Formater avec partition magic

tu dit qu'il te trouve les partition ,
dans poste de travail est ce que tu as tes partitions (disques )

voila le fichier tel kel...



-------------- UsbFix V2.413.1 ---------------

* User : lorrant - LORANT
* Outils mis a jours le 24/11/2008 par Chiquitine29 et Chimay8
* Recherche effectuée à 18:12:56 le 27/11/2008
* Windows Xp - Internet Explorer 6.0.2900.5512


--------------- [ Processus actifs ] ----------------


C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\WINDOWS\system32\imapi.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\pr2amleb.exe
C:\WINDOWS\system32\pr2apmlb.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\Trend Micro\RUBotted\TMRUBotted.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Tablet.exe
C:\DOCUME~1\lorrant\LOCALS~1\Temp\1.tmp\b2e.exe
C:\WINDOWS\system32\Tablet.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

--------------- [ Informations lecteurs ] ----------------

C: - Lecteur fixe

D: - Lecteur fixe

E: - Lecteur fixe

H: - Lecteur de CD-ROM

I: - Lecteur de CD-ROM

L: - Lecteur fixe

M: - Lecteur fixe

O: - Lecteur fixe

P: - Lecteur fixe

Q: - Lecteur amovible

S: - Lecteur fixe


+- Contenu de l'autorun : H:\autorun.inf

[autorun]
open=Formation.exe


+- Contenu de l'autorun : I:\autorun.inf

[autorun]
OPEN=AUTORUN.EXE
ICON=AUTORUN.EXE,0


--------------- [ Lecteur C ] ----------------

C: - Lecteur fixe


+- Listing des fichiers présents :

[11/10/2008 19:26][--a--c---] C:\AUTOEXEC.BAT
[05/08/2004 13:00][-rahs----] C:\NTDETECT.COM
[08/11/2008 17:42][--ahsc---] C:\boot.ini
[27/11/2008 18:13][--a--c---] C:\UsbFix.txt
[27/11/2008 18:13][--a--c---] C:\YServer.txt
[03/09/2007 15:42][--a--c---] C:\CONFIG.SYS
[03/09/2007 15:42][--a--c---] C:\IO.SYS
[03/09/2007 15:42][--a--c---] C:\MSDOS.SYS
[03/09/2007 15:42][--a--c---] C:\pagefile.sys

--------------- [ Lecteur D ] ----------------

D: - Lecteur fixe


+- Listing des fichiers présents :

[11/10/2008 19:26][--a--c---] D:\AUTOEXEC.BAT
[05/08/2004 13:00][-rahs----] D:\NTDETECT.COM
[08/11/2008 17:42][--ahsc---] D:\boot.ini
[22/09/2008 15:04][--a--c---] D:\ComboFix.txt
[22/09/2008 15:04][--a--c---] D:\VundoFix.txt
[22/09/2008 15:04][--a--c---] D:\YServer.txt
[03/09/2007 15:42][--a--c---] D:\CONFIG.SYS
[03/09/2007 15:42][--a--c---] D:\IO.SYS
[03/09/2007 15:42][--a--c---] D:\MSDOS.SYS

--------------- [ Lecteur E ] ----------------

E: - Lecteur fixe


+- Listing des fichiers présents :

[08/11/2008 20:56][--ahsc---] E:\Desktop.ini

--------------- [ Lecteur H ] ----------------

H: - Lecteur de CD-ROM


+- Listing des fichiers présents :

[13/09/2007 12:17][-r-------] H:\Formation.exe
[26/01/2006 19:56][-r-h-----] H:\autorun.inf
[06/03/2007 12:31][-r-h-----] H:\AC_RunActiveContent.js
[13/09/2007 16:42][-r-------] H:\Demarrage.txt

--------------- [ Lecteur I ] ----------------

I: - Lecteur de CD-ROM


+- Listing des fichiers présents :

[23/05/2006 13:46][-r-------] I:\AutoRun.exe
[29/05/2006 13:44][-r-------] I:\AutoRun.ini
[07/09/2005 11:07][-r-------] I:\AUTORUN.INF

--------------- [ Lecteur L ] ----------------

L: - Lecteur fixe


+- Listing des fichiers présents :


--------------- [ Lecteur M ] ----------------

M: - Lecteur fixe


+- Listing des fichiers présents :

[07/11/2007 07:00][--a--c---] M:\globdata.ini
[07/11/2007 07:00][--a--c---] M:\install.ini

--------------- [ Lecteur O ] ----------------

O: - Lecteur fixe


+- Listing des fichiers présents :


--------------- [ Lecteur P ] ----------------

P: - Lecteur fixe


+- Listing des fichiers présents :


--------------- [ Lecteur Q ] ----------------

Q: - Lecteur amovible


+- Listing des fichiers présents :


--------------- [ Lecteur S ] ----------------

S: - Lecteur fixe


+- Listing des fichiers présents :


--------------- [ Registre / Startup ] ----------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe
RocketDock="C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe"
CursorFX="C:\Program Files\Stardock\CursorFX\CursorFX.exe"
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\AdobeUpdater=
<NO NAME>=

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
NvCplDaemon="RUNDLL32.EXE" C:\WINDOWS\system32\NvCpl.dll,NvStartup
AVP="C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
Kernel and Hardware Abstraction Layer=KHALMNPR.EXE
oodefragtray=C:\WINDOWS\system32\oodtray.exe
TkBellExe="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
SSBkgdUpdate="C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
PaperPort PTD="C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe"
IndexSearch="C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe"
Malwarebytes' Anti-Malware="C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
TrueImageMonitor.exe=C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
AcronisTimounterMonitor=C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
Acronis Scheduler2 Service="C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe"
!AVG Anti-Spyware="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
KernelFaultCheck=%systemroot%\system32\dumprep 0 -k
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL=
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI=
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS=
<NO NAME>=

--------------- [ Registre / Mountpoint2 ] ----------------

Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\H\Shell\AutoRun\command
Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\I\Shell\AutoRun\command

--------------- [ Nettoyage des disques ] ----------------

Supprimé ! - C:\DOCUME~1\lorrant\LOCALS~1\Temp\ir_ext_temp_0\AutoPlay\Docs\Keygen.exe
Echec de la supression !! - [26/01/2006 19:56] H:\autorun.inf
Echec de la supression !! - [26/01/2006 19:56] H:\autorun.inf
Echec de la supression !! - [26/01/2006 19:56] H:\autorun.inf
Echec de la supression !! - [07/09/2005 11:07] I:\autorun.inf
Echec de la supression !! - [29/05/2006 13:44] I:\autorun.ini
Echec de la supression !! - [23/05/2006 13:46] I:\autorun.exe
Echec de la supression !! - [07/09/2005 11:07] I:\autorun.inf
Echec de la supression !! - [07/09/2005 11:07] I:\autorun.inf

--------------- [ Resumé ] ----------------

-> /!\ Le resultat doit etre interprété par un spécialiste /!\

[11/10/2008 19:26][--a--c---] C:\AUTOEXEC.BAT
[05/08/2004 13:00][-rahs----] C:\NTDETECT.COM
[08/11/2008 17:42][--ahsc---] C:\boot.ini
[11/10/2008 19:26][--a--c---] D:\AUTOEXEC.BAT
[05/08/2004 13:00][-rahs----] D:\NTDETECT.COM
[08/11/2008 17:42][--ahsc---] D:\boot.ini
[08/11/2008 20:56][--ahsc---] E:\Desktop.ini
[13/09/2007 12:17][-r-------] H:\Formation.exe
[26/01/2006 19:56][-r-h-----] H:\autorun.inf
[06/03/2007 12:31][-r-h-----] H:\AC_RunActiveContent.js
[23/05/2006 13:46][-r-------] I:\AutoRun.exe
[29/05/2006 13:44][-r-------] I:\AutoRun.ini
[07/09/2005 11:07][-r-------] I:\AUTORUN.INF
[07/11/2007 07:00][--a--c---] M:\globdata.ini
[07/11/2007 07:00][--a--c---] M:\install.ini

--------------- ! Fin du rapport ! ----------------

hello,

mon prob c pas de partitionner, mais de formater...
donc je peut pas trop t'aider là...

cordialement

voila...



----------------- FindyKill V4.706 ------------------

* User : lorrant - LORANT
* Emplacement : C:\Program Files\FindyKill
* Outils Mis a jours le 27/11/08 par Chiquitine29
* Recherche effectuée à 10:14:01 le 28/11/2008
* Windows XP - Internet Explorer 6.0.2900.5512

((((((((((((((((( *** Recherche *** ))))))))))))))))))


--------------- [ Processus actifs ] ----------------


C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\Program Files\Stardock\CursorFX\CursorFX.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\WINDOWS\system32\imapi.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\Trend Micro\RUBotted\TMRUBotted.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Tablet.exe
C:\WINDOWS\system32\WTablet\TabUserW.exe
C:\WINDOWS\system32\Tablet.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\msiexec.exe

--------------- [ Fichiers/Dossiers infectieux ] ----------------


»»»» Presence des fichiers dans C:


»»»» Presence des fichiers dans C:\WINDOWS


»»»» Presence des fichiers dans C:\WINDOWS\Prefetch


»»»» Presence des fichiers dans C:\WINDOWS\system32


»»»» Presence des fichiers dans C:\WINDOWS\system32\drivers


»»»» Presence des fichiers dans C:\Documents and Settings\lorrant\Application Data


»»»» Presence des fichiers dans C:\DOCUME~1\lorrant\LOCALS~1\Temp


»»»» Presence des fichiers dans C:\Documents and Settings\lorrant\Local Settings\Temporary Internet Files\Content.IE5

Found ! [10/11/2006 09:39] - C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Local Cache\7B5560BB781B40259A06350E9B643B6E_more.jpg
Found ! [08/07/2007 12:27] - C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Local Cache\D3987B641C134048B815DB578D607F42_more.jpg
Found ! [14/09/2008 19:29] - C:\Documents and Settings\lorrant\Application Data\DxO Labs\DxO Optics Pro\Storage\cache\thumbnails\0b136376-f750-4c27-8109-5154fe3b645c.jpg
Found ! [26/05/2008 10:26] - C:\Documents and Settings\lorrant\iWizz\Thumbnails\28FDE204-FB64-4965-9903-4445C6EEAF2D.jpg
Found ! [26/05/2008 10:29] - C:\Documents and Settings\lorrant\iWizz\Thumbnails\63B64114-7395-4337-9F62-42B17A1280FE.jpg
Found ! [26/05/2008 10:29] - C:\Documents and Settings\lorrant\iWizz\Thumbnails\6E929B64-5EBA-4763-80DC-68CFFCE2E00F.jpg
Found ! [26/05/2008 10:29] - C:\Documents and Settings\lorrant\iWizz\Thumbnails\888F3192-C441-45CA-9E0A-9D8B64162527.jpg
Found ! [26/05/2008 10:29] - C:\Documents and Settings\lorrant\iWizz\Thumbnails\950784CE-0E33-4625-B640-D3DBBF7028C8.jpg
Found ! [26/05/2008 10:29] - C:\Documents and Settings\lorrant\iWizz\Thumbnails\AB643D86-6E1F-44C7-8533-BD5BC5C9C22C.jpg
Found ! [26/05/2008 10:26] - C:\Documents and Settings\lorrant\iWizz\Thumbnails\B647E9A2-9142-42BD-82B8-B2A37494C391.jpg
Found ! [26/05/2008 10:28] - C:\Documents and Settings\lorrant\iWizz\Thumbnails\C00BE4EB-AB7D-4C49-8631-2B6488A56CE8.jpg
Found ! [26/05/2008 10:28] - C:\Documents and Settings\lorrant\iWizz\Thumbnails\F611A7D1-919E-4E04-B646-104FF29D3F4A.jpg
Found ! [26/05/2008 10:28] - C:\Documents and Settings\lorrant\iWizz\Thumbnails\F6D05EA0-4D8B-47ED-B646-099FA4FA064B.jpg

--------------- [ Registre / Startup ] ----------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]

ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe
RocketDock="C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe"
CursorFX="C:\Program Files\Stardock\CursorFX\CursorFX.exe"
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\AdobeUpdater=
<NO NAME>=

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]

NvCplDaemon="RUNDLL32.EXE" C:\WINDOWS\system32\NvCpl.dll,NvStartup
AVP="C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
Kernel and Hardware Abstraction Layer=KHALMNPR.EXE
oodefragtray=C:\WINDOWS\system32\oodtray.exe
TkBellExe="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
SSBkgdUpdate="C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
PaperPort PTD="C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe"
IndexSearch="C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe"
Malwarebytes' Anti-Malware="C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
TrueImageMonitor.exe=C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
AcronisTimounterMonitor=C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
Acronis Scheduler2 Service="C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe"
!AVG Anti-Spyware="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL=
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI=
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS=
<NO NAME>=


--------------- [ Registre / Clés infectieuses ] ----------------


Found ! - HKEY_USERS\S-1-5-21-776561741-2052111302-725345543-1004\Software\bisoft
Found ! - HKEY_CURRENT_USER\Software\bisoft

--------------- [ Etat / Services ] ----------------



+- Services : [ Auto=2 / Demande=3 / Désactivé=4 ]

/!\ Ndisuio - Type de démarrage = 4

EapHost - Type de démarrage = 3

Ip6Fw - Type de démarrage = 3

SharedAccess - Type de démarrage = 2

wuauserv - Type de démarrage = 2

wscsvc - Type de démarrage = 2

WinDefend - Type de démarrage = 2



--------------- [ Recherche dans supports amovibles] ----------------


+- Informations :

C: - Lecteur fixe

D: - Lecteur fixe

E: - Lecteur fixe

H: - Lecteur de CD-ROM

L: - Lecteur fixe

M: - Lecteur fixe

O: - Lecteur fixe

P: - Lecteur fixe

S: - Lecteur fixe


+- Contenu de l'autorun : H:\autorun.inf

[autorun]
open=Formation.exe


+- presence des fichiers :

Found ! [26/01/2006 19:56][-r-h-----] - H:\autorun.inf


--------------- [ Registre / Mountpoint2 ] ----------------


-> Not found !


------------------- ! Fin du rapport ! --------------------

ca prend des plombes... c normal ?
j du stopper...

voila...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:19:08, on 29/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\Program Files\Stardock\CursorFX\CursorFX.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\imapi.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\Trend Micro\RUBotted\TMRUBotted.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Tablet.exe
C:\WINDOWS\system32\WTablet\TabUserW.exe
C:\WINDOWS\system32\Tablet.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\IncrediMail\bin\IMApp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [NvCplDaemon] "RUNDLL32.EXE" C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [oodefragtray] C:\WINDOWS\system32\oodtray.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] "C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe"
O4 - HKLM\..\Run: [IndexSearch] "C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe"
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [RocketDock] "C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [CursorFX] "C:\Program Files\Stardock\CursorFX\CursorFX.exe"
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Ajouter au fichier PDF existant - res://C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\ie_banner_deny.htm
O8 - Extra context menu item: Convertir au format PDF - res://C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) -
O16 - DPF: {A364AF35-0CDF-41E8-8F3B-E0E55E15EBA1} (Zenturi Active Programs Control) - http://www.programchecker.com/dll/nixon.cab
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://signin3.valueactive.com/Register/Branding/olr3313/OCX/flashax.cab
O18 - Protocol: bw+0 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bw+0s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bw-0 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bw-0s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bw00 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bw00s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bw10 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bw10s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bw20 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bw20s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bw30 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bw30s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bw40 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bw40s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bw50 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bw50s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bw60 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bw60s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bw70 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bw70s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bw80 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bw80s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bw90 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bw90s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwa0 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwa0s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwb0 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwb0s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwc0 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwc0s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwd0 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwd0s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwe0 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwe0s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwf0 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwf0s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - (no file)
O18 - Protocol: bwg0 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwg0s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwh0 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwh0s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwi0 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwi0s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwj0 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwj0s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwk0 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwk0s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwl0 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwl0s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwm0 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwm0s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwn0 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwn0s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwo0 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwo0s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwp0 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwp0s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwq0 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwq0s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwr0 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwr0s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bws0 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bws0s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwt0 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwt0s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwu0 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwu0s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwv0 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwv0s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bww0 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bww0s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwx0 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwx0s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwy0 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwy0s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwz0 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: bwz0s - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: offline-8876480 - {AC86460A-A87A-46E9-8DA1-8AB1D7AA6F2E} - (no file)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Fichiers communs\Skype\Skype4COM.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Fichiers communs\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Apprendre InDesign CS2 Drivers Auto Removal (pr2amleb) (pr2amleb) - telechargement.fr - C:\WINDOWS\system32\pr2amleb.exe
O23 - Service: Apprendre Photoshop LightRoom Drivers Auto Removal (pr2apmlb) (pr2apmlb) - telechargement.fr - C:\WINDOWS\system32\pr2apmlb.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: Roxio UPnP Renderer 9 - Unknown owner - C:\Program Files\Fichiers communs\Sonic Shared\RoxioUPnPRenderer9.exe (file missing)
O23 - Service: Roxio Upnp Server 9 - Unknown owner - C:\Program Files\Fichiers communs\Sonic Shared\RoxioUpnpService9.exe (file missing)
O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Unknown owner - C:\Program Files\Fichiers communs\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe (file missing)
O23 - Service: Trend Micro RUBotted Service (RUBotted) - Trend Micro Inc. - C:\Program Files\Trend Micro\RUBotted\TMRUBotted.exe
O23 - Service: stllssvr - Unknown owner - C:\Program Files\Fichiers communs\SureThing Shared\stllssvr.exe (file missing)
O23 - Service: TabletService - Wacom Technology, Corp. - C:\WINDOWS\system32\Tablet.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

----------------- FindyKill V4.706 ------------------

* User : lorrant - LORANT
* executed from : C:\Program Files\FindyKill
* Update on 27/11/08 par Chiquitine29
* Start at 12:13:09 the 29/11/2008
* Windows XP - Internet Explorer 6.0.2900.5512


((((((((((((((( *** deleting *** ))))))))))))))))))


--------------- [ Active Processes ] ----------------


C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\All Users\Application Data\TuneUp Software\TuneUp Utilities\WinStyler\tu_logonui.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe

--------------- [ Infected files / folders ] ----------------


»»»» Supression files in C:


»»»» Supression files in C:\WINDOWS


»»»» Supression files in C:\WINDOWS\Prefetch


»»»» Supression files in C:\WINDOWS\system32


»»»» Supression files in C:\WINDOWS\system32\drivers


»»»» Supression files in C:\Documents and Settings\lorrant\Application Data


»»»» Supression files in C:\DOCUME~1\lorrant\LOCALS~1\Temp


»»»» Supression files in C:\Documents and Settings\lorrant\Local Settings\Temporary Internet Files\Content.IE5

Deleted ! - C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Local Cache\7B5560BB781B40259A06350E9B643B6E_more.jpg
Deleted ! - C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Local Cache\D3987B641C134048B815DB578D607F42_more.jpg
Deleted ! - C:\Documents and Settings\lorrant\Application Data\DxO Labs\DxO Optics Pro\Storage\cache\thumbnails\0b136376-f750-4c27-8109-5154fe3­b645c.jpg
Deleted ! - C:\Documents and Settings\lorrant\iWizz\Thumbnails\28FDE204-FB64-4965-9903-44­45C6EEAF2D.jpg
Deleted ! - C:\Documents and Settings\lorrant\iWizz\Thumbnails\63B64114-7395-4337-9F62-42­B17A1280FE.jpg
Deleted ! - C:\Documents and Settings\lorrant\iWizz\Thumbnails\6E929B64-5EBA-4763-80DC-68­CFFCE2E00F.jpg
Deleted ! - C:\Documents and Settings\lorrant\iWizz\Thumbnails\888F3192-C441-45CA-9E0A-9D­8B64162527.jpg
Deleted ! - C:\Documents and Settings\lorrant\iWizz\Thumbnails\950784CE-0E33-4625-B640-D3­DBBF7028C8.jpg
Deleted ! - C:\Documents and Settings\lorrant\iWizz\Thumbnails\AB643D86-6E1F-44C7-8533-BD­5BC5C9C22C.jpg
Deleted ! - C:\Documents and Settings\lorrant\iWizz\Thumbnails\B647E9A2-9142-42BD-82B8-B2­A37494C391.jpg
Deleted ! - C:\Documents and Settings\lorrant\iWizz\Thumbnails\C00BE4EB-AB7D-4C49-8631-2B­6488A56CE8.jpg
Deleted ! - C:\Documents and Settings\lorrant\iWizz\Thumbnails\F611A7D1-919E-4E04-B646-10­4FF29D3F4A.jpg
Deleted ! - C:\Documents and Settings\lorrant\iWizz\Thumbnails\F6D05EA0-4D8B-47ED-B646-09­9FA4FA064B.jpg
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{0462C0C6-B641-47BD-AAEC-8598344042BA}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{14D6ABBD-7499-40DD-B647-C0C4A88242AE}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{1C751904-48CF-47BA-B64D-C3B47F768F0E}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{21F11CCA-8B64-4FA9-B773-D615BFA45F4F}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{2423B649-DA66-40B2-9F4B-132D23F60CCE}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{5BC1105C-C6A7-44E6-AB64-FABB81144FA6}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{7A3DDB64-DB8C-4098-92DF-D44D3D621167}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{7BCDD108-DB6B-46D3-857B-CEEB64B7864E}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{96CDFCFB-D86A-4C2E-B64C-F4A2A9AD9514}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{97261048-A1BC-4B64-9B43-03F751FBF288}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{A9620AFA-0FCF-442D-9CB3-4759D09DB649}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{B210CBA8-7B64-4039-A3E5-4907CF78F74C}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{B6404233-87BD-415C-B299-89460C4E39C0}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{BC2B6473-F207-4F9B-A23E-B02074B75786}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{CDFDBCC9-30C8-4760-BDD2-5B64900CC4EF}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{FC6ACC69-63EC-4B64-9239-CDD7F3E11CF2}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{FE3DC521-4F37-4835-86B0-AC3535B0CB64}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{0462C0C6-B641-47BD-AAEC-8598344042BA}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{14D6ABBD-7499-40DD-B647-C0C4A88242AE}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{1C751904-48CF-47BA-B64D-C3B47F768F0E}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{21F11CCA-8B64-4FA9-B773-D615BFA45F4F}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{2423B649-DA66-40B2-9F4B-132D23F60CCE}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{5BC1105C-C6A7-44E6-AB64-FABB81144FA6}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{7A3DDB64-DB8C-4098-92DF-D44D3D621167}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{7BCDD108-DB6B-46D3-857B-CEEB64B7864E}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{96CDFCFB-D86A-4C2E-B64C-F4A2A9AD9514}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{97261048-A1BC-4B64-9B43-03F751FBF288}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{A9620AFA-0FCF-442D-9CB3-4759D09DB649}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{B210CBA8-7B64-4039-A3E5-4907CF78F74C}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{B6404233-87BD-415C-B299-89460C4E39C0}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{BC2B6473-F207-4F9B-A23E-B02074B75786}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{CDFDBCC9-30C8-4760-BDD2-5B64900CC4EF}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{FC6ACC69-63EC-4B64-9239-CDD7F3E11CF2}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{FE3DC521-4F37-4835-86B0-AC3535B0CB64}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{0462C0C6-B641-47BD-AAEC-8598344042BA}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{14D6ABBD-7499-40DD-B647-C0C4A88242AE}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{1C751904-48CF-47BA-B64D-C3B47F768F0E}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{21F11CCA-8B64-4FA9-B773-D615BFA45F4F}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{2423B649-DA66-40B2-9F4B-132D23F60CCE}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{5BC1105C-C6A7-44E6-AB64-FABB81144FA6}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{7A3DDB64-DB8C-4098-92DF-D44D3D621167}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{7BCDD108-DB6B-46D3-857B-CEEB64B7864E}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{96CDFCFB-D86A-4C2E-B64C-F4A2A9AD9514}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{97261048-A1BC-4B64-9B43-03F751FBF288}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{A9620AFA-0FCF-442D-9CB3-4759D09DB649}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{B210CBA8-7B64-4039-A3E5-4907CF78F74C}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{B6404233-87BD-415C-B299-89460C4E39C0}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{BC2B6473-F207-4F9B-A23E-B02074B75786}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{CDFDBCC9-30C8-4760-BDD2-5B64900CC4EF}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{FC6ACC69-63EC-4B64-9239-CDD7F3E11CF2}.jpg­
Deleted ! - C:\Documents and Settings\lorrant\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{FE3DC521-4F37-4835-86B0-AC3535B0CB64}.jpg­

--------------- [ Registry / Infected keys ] ----------------


--------------- [ States / Restarting of services ] ----------------



+- Services : [ Auto=2 / Request=3 / Disable=4 ]

Ndisuio - Type of startup = 3

EapHost - Type of startup = 2

Ip6Fw - Type of startup = 2

SharedAccess - Type of startup = 2

wuauserv - Type of startup = 2

wscsvc - Type of startup = 2

WinDefend - Type of startup = 2


--------------- [ Cleaning removable drives ] ----------------

+- Informations :

C: - Lecteur fixe

D: - Lecteur fixe

E: - Lecteur fixe

L: - Lecteur fixe

M: - Lecteur fixe

O: - Lecteur fixe

P: - Lecteur fixe

S: - Lecteur fixe


+- deleting files :


--------------- [ Registry / Mountpoint2 ] ----------------


-> Not found !


--------------- [ Searching Cracks / Keygen ] ----------------

C:\Documents and Settings\lorrant\Application Data\Quark\QuarkXPress 7.0\jaws\FontStubs\WesternFonts\CrackedJohnnie.ps
C:\Documents and Settings\lorrant\Application Data\Quark\QuarkXPress 8\jaws\FontStubs\WesternFonts\CrackedJohnnie.ps
C:\Documents and Settings\lorrant\Bureau\Scripts\Cracked Wall Paintings.atn
C:\Documents and Settings\lorrant\Local Settings\Application Data\IM\Animation\firecracker.ima
C:\Documents and Settings\lorrant\Local Settings\Application Data\IM\Letter\cracking_crackers.imf
C:\Documents and Settings\All Users\Application Data\IncrediMail\Data\Sound\tchaikovsky_the_nutcracker.imw
C:\Documents and Settings\All Users\Application Data\MGS\cache\c\crackerjack1.a67bc53dc3f76ad51f07ff7b93734168.inf
C:\Documents and Settings\All Users\Application Data\MGS\cache\c\crackerjack1.b49d2ddd320948ad790aa39df760c775.inf
C:\Documents and Settings\All Users\Application Data\MGS\cache\c\crackerjack1.f97d5f24e7d2d1a2b7f52b4dc211ed43.inf
C:\Documents and Settings\All Users\Application Data\MGS\cache\c\crackerjackcommon.30e8e1c899235111d3b1b84c91bce0ae.inf
C:\Documents and Settings\All Users\Application Data\MGS\cache\c\crackerjackcommon.b4fc0002a0c341b1251a31ea5012f803.inf


---------------- ! End of report ! ----------------

pour ça il me suffit de pouvoir formater C...
toutes les infections disparaitront non?
XP est sur un autre disque.

pour ça il me suffirait de pouvoir formater C...
toutes les infections disparaitront non?
XP est sur un autre disque.

je sais toujours pas ou je vais avec tes directives...
merci de m'éclairer

C RESOLU

formater... réinstaller...

t qui toi pour critiquer alors que t' as pas donné l'ombre d'une solution...
minable