Module(s) have been scanned
                    Scan process 'SmpSys.exe' - '1' Module(s) have been scanned
                    Scan process 'WmiPrvSE.exe' - '1' Module(s) have been scanned
                    Scan process 'sidebar.exe' - '1' Module(s) have been scanned
                    Scan process 'iTunesHelper.exe' - '1' Module(s) have been scanned
                    Scan process 'jusched.exe' - '1' Module(s) have been scanned
                    Scan process 'RoxMediaDB9.exe' - '1' Module(s) have been scanned
                    Scan process 'mobsync.exe' - '1' Module(s) have been scanned
                    Scan process 'LogMeInSystray.exe' - '1' Module(s) have been scanned
                    Scan process 'rundll32.exe' - '1' Module(s) have been scanned
                    Scan process 'rundll32.exe' - '1' Module(s) have been scanned
                    Scan process 'RtHDVCpl.exe' - '1' Module(s) have been scanned
                    Scan process 'avgnt.exe' - '1' Module(s) have been scanned
                    Scan process 'reader_sl.exe' - '1' Module(s) have been scanned
                    Scan process 'olDvcStatus.exe' - '1' Module(s) have been scanned
                    Scan process 'tsnpstd3.exe' - '1' Module(s) have been scanned
                    Scan process 'FixCamera.exe' - '1' Module(s) have been scanned
                    Scan process 'vsnpstd3.exe' - '1' Module(s) have been scanned
                    Scan process 'realsched.exe' - '1' Module(s) have been scanned
                    Scan process 'wpcumi.exe' - '1' Module(s) have been scanned
                    Scan process 'WUDFHost.exe' - '1' Module(s) have been scanned
                    Scan process 'SearchIndexer.exe' - '1' Module(s) have been scanned
                    Scan process 'explorer.exe' - '1' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'dwm.exe' - '1' Module(s) have been scanned
                    Scan process 'taskeng.exe' - '1' Module(s) have been scanned
                    Scan process 'RoxWatch9.exe' - '1' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'olMntrService.exe' - '1' Module(s) have been scanned
                    Scan process 'GoogleUpdaterService.exe' - '1' Module(s) have been scanned
                    Scan process 'fsssvc.exe' - '1' Module(s) have been scanned
                    Scan process 'mDNSResponder.exe' - '1' Module(s) have been scanned
                    Scan process 'AppleMobileDeviceService.exe' - '1' Module(s) have been scanned
                    Scan process 'avguard.exe' - '1' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'sched.exe' - '1' Module(s) have been scanned
                    Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'SLsvc.exe' - '1' Module(s) have been scanned
                    Scan process 'audiodg.exe' - '0' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'lsm.exe' - '1' Module(s) have been scanned
                    Scan process 'winlogon.exe' - '1' Module(s) have been scanned
                    Scan process 'lsass.exe' - '1' Module(s) have been scanned
                    Scan process 'services.exe' - '1' Module(s) have been scanned
                    Scan process 'wininit.exe' - '1' Module(s) have been scanned
                    Scan process 'csrss.exe' - '1' Module(s) have been scanned
                    Scan process 'csrss.exe' - '1' Module(s) have been scanned
                    Scan process 'smss.exe' - '1' Module(s) have been scanned
                    66 processes with 66 modules were scanned

                    Starting master boot sector scan:
                    Master boot sector HD0
                    [INFO] No virus was found!
                    Master boot sector HD1
                    [INFO] No virus was found!
                    [WARNING] System error [21]: Le périphérique n'est pas prêt.
                    [INFO] Please restart the search with Administrator rights
                    Master boot sector HD2
                    [INFO] No virus was found!
                    [WARNING] System error [21]: Le périphérique n'est pas prêt.
                    [INFO] Please restart the search with Administrator rights
                    Master boot sector HD3
                    [INFO] No virus was found!
                    [WARNING] System error [21]: Le périphérique n'est pas prêt.
                    [INFO] Please restart the search with Administrator rights
                    Master boot sector HD4
                    [INFO] No virus was found!
                    [WARNING] System error [21]: Le périphérique n'est pas prêt.
                    [INFO] Please restart the search with Administrator rights

                    Start scanning boot sectors:
                    Boot sector 'C:\'
                    [INFO] No virus was found!

                    Starting to scan the registry.
                    The registry was scanned ( '54' files ).

                    Starting the file scan:

                    Begin scan in 'C:\' <HDD>
                    C:\hiberfil.sys
                    [WARNING] The file could not be opened!
                    C:\pagefile.sys
                    [WARNING] The file could not be opened!
                    C:\ProgramData\Spybot - Search & Destroy\Recovery\SpywareSecure12.zip
                    [DETECTION] Contains suspicious code GEN/PwdZIP
                    [NOTE] The detection was classified as suspicious.
                    [NOTE] The file was moved to '4995a9f7.qua'!
                    C:\Users\Boukraa\Desktop\NASSIF\Adobe Photoshop Cs3 French.rar
                    [0] Archive type: RAR
                    --> Adobe CS3\Photoshop\Adobe CS3\keygen.exe
                    [DETECTION] Is the TR/Proxy.Horst.aae.5 Trojan
                    [WARNING] An error has occurred and the file was not deleted. ErrorID: 26001
                    [WARNING] Failed!
                    [NOTE] Attempting to perform action using the ARK lib.
                    [NOTE] The file was moved to '4c2d40c1.qua'!
                    C:\Users\Sirine\AppData\Local\Temp\Setup_ab57.exe
                    [0] Archive type: RSRC
                    --> Object
                    [1] Archive type: RAR
                    --> SponsorSetup.exe
                    [DETECTION] Is the TR/Swizzor.AAM Trojan
                    [NOTE] The file was moved to '4990afd1.qua'!
                    C:\Users\Sirine\Documents\Mes fichiers reçus\photo_588.zip
                    [0] Archive type: ZIP
                    --> image296.JPEG-justine.mirebeau@hotmail.fr.com
                    [DETECTION] Is the TR/Dropper.Gen Trojan
                    [NOTE] The file was moved to '498bb2de.qua'!

                    End of the scan: vendredi 14 novembre 2008 00:29
                    Used time: 1:18:50 Hour(s)

                    The scan has been done completely.

                    24619 Scanning directories
                    366605 Files were scanned
                    3 viruses and/or unwanted programs were found
                    1 Files were classified as suspicious:
                    0 files were deleted
                    0 files were repaired
                    4 files were moved to quarantine
                    0 files were renamed
                    2 Files cannot be scanned
                    366599 Files not concerned
                    3805 Archives were scanned
                    7 Warnings
                    4 Notes

                    0
                2. Salut,

                  pour avancer :

                  Relance Lop S&D

                  Choisis cette fois ci l'Option 2 ( Suppression )

                  Ne ferme pas la fenêtre lors de la suppression !

                  Poste le rapport généré ( C:\lopR.txt )

                  ( Si le Bureau ne réapparaît pas presse Ctrl + Alt + Suppr, Onglet Fichier,

                  Nouvelle tâche, tape explorer.exe et valide )
                  0
                  1. --------------------\\ Lop S&D 4.2.4-9c XP/Vista

                    Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
                    X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) D CPU 3.00GHz )
                    BIOS : Phoenix - AwardBIOS v6.00PG
                    USER : Boukraa ( Not Administrator ! )
                    BOOT : Normal boot
                    Antivirus : Norton 360 2007 (Not Activated)
                    Firewall : Norton 360 2007 (Activated)
                    C:\ (Local Disk) - NTFS - Total:141 Go (Free:77 Go)
                    D:\ (CD or DVD)
                    F:\ (USB)
                    G:\ (USB)
                    H:\ (USB)
                    I:\ (USB)
                    J:\ (USB)

                    "C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
                    Option : [2] ( 14/11/2008| 3:22 )

                    [ UAC => 1 ]

                    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

                    Supprime! - C:\Program Files\Circle Developement
                    -
                    [ Fichier Hosts ] .. Restaure!

                    \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

                    --------------------\\ Listing des dossiers dans Local

                    [24/07/2008|15:46] C:\Users\Boukraa\AppData\Local\Adobe
                    [31/01/2008|23:15] C:\Users\Boukraa\AppData\Local\Apple
                    [03/09/2008|19:03] C:\Users\Boukraa\AppData\Local\Apple Computer
                    [27/12/2007|21:18] C:\Users\Boukraa\AppData\Local\Application Data
                    [17/02/2008|12:21] C:\Users\Boukraa\AppData\Local\ApplicationHistory
                    [29/12/2007|23:39] C:\Users\Boukraa\AppData\Local\CyberLink
                    [14/10/2008|06:30] C:\Users\Boukraa\AppData\Local\d3d9caps.dat
                    [15/10/2008|22:14] C:\Users\Boukraa\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
                    [27/12/2007|21:31] C:\Users\Boukraa\AppData\Local\fusioncache.dat
                    [28/08/2008|01:13] C:\Users\Boukraa\AppData\Local\GDIPFONTCACHEV1.DAT
                    [08/06/2008|11:30] C:\Users\Boukraa\AppData\Local\Google
                    [27/12/2007|21:18] C:\Users\Boukraa\AppData\Local\Historique
                    [16/01/2008|09:24] C:\Users\Boukraa\AppData\Local\hxqrbuunxx.dat
                    [14/11/2008|02:01] C:\Users\Boukraa\AppData\Local\IconCache.db
                    [15/04/2008|20:13] C:\Users\Boukraa\AppData\Local\ilnpd.bat
                    [15/04/2008|21:45] C:\Users\Boukraa\AppData\Local\ilnpd.dat
                    [08/06/2008|11:38] C:\Users\Boukraa\AppData\Local\IM
                    [27/08/2008|18:51] C:\Users\Boukraa\AppData\Local\LogMeIn
                    [08/06/2008|11:21] C:\Users\Boukraa\AppData\Local\Magentic
                    [29/12/2007|23:39] C:\Users\Boukraa\AppData\Local\MagicSports
                    [26/10/2008|21:16] C:\Users\Boukraa\AppData\Local\Microsoft
                    [28/12/2007|11:12] C:\Users\Boukraa\AppData\Local\Microsoft Games
                    [17/09/2008|07:14] C:\Users\Boukraa\AppData\Local\Microsoft Help
                    [28/12/2007|12:15] C:\Users\Boukraa\AppData\Local\MigWiz
                    [27/12/2007|22:48] C:\Users\Boukraa\AppData\Local\Mozilla
                    [20/09/2008|15:16] C:\Users\Boukraa\AppData\Local\P2P_Energy
                    [27/12/2007|22:56] C:\Users\Boukraa\AppData\Local\Packard Bell
                    [29/12/2007|23:38] C:\Users\Boukraa\AppData\Local\PowerCinema
                    [14/11/2008|03:22] C:\Users\Boukraa\AppData\Local\Temp
                    [27/12/2007|21:18] C:\Users\Boukraa\AppData\Local\Temporary Internet Files
                    [14/01/2008|15:59] C:\Users\Boukraa\AppData\Local\VirtualStore
                    [18/04/2008|09:46] C:\Users\Boukraa\AppData\Local\Windows Live Writer

                    --------------------\\ Tâches planifiées dans C:\Windows\tasks

                    [13/11/2008 12:32][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{BC6D5F3A-869A-4BA6-9410-92594F81D17B}.job
                    [13/11/2008 15:42][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{3D830653-F2B6-4714-B051-A2E9E19AC63C}.job
                    [14/11/2008 03:00][--a------] C:\Windows\tasks\Extension de garantie.job
                    [14/11/2008 02:02][--ah-----] C:\Windows\tasks\SA.DAT
                    [14/11/2008 02:01][--a------] C:\Windows\tasks\SCHEDLGU.TXT

                    --------------------\\ Listing des dossiers dans C:\ProgramData

                    [05/08/2007|15:39] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
                    [29/10/2008|12:35] C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
                    [27/08/2008|18:44] C:\ProgramData\Adobe
                    [31/01/2008|23:13] C:\ProgramData\Apple
                    [03/09/2008|19:02] C:\ProgramData\Apple Computer
                    [02/11/2006|14:02] C:\ProgramData\Application Data
                    [23/07/2008|02:54] C:\ProgramData\Avira
                    [11/06/2008|20:58] C:\ProgramData\AWEM
                    [17/10/2008|12:38] C:\ProgramData\B3E85FAA-C316-40E0-BB3C-BF07959CAB7A
                    [17/04/2008|14:22] C:\ProgramData\BOONTY
                    [27/12/2007|21:14] C:\ProgramData\Bureau
                    [02/11/2006|14:02] C:\ProgramData\Desktop
                    [02/11/2006|14:02] C:\ProgramData\Documents
                    [27/10/2008|01:34] C:\ProgramData\eMule
                    [19/01/2008|19:07] C:\ProgramData\ezsid.dat
                    [13/07/2008|12:23] C:\ProgramData\ezsidmv.dat
                    [27/12/2007|21:14] C:\ProgramData\Favoris
                    [02/11/2006|14:02] C:\ProgramData\Favorites
                    [27/08/2008|20:49] C:\ProgramData\FLEXnet
                    [05/08/2007|15:27] C:\ProgramData\Google
                    [13/11/2008|20:44] C:\ProgramData\Google Updater
                    [08/06/2008|11:07] C:\ProgramData\IM
                    [08/06/2008|11:06] C:\ProgramData\IncrediMail
                    [05/08/2007|15:26] C:\ProgramData\InstallShield
                    [27/08/2008|18:51] C:\ProgramData\LogMeIn
                    [11/07/2008|19:07] C:\ProgramData\Malwarebytes
                    [27/12/2007|21:14] C:\ProgramData\Menu D‚marrer
                    [31/08/2008|16:00] C:\ProgramData\Messenger Plus!
                    [10/02/2008|11:47] C:\ProgramData\Microsoft
                    [13/11/2008|21:32] C:\ProgramData\Microsoft Help
                    [27/12/2007|21:14] C:\ProgramData\ModŠles
                    [27/10/2008|00:16] C:\ProgramData\ntuser.pol
                    [19/08/2008|02:07] C:\ProgramData\Office Genuine Advantage
                    [13/02/2008|09:38] C:\ProgramData\PlayFirst
                    [31/01/2008|22:15] C:\ProgramData\QuickTime
                    [05/08/2007|15:43] C:\ProgramData\Roxio
                    [19/01/2008|19:03] C:\ProgramData\Skype
                    [05/08/2007|15:26] C:\ProgramData\Sonic
                    [21/07/2008|15:21] C:\ProgramData\Spybot - Search & Destroy
                    [02/11/2006|14:02] C:\ProgramData\Start Menu
                    [23/07/2008|01:24] C:\ProgramData\Symantec
                    [10/11/2008|14:08] C:\ProgramData\TEMP
                    [02/11/2006|14:02] C:\ProgramData\Templates
                    [17/04/2008|14:23] C:\ProgramData\TERMINAL Studio
                    [10/06/2008|01:03] C:\ProgramData\Trymedia
                    [21/01/2008|01:28] C:\ProgramData\WLInstaller
                    [19/03/2008|12:24] C:\ProgramData\Xerox
                    [03/05/2008|15:38] C:\ProgramData\Zylom

                    --------------------\\ Listing des dossiers dans C:\Program Files

                    [05/08/2007|15:39] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
                    [27/08/2008|18:45] C:\Program Files\Adobe
                    [02/07/2008|06:55] C:\Program Files\adslTV
                    [23/07/2008|02:37] C:\Program Files\Alwil Software
                    [22/09/2008|16:36] C:\Program Files\Apple Software Update
                    [23/07/2008|02:54] C:\Program Files\Avira
                    [10/06/2008|01:02] C:\Program Files\BFG
                    [22/09/2008|16:17] C:\Program Files\Bonjour
                    [17/05/2008|21:07] C:\Program Files\BoontyGames
                    [28/01/2008|15:40] C:\Program Files\CCleaner
                    [27/10/2008|01:11] C:\Program Files\Common Files
                    [19/09/2008|01:54] C:\Program Files\Conduit
                    [31/01/2008|22:25] C:\Program Files\CosmoSoftware
                    [26/10/2008|23:15] C:\Program Files\CyberLink
                    [19/09/2008|09:12] C:\Program Files\DivX
                    [02/07/2008|07:08] C:\Program Files\Dofus
                    [14/06/2008|19:13] C:\Program Files\Easy Gif Animator Extension
                    [27/10/2008|01:34] C:\Program Files\eMule
                    [27/12/2007|21:14] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
                    [22/08/2008|18:44] C:\Program Files\FileZilla FTP Client
                    [10/07/2008|09:07] C:\Program Files\Gamenext
                    [30/07/2008|06:35] C:\Program Files\Google
                    [22/05/2008|14:58] C:\Program Files\GoPets Ltd
                    [05/08/2007|15:19] C:\Program Files\HDReg
                    [13/06/2008|10:34] C:\Program Files\Incredijeux
                    [29/10/2008|09:55] C:\Program Files\IncrediMail
                    [27/10/2008|19:38] C:\Program Files\InstallShield Installation Information
                    [25/07/2008|20:46] C:\Program Files\Internet Explorer
                    [29/10/2008|12:35] C:\Program Files\iPod
                    [29/10/2008|12:35] C:\Program Files\iTunes
                    [04/01/2008|13:33] C:\Program Files\Jasc Software Inc
                    [26/10/2008|21:44] C:\Program Files\Java
                    [10/01/2008|12:17] C:\Program Files\Jeune Styliste
                    [27/10/2008|19:36] C:\Program Files\JS World
                    [24/07/2008|17:22] C:\Program Files\Lavalys
                    [27/08/2008|18:51] C:\Program Files\LogMeIn
                    [22/07/2008|02:10] C:\Program Files\Macrogaming
                    [07/06/2008|16:41] C:\Program Files\MediaInfo
                    [26/10/2008|20:27] C:\Program Files\Messenger
                    [19/10/2008|10:11] C:\Program Files\Messenger Plus! Live
                    [16/01/2008|09:08] C:\Program Files\Microsoft CAPICOM 2.1.0.2
                    [02/11/2006|13:37] C:\Program Files\Microsoft Games
                    [29/12/2007|11:44] C:\Program Files\Microsoft Office
                    [21/01/2008|01:37] C:\Program Files\Microsoft SQL Server Compact Edition
                    [29/12/2007|11:45] C:\Program Files\Microsoft Visual Studio
                    [29/12/2007|11:41] C:\Program Files\Microsoft Visual Studio 8
                    [05/08/2007|15:38] C:\Program Files\Microsoft Works
                    [05/08/2007|15:37] C:\Program Files\Microsoft.NET
                    [25/07/2008|20:46] C:\Program Files\Movie Maker
                    [13/11/2008|16:42] C:\Program Files\Mozilla Firefox
                    [29/12/2007|11:46] C:\Program Files\MSBuild
                    [16/01/2008|08:43] C:\Program Files\MSXML 4.0
                    [28/12/2007|12:55] C:\Program Files\Olivetti
                    [28/07/2008|09:39] C:\Program Files\oovooToolbar
                    [24/02/2008|15:32] C:\Program Files\Packard Bell
                    [17/10/2008|12:38] C:\Program Files\Platrium
                    [22/09/2008|16:33] C:\Program Files\QuickTime
                    [13/02/2008|09:15] C:\Program Files\Real
                    [05/08/2007|15:15] C:\Program Files\Realtek
                    [02/11/2006|13:37] C:\Program Files\Reference Assemblies
                    [05/08/2007|15:26] C:\Program Files\Roxio
                    [13/07/2008|12:22] C:\Program Files\Skype
                    [21/07/2008|15:30] C:\Program Files\Spybot - Search & Destroy
                    [09/11/2008|02:25] C:\Program Files\SpywareBlaster
                    [27/10/2008|01:14] C:\Program Files\SpywareGuard
                    [22/07/2008|14:37] C:\Program Files\Sun
                    [27/10/2008|10:44] C:\Program Files\Trend Micro
                    [02/11/2006|14:01] C:\Program Files\Uninstall Information
                    [28/01/2008|15:14] C:\Program Files\uTorrent
                    [28/01/2008|15:23] C:\Program Files\VideoLAN
                    [09/05/2008|16:26] C:\Program Files\Visicom Media
                    [25/07/2008|20:46] C:\Program Files\Windows Calendar
                    [25/07/2008|20:46] C:\Program Files\Windows Collaboration
                    [25/07/2008|20:46] C:\Program Files\Windows Defender
                    [25/07/2008|20:46] C:\Program Files\Windows Journal
                    [28/02/2008|08:29] C:\Program Files\Windows Live
                    [15/10/2008|22:44] C:\Program Files\Windows Live Safety Center
                    [23/07/2008|03:32] C:\Program Files\Windows Live Toolbar
                    [16/10/2008|03:05] C:\Program Files\Windows Mail
                    [25/07/2008|20:46] C:\Program Files\Windows Media Player
                    [27/12/2007|21:14] C:\Program Files\Windows NT
                    [25/07/2008|20:46] C:\Program Files\Windows Photo Gallery
                    [25/07/2008|20:46] C:\Program Files\Windows Sidebar
                    [17/08/2008|07:17] C:\Program Files\WinRAR
                    [12/11/2008|08:10] C:\Program Files\Yahoo!
                    [28/01/2008|13:46] C:\Program Files\YesMessenger

                    --------------------\\ Listing des dossiers dans C:\Program Files\Common Files

                    [27/08/2008|18:43] C:\Program Files\Common Files\Adobe
                    [22/09/2008|16:32] C:\Program Files\Common Files\Apple
                    [17/04/2008|14:22] C:\Program Files\Common Files\BOONTY Shared
                    [05/08/2007|15:38] C:\Program Files\Common Files\DESIGNER
                    [05/08/2007|15:28] C:\Program Files\Common Files\InstallShield
                    [27/08/2008|18:29] C:\Program Files\Common Files\Macrovision Shared
                    [11/07/2008|07:52] C:\Program Files\Common Files\microsoft shared
                    [03/05/2008|13:26] C:\Program Files\Common Files\Oberon Media
                    [11/05/2008|14:10] C:\Program Files\Common Files\PX Storage Engine
                    [15/02/2008|11:07] C:\Program Files\Common Files\Real
                    [05/08/2007|15:26] C:\Program Files\Common Files\Roxio Shared
                    [02/11/2006|12:18] C:\Program Files\Common Files\Services
                    [13/07/2008|12:22] C:\Program Files\Common Files\Skype
                    [27/02/2008|12:39] C:\Program Files\Common Files\snpstd3
                    [05/08/2007|15:26] C:\Program Files\Common Files\Sonic Shared
                    [02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
                    [05/08/2007|15:26] C:\Program Files\Common Files\SureThing Shared
                    [23/07/2008|01:25] C:\Program Files\Common Files\Symantec Shared
                    [25/07/2008|20:46] C:\Program Files\Common Files\System
                    [15/01/2008|12:32] C:\Program Files\Common Files\WindowsLiveInstaller
                    [15/02/2008|11:07] C:\Program Files\Common Files\xing shared

                    --------------------\\ Process

                    ( 72 Processes )

                    ... OK !

                    --------------------\\ Recherche avec S_Lop

                    Aucun fichier / dossier Lop trouvé !

                    --------------------\\ Recherche de Fichiers / Dossiers Lop

                    Aucun fichier / dossier Lop trouvé !

                    --------------------\\ Verification du Registre

                    ..... OK !

                    --------------------\\ Verification du fichier Hosts

                    Fichier Hosts PROPRE

                    --------------------\\ Recherche de fichiers avec Catchme

                    catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                    Rootkit scan 2008-11-14 03:22:32
                    Windows 6.0.6001 Service Pack 1 NTFS
                    scanning hidden processes ...
                    scanning hidden files ...
                    scan completed successfully
                    hidden processes: 0
                    hidden files: 143

                    --------------------\\ Recherche d'autres infections

                    Aucune autre infection trouvée !

                    [F:208][D:15]-> C:\Users\Boukraa\AppData\Local\Temp
                    [F:22][D:1]-> C:\Users\Boukraa\AppData\Roaming\MICROS~1\Windows\Cookies
                    [F:75][D:4]-> C:\Users\Boukraa\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
                    [F:144][D:59]-> C:\$Recycle.Bin

                    1 - "C:\Lop SD\LopR_1.txt" - 14/11/2008| 2:14 - Option : [1]
                    2 - "C:\Lop SD\LopR_2.txt" - 14/11/2008| 3:25 - Option : [2]

                    --------------------\\ Fin du rapport a 3:25:17
                    [ UAC => 1 ]

                    0
                3. Contributeur sécurité
                  Salut,

                  Ok ... fais ceci maintenant :

                  Télécharges Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.

                  -> http://images.malwareremoval.com/random/RSIT.exe

                  ! Fermes bien toutes tes applications en cours !

                  Double-clique sur " RSIT.exe " pour le lancer .

                  -> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .

                  * Devant l'option "List files/folders created ..." , tu choisis : 2 months

                  * cliques ensuite sur " Continue " pour lancer l'analyse ...

                  ( Note : Si la dernière version de HijackThis n'est pas détectée sur ton PC, RSIT le téléchargera et te demandera d'accepter la licence.)

                  -> laisses faire le scan et ne touche pas au PC ...

                  Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-note).

                  Postes le contenu de " log.txt " (c'est celui qui apparait à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...

                  Important : postes un rapport, puis l'autre dans la réponse suivante ... si tu essayes de poster les deux en même temps,
                  cela risque d'être trop long pour le forum ...
                  Et si "log.txt" seul, ne passe pas non plus , fais le en 2 fois ... merci ...

                  ( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )
                  0
                  1. Bonjour Ske,

                    Logfile of random's system information tool 1.04 (written by random/random)
                    Run by Boukraa at 2008-11-14 12:37:23
                    Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
                    System drive C: has 79 GB (55%) free of 144 GB
                    Total RAM: 1023 MB (37% free)

                    Logfile of Trend Micro HijackThis v2.0.2
                    Scan saved at 12:37:59, on 14/11/2008
                    Platform: Windows Vista SP1 (WinNT 6.00.1905)
                    MSIE: Internet Explorer v7.00 (7.00.6001.18000)
                    Boot mode: Normal

                    Running processes:
                    C:\Windows\system32\taskeng.exe
                    C:\Windows\system32\Dwm.exe
                    C:\Windows\Explorer.EXE
                    C:\Windows\System32\wpcumi.exe
                    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
                    C:\Windows\vsnpstd3.exe
                    C:\Windows\FixCamera.exe
                    C:\Windows\tsnpstd3.exe
                    C:\Program Files\Olivetti\ANY_WAY\olDvcStatus.exe
                    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
                    C:\Windows\RtHDVCpl.exe
                    C:\Windows\System32\rundll32.exe
                    C:\Windows\System32\rundll32.exe
                    C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
                    C:\Program Files\Java\jre6\bin\jusched.exe
                    C:\Program Files\iTunes\iTunesHelper.exe
                    C:\Program Files\Windows Sidebar\sidebar.exe
                    C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
                    C:\Windows\ehome\ehtray.exe
                    C:\Windows\System32\mobsync.exe
                    C:\Program Files\LogMeIn\x86\LMIGuardian.exe
                    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                    C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
                    C:\Windows\ehome\ehmsas.exe
                    C:\Program Files\Windows Sidebar\sidebar.exe
                    C:\Program Files\IncrediMail\bin\IMApp.exe
                    C:\Program Files\Mozilla Firefox\firefox.exe
                    C:\Users\Boukraa\mes documents ou fichiers télécharger\RSIT(2).exe
                    C:\Program Files\trend micro\Boukraa.exe

                    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.magentic.com
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
                    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                    O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                    O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Users\Boukraa\Desktop\Toolbars\Internet Explorer\SkypeIEPlugin.dll
                    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
                    O2 - BHO: Windows Live OneCare Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Contrôle parental\fssbho.dll
                    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
                    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                    O2 - BHO: Easy Gif Animator Toolbar Helper - {96372AB6-15EB-4316-B497-71C741BC548C} - C:\Program Files\Easy Gif Animator Extension\v3.3.0.1\EasyGifAnimator_Toolbar.dll
                    O2 - BHO: ooVoo Toolbar - {A057A204-BACC-4D26-8087-36EE87E26986} - C:\PROGRA~1\OOVOOT~1\OOVOOT~1.DLL
                    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
                    O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll
                    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                    O3 - Toolbar: Easy Gif Animator Toolbar - {35065594-9169-4A34-B167-FC4865038E53} - C:\Program Files\Easy Gif Animator Extension\v3.3.0.1\EasyGifAnimator_Toolbar.dll
                    O3 - Toolbar: ooVoo Toolbar - {A057A204-BACC-4D26-8087-36EE87E26986} - C:\PROGRA~1\OOVOOT~1\OOVOOT~1.DLL
                    O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                    O4 - HKLM\..\Run: [WPCUMI] C:\Windows\system32\WpcUmi.exe
                    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
                    O4 - HKLM\..\Run: [snpstd3] C:\Windows\vsnpstd3.exe
                    O4 - HKLM\..\Run: [FixCamera] C:\Windows\FixCamera.exe
                    O4 - HKLM\..\Run: [tsnpstd3] C:\Windows\tsnpstd3.exe
                    O4 - HKLM\..\Run: [OlStatusMon] "C:\Program Files\Olivetti\ANY_WAY\olDvcStatus.exe" dvcStatusMinimize
                    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
                    O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
                    O4 - HKLM\..\Run: [Skytel] Skytel.exe
                    O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
                    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
                    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
                    O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
                    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
                    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
                    O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
                    O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
                    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
                    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                    O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
                    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                    O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
                    O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
                    O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
                    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
                    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                    O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
                    O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
                    O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Users\Boukraa\Desktop\Toolbars\Internet Explorer\SkypeIEPlugin.dll
                    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
                    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
                    O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
                    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
                    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
                    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
                    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
                    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
                    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
                    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
                    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
                    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
                    O13 - Gopher Prefix:
                    O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
                    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
                    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
                    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
                    O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
                    O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
                    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                    O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
                    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
                    O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
                    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
                    O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                    O23 - Service: Olivetti Monitor Service (olMntrService) - Olivetti - C:\Program Files\Olivetti\ANY_WAY\olMntrService.exe
                    O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
                    O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
                    O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
                    0
                4. Logfile of random's system information tool 1.04 (written by random/random)
                  Run by Boukraa at 2008-11-14 12:37:23
                  Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
                  System drive C: has 79 GB (55%) free of 144 GB
                  Total RAM: 1023 MB (37% free)

                  Logfile of Trend Micro HijackThis v2.0.2
                  Scan saved at 12:37:59, on 14/11/2008
                  Platform: Windows Vista SP1 (WinNT 6.00.1905)
                  MSIE: Internet Explorer v7.00 (7.00.6001.18000)
                  Boot mode: Normal

                  Running processes:
                  C:\Windows\system32\taskeng.exe
                  C:\Windows\system32\Dwm.exe
                  C:\Windows\Explorer.EXE
                  C:\Windows\System32\wpcumi.exe
                  C:\Program Files\Common Files\Real\Update_OB\realsched.exe
                  C:\Windows\vsnpstd3.exe
                  C:\Windows\FixCamera.exe
                  C:\Windows\tsnpstd3.exe
                  C:\Program Files\Olivetti\ANY_WAY\olDvcStatus.exe
                  C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
                  C:\Windows\RtHDVCpl.exe
                  C:\Windows\System32\rundll32.exe
                  C:\Windows\System32\rundll32.exe
                  C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
                  C:\Program Files\Java\jre6\bin\jusched.exe
                  C:\Program Files\iTunes\iTunesHelper.exe
                  C:\Program Files\Windows Sidebar\sidebar.exe
                  C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
                  C:\Windows\ehome\ehtray.exe
                  C:\Windows\System32\mobsync.exe
                  C:\Program Files\LogMeIn\x86\LMIGuardian.exe
                  C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                  C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
                  C:\Windows\ehome\ehmsas.exe
                  C:\Program Files\Windows Sidebar\sidebar.exe
                  C:\Program Files\IncrediMail\bin\IMApp.exe
                  C:\Program Files\Mozilla Firefox\firefox.exe
                  C:\Users\Boukraa\mes documents ou fichiers télécharger\RSIT(2).exe
                  C:\Program Files\trend micro\Boukraa.exe

                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.magentic.com
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                  R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                  O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                  O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                  O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Users\Boukraa\Desktop\Toolbars\Internet Explorer\SkypeIEPlugin.dll
                  O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
                  O2 - BHO: Windows Live OneCare Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Contrôle parental\fssbho.dll
                  O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
                  O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                  O2 - BHO: Easy Gif Animator Toolbar Helper - {96372AB6-15EB-4316-B497-71C741BC548C} - C:\Program Files\Easy Gif Animator Extension\v3.3.0.1\EasyGifAnimator_Toolbar.dll
                  O2 - BHO: ooVoo Toolbar - {A057A204-BACC-4D26-8087-36EE87E26986} - C:\PROGRA~1\OOVOOT~1\OOVOOT~1.DLL
                  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
                  O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll
                  O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                  O3 - Toolbar: Easy Gif Animator Toolbar - {35065594-9169-4A34-B167-FC4865038E53} - C:\Program Files\Easy Gif Animator Extension\v3.3.0.1\EasyGifAnimator_Toolbar.dll
                  O3 - Toolbar: ooVoo Toolbar - {A057A204-BACC-4D26-8087-36EE87E26986} - C:\PROGRA~1\OOVOOT~1\OOVOOT~1.DLL
                  O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                  O4 - HKLM\..\Run: [WPCUMI] C:\Windows\system32\WpcUmi.exe
                  O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
                  O4 - HKLM\..\Run: [snpstd3] C:\Windows\vsnpstd3.exe
                  O4 - HKLM\..\Run: [FixCamera] C:\Windows\FixCamera.exe
                  O4 - HKLM\..\Run: [tsnpstd3] C:\Windows\tsnpstd3.exe
                  O4 - HKLM\..\Run: [OlStatusMon] "C:\Program Files\Olivetti\ANY_WAY\olDvcStatus.exe" dvcStatusMinimize
                  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                  O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
                  O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
                  O4 - HKLM\..\Run: [Skytel] Skytel.exe
                  O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
                  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
                  O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
                  O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
                  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
                  O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                  O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
                  O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
                  O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
                  O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
                  O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                  O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
                  O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                  O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                  O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                  O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
                  O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
                  O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
                  O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
                  O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                  O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                  O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
                  O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
                  O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Users\Boukraa\Desktop\Toolbars\Internet Explorer\SkypeIEPlugin.dll
                  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
                  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
                  O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
                  O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
                  O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
                  O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
                  O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
                  O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
                  O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
                  O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
                  O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
                  O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
                  O13 - Gopher Prefix:
                  O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
                  O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
                  O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
                  O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
                  O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
                  O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
                  O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                  O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
                  O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
                  O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
                  O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
                  O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                  O23 - Service: Olivetti Monitor Service (olMntrService) - Olivetti - C:\Program Files\Olivetti\ANY_WAY\olMntrService.exe
                  O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
                  O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
                  O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
                  0
                  1. Excuse pour le doublons, j'ai cru que c'était pas passé :(

                    info.txt logfile of random's system information tool 1.04 2008-10-17 15:06:22

                    ======Uninstall list======

                    -->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
                    -->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
                    -->MsiExec.exe /I{0394CDC8-FABD-4ed8-B104-03393876DFDF}
                    -->MsiExec.exe /I{0D330013-4A99-46D6-83C6-2C959C68DBFF}
                    -->MsiExec.exe /I{0D397393-9B50-4c52-84D5-77E344289F87}
                    -->MsiExec.exe /I{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}
                    -->MsiExec.exe /I{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}
                    -->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
                    -->MsiExec.exe /I{83FFCFC7-88C6-41c6-8752-958A45325C82}
                    -->MsiExec.exe /I{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}
                    168-USB PC Camera-->C:\Program Files\InstallShield Installation Information\{ECD03DA7-5952-406A-8156-5F0C93618D1F}\setup.exe -runfromtemp -l0x040c -removeonly
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0015-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0019-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {5A2F65A4-808F-4A1E-973E-92E17824982D}
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {5A2F65A4-808F-4A1E-973E-92E17824982D}
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {430971B1-C31E-45DA-81E0-72C095BAB72C}
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {430971B1-C31E-45DA-81E0-72C095BAB72C}
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {B3F4DC34-7F60-4B7C-A79F-1C13012D99D4}
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {B3F4DC34-7F60-4B7C-A79F-1C13012D99D4}
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {F7A31780-33C4-4E39-951A-5EC9B91D7BF1}
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {F7A31780-33C4-4E39-951A-5EC9B91D7BF1}
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0044-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-00A1-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
                    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
                    Activation Assistant for the 2007 Microsoft Office suites-->"C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}\Microsoft Office Activation Assistant.exe" REMOVE=TRUE MODIFY=FALSE
                    Adobe Anchor Service CS3-->MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}
                    Adobe Asset Services CS3-->MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}
                    Adobe Bridge CS3-->MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394}
                    Adobe Bridge Start Meeting-->MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23}
                    Adobe Camera Raw 4.0-->MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
                    Adobe CMaps-->MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
                    Adobe Color - Photoshop Specific-->MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E}
                    Adobe Color Common Settings-->MsiExec.exe /I{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}
                    Adobe Color EU Recommended Settings-->MsiExec.exe /I{73B5D990-04EA-4751-B10F-5534770B91F2}
                    Adobe Color JA Extra Settings-->MsiExec.exe /I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}
                    Adobe Color NA Extra Settings-->MsiExec.exe /I{FF29A7E2-FF40-4D07-B7E4-2093DE59E10A}
                    Adobe Default Language CS3-->MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
                    Adobe Device Central CS3-->MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}
                    Adobe ExtendScript Toolkit 2-->MsiExec.exe /I{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}
                    Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
                    Adobe Fonts All-->MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B}
                    Adobe Help Viewer CS3-->MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245}
                    Adobe Linguistics CS3-->MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078}
                    Adobe PDF Library Files-->MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
                    Adobe Photoshop CS3-->C:\Program Files\Common Files\Adobe\Installers\32e9033392a51340b32fdc6ad893ab7\Setup.exe
                    Adobe Photoshop CS3-->MsiExec.exe /I{BF794769-8875-4E01-B7BE-E00104604F4A}
                    Adobe Reader 8-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *AdobeReader*
                    Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
                    Adobe Setup-->MsiExec.exe /I{926DEB4E-2B0A-4C5C-AE4A-BF6C06949702}
                    Adobe Shockwave Player-->C:\Windows\System32\Macromed\SHOCKW~1\UNWISE.EXE C:\Windows\System32\Macromed\SHOCKW~1\Install.log
                    Adobe Shockwave Player-->MsiExec.exe /X{A7DB362E-16DC-4E29-8A34-E74381E00B5B}
                    Adobe Stock Photos CS3-->MsiExec.exe /I{29E5EA97-5F74-4A57-B8B2-D4F169117183}
                    Adobe Type Support-->MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
                    Adobe Update Manager CS3-->MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8}
                    Adobe Version Cue CS3 Client-->MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}
                    Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}
                    Adobe XMP Panels CS3-->MsiExec.exe /I{802771A9-A856-4A41-ACF7-1450E523C923}
                    ADSL Neuf-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *NEUF_FR*
                    ALO RM to MP3 Converter 7.0-->"C:\Program Files\Alo RM Converter\unins000.exe"
                    Apple Mobile Device Support-->MsiExec.exe /I{AA9768AA-FF0B-4C66-A085-31E934F77841}
                    Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
                    Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
                    Assistant de connexion Windows Live-->MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986}
                    Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE
                    Bonjour-->MsiExec.exe /I{8A25392D-C5D2-4E79-A2BD-C15DDC5B0959}
                    Browser Address Error Redirector-->regsvr32 /u /s "C:\Program Files\Google\Google_BAE\BAE.dll"
                    CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
                    Cosmo Player 2.1 (38329)-->C:\Windows\IsUn040c.exe -f"C:\Program Files\CosmoSoftware\CosmoPlayer\CosmoPlayer21.isu"
                    Creator 9-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *CREATOR9*
                    DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
                    DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
                    DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
                    DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
                    Easy Gif Animator Extension-->"C:\Windows\EasyGifAnimator_Toolbar_Uninstaller_3410.exe" _?=C:\Program Files\Easy Gif Animator Extension
                    eMule-->"C:\Program Files\eMule\Uninstall.exe"
                    EVEREST Ultimate Edition v4.50-->"C:\Program Files\Lavalys\EVEREST Ultimate Edition\unins000.exe"
                    Favorit-->c:\users\boukraa\appdata\local\ilnpd.bat
                    FileZilla Client 3.0.11-->C:\Program Files\FileZilla FTP Client\uninstall.exe
                    Firefox-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *FirefoxFR*
                    Flash Player 9 Internet Explorer-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *Flashplayer*
                    Galerie de photos Windows Live-->MsiExec.exe /X{A70FA218-6598-4AC9-813D-63597C5DD068}
                    GamesBar 1.1.0.5-->C:\Program Files\GamesBar\uninst.exe
                    GearDrvs-->MsiExec.exe /I{206FD69B-F9FE-4164-81BD-D52552BC9C23}
                    Gif Movie Gear 4-->"C:\Program Files\Visicom Media\GifMovieGear 4\uninst-gmg.exe"
                    Google BAE-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *GoogleBAE*
                    Google Desktop-->C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
                    Google Earth-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *GOOGLE_EARTH*
                    Google Earth-->MsiExec.exe /I{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}
                    Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
                    Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar1.dll"
                    GoogleDesktop-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *GoogleDesktop*
                    GoogleToolbar-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *GoogleToolbar*
                    GoPets-->"C:\Program Files\GoPets Ltd\Uninstall GoPets.exe"
                    HDReg France-->MsiExec.exe /I{0ED40D2A-7131-4FE7-941E-5C329336F712}
                    HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
                    IncrediMail Xe-->C:\Program Files\IncrediMail\bin\ImSetup.exe /remove /addon:IncrediMail /log:IncMail.log
                    Infocentre Rev. 2.0-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *Infocentre*
                    iTunes-->MsiExec.exe /I{41B9E2CF-0B3F-442A-B5B3-592A4A355634}
                    Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
                    Jeune Styliste HC Fix-->C:\Windows\system32\sdbinst.exe -u "C:\Windows\AppPatch\Custom\{f1e88344-713f-468d-a272-9a9645421312}.sdb"
                    JS World-->MsiExec.exe /I{9A8EE170-395C-4B96-B992-B9FE823330E7}
                    LogMeIn-->MsiExec.exe /I{ED0042CA-CBEA-4ADF-B262-FE0518AF2221}
                    Magic Loto 1.0-->C:\Windows\IsUn040c.exe -f"C:\Program Files\Secrets du Jeu\Magic Loto\1.0\Uninst.isu"
                    Magic Sports-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *MagicSports*
                    MagicSports 3.5-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5927AF0D-335C-41D6-937B-54587EBD6D2C}\setup.exe" -uninstall
                    Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
                    MediaInfo 0.7.7.2-->C:\Program Files\MediaInfo\uninst.exe
                    Messenger Plus! Live & Sponsor (CiD)-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
                    Metaboli-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *METABOLI*
                    Microsoft .NET Framework 1.1 Hotfix (KB929729)-->"C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\M929729\M929729Uninstall.msp"
                    Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
                    Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
                    Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
                    Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
                    Microsoft Office Home and Student 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
                    Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
                    Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}
                    Microsoft Office Language Pack 2007 Service Pack 1 (SP1)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {EC50B538-CBE1-42E6-B7FE-87AA540AADFB}
                    Microsoft Office Language Pack 2007 Service Pack 1 (SP1)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {EC50B538-CBE1-42E6-B7FE-87AA540AADFB}
                    Microsoft Office OneNote MUI (French) 2007-->MsiExec.exe /X{90120000-00A1-040C-0000-0000000FF1CE}
                    Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
                    Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
                    Microsoft Office PowerPoint Viewer 2007 (French)-->MsiExec.exe /X{95120000-00AF-040C-0000-0000000FF1CE}
                    Microsoft Office Professional Plus 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
                    Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}
                    Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
                    Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
                    Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
                    Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
                    Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
                    Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
                    Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
                    Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
                    Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
                    Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
                    Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
                    Microsoft Works 9 SE-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *works9se*
                    Microsoft Works-->MsiExec.exe /I{0214A441-A4AB-43A8-8DEF-2F73C5364673}
                    Microsoft® Office Trial 2007-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *OFF2k7_FR*
                    Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
                    Mozilla Firefox (2.0.0.16)-->C:\PROGRA~1\Mozilla Firefox\uninstall\helper.exe
                    MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
                    MSXML 4.0 SP2 (KB941833)-->MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}
                    Nokia Connectivity Cable Driver-->RUNDLL32.EXE nsesetup.dll,DoNTUninst
                    Norton 360-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *N360_2007_FR*
                    Norton 360-->MsiExec.exe /I{63A6E9A9-A190-46D4-9430-2DB28654AFD8}
                    NVIDIA Drivers-->C:\Windows\system32\NVUNINST.EXE UninstallGUI
                    ooVoo Toolbar-->C:\Program Files\oovooToolbar\uninstall.exe
                    ooVoo-->"C:\Program Files\InstallShield Installation Information\{FAA7F8FF-3C05-4A61-8F14-D8A6E9ED6623}\setup.exe" -runfromtemp -l0x040c -removeonly
                    OpenOffice.org Installer 1.0-->MsiExec.exe /X{3A2AF807-9F9F-43C9-A24A-17B617238B74}
                    Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
                    P2P_Energy Toolbar-->C:\PROGRA~1\P2P_EN~1\UNWISE.EXE C:\PROGRA~1\P2P_EN~1\INSTALL.LOG
                    Packard Bell Demo-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *PB_DEMO*
                    Packard Bell ImageWriter-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *ImageWriter*
                    Packard Bell LCD Test-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *LCDTest*
                    Packard Bell Updator-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *Updator*
                    PDF Settings-->MsiExec.exe /I{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}
                    PhotoFiltre Studio-->"C:\Program Files\PhotoFiltre Studio\Uninst.exe"
                    Platrium-->"C:\Program Files\Platrium\bin\1.2.103.0\PlatriumUninstaller.exe" Web
                    QALITEL logigramme-->C:\SCOQI\QLOGIG~1\UNWISE.EXE C:\SCOQI\QLOGIG~1\INSTALL.LOG
                    QuickTime-->MsiExec.exe /I{8DC42D05-680B-41B0-8878-6C14D24602DB}
                    RealPlayer-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
                    Realtek HD Audio V6.0.1.5413-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *AUDIO_REALTEK*
                    Realtek High Definition Audio Driver-->RtlUpd.exe -r -m
                    Roxio Creator 9 LE-->MsiExec.exe /I{B7FB0C86-41A4-4402-9A33-912C462042A0}
                    Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
                    Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
                    Security Update for 2007 Microsoft Office System (KB955936)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {1D94099C-2BBA-440E-BD5E-093BBDF8F028}
                    Security Update for 2007 Microsoft Office System (KB955936)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {1D94099C-2BBA-440E-BD5E-093BBDF8F028}
                    Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
                    Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
                    Security Update for Microsoft Office Excel 2007 (KB955470)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {6E8637D8-10D6-4568-AA06-E2706F31685E}
                    Security Update for Microsoft Office Excel 2007 (KB955470)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {6E8637D8-10D6-4568-AA06-E2706F31685E}
                    Security Update for Microsoft Office OneNote 2007 (KB950130)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {F1B2401C-B610-4BF2-AA1C-52C55827A8F4}
                    Security Update for Microsoft Office PowerPoint 2007 (KB951338)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {558B709B-821B-4FC5-90FC-9A8890641E77}
                    Security Update for Microsoft Office PowerPoint 2007 (KB951338)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {558B709B-821B-4FC5-90FC-9A8890641E77}
                    Security Update for Microsoft Office Publisher 2007 (KB950114)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {F9C3CDBA-1F00-4D4D-959D-75C9D3ACDD85}
                    Security Update for Microsoft Office system 2007 (KB951808)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {8F375E11-4FD6-4B89-9E2B-A76D48B51E00}
                    Security Update for Microsoft Office system 2007 (KB951808)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {8F375E11-4FD6-4B89-9E2B-A76D48B51E00}
                    Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
                    Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
                    Security Update for Microsoft Office Word 2007 (KB950113)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {AD72BABE-C733-4FCF-9674-4314466191B9}
                    Security Update for Microsoft Office Word 2007 (KB950113)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {AD72BABE-C733-4FCF-9674-4314466191B9}
                    Security Update for Visio 2007 (KB947590)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {6BAD036C-261F-4BEF-96CF-C20678D07A41}
                    Security Update for Visio 2007 (KB947590)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {6BAD036C-261F-4BEF-96CF-C20678D07A41}
                    SetUp My PC-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *SETUPMYPC_FR*
                    Shockwave-->C:\Windows\System32\Macromed\SHOCKW~2\UNWISE.EXE C:\Windows\System32\Macromed\SHOCKW~2\Install.log
                    Skype 2.5.2.151-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *SKYPE*
                    Skype™ 3.8-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
                    SPAMfighter-->"C:\Program Files\SPAMfighter\uninstall.exe" Remove
                    SpywareBlaster 4.1-->"C:\Program Files\SpywareBlaster\unins000.exe"
                    SpywareGuard v2.2-->"C:\Program Files\SpywareGuard\unins000.exe"
                    Tomb Raider: Legend 1.2-->C:\Program Files\Tomb Raider - Legend\uninsttrl.exe
                    Update for Microsoft Office Outlook 2007 (KB952142)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {4AD3A076-427C-491F-A5B7-7D1DE788A756}
                    Update for Office 2007 (KB946691)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {A420F522-7395-4872-9882-C591B4B92278}
                    Update for Office 2007 (KB946691)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {A420F522-7395-4872-9882-C591B4B92278}
                    Update for Outlook 2007 Junk Email Filter (kb957258)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {E070CDA4-A8DD-47FA-89A0-F5DA5D5DDFF9}
                    Video NVIDIA v158.34-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *VIDEO_NVIDIA*
                    VideoLAN VLC media player 0.8.6d-->C:\Program Files\VideoLAN\VLC\uninstall.exe
                    WebAnim Gif 2.0-->"C:\Program Files\WebAnim Gif\unins000.exe"
                    Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
                    Windows Live Mail-->MsiExec.exe /I{C514C594-23AA-4F13-A070-DB8BDB27594F}
                    Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
                    Windows Live OneCare Contrôle parental-->MsiExec.exe /X{3677FD57-D0DE-47CD-942E-99913D04C135}
                    Windows Live OneCare safety scanner-->"C:\Program Files\Windows Live Safety Center\UnInstall.exe"
                    Windows Live OneCare safety scanner-->MsiExec.exe /X{FE0646A7-19D0-41B4-A2BB-2C35D644270D}
                    Windows Live Writer-->MsiExec.exe /X{3DFF4274-EBB0-4356-9692-972965018954}
                    Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}

                    ======Security center information======

                    AV: Norton 360 (disabled) (outdated)
                    FW: Norton 360
                    AS: Windows Defender (disabled)
                    AS: Norton 360 (disabled) (outdated)

                    ======Environment variables======

                    "ComSpec"=%SystemRoot%\system32\cmd.exe
                    "FP_NO_HOST_CHECK"=NO
                    "OS"=Windows_NT
                    "Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\Common Files\Roxio Shared\DLLShared;C:\Program Files\Common Files\Roxio Shared\9.0\DLLShared;C:\Program Files\QuickTime\QTSystem\
                    "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
                    "PROCESSOR_ARCHITECTURE"=x86
                    "TEMP"=%SystemRoot%\TEMP
                    "TMP"=%SystemRoot%\TEMP
                    "USERNAME"=SYSTEM
                    "windir"=%SystemRoot%
                    "PROCESSOR_LEVEL"=15
                    "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 6 Stepping 5, GenuineIntel
                    "PROCESSOR_REVISION"=0605
                    "NUMBER_OF_PROCESSORS"=2
                    "RoxioCentral"=C:\Program Files\Common Files\Roxio Shared\9.0\Roxio Central33\
                    "CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip
                    "QTJAVA"=C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip

                    -----------------EOF-----------------

                    0
                    1. Hello jolie bretonne

                      kisses
                      0
                      1. Hello beau breton :DDDD

                        Bisous

                        0
                      2. Contributeur sécurité
                        @BOTTIsam1965vous z'avez pas finit de vous bécoter lol !

                        il est où ce rapport que j'ai demandé !

                        X )))))))))

                        Chiqui:
                        j'ai pas encore tester ... :p
                        0
                      3. @sKe69Rhôooo l'autre !! t'es Zaloux ??? ;;))

                        Allez, un Kiss pour toi aussi :DD

                        0
                      4. Contributeur sécurité
                        @BOTTIsam1965AHHH ... c'est mieux ... :p
                        0
                      5. @sKe69:DDDDD

                        Ouais , on travaille dans de meilleures conditions quand on est câliné...... ;;;)))

                        Bon pas trop aussi....sinon ça déconcentre et le diagnostic des rapports va être du n'importe quoi ....!! Lol

                        0
                    2. Oups !! c'est le Breton qui m'a déconcentré avec ses Kiss !! mdr

                      J'avais pas vu le post Ske , Excuse, Voici le rapport :

                      -----------\\ ToolBar S&D 1.2.3 XP/Vista

                      Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
                      X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) D CPU 3.00GHz )
                      BIOS : Phoenix - AwardBIOS v6.00PG
                      USER : Boukraa ( Not Administrator ! )
                      BOOT : Normal boot
                      Antivirus : Norton 360 2007 (Not Activated)
                      Firewall : Norton 360 2007 (Activated)
                      C:\ (Local Disk) - NTFS - Total : 141 Go Free : 77 Go
                      D:\ (CD or DVD)
                      F:\ (USB)
                      G:\ (USB)
                      H:\ (USB)
                      I:\ (USB)
                      J:\ (USB)

                      "C:\ToolBar SD" ( MAJ : 23-10-2008|0:25 )
                      Option : [1] ( 14/11/2008|13:43 )

                      [ UAC => 0 ]

                      -----------\\ Recherche de Fichiers / Dossiers ...

                      C:\Program Files\Platrium
                      C:\Program Files\Platrium\bin

                      -----------\\ [..\Internet Explorer\Main]

                      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                      "Local Page"="C:\\Windows\\system32\\blank.htm"
                      "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                      "Start Page"="http://mystart.magentic.com"
                      "Url"="https://www.msn.com/fr-fr/actualite/"

                      [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                      "Start Page"="https://www.msn.com/fr-fr/"
                      "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
                      "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                      "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"

                      --------------------\\ Recherche d'autres infections

                      Aucune autre infection trouvée !

                      [ UAC => 1 ]

                      1 - "C:\ToolBar SD\TB_1.txt" - 26/10/2008|19:19 - Option : [1]
                      2 - "C:\ToolBar SD\TB_2.txt" - 26/10/2008|19:49 - Option : [2]
                      3 - "C:\ToolBar SD\TB_3.txt" - 14/11/2008|13:43 - Option : [1]

                      -----------\\ Fin du rapport a 13:43:47,64

                      0
                      1. Contributeur sécurité
                        Bien ...

                        la suite dans l'ordre :

                        1- Nettoyage avec ToolBar S&D :

                        !! Déconnectes toi et fermes toute tes applications en cours le temps de la manipe !!

                        Relances Toolbar-S&D en double-cliquant sur le raccourci.
                        -->Tapes sur l'option 2 ( "nettoyage" ) puis tapes sur "Entrée".

                        Note : ne touches à rien lors de la suppression !

                        Un rapport sera généré à la fin du processus : postes son contenu dans ta prochaine réponse
                        pour analyse ...

                        ================

                        2- re-désactives l'UAC ! ( car ToolBar S&D l'a réactivé ... )

                        ================

                        3- Télécharges UsbFix ( de Chiquitine29 et Chimay8 ) sur ton bureau :

                        http://sd-1.archive-host.com/membres/up/116615172019703188/UsbFix.exe

                        ! Déconnectes toi d'internet et fermes toutes applications en cours !

                        --> Double-cliques sur l' .exe pour lancer l'installation de l'outil ( ne touche pas aux paramètres d'installe ) .

                        Impératif :
                        Branches toutes tes unités externes à ton PC (clé USB, DD externe, flash disk, lecteur MP3, etc...) succeptibles d'avoir été infectés ( mais sans les ouvrir ! ) .

                        --> Double-cliques sur le raccourci "UsbFix" qui est sur ton bureau pour lancer l'outil et laisses le travailler .

                        --> Le pc va redémarrer .

                        --> Une fois de retour à ton bureau , le rapport "UsbFix.txt" s'affiche .
                        Fais un copier/coller de son contenu dans ta prochaine réponse pour analyse et attends la suite ....

                        ( Note : le rapport UsbFix.txt est sauvegardé a la racine du disque dur > C:\UsbFix.txt )

                        PS : Si le Bureau ne réapparait pas, presses Ctrl + Alt + Suppr , Onglet "Fichier"-> "Nouvelle tâche":
                        tapes explorer.exe et valides .

                        ================

                        4- refais un scan RSIT , postes le nouveau rapport "Log.TX" obtenu et attends la suite ...

                        ================

                        A toute pour les résultats ^^ .... Si chiqui peux prendre la ralève , y a pas de soucis ! ... Car là je m'en vais ... ;)
                        0
                        1. La première étape de nettoyage avec Toolbar S&d :

                          Je continu le reste :D

                          -----------\\ ToolBar S&D 1.2.3 XP/Vista

                          Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
                          X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) D CPU 3.00GHz )
                          BIOS : Phoenix - AwardBIOS v6.00PG
                          USER : Boukraa ( Not Administrator ! )
                          BOOT : Normal boot
                          Antivirus : Norton 360 2007 (Not Activated)
                          Firewall : Norton 360 2007 (Activated)
                          C:\ (Local Disk) - NTFS - Total : 141 Go Free : 77 Go
                          D:\ (CD or DVD)
                          F:\ (USB)
                          G:\ (USB)
                          H:\ (USB)
                          I:\ (USB)
                          J:\ (USB)

                          "C:\ToolBar SD" ( MAJ : 23-10-2008|0:25 )
                          Option : [2] ( 14/11/2008|14:03 )

                          [ UAC => 1 ]

                          -----------\\ SUPPRESSION

                          Supprime! - C:\Program Files\Platrium\bin
                          Supprime! - C:\Program Files\Platrium

                          -----------\\ Recherche de Fichiers / Dossiers ...

                          -----------\\ [..\Internet Explorer\Main]

                          [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                          "Local Page"="C:\\Windows\\system32\\blank.htm"
                          "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                          "Start Page"="http://mystart.magentic.com"
                          "Url"="https://www.msn.com/fr-fr/actualite/"

                          [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                          "Start Page"="https://www.msn.com/fr-fr/"
                          "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
                          "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                          "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"

                          --------------------\\ Recherche d'autres infections

                          Aucune autre infection trouvée !

                          [ UAC => 1 ]

                          1 - "C:\ToolBar SD\TB_1.txt" - 26/10/2008|19:19 - Option : [1]
                          2 - "C:\ToolBar SD\TB_2.txt" - 26/10/2008|19:49 - Option : [2]
                          3 - "C:\ToolBar SD\TB_3.txt" - 14/11/2008|13:43 - Option : [1]
                          4 - "C:\ToolBar SD\TB_4.txt" - 14/11/2008|14:04 - Option : [2]

                          -----------\\ Fin du rapport a 14:04:03,32

                          0
                          1. Pour la dernière étape, celle du nettoyage avec UsbFix, l'ordi n'a pas arrêter de me sortir le Message suivant :

                            Exeption Processing Message 0xc0000013 Parameters 0x755A92A0
                            0x00000004 0x755A92A0 0x755A92A0

                            Me demandant si je voulais Annuler Recommencer ou Continuer

                            J'ai opté à chaque fois l'option Continuer

                            Voici le rapport édité :

                            -------------- UsbFix V2.407 ---------------

                            * User : Boukraa - PC-DE-BOUKRAA
                            * Outils mis a jours le 14/11/2008 par Chiquitine29 et Chimay8
                            * Recherche effectuée à 14:41:49 le 14/11/2008
                            * Windows Vista - Internet Explorer 7.0.6001.18000

                            --------------- [ Processus actifs ] ----------------

                            C:\Windows\System32\smss.exe
                            C:\Windows\system32\csrss.exe
                            C:\Windows\system32\wininit.exe
                            C:\Windows\system32\csrss.exe
                            C:\Windows\system32\services.exe
                            C:\Windows\system32\lsass.exe
                            C:\Windows\system32\lsm.exe
                            C:\Windows\system32\winlogon.exe
                            C:\Windows\system32\svchost.exe
                            C:\Windows\system32\svchost.exe
                            C:\Windows\System32\svchost.exe
                            C:\Windows\System32\svchost.exe
                            C:\Windows\System32\svchost.exe
                            C:\Windows\system32\svchost.exe
                            C:\Windows\system32\SLsvc.exe
                            C:\Windows\system32\svchost.exe
                            C:\Windows\system32\svchost.exe
                            C:\Windows\System32\spoolsv.exe
                            C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
                            C:\Windows\system32\svchost.exe
                            C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
                            C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                            C:\Program Files\Bonjour\mDNSResponder.exe
                            C:\Program Files\Windows Live\Contrôle parental\fsssvc.exe
                            C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                            C:\Program Files\Olivetti\ANY_WAY\olMntrService.exe
                            C:\Windows\system32\svchost.exe
                            C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
                            C:\Windows\system32\svchost.exe
                            C:\Windows\System32\svchost.exe
                            C:\Windows\system32\SearchIndexer.exe
                            C:\Windows\system32\WUDFHost.exe
                            C:\Windows\system32\taskeng.exe
                            C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
                            C:\Windows\system32\wbem\wmiprvse.exe
                            C:\Windows\system32\taskeng.exe
                            C:\Windows\system32\userinit.exe
                            C:\Windows\system32\Dwm.exe
                            C:\Users\Boukraa\AppData\Local\Temp\A0C1.tmp\b2e.exe
                            C:\Program Files\Common Files\Real\Update_OB\realsched.exe
                            C:\Windows\system32\conime.exe
                            C:\Windows\vsnpstd3.exe
                            C:\Windows\system32\DllHost.exe
                            C:\Windows\FixCamera.exe
                            C:\Windows\tsnpstd3.exe
                            C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
                            C:\Windows\system32\wbem\wmiprvse.exe

                            --------------- [ Informations lecteurs ] ----------------

                            C: - Lecteur fixe
                            D: - Lecteur de CD-ROM
                            E: - Lecteur amovible

                            --------------- [ Registre / Startup ] ----------------

                            HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
                            WPCUMI REG_SZ C:\Windows\system32\WpcUmi.exe
                            TkBellExe REG_SZ "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
                            snpstd3 REG_SZ C:\Windows\vsnpstd3.exe
                            FixCamera REG_SZ C:\Windows\FixCamera.exe
                            tsnpstd3 REG_SZ C:\Windows\tsnpstd3.exe
                            OlStatusMon REG_SZ "C:\Program Files\Olivetti\ANY_WAY\olDvcStatus.exe" dvcStatusMinimize
                            Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                            avgnt REG_SZ "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
                            RtHDVCpl REG_SZ RtHDVCpl.exe
                            Skytel REG_SZ Skytel.exe
                            NvSvc REG_SZ RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
                            NvCplDaemon REG_SZ RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
                            NvMediaCenter REG_SZ RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
                            LogMeIn GUI REG_SZ "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
                            QuickTime Task REG_SZ "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                            SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre6\bin\jusched.exe"
                            iTunesHelper REG_SZ "C:\Program Files\iTunes\iTunesHelper.exe"

                            HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents

                            HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
                            Sidebar REG_SZ C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
                            SmpcSys REG_SZ C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
                            ehTray.exe REG_SZ C:\Windows\ehome\ehTray.exe
                            MsnMsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                            IncrediMail REG_SZ C:\Program Files\IncrediMail\bin\IncMail.exe /c

                            HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\AdobeUpdater

                            --------------- [ Registre / Mountpoint2 ] ----------------

                            Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f924ff65-b5f8-11dc-ab42-001d7d20a60b}\Shell\AutoRun\command

                            --------------- [ Nettoyage des disques ] ----------------

                            Supprimé ! - [20/05/2006 19:19] E:\host.exe
                            Supprimé ! - [14/11/2007 15:23] E:\MS32DLL.dll.vbs

                            --------------- [ Listing des fichiers présents ] ----------------

                            -> /!\ Le resultat doit etre interprété par un spécialiste /!\

                            [18/09/2006 22:43][--a------] C:\autoexec.bat
                            [02/12/2005 19:06][-r-------] D:\Analyse Transactionnelle Egogames Setup.exe
                            [02/12/2005 19:06][-r-------] D:\GANTT.exe

                            --------------- ! Fin du rapport ! ----------------

                            0
                            1. t avais des disque (cd) dans les lecteurs ??

                              C'est le programme qui m'a demandé d'en mettre un , je suis bêtement les ordres moi ;;))

                              Bon, Je retourne faire ce que tu m'a demandé :D

                              0
                              1. C'est normal chiquitine que ça reste autant de temps ????

                                Bon je prends mon mal en patience, j'attends le rapport..... et j'arrête de me plaindre ;;))

                                0
                            • 1
                            • 2
                            • 3
                            • 4