Mailskinner

j ai deja fait cela?!

il est dans mon mail precedent

j y vais.. sais tu tu supprimer MailSkinner?

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:46:18, on 06/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avcenter.exe
c:\program files\avira\antivir personaledition classic\avscan.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\SOLANGE\Bureau\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ww25.planetis.com/net@tous
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=D4322FEE7CF74A348CB9CE970F098EF5
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.mini60.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [Icon] C:\WINDOWS\system32\drivers\Icon.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [EPSON Stylus C42 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P23 "EPSON Stylus C42 Series" /O6 "USB001" /M "Stylus C42"
O4 - HKLM\..\Run: [NovaNet-WEB Tray Control] C:\Program Files\Packard Bell EverSafe\TrayControl.exe
O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [BigDog305] C:\WINDOWS\VM305_STI.EXE VIMICRO USB PC Camera (ZC0305)
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [LaCie Backup] C:\Program Files\LaCie\Backup Software\\LaCieBackup.exe /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_1_0
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Packard Bell EverSafe Tray Control.lnk = C:\Program Files\Packard Bell EverSafe\TrayControl.exe
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: MP3Chansons - {EF6D6AE3-2625-40D6-A5AB-920DFD2DAF8C} - C:\Documents and Settings\SOLANGE\Application Data\MP3Chansons[1].exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
O16 - DPF: {8731163E-77B9-4F91-9122-F112521C28AF} (MMSPlayerX Class) - http://62.201.137.56/mmawap/jsp/composer/player/mmsPlayer.cab
O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.1.cab
O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by105fd.bay105.hotmail.msn.com/activex/HMAtchmt.ocx
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: MySqlInventime - Unknown owner - c:\mysql\bin\mysqld-max-nt.exe (file missing)
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

voici les 3 rapports.. que faire maintenant? merci ;-)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:46:18, on 06/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avcenter.exe
c:\program files\avira\antivir personaledition classic\avscan.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\SOLANGE\Bureau\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.planetis.com/net@tous
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=D4322FEE7CF74A348CB9CE970F098EF5
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.mini60.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [Icon] C:\WINDOWS\system32\drivers\Icon.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [EPSON Stylus C42 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P23 "EPSON Stylus C42 Series" /O6 "USB001" /M "Stylus C42"
O4 - HKLM\..\Run: [NovaNet-WEB Tray Control] C:\Program Files\Packard Bell EverSafe\TrayControl.exe
O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [BigDog305] C:\WINDOWS\VM305_STI.EXE VIMICRO USB PC Camera (ZC0305)
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [LaCie Backup] C:\Program Files\LaCie\Backup Software\\LaCieBackup.exe /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_1_0
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Packard Bell EverSafe Tray Control.lnk = C:\Program Files\Packard Bell EverSafe\TrayControl.exe
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: MP3Chansons - {EF6D6AE3-2625-40D6-A5AB-920DFD2DAF8C} - C:\Documents and Settings\SOLANGE\Application Data\MP3Chansons[1].exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
O16 - DPF: {8731163E-77B9-4F91-9122-F112521C28AF} (MMSPlayerX Class) - http://62.201.137.56/mmawap/jsp/composer/player/mmsPlayer.cab
O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.1.cab
O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by105fd.bay105.hotmail.msn.com/activex/HMAtchmt.ocx
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: MySqlInventime - Unknown owner - c:\mysql\bin\mysqld-max-nt.exe (file missing)
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
End of file - 8951 bytes



Logfile of random's system information tool 1.04 (written by random/random)
Run by SOLANGE at 2008-12-06 22:11:35
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 6 GB (12%) free of 53 GB
Total RAM: 511 MB (38% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:15:07, on 06/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\drivers\Icon.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Apps\Powercinema\PCMService.exe
C:\Program Files\Packard Bell EverSafe\TrayControl.exe
C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXE
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\VM305_STI.EXE
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\LaCie\Backup Software\LaCieBackup.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\SOLANGE\Bureau\RSIT.exe
C:\Program Files\trend micro\SOLANGE.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [Icon] C:\WINDOWS\system32\drivers\Icon.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [EPSON Stylus C42 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P23 "EPSON Stylus C42 Series" /O6 "USB001" /M "Stylus C42"
O4 - HKLM\..\Run: [NovaNet-WEB Tray Control] C:\Program Files\Packard Bell EverSafe\TrayControl.exe
O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [BigDog305] C:\WINDOWS\VM305_STI.EXE VIMICRO USB PC Camera (ZC0305)
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [LaCie Backup] C:\Program Files\LaCie\Backup Software\\LaCieBackup.exe /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_1_0
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Packard Bell EverSafe Tray Control.lnk = C:\Program Files\Packard Bell EverSafe\TrayControl.exe
O8 - Extra context menu item: Add to Windows &Live Favorites -
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: MP3Chansons - {EF6D6AE3-2625-40D6-A5AB-920DFD2DAF8C} - C:\Documents and Settings\SOLANGE\Application Data\MP3Chansons[1].exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) -
O16 - DPF: {8731163E-77B9-4F91-9122-F112521C28AF} (MMSPlayerX Class) -
O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) -
O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) -
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: MySqlInventime - Unknown owner - c:\mysql\bin\mysqld-max-nt.exe (file missing)
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

--
End of file - 10498 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-10-26 440384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2008-08-25 308856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll [2008-11-11 62728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:\program files\google\googletoolbar2.dll [2007-01-19 2436160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar2.dll [2007-01-19 2436160]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar avec bloqueur de fenêtres pop-up - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-10-26 440384]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-05 208952]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-05 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-05 455168]
"Icon"=C:\WINDOWS\system32\drivers\Icon.exe [2004-04-19 221184]
"SynTPLpr"=C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [2003-09-26 98304]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2003-09-26 503808]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2004-02-26 65024]
"ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2004-05-15 339968]
"PCMService"=c:\Apps\Powercinema\PCMService.exe [2004-10-08 81920]
"EPSON Stylus C42 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE [2002-07-01 74752]
"NovaNet-WEB Tray Control"=C:\Program Files\Packard Bell EverSafe\TrayControl.exe [2003-07-21 762368]
"DataLayer"=C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe [2005-06-07 819712]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2005-10-08 155648]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe [2008-06-10 144784]
"!AVG Anti-Spyware"=C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe [2007-06-11 6731312]
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2008-08-25 185896]
"BigDog305"=C:\WINDOWS\VM305_STI.EXE [2005-08-05 61440]
"AVP"=C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe [2008-11-11 206088]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"=C:\Program Files\MSN Messenger\MsnMsgr.Exe [2007-01-19 5674352]
"PcSync"=C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe [2005-06-24 860160]
"LaCie Backup"=C:\Program Files\LaCie\Backup Software\\LaCieBackup.exe [2005-08-04 2695168]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"updateMgr"=C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe [2004-11-22 307200]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MP3Chansons]
C:\Documents and Settings\SOLANGE\Application Data\MP3Chansons[1].exe t []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NapsterShell]
C:\Program Files\Napster\napster.exe /systray []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication]
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe [2005-06-29 176128]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Tool Live]
C:\DOCUME~1\SOLANGE\APPLIC~1\HECKTH~1\PeakSlow.exe []

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
Packard Bell EverSafe Tray Control.lnk - C:\Program Files\Packard Bell EverSafe\TrayControl.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2004-05-15 86016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
C:\WINDOWS\system32\klogon.dll [2008-11-11 218376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"=C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll [2007-05-30 79408]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AVG Anti-Spyware Driver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AVG Anti-Spyware Guard]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AVG Anti-Spyware Driver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AVG Anti-Spyware Guard]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\usmt\migwiz.exe"="C:\WINDOWS\system32\usmt\migwiz.exe:*:Enabled:Assistant Transfert de fichiers et de paramètres"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"C:\Program Files\FreeDial\FreeDial.exe"="C:\Program Files\FreeDial\FreeDial.exe:*:Enabled:FreeDial"
"C:\Program Files\Microsoft Games\Rise of Nations\rise.exe"="C:\Program Files\Microsoft Games\Rise of Nations\rise.exe:*:Enabled:Rise of Nations"
"C:\Program Files\Real\RealPlayer\realplay.exe"="C:\Program Files\Real\RealPlayer\realplay.exe:*:Enabled:RealPlayer"
"C:\Program Files\Fichiers communs\AOL\System Information\sinf.exe"="C:\Program Files\Fichiers communs\AOL\System Information\sinf.exe:*:Disabled:AOL - Informations sur le système"
"C:\Program Files\NetMeeting\conf.exe"="C:\Program Files\NetMeeting\conf.exe:*:Enabled:Windows® NetMeeting®"
"C:\mcoinstall.exe"="C:\mcoinstall.exe:*:Enabled:mcoinstall"
"C:\Program Files\WinAntiVirus Pro 2006\Updater.exe"="C:\Program Files\WinAntiVirus Pro 2006\Updater.exe:*:Enabled:updater.exe"
"C:\Program Files\Azureus\Azureus.exe"="C:\Program Files\Azureus\Azureus.exe:*:Enabled:Azureus"
"C:\Program Files\Outlook Express\msimn.exe"="C:\Program Files\Outlook Express\msimn.exe:*:Enabled:Outlook Express"
"C:\Program Files\HomePlayer1.5.3.1\HomePlayer.exe"="C:\Program Files\HomePlayer1.5.3.1\HomePlayer.exe:*:Enabled:HomePlayer"
"C:\Program Files\Freeplayer\vlc\vlc.exe"="C:\Program Files\Freeplayer\vlc\vlc.exe:*:Enabled:VLC media player"
"C:\Documents and Settings\SOLANGE\Bureau\utorrent.exe"="C:\Documents and Settings\SOLANGE\Bureau\utorrent.exe:*:Enabled:µTorrent"
"C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe"="C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe:*:Enabled:Assistance à distance - Windows Messenger et voix"
"C:\WINDOWS\system32\rtcshare.exe"="C:\WINDOWS\system32\rtcshare.exe:*:Enabled:Partage de l'application RTC"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

======List of files/folders created in the last 1 months======

2008-12-06 22:13:00 ----D---- C:\Program Files\trend micro
2008-12-06 22:11:35 ----DC---- C:\rsit
2008-12-06 17:39:45 ----D---- C:\Program Files\Kaspersky Lab
2008-12-06 17:39:44 ----D---- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2008-12-06 17:27:51 ----N---- C:\WINDOWS\SchedLgU.Txt
2008-12-06 17:21:48 ----AC---- C:\cleannavi.txt
2008-12-06 17:05:31 ----AC---- C:\fixnavi.txt
2008-12-06 17:03:18 ----D---- C:\Program Files\Navilog1
2008-12-06 16:12:00 ----D---- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
2008-12-06 15:52:27 ----D---- C:\Program Files\CCleaner
2008-11-28 22:14:32 ----D---- C:\Program Files\HomePlayer1.5.3.1
2008-11-13 21:04:20 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2008-11-13 21:04:13 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2008-11-13 21:03:59 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2008-11-11 20:00:04 ----A---- C:\WINDOWS\system32\klogon.dll

======List of files/folders modified in the last 1 months======

2008-12-06 22:13:15 ----D---- C:\WINDOWS\Temp
2008-12-06 22:13:00 ----RD---- C:\Program Files
2008-12-06 21:43:40 ----D---- C:\Program Files\Mozilla Firefox
2008-12-06 21:29:04 ----D---- C:\WINDOWS
2008-12-06 21:28:46 ----D---- C:\Program Files\Packard Bell EverSafe
2008-12-06 21:25:54 ----A---- C:\WINDOWS\ModemLog_Smart Link 56K Modem.txt
2008-12-06 21:23:31 ----D---- C:\Documents and Settings\SOLANGE\Application Data\uTorrent
2008-12-06 19:51:32 ----D---- C:\WINDOWS\Minidump
2008-12-06 17:42:24 ----HDC---- C:\Config.Msi
2008-12-06 17:42:12 ----SHD---- C:\WINDOWS\Installer
2008-12-06 17:41:43 ----D---- C:\WINDOWS\system32\drivers
2008-12-06 17:41:13 ----HD---- C:\WINDOWS\inf
2008-12-06 17:40:51 ----D---- C:\WINDOWS\system32
2008-12-06 17:39:27 ----D---- C:\WINDOWS\system32\CatRoot2
2008-12-06 16:14:53 ----D---- C:\WINDOWS\Prefetch
2008-12-06 16:02:50 ----D---- C:\WINDOWS\Debug
2008-12-06 15:52:35 ----D---- C:\Program Files\Yahoo!
2008-12-06 15:38:27 ----D---- C:\Program Files\Fichiers communs
2008-12-04 21:34:47 ----RSD---- C:\WINDOWS\assembly
2008-12-04 21:34:47 ----D---- C:\WINDOWS\Microsoft.NET
2008-12-04 21:14:43 ----SD---- C:\Documents and Settings\SOLANGE\Application Data\Microsoft
2008-12-04 21:14:31 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2008-12-04 21:14:30 ----DC---- C:\WINDOWS\system32\DRVSTORE
2008-12-04 20:53:25 ----D---- C:\WINDOWS\system32\config
2008-12-04 20:47:52 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2008-12-04 20:42:43 ----D---- C:\WINDOWS\WinSxS
2008-11-22 20:53:48 ----D---- C:\Program Files\eMule
2008-11-22 19:51:37 ----D---- C:\Program Files\WinRAR
2008-11-16 19:54:23 ----RSHD---- C:\WINDOWS\system32\dllcache
2008-11-13 21:09:11 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2008-11-13 21:04:19 ----HD---- C:\WINDOWS\$hf_mig$
2008-11-07 15:02:59 ----D---- C:\WINDOWS\Help

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Asapi;Asapi; C:\WINDOWS\system32\drivers\Asapi.sys [2002-08-06 11264]
R1 AVG Anti-Spyware Driver;AVG Anti-Spyware Driver; \??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys []
R1 AvgAsCln;AVG Anti-Spyware Clean Driver; C:\WINDOWS\System32\DRIVERS\AvgAsCln.sys [2007-05-30 10872]
R1 Cdr4_xp;Cdr4_xp; C:\WINDOWS\system32\drivers\Cdr4_xp.sys [2007-02-02 9336]
R1 Cdralw2k;Cdralw2k; C:\WINDOWS\system32\drivers\Cdralw2k.sys [2007-02-02 9464]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 KLIF;Kaspersky Lab Driver; C:\WINDOWS\system32\DRIVERS\klif.sys [2008-12-06 227344]
R2 Aspi32;Aspi32; C:\WINDOWS\system32\drivers\Aspi32.sys [2002-07-17 16877]
R2 MTC0005_MTCDIO;Wireless HotKey Driver; C:\WINDOWS\system32\drivers\MTCDIO.sys [2003-09-22 11316]
R2 UMAXPCLS;Pilote de scanneur pour port imprimante; C:\WINDOWS\system32\DRIVERS\umaxpcls.sys [2001-08-17 22912]
R3 ALCXSENS;Service for WDM 3D Audio Driver; C:\WINDOWS\system32\drivers\ALCXSENS.SYS [2004-02-24 400384]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-02-27 611820]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2004-05-15 745984]
R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 EMCR;EMCR; C:\WINDOWS\system32\DRIVERS\EMCR7SK.sys [2003-07-22 68224]
R3 klim5;Kaspersky Anti-Virus NDIS Filter; C:\WINDOWS\system32\DRIVERS\klim5.sys [2008-04-30 24592]
R3 Mtlmnt5;Mtlmnt5; C:\WINDOWS\system32\DRIVERS\Mtlmnt5.sys [2004-02-29 230584]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 RTL8023xp;Realtek RTL8139/810x/8169/8110 all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys [2004-04-13 70144]
R3 Slntamr;SmartLink AMR_PCI Driver; C:\WINDOWS\system32\DRIVERS\slntamr.sys [2004-03-09 635200]
R3 SlWdmSup;SlWdmSup; C:\WINDOWS\system32\DRIVERS\SlWdmSup.sys [2004-02-29 13248]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2003-09-26 177856]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 w22n51;Pilote Intel(R) PRO/Wireless 2200 Adapter; C:\WINDOWS\system32\DRIVERS\w22n51.sys [2004-01-02 1646720]
R3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys [2003-01-10 33588]
S1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys []
S1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys []
S1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys []
S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
S2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys []
S2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys []
S2 FILESpy;FILESpy; \??\C:\??\C:\Program Files\Softwin\BitDefender8\filespy.sys []
S2 MTCDIO;MTCDIO; C:\WINDOWS\System32\DRIVERS\MTCDIO.sys [2003-09-22 11316]
S2 REGSpy;REGSpy; \??\C:\??\C:\Program Files\Softwin\BitDefender8\regspy.sys []
S3 Cap7134;Cap7134 Capture; C:\WINDOWS\system32\DRIVERS\Cap7134.sys [2004-06-08 366016]
S3 catchme;catchme; \??\C:\DOCUME~1\SOLANGE\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 DCamUSBSQTECH;Dual-Mode DSC(2770); C:\WINDOWS\System32\Drivers\SQcaptur.sys [2002-09-10 24808]
S3 DSDrv4;DSDrv4; \??\C:\PROGRA~1\K!TV\Plugins\S_Bt8x8\DSDrv4.sys []
S3 dtscsi;dtscsi; C:\WINDOWS\System32\Drivers\dtscsi.sys [2008-03-09 223128]
S3 fbxusb;FreeBox USB Network Adapter; C:\WINDOWS\system32\DRIVERS\fbxusb.sys [2003-12-31 18848]
S3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
S3 MR97310_USB_DUAL_CAMERA;XDC-100; C:\WINDOWS\system32\DRIVERS\mr97310c.sys []
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 Mtlstrm;Mtlstrm; C:\WINDOWS\system32\DRIVERS\Mtlstrm.sys [2004-03-11 1300968]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NtMtlFax;NtMtlFax; C:\WINDOWS\system32\DRIVERS\NtMtlFax.sys [2004-02-29 180592]
S3 PhTVTune;Cap7134 TVTuner; C:\WINDOWS\system32\DRIVERS\PhTVTune.sys [2004-06-15 42080]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SlNtHal;SlNtHal; C:\WINDOWS\system32\DRIVERS\Slnthal.sys [2004-02-29 95656]
S3 SONYPVU1;Pilote de filtrage Sony USB (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 StillCam;Pilote d'appareil photo numérique série; C:\WINDOWS\system32\DRIVERS\serscan.sys [2001-08-23 6912]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 ZSMC0305;Look 316; C:\WINDOWS\System32\Drivers\usbVM305.sys [2006-08-02 1466624]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AOL ACS;AOL Connectivity Service; C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe [2004-02-25 1123440]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2004-05-15 376832]
R2 AVG Anti-Spyware Guard;AVG Anti-Spyware Guard; C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe [2007-05-30 312880]
R2 AVP;Kaspersky Anti-Virus; C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe [2008-11-11 206088]
R2 EPSONStatusAgent2;EPSON Printer Status Agent2; C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe [2002-07-17 94208]
R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe [2003-06-20 322120]
R2 SLService;SmartLinkService; C:\WINDOWS\system32\slserv.exe [2004-02-29 45056]
R2 SNMP;Service SNMP; C:\WINDOWS\System32\snmp.exe [2008-04-14 33280]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268800]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-03-02 138168]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 LPDSVC;Serveur d'impression TCP/IP; C:\WINDOWS\system32\tcpsvcs.exe [2004-08-05 19456]
S3 MySqlInventime;MySqlInventime; c:\mysql\bin\mysqld-max-nt MySqlInventime []
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 SNMPTRAP;Service d'interruption SNMP; C:\WINDOWS\System32\snmptrap.exe [2008-04-14 8704]
S3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 97136]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

-----------------EOF-----------------


info.txt logfile of random's system information tool 1.04 2008-12-06 22:15:51

======Uninstall list======

-->"C:\Program Files\Fichiers communs\aolshare\Coach\AolCInUn.exe" -lang="fr-fr"
-->C:\PROGRA~1\FICHIE~1\AOL\ACS\AcsUninstall.exe /c
-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{09B44E78-A988-4BC0-962F-63ECD3333708} /l1036
-->C:\Program Files\Fichiers communs\AOL\Screensaver\uninst_ygpss.exe
-->C:\Program Files\Fichiers communs\aolshare\Aolunins_fr.exe
-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\Program Files\Learn2.com\StRunner\stuninst.exe
-->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Adobe\PDF IFilter 6.0\Uninst.isu"
-->C:\WINDOWS\Modio\SLAMR2KO\Setup.exe /Remove
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}
-->C:\WINDOWS\system32\drivers\unMTCDIO.exe
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.EXE" -uninstall
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\SETUP.EXE" -uninstall
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" REMOVE
-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0015-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0019-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {5A2F65A4-808F-4A1E-973E-92E17824982D}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {430971B1-C31E-45DA-81E0-72C095BAB72C}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {B3F4DC34-7F60-4B7C-A79F-1C13012D99D4}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {F7A31780-33C4-4E39-951A-5EC9B91D7BF1}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe PDF IFilter 6.0-->C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Adobe\PDF IFilter 6.0\Uninst.isu"
Adobe Reader 7.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70000000000}
ArcSoft PhotoImpression 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7D090F28-CC6C-43A7-ABF2-8F4F26B4E187}\setup.exe" -l0x40c
AVG Anti-Spyware 7.5-->C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Uninstall.exe
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
eMule-->"C:\Program Files\eMule\Uninstall.exe"
EPSON Logiciel imprimante-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
EZface ActiveX 205-->C:\PROGRA~1\EZFace\ActiveX\uninst.bat 205 C:\PROGRA~1\EZFace\ActiveX
Freeplayer-->C:\Program Files\Freeplayer\Uninstall.exe
Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar2.dll"
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
HomePlayer 1.5.3.1-->C:\Program Files\HomePlayer1.5.3.1\uninst.exe
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
J2SE Runtime Environment 5.0 Update 11-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150110}
Java(TM) 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
Java(TM) 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Java(TM) SE Runtime Environment 6 Update 1-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
Kaspersky Anti-Virus 2009-->MsiExec.exe /I{6580C5A3-2336-4EC5-85F1-3448C5F6208A}
Kaspersky Anti-Virus 2009-->MsiExec.exe /I{6580C5A3-2336-4EC5-85F1-3448C5F6208A}
LaCie Backup Software v1.5.2042-->MsiExec.exe /I{6DD9963C-271A-4A14-82B0-4DC148C52E58}
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Look 316-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CD89BDD5-E758-42D5-B34B-C149F88CE515}\setup.exe" -l0x40c
MailSkinner-->MsiExec.exe /I{D046FF69-D86A-42C6-AE7F-B372C680446D}
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office Language Pack 2007 Service Pack 1 (SP1)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {EC50B538-CBE1-42E6-B7FE-87AA540AADFB}
Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint Viewer 2003-->MsiExec.exe /X{90AF040C-6000-11D3-8CFE-0150048383C9}
Microsoft Office Professional 2007-->MsiExec.exe /X{91120000-0014-0000-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Word 2002-->MsiExec.exe /I{911B040C-6000-11D3-8CFE-0050048383C9}
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956390)-->"C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mozilla Firefox (2.0.0.18)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML4 Parser-->MsiExec.exe /I{01501EBA-EC35-4F9F-8889-3BE346E5DA13}
Music Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5AFA4872-16B2-419E-ADCA-8E96E739115D}\setup.exe" -l0x40c
My DSC-->C:\Program Files\InstallShield Installation Information\{225af9a1-b556-88d5-94aa-0010b5426419}\setup.exe
Nokia PC Suite-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{617095DB-B523-4D11-BBFD-2D74C2AD98B8}
Packard Bell EverSafe-->"C:\Program Files\Packard Bell EverSafe\Uninstall.exe" C:\WINDOWS\ISUN040C.EXE -y -f"C:\Program Files\Packard Bell EverSafe\Uninst.isu"
Packard Bell InfoCentre-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B04AC0A3-7A0F-4E38-9DE7-FD1E4CE47D8C}\setup.exe"
QuickTime-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{4E5E22C2-1386-47AE-8EDE-32DDCDCD6653} /l1036
RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
Security Update for 2007 Microsoft Office System (KB955936)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {1D94099C-2BBA-440E-BD5E-093BBDF8F028}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for Microsoft Office Excel 2007 (KB955470)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {6E8637D8-10D6-4568-AA06-E2706F31685E}
Security Update for Microsoft Office PowerPoint 2007 (KB951338)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {558B709B-821B-4FC5-90FC-9A8890641E77}
Security Update for Microsoft Office Publisher 2007 (KB950114)-->

ComboFix 08-12-06.03 - SOLANGE 2008-12-06 23:43:32.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.223 [GMT 1:00]
Lancé depuis: c:\documents and settings\SOLANGE\Bureau\ComboFix.exe
* Un nouveau point de restauration a été créé
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\All Users\Application Data\WinAntiVirus Pro 2006
c:\documents and settings\SOLANGE\Application Data\WinAntiVirus Pro 2006
c:\documents and settings\SOLANGE\err.log
c:\program files\Fichiers communs\winantivirus pro 2006
c:\program files\Fichiers communs\winantivirus pro 2006\err.log
C:\WA6P
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\MabryObj.dll
c:\windows\system32\stera.log

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_FOPN
-------\Legacy_VSPF
-------\Legacy_VSPF_HK
-------\Service_FOPN


((((((((((((((((((((((((((((( Fichiers créés du 2008-11-06 au 2008-12-06 ))))))))))))))))))))))))))))))))))))
.

2008-12-06 22:51 . 2008-12-06 23:38 <REP> d-a------ c:\documents and settings\All Users\Application Data\TEMP
2008-12-06 22:48 . 2008-12-06 22:46 410,976 --a------ c:\windows\system32\deploytk.dll
2008-12-06 22:36 . 2008-12-06 22:36 4,566 --a------ c:\windows\imsins.BAK
2008-12-06 22:13 . 2008-12-06 22:15 <REP> d-------- c:\program files\trend micro
2008-12-06 22:11 . 2008-12-06 22:15 <REP> d----c--- C:\rsit
2008-12-06 17:41 . 2008-12-06 17:41 96,976 --a------ c:\windows\system32\drivers\klin.dat
2008-12-06 17:41 . 2008-12-06 17:41 87,855 --a------ c:\windows\system32\drivers\klick.dat
2008-12-06 17:39 . 2008-12-06 17:39 <REP> d-------- c:\program files\Kaspersky Lab
2008-12-06 17:39 . 2008-12-06 22:34 <REP> d-------- c:\documents and settings\All Users\Application Data\Kaspersky Lab
2008-12-06 17:39 . 2008-12-06 23:49 2,885,152 --ahs---- c:\windows\system32\drivers\fidbox.dat
2008-12-06 17:39 . 2008-12-06 23:49 385,056 --ahs---- c:\windows\system32\drivers\fidbox2.dat
2008-12-06 17:39 . 2008-12-06 23:49 23,620 --ahs---- c:\windows\system32\drivers\fidbox.idx
2008-12-06 17:39 . 2008-12-06 23:49 2,396 --ahs---- c:\windows\system32\drivers\fidbox2.idx
2008-12-06 17:03 . 2008-12-06 17:26 <REP> d-------- c:\program files\Navilog1
2008-12-06 16:12 . 2008-12-06 16:12 <REP> d-------- c:\documents and settings\All Users\Application Data\Yahoo! Companion
2008-12-06 15:52 . 2008-12-06 15:52 <REP> d-------- c:\program files\CCleaner
2008-11-28 22:14 . 2008-11-28 22:32 <REP> d-------- c:\program files\HomePlayer1.5.3.1
2008-11-13 19:02 . 2008-10-24 12:21 455,296 --------- c:\windows\system32\dllcache\mrxsmb.sys
2008-11-13 19:01 . 2008-09-04 18:16 1,106,944 --------- c:\windows\system32\dllcache\msxml3.dll
2008-11-11 20:00 . 2008-11-11 20:00 218,376 --a------ c:\windows\system32\klogon.dll
2008-11-11 19:58 . 2008-11-11 19:58 25,601 --a------ c:\windows\system32\drivers\klopp.dat

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-12-06 22:51 --------- d-----w c:\program files\Packard Bell EverSafe
2008-12-06 21:46 --------- d-----w c:\program files\Java
2008-12-06 20:23 --------- d-----w c:\documents and settings\SOLANGE\Application Data\uTorrent
2008-12-06 14:52 --------- d-----w c:\program files\Yahoo!
2008-11-22 19:53 --------- d-----w c:\program files\eMule
2008-11-13 20:09 --------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help
2008-10-26 10:58 --------- d-----w c:\program files\Skype
2008-10-26 10:58 --------- d-----w c:\documents and settings\All Users\Application Data\Skype
2008-10-26 10:56 --------- d-----w c:\documents and settings\SOLANGE\Application Data\Skype
2008-10-26 10:54 --------- d-----w c:\documents and settings\SOLANGE\Application Data\skypePM
2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys
2008-09-07 16:06 90,040 -c--a-w c:\documents and settings\SOLANGE\Application Data\GDIPFONTCACHEV1.DAT
2006-09-28 14:23 4,461,637 -c--a-w c:\program files\eMule0.47c-Installer.exe
2006-01-15 21:44 4,311,433 -c--a-w c:\program files\KTV2.3.0.1.zip
2005-11-27 19:23 70,954 -c--a-w c:\program files\mco_install.zip
2005-08-03 11:16 1,299,456 -c--a-w c:\documents and settings\SOLANGE\mcoview.exe
2005-06-06 21:30 5,101,744 -c--a-w c:\program files\winamp5092_full_emusic-7plus.exe
2005-05-16 14:19 9,304,688 -c--a-w c:\program files\MPSetupXP.exe
2005-05-16 14:19 5,403,760 -c--a-w c:\program files\PS2LE.exe
2005-05-10 15:43 12,814,336 -c--a-w c:\program files\mp10setup.exe
2005-03-08 22:48 4,311,301 -c--a-w c:\program files\setup-2.3.0.1.exe
2005-03-06 16:51 11,593,248 -c--a-w c:\program files\RealPlayer10-5GOLD_fr_2.exe
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="c:\program files\MSN Messenger\MsnMsgr.Exe" [2007-01-19 5674352]
"PcSync"="c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2005-06-24 860160]
"LaCie Backup"="c:\program files\LaCie\Backup Software\\LaCieBackup.exe" [2005-08-04 2695168]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"updateMgr"="c:\program files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2004-11-22 307200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-05 208952]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
"Icon"="c:\windows\system32\drivers\Icon.exe" [2004-04-19 221184]
"SynTPLpr"="c:\program files\Synaptics\SynTP\SynTPLpr.exe" [2003-09-26 98304]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2003-09-26 503808]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-05-15 339968]
"PCMService"="c:\apps\Powercinema\PCMService.exe" [2004-10-08 81920]
"EPSON Stylus C42 Series"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE" [2002-07-01 74752]
"NovaNet-WEB Tray Control"="c:\program files\Packard Bell EverSafe\TrayControl.exe" [2003-07-21 762368]
"DataLayer"="c:\program files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe" [2005-06-07 819712]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2005-10-08 155648]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-12-06 136600]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2008-08-25 185896]
"BigDog305"="c:\windows\VM305_STI.EXE" [2005-08-05 61440]
"SoundMan"="SOUNDMAN.EXE" [2004-02-26 c:\windows\SOUNDMAN.EXE]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Lancement rapide d'Adobe Reader.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696]
Packard Bell EverSafe Tray Control.lnk - c:\program files\Packard Bell EverSafe\TrayControl.exe [2005-03-26 762368]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication]
--a------ 2005-06-29 14:29 176128 c:\program files\Nokia\Nokia PC Suite 6\LaunchApplication.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\usmt\\migwiz.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\eMule\\emule.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"c:\\Program Files\\Fichiers communs\\AOL\\System Information\\sinf.exe"=
"c:\\Program Files\\NetMeeting\\conf.exe"=
"c:\\Program Files\\Outlook Express\\msimn.exe"=
"c:\\Program Files\\HomePlayer1.5.3.1\\HomePlayer.exe"=
"c:\\Program Files\\Freeplayer\\vlc\\vlc.exe"=
"c:\\Documents and Settings\\SOLANGE\\Bureau\\utorrent.exe"=
"c:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpCtr.exe"=
"c:\\WINDOWS\\system32\\rtcshare.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"c:\\Program Files\\MSN Messenger\\livecall.exe"=

R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [2008-01-29 32784]
R1 Asapi;Asapi;c:\windows\system32\drivers\Asapi.sys [2005-01-18 11264]
R2 MTC0005_MTCDIO;Wireless HotKey Driver;c:\windows\system32\drivers\MTCDIO.sys [1980-01-01 11316]
R3 EMCR;EMCR;c:\windows\system32\DRIVERS\EMCR7SK.sys [1980-01-01 68224]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\DRIVERS\klim5.sys [2008-04-30 24592]
S1 aswSP;avast! Self Protection; []
S2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys []
S2 FILESpy;FILESpy;\??\c:\??\c:\program files\Softwin\BitDefender8\filespy.sys []
S2 MTCDIO;MTCDIO;c:\windows\system32\DRIVERS\MTCDIO.sys [1980-01-01 11316]
S3 fbxusb;FreeBox USB Network Adapter;c:\windows\system32\DRIVERS\fbxusb.sys [2003-12-31 18848]
S3 PhTVTune;Cap7134 TVTuner;c:\windows\system32\DRIVERS\PhTVTune.sys [2004-06-15 42080]
S3 ZSMC0305;Look 316;c:\windows\system32\Drivers\usbVM305.sys [2008-09-08 1466624]
.
- - - - ORPHELINS SUPPRIMES - - - -

MSConfigStartUp-MP3Chansons - c:\documents and settings\SOLANGE\Application Data\MP3Chansons[1].exe
MSConfigStartUp-NapsterShell - c:\program files\Napster\napster.exe
MSConfigStartUp-Tool Live - c:\docume~1\SOLANGE\APPLIC~1\HECKTH~1\PeakSlow.exe


.
------- Examen supplémentaire -------
.
uStart Page = hxxp://google.mini60.com/
uInternet Connection Wizard,ShellNext = hxxp://yahoo.fr/
uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
IE: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {EF6D6AE3-2625-40D6-A5AB-920DFD2DAF8C} - c:\documents and settings\SOLANGE\Application Data\MP3Chansons[1].exe
IE: {EF6D6AE3-2625-40D6-A5AB-920DFD2DAF8C} - c:\documents and settings\SOLANGE\Application Data\MP3Chansons[1].exe -

c:\windows\system32\Pal.dll - c:\windows\system32\l3codecx.ax
c:\windows\system32\QEdit.dll
c:\windows\scroll.bmp
c:\windows\system32\ErrorHandler.dll
c:\windows\system32\MCS.dll
c:\windows\Downloaded Program Files\xmltok.dll
c:\windows\Downloaded Program Files\xmlparse.dll
c:\windows\Downloaded Program Files\coltrans.ax
c:\windows\Downloaded Program Files\WBMPSource.ax
c:\windows\Downloaded Program Files\PNGSource.ax
c:\windows\system32\Mpeg4DSF.dll
c:\windows\system32\Mpeg4Tools.dll
c:\windows\system32\Mpeg4System.dll
c:\windows\Downloaded Program Files\MelodySourceParser.ax
c:\windows\system32\AMRDSF.dll
c:\windows\system32\AMR.dll
c:\windows\Downloaded Program Files\scg.ax
c:\windows\Downloaded Program Files\HtmlParser.dll
c:\windows\Downloaded Program Files\HTMLSourceFilter.ax
c:\windows\Downloaded Program Files\VideoCompositor.ax
c:\windows\Downloaded Program Files\StreamControl.ax
c:\windows\Downloaded Program Files\DownloadersWI.dll
c:\windows\Downloaded Program Files\Parsers.dll
c:\windows\Downloaded Program Files\PlayerServer.dll
c:\windows\Downloaded Program Files\MPO.dll
c:\windows\Downloaded Program Files\CoreExecutive.dll
c:\windows\Downloaded Program Files\SMILInetCtrl.dll
c:\windows\Downloaded Program Files\RegType_IE.dll
O16 -: {8731163E-77B9-4F91-9122-F112521C28AF}
hxxp://62.201.137.56/mmawap/jsp/composer/player/mmsPlayer.cab
c:\windows\Downloaded Program Files\SMILViewer_DX6.inf

c:\windows\system32\msvcp60.dll - c:\windows\system32\atl.dll
c:\windows\Downloaded Program Files\AdVerifierADP.dll
c:\windows\Downloaded Program Files\AdSignerADP.dll
O16 -: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF}
hxxps://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.1.cab
c:\windows\Downloaded Program Files\AdSignerADP.inf
FireFox -: Profile - c:\documents and settings\SOLANGE\Application Data\Mozilla\Firefox\Profiles\2wsndtuo.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.msn.fr/
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-06 23:51:44
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
BigDog305 = c:\windows\VM305_STI.EXE VIMICRO USB PC Camera (ZC0305)???????????????????0?????????@??????????????

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\MySqlInventime]
"ImagePath"="c:\mysql\bin\mysqld-max-nt MySqlInventime"
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\ati2evxx.exe
c:\progra~1\FICHIE~1\AOL\ACS\AOLacsd.exe
c:\program files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
c:\windows\system32\snmp.exe
c:\windows\system32\wscntfy.exe
c:\program files\LaCie\Backup Software\LacieBackup.exe
c:\progra~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
c:\progra~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXE
c:\windows\system32\wbem\wmiapsrv.exe
.
**************************************************************************
.
Heure de fin: 2008-12-06 23:56:06 - La machine a redémarré
ComboFix-quarantined-files.txt 2008-12-06 22:55:31

Avant-CF: 6 822 785 024 octets libres
Après-CF: 7,156,113,408 octets libres

230 --- E O F --- 2008-11-13 20:09:14

l analyse avec virustotal dure des heures?! que est ce qu envoyer en SSL?

Fichier klogon.dll reçu le 2008.11.26 16:51:24 (CET)
Situation actuelle: terminé
Résultat: 0/37 (0.00%)
Formaté Formaté
Impression des résultats Impression des résultats
Antivirus Version Dernière mise à jour Résultat
AhnLab-V3 2008.11.24.3 2008.11.26 -
AntiVir 7.9.0.35 2008.11.26 -
Authentium 5.1.0.4 2008.11.26 -
Avast 4.8.1281.0 2008.11.26 -
AVG 8.0.0.199 2008.11.26 -
BitDefender 7.2 2008.11.26 -
CAT-QuickHeal 10.00 2008.11.26 -
ClamAV 0.94.1 2008.11.26 -
DrWeb 4.44.0.09170 2008.11.26 -
eSafe 7.0.17.0 2008.11.25 -
eTrust-Vet 31.6.6228 2008.11.26 -
Ewido 4.0 2008.11.26 -
F-Prot 4.4.4.56 2008.11.25 -
F-Secure 8.0.14332.0 2008.11.26 -
Fortinet 3.117.0.0 2008.11.26 -
GData 19 2008.11.26 -
Ikarus T3.1.1.45.0 2008.11.26 -
K7AntiVirus 7.10.534 2008.11.26 -
Kaspersky 7.0.0.125 2008.11.26 -
McAfee 5445 2008.11.25 -
McAfee+Artemis 5445 2008.11.25 -
Microsoft 1.4104 2008.11.26 -
NOD32 3642 2008.11.26 -
Norman 5.80.02 2008.11.26 -
Panda 9.0.0.4 2008.11.25 -
PCTools 4.4.2.0 2008.11.26 -
Prevx1 V2 2008.11.26 -
Rising 21.05.22.00 2008.11.26 -
SecureWeb-Gateway 6.7.6 2008.11.26 -
Sophos 4.35.0 2008.11.26 -
Sunbelt 3.1.1830.2 2008.11.26 -
Symantec 10 2008.11.26 -
TheHacker 6.3.1.1.163 2008.11.25 -
TrendMicro 8.700.0.1004 2008.11.26 -
VBA32 3.12.8.9 2008.11.26 -
ViRobot 2008.11.26.1487 2008.11.26 -
VirusBuster 4.5.11.0 2008.11.26 -
Information additionnelle
File size: 218376 bytes
MD5...: a09ef6a4793948a74060c70ad423f067
SHA1..: a6f5326702374414d072a0ec21905ace457d970b
SHA256: bf284f60ca88d99bf029c5e26dedb46d435045de1c13ec4cf137b85b111a16a1
SHA512: cbea88ec20c2aec8ef652606321957a35e4191375c0a5c6f7e0e9fec2c2c31fb
f4bb42d42410a2270ebe228e7f3b6a98973c2b805a0aceaf64dea318efca83b9
ssdeep: 3072:lpZfP4PjRri3CAtOolXzeuTtCDHTBf4Ag0Fuu1PzfthWSPLi:lzujCnysGH
TBwAOYjG
PEiD..: -
TrID..: File type identification
Win32 Executable MS Visual C++ (generic) (65.2%)
Win32 Executable Generic (14.7%)
Win32 Dynamic Link Library (generic) (13.1%)
Generic Win/DOS Executable (3.4%)
DOS Executable Generic (3.4%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x6d4dffb6
timedatestamp.....: 0x4919b9df (Tue Nov 11 16:59:11 2008)
machinetype.......: 0x14c (I386)

( 5 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x2045c 0x21000 6.76 56c9c562a88311dbdb52a583cdc1cb4f
.rdata 0x22000 0xb5f0 0xc000 6.47 3d2d6c1131b4cac5aa908bf53e0fcb14
.data 0x2e000 0x3888 0x2000 3.92 e011d25f0026a77dcd12e861858a4cac
.rsrc 0x32000 0x4a4 0x1000 3.83 19203a7967c9217c2cf818aa49a54209
.reloc 0x33000 0x218a 0x3000 3.68 e34bb7e1713ad21b7a99e8e7245fa37e

( 4 imports )
> KERNEL32.dll: InitializeCriticalSection, SetStdHandle, SetFilePointer, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, IsValidCodePage, GetACP, GetCPInfo, MultiByteToWideChar, GetSystemTimeAsFileTime, GetCurrentProcessId, GetTickCount, QueryPerformanceCounter, GetEnvironmentStringsW, LoadLibraryA, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW, GetLocaleInfoA, GetModuleHandleA, GetProcAddress, MulDiv, CreateThread, GetCurrentThreadId, GetModuleFileNameA, CreateFileA, GetFileSize, ReadFile, Sleep, OpenMutexA, GetOEMCP, CloseHandle, FreeEnvironmentStringsW, GetEnvironmentStrings, RtlUnwind, HeapAlloc, GetLastError, HeapFree, GetCommandLineA, GetVersionExA, GetProcessHeap, UnhandledExceptionFilter, SetUnhandledExceptionFilter, EnterCriticalSection, LeaveCriticalSection, WriteFile, WideCharToMultiByte, GetConsoleCP, GetConsoleMode, FlushFileBuffers, DeleteCriticalSection, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, TerminateProcess, GetCurrentProcess, IsDebuggerPresent, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, InterlockedDecrement, HeapSize, ExitProcess, VirtualFree, VirtualAlloc, HeapReAlloc, HeapDestroy, HeapCreate, RaiseException, FreeEnvironmentStringsA
> USER32.dll: CreateIconIndirect, IntersectRect, OffsetRect, DestroyIcon, GetMessageA, SetThreadDesktop, SetTimer, TranslateMessage, DispatchMessageA, IsWindow, DestroyWindow, LoadCursorA, RegisterClassExA, GetForegroundWindow, CreateWindowExA, SetWindowLongA, SetForegroundWindow, GetWindowLongA, PostThreadMessageA, DefWindowProcA, SystemParametersInfoA, SetWindowPos, WindowFromPoint, GetWindowRect, BeginPaint, PaintDesktop, EndPaint, GetSystemMetrics, GetDC, ReleaseDC, ShowWindow, GetDesktopWindow
> GDI32.dll: CreateBitmap, GetClipBox, GdiFlush, SetDIBitsToDevice, DeleteDC, BitBlt, CreateCompatibleDC, SelectObject, CreateCompatibleBitmap, CreateDIBSection, GetObjectA, DeleteObject, GetPixel
> ADVAPI32.dll: AddAccessAllowedAce, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, SetSecurityDescriptorSacl, AllocateAndInitializeSid, GetLengthSid, FreeSid, CopySid, RegOpenKeyExA, RegQueryValueExA, RegCloseKey, InitializeAcl

( 2 exports )
WLEventStart, WLEventStop

Fichier klopp.dat reçu le 2008.12.03 07:41:37 (CET)
Situation actuelle: terminé
Résultat: 0/37 (0.00%)
Formaté Formaté
Impression des résultats Impression des résultats
Antivirus Version Dernière mise à jour Résultat
AhnLab-V3 2008.12.2.2 2008.12.03 -
AntiVir 7.9.0.36 2008.12.02 -
Authentium 5.1.0.4 2008.12.02 -
Avast 4.8.1281.0 2008.12.02 -
AVG 8.0.0.199 2008.12.03 -
BitDefender 7.2 2008.12.03 -
CAT-QuickHeal 10.00 2008.12.03 -
ClamAV 0.94.1 2008.12.03 -
DrWeb 4.44.0.09170 2008.12.03 -
eSafe 7.0.17.0 2008.12.02 -
eTrust-Vet 31.6.6240 2008.12.03 -
Ewido 4.0 2008.12.02 -
F-Prot 4.4.4.56 2008.12.02 -
F-Secure 8.0.14332.0 2008.12.03 -
Fortinet 3.117.0.0 2008.12.03 -
GData 19 2008.12.03 -
Ikarus T3.1.1.45.0 2008.12.03 -
K7AntiVirus 7.10.540 2008.12.02 -
Kaspersky 7.0.0.125 2008.12.03 -
McAfee 5452 2008.12.02 -
McAfee+Artemis 5452 2008.12.02 -
Microsoft 1.4205 2008.12.03 -
NOD32 3659 2008.12.02 -
Norman 5.80.02 2008.12.02 -
Panda 9.0.0.4 2008.12.02 -
PCTools 4.4.2.0 2008.12.02 -
Prevx1 V2 2008.12.03 -
Rising 21.06.20.00 2008.12.03 -
SecureWeb-Gateway 6.7.6 2008.12.03 -
Sophos 4.36.0 2008.12.03 -
Sunbelt 3.1.1832.2 2008.12.01 -
Symantec 10 2008.12.03 -
TheHacker 6.3.1.2.172 2008.12.02 -
TrendMicro 8.700.0.1004 2008.12.03 -
VBA32 3.12.8.10 2008.12.02 -
ViRobot 2008.12.3.1497 2008.12.03 -
VirusBuster 4.5.11.0 2008.12.02 -
Information additionnelle
File size: 25601 bytes
MD5...: a1043c305de3186b6500b3da96694a81
SHA1..: 161a22c0523bd526ec42d3fc0f9144a3ff471347
SHA256: b0b023ef9a55bab76e75e80e32b10ae3cbf30b72ac60abdaef67ad14a61690a5
SHA512: 9b7965876e0681e05b17551d7d72ef49d3845dbdf42ae175ce67faeece0d37a2
3cbe086372cc203b1f72b05d5fb71266779e1125804daaacc8fecb7fbe8fac82
ssdeep: 384:ivM07YFDqHK1DO9Cybqw0rOldlCD0f00rX7P+/SPn5NfeH8BFkdIk1exvflC
7:qPS1DOUybq+dlCz4nDecBWLetflC7
PEiD..: -
TrID..: File type identification
Unknown!
PEInfo: -

ATENTION ATTENTION: VirusTotal est un service gratuit offert par Hispasec Sistemas. Il n'y a aucune garantie quant à la disponibilité et la continuité de ce service. Bien que le taux de détection permis par l'utilisation de multiples moteurs antivirus soit bien supérieur à celui offert par seulement un produit, ces résultats NE garantissent PAS qu'un fichier est sans danger. Il n'y a actuellement aucune solution qui offre un taux d'efficacité de 100% pour la détection des virus et malwares.

Autre fichier

Malwarebytes' Anti-Malware 1.31
Version de la base de données: 1469
Windows 5.1.2600 Service Pack 3

07/12/2008 15:25:33
mbam-log-2008-12-07 (15-25-33).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 149836
Temps écoulé: 55 minute(s), 38 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 6
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\torrentmanager.webmanager (Trojan.Lop) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\torrentmanager.webmanager.1 (Trojan.Lop) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\SystemCertificates\TrustedPublisher\Certificates\c48d3b9bca9b3a5a04bc26f729ee0c6e389dde2e (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\SystemCertificates\TrustedPublisher\Certificates\2c5eceb3d45147eb99fa51120e7c7adebe213de6 (Adware.123Mania) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\SystemCertificates\TrustedPublisher\Certificates\a6a50b0ebf885a7dd4fb6927f1388592138fffe6 (Adware.123Mania) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\WakeNet (Trojan.Adware) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Program Files\Fichiers communs\DriveCleaner 2006 Free (Rogue.DriveCleaner) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

quelle galere.. merci de ton aide.. mias mailskinner ets toujours la...
dernier scan : Malwarebytes' Anti-Malware 1.31
Version de la base de données: 1469
Windows 5.1.2600 Service Pack 3

07/12/2008 15:34:15
mbam-log-2008-12-07 (15-34-15).txt

Type de recherche: Examen rapide
Eléments examinés: 57593
Temps écoulé: 7 minute(s), 30 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

SmitFraudFix v2.381

Recherche Process...
Recherche hosts...
Recherche C:\...
Recherche C:\WINDOWS\...
Recherche C:\WINDOWS\system...
Recherche C:\WINDOWS\Web...
Recherche C:\WINDOWS\system32...
Recherche C:\WINDOWS\system32\LogFiles...
Recherche C:\Documents and Settings\SOLANGE...
Recherche C:\DOCUME~1\SOLANGE\LOCALS~1\Temp...
Recherche C:\Documents and Settings\SOLANGE\Application Data...
Recherche Menu Démarrer...
Recherche C:\DOCUME~1\SOLANGE\Favoris...
Recherche Bureau...
Recherche C:\Program Files...
Recherche présence de clés corrompues
Recherche éléments du bureau
Recherche o4Patch
Recherche IEDFix

SmitFraudFix v2.381

Rapport fait à 16:19:05,43, 07/12/2008
Executé à partir de C:\Program Files\Mozilla Firefox\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\SmitfraudFix\Policies.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\SOLANGE


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\SOLANGE\LOCALS~1\Temp


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\SOLANGE\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\SOLANGE\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"=""


»»»»»»»»»»»»»»»»»»»»»»»» o4Patch
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

o4Patch
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» RK



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Realtek RTL8139/810x Family Fast Ethernet NIC - Miniport d'ordonnancement de paquets
DNS Server Search Order: 212.27.40.240
DNS Server Search Order: 212.27.40.241

HKLM\SYSTEM\CCS\Services\Tcpip\..\{B5CC6723-EF2B-44AB-A557-2F85667EF3F0}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS1\Services\Tcpip\..\{B5CC6723-EF2B-44AB-A557-2F85667EF3F0}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS2\Services\Tcpip\..\{B5CC6723-EF2B-44AB-A557-2F85667EF3F0}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS3\Services\Tcpip\..\{B3CD5EF0-2045-4BE6-A772-429A18DB2EC5}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

impossible de telecharger Lop S&D????

ah si par le tutorial c est ok

--------------------\\ Lop S&D 4.2.4-9c XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) M processor 1.60GHz )
BIOS : Insyde Software MobilePRO BIOS Version 4.00.00
USER : SOLANGE ( Administrator )
BOOT : Fail-safe with network boot
Antivirus : Kaspersky Anti-Virus 8.0.0.506 (Activated)
C:\ (Local Disk) - NTFS - Total:51 Go (Free:6 Go)
D:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
Option : [1] ( 07/12/2008|16:25 )

--------------------\\ Listing des dossiers dans APPLIC~1

[16/08/2004|18:19] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[07/12/2008|12:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[18/01/2005|09:19] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun
[18/01/2005|09:29] C:\DOCUME~1\ADMINI~1\APPLIC~1\Symantec
[18/01/2005|09:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\You've Got Pictures Screensaver

[07/12/2008|01:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[18/01/2005|09:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
[08/10/2005|00:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[10/01/2008|13:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[06/01/2007|12:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[07/12/2008|01:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[22/11/2007|15:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[07/12/2008|16:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Lab
[07/12/2008|13:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[04/12/2008|21:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[13/11/2008|21:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[17/02/2007|12:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Napster
[17/08/2006|12:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\OD2
[24/06/2005|20:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[17/08/2006|18:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\River Past G4
[16/08/2004|18:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[26/10/2008|11:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[07/12/2008|12:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[20/08/2006|15:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[07/12/2008|16:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[18/01/2005|09:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
[24/11/2005|23:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[13/03/2007|20:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[17/06/2007|12:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Wipe send support heart
[06/12/2008|16:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

[16/08/2004|18:19] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[16/08/2004|17:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[18/01/2005|09:19] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
[18/01/2005|09:29] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec
[18/01/2005|09:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver

[11/02/2007|19:02] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[16/08/2004|18:19] C:\DOCUME~1\LUC\APPLIC~1\Identities
[24/09/2005|23:07] C:\DOCUME~1\LUC\APPLIC~1\Microsoft
[24/09/2005|20:41] C:\DOCUME~1\LUC\APPLIC~1\OD2
[24/09/2005|14:52] C:\DOCUME~1\LUC\APPLIC~1\PC Suite
[10/08/2005|14:42] C:\DOCUME~1\LUC\APPLIC~1\Real
[18/01/2005|09:19] C:\DOCUME~1\LUC\APPLIC~1\Sun
[18/01/2005|09:29] C:\DOCUME~1\LUC\APPLIC~1\Symantec
[18/01/2005|09:28] C:\DOCUME~1\LUC\APPLIC~1\You've Got Pictures Screensaver

[16/08/2004|17:54] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[07/04/2005|13:41] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec

[05/11/2005|16:03] C:\DOCUME~1\PROPRI~1\APPLIC~1\Symantec
[27/03/2005|15:56] C:\DOCUME~1\PROPRI~1\APPLIC~1\You've Got Pictures Screensaver

[11/02/2008|19:36] C:\DOCUME~1\SOLANGE\APPLIC~1\Adobe
[30/08/2008|12:55] C:\DOCUME~1\SOLANGE\APPLIC~1\AdobeUM
[11/11/2005|19:04] C:\DOCUME~1\SOLANGE\APPLIC~1\Apple Computer
[28/05/2005|16:57] C:\DOCUME~1\SOLANGE\APPLIC~1\ArcSoft
[13/04/2008|10:28] C:\DOCUME~1\SOLANGE\APPLIC~1\Azureus
[26/03/2005|21:25] C:\DOCUME~1\SOLANGE\APPLIC~1\CyberLink
[09/03/2008|10:29] C:\DOCUME~1\SOLANGE\APPLIC~1\dvdcss
[28/11/2006|20:58] C:\DOCUME~1\SOLANGE\APPLIC~1\Google
[14/04/2008|20:14] C:\DOCUME~1\SOLANGE\APPLIC~1\GrabIt
[08/11/2007|20:11] C:\DOCUME~1\SOLANGE\APPLIC~1\heckthebat
[18/04/2005|16:38] C:\DOCUME~1\SOLANGE\APPLIC~1\Help
[16/08/2004|18:19] C:\DOCUME~1\SOLANGE\APPLIC~1\Identities
[04/03/2007|11:32] C:\DOCUME~1\SOLANGE\APPLIC~1\LaCie
[23/03/2005|10:58] C:\DOCUME~1\SOLANGE\APPLIC~1\Leadertech
[10/04/2005|20:35] C:\DOCUME~1\SOLANGE\APPLIC~1\Macromedia
[07/12/2008|13:57] C:\DOCUME~1\SOLANGE\APPLIC~1\Malwarebytes
[04/12/2008|21:14] C:\DOCUME~1\SOLANGE\APPLIC~1\Microsoft
[01/12/2007|20:41] C:\DOCUME~1\SOLANGE\APPLIC~1\Mozilla
[31/08/2008|01:49] C:\DOCUME~1\SOLANGE\APPLIC~1\Nokia
[29/08/2005|22:29] C:\DOCUME~1\SOLANGE\APPLIC~1\Nokia Multimedia Player
[10/05/2005|17:43] C:\DOCUME~1\SOLANGE\APPLIC~1\OD2
[29/08/2005|22:26] C:\DOCUME~1\SOLANGE\APPLIC~1\PC Suite
[06/12/2008|23:58] C:\DOCUME~1\SOLANGE\APPLIC~1\PC Tools
[16/08/2008|17:30] C:\DOCUME~1\SOLANGE\APPLIC~1\Real
[07/11/2005|20:29] C:\DOCUME~1\SOLANGE\APPLIC~1\River Past G4
[16/05/2005|14:56] C:\DOCUME~1\SOLANGE\APPLIC~1\Roxio
[26/10/2008|11:56] C:\DOCUME~1\SOLANGE\APPLIC~1\Skype
[26/10/2008|11:54] C:\DOCUME~1\SOLANGE\APPLIC~1\skypePM
[23/03/2005|10:58] C:\DOCUME~1\SOLANGE\APPLIC~1\Sonic
[18/01/2005|09:19] C:\DOCUME~1\SOLANGE\APPLIC~1\Sun
[20/08/2006|15:23] C:\DOCUME~1\SOLANGE\APPLIC~1\Symantec
[04/03/2007|20:24] C:\DOCUME~1\SOLANGE\APPLIC~1\TorrentQ
[06/12/2008|21:23] C:\DOCUME~1\SOLANGE\APPLIC~1\uTorrent
[06/01/2008|06:10] C:\DOCUME~1\SOLANGE\APPLIC~1\vlc
[18/01/2005|09:28] C:\DOCUME~1\SOLANGE\APPLIC~1\You've Got Pictures Screensaver

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[07/12/2008 00:32][--a------] C:\WINDOWS\tasks\Norton Security Scan for SOLANGE.job
[07/12/2008 16:12][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[07/12/2008|01:39] C:\Program Files\Adobe
[20/08/2006|15:34] C:\Program Files\Alwil Software
[30/12/2005|01:18] C:\Program Files\AOL 9.0
[18/01/2005|09:28] C:\Program Files\AOL Compagnon
[19/09/2005|19:07] C:\Program Files\ArcSoft
[18/01/2005|09:19] C:\Program Files\ATI Technologies
[28/03/2005|18:47] C:\Program Files\Aubade
[02/09/2005|21:27] C:\Program Files\AVSMedia
[15/04/2008|17:59] C:\Program Files\Azureus
[25/02/2006|19:03] C:\Program Files\Canon
[06/12/2008|15:52] C:\Program Files\CCleaner
[16/08/2004|18:05] C:\Program Files\ComPlus Applications
[18/01/2005|09:33] C:\Program Files\CyberLink
[22/11/2008|20:53] C:\Program Files\eMule
[23/03/2005|11:17] C:\Program Files\EPSON
[20/04/2005|14:52] C:\Program Files\EZFace
[07/12/2008|15:25] C:\Program Files\Fichiers communs
[06/01/2008|00:35] C:\Program Files\Freeplayer
[17/02/2007|12:42] C:\Program Files\GIMP-2.0
[19/02/2006|23:58] C:\Program Files\GOlive
[07/12/2008|00:26] C:\Program Files\Google
[22/11/2007|17:40] C:\Program Files\Grisoft
[08/07/2007|09:01] C:\Program Files\heckthebat
[28/11/2008|22:32] C:\Program Files\HomePlayer1.5.3.1
[07/12/2008|12:30] C:\Program Files\InstallShield Installation Information
[18/01/2005|09:15] C:\Program Files\Intel
[08/09/2008|16:39] C:\Program Files\Internet Explorer
[06/12/2008|22:46] C:\Program Files\Java
[06/12/2008|17:39] C:\Program Files\Kaspersky Lab
[04/03/2007|11:31] C:\Program Files\LaCie
[18/01/2005|09:28] C:\Program Files\Learn2.com
[18/11/2007|21:32] C:\Program Files\Live-Prod
[07/12/2008|13:57] C:\Program Files\Malwarebytes' Anti-Malware
[27/11/2007|13:40] C:\Program Files\MaxiMemo
[27/11/2005|20:25] C:\Program Files\mco_install
[02/03/2007|19:30] C:\Program Files\Mediafour
[08/09/2008|16:46] C:\Program Files\Messenger
[10/05/2007|19:33] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[16/08/2004|18:11] C:\Program Files\microsoft frontpage
[06/03/2008|21:07] C:\Program Files\microsoft office
[18/01/2005|09:36] C:\Program Files\Microsoft Visual Studio
[06/03/2008|21:08] C:\Program Files\Microsoft Works
[06/03/2008|21:05] C:\Program Files\Microsoft.NET
[08/09/2008|16:39] C:\Program Files\Movie Maker
[07/12/2008|16:18] C:\Program Files\Mozilla Firefox
[16/08/2004|18:03] C:\Program Files\MSN
[16/08/2004|18:03] C:\Program Files\MSN Gaming Zone
[08/09/2008|17:15] C:\Program Files\MSN Messenger
[18/11/2006|02:08] C:\Program Files\MSXML 4.0
[17/08/2006|12:59] C:\Program Files\Music Manager
[30/12/2005|01:18] C:\Program Files\My Music
[06/12/2008|17:26] C:\Program Files\Navilog1
[08/09/2008|16:31] C:\Program Files\NetMeeting
[17/02/2007|16:16] C:\Program Files\Nokia
[07/12/2008|01:19] C:\Program Files\Norton Security Scan
[16/08/2004|18:03] C:\Program Files\Online Services
[08/09/2008|16:30] C:\Program Files\Outlook Express
[07/12/2008|16:01] C:\Program Files\Packard Bell EverSafe
[07/12/2008|00:30] C:\Program Files\Picasa2
[07/12/2008|02:51] C:\Program Files\QuickTime
[18/01/2005|09:27] C:\Program Files\Real
[03/04/2005|12:08] C:\Program Files\rec
[07/11/2005|20:23] C:\Program Files\River Past
[16/08/2004|18:07] C:\Program Files\Services en ligne
[26/10/2008|11:58] C:\Program Files\Skype
[18/08/2005|12:49] C:\Program Files\Softwin
[18/01/2005|09:34] C:\Program Files\Sonic
[07/12/2008|02:00] C:\Program Files\Spybot - Search & Destroy
[07/12/2008|00:02] C:\Program Files\Spyware Doctor
[29/03/2008|09:06] C:\Program Files\Sweet Home 3D
[18/01/2005|09:07] C:\Program Files\Synaptics
[22/11/2007|17:17] C:\Program Files\TorrentQ
[06/12/2008|22:15] C:\Program Files\trend micro
[16/08/2004|18:19] C:\Program Files\Uninstall Information
[16/11/2006|17:34] C:\Program Files\VeriSign
[02/12/2005|22:31] C:\Program Files\VideoLAN
[17/02/2007|13:15] C:\Program Files\Winamp
[24/11/2005|23:17] C:\Program Files\Windows Journal Viewer
[29/11/2007|23:47] C:\Program Files\Windows Live Toolbar
[10/05/2008|15:06] C:\Program Files\Windows Media Connect 2
[08/09/2008|16:30] C:\Program Files\Windows Media Player
[08/09/2008|16:30] C:\Program Files\Windows NT
[16/08/2004|18:07] C:\Program Files\WindowsUpdate
[22/11/2008|19:51] C:\Program Files\WinRAR
[16/08/2004|18:11] C:\Program Files\xerox
[06/12/2008|15:52] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[07/12/2008|01:42] C:\Program Files\Fichiers communs\Adobe
[18/01/2005|09:28] C:\Program Files\Fichiers communs\AOL
[18/01/2005|09:28] C:\Program Files\Fichiers communs\aolshare
[18/01/2005|09:36] C:\Program Files\Fichiers communs\Designer
[23/03/2005|11:18] C:\Program Files\Fichiers communs\EPSON
[10/05/2005|15:26] C:\Program Files\Fichiers communs\InstallShield
[18/01/2005|09:19] C:\Program Files\Fichiers communs\Java
[08/08/2008|09:33] C:\Program Files\Fichiers communs\Microsoft Shared
[16/08/2004|18:06] C:\Program Files\Fichiers communs\MSSoap
[29/08/2005|22:24] C:\Program Files\Fichiers communs\Nokia
[25/02/2006|02:07] C:\Program Files\Fichiers communs\NSV
[18/01/2005|09:28] C:\Program Files\Fichiers communs\Nullsoft
[16/08/2004|17:57] C:\Program Files\Fichiers communs\ODBC
[29/08/2005|22:24] C:\Program Files\Fichiers communs\PCSuite
[25/08/2008|11:24] C:\Program Files\Fichiers communs\Real
[10/05/2005|15:28] C:\Program Files\Fichiers communs\Roxio Shared
[16/08/2004|18:06] C:\Program Files\Fichiers communs\Services
[24/07/2006|17:53] C:\Program Files\Fichiers communs\Softwin
[16/08/2004|17:56] C:\Program Files\Fichiers communs\SpeechEngines
[18/01/2005|09:35] C:\Program Files\Fichiers communs\SureThing Shared
[07/12/2008|00:41] C:\Program Files\Fichiers communs\Symantec Shared
[08/09/2008|16:30] C:\Program Files\Fichiers communs\System
[18/01/2005|09:32] C:\Program Files\Fichiers communs\TVNavigTechnologies Shared
[25/08/2008|11:24] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 19 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

C:\DOCUME~1\SOLANGE\APPLIC~1\HECKTH~1

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\SOLANGE\LOCALS~1\Temp\nsz1F.tmp
C:\DOCUME~1\SOLANGE\APPLIC~1\TorrentQ
C:\DOCUME~1\SOLANGE\APPLIC~1\TorrentQ
C:\DOCUME~1\SOLANGE\APPLIC~1\TorrentQ\Data
C:\DOCUME~1\ALLUSE~1\MENUDÉ~1\PROGRA~1\TorrentQ
C:\DOCUME~1\ALLUSE~1\MENUDÉ~1\PROGRA~1\TorrentQ\Uninstall TorrentQ.lnk
C:\Program Files\TorrentQ
C:\Program Files\TorrentQ\settings.ini
C:\Program Files\TorrentQ\settings.stp
C:\Program Files\TorrentQ\SkinCrafterDll.dll
C:\Program Files\TorrentQ\Skins
C:\Program Files\TorrentQ\Support
C:\Program Files\TorrentQ\TorrentQ.TRC
C:\Program Files\TorrentQ\TorrentQ_1.TRC
C:\Program Files\TorrentQ\unins000.dat
C:\Program Files\TorrentQ\unins000.exe
C:\DOCUME~1\SOLANGE\Cookies\solange@advertising[1].txt

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\StyleBoltStupid]
"DisplayName"="CiD Help"
"UninstallString"="C:\\DOCUME~1\\SOLANGE\\APPLIC~1\\HECKTH~1\\PeakSlow.exe -uninstall"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-07 16:26:21
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 494

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:7][D:9]-> C:\DOCUME~1\SOLANGE\LOCALS~1\Temp
[F:15][D:0]-> C:\DOCUME~1\SOLANGE\Cookies
[F:206][D:4]-> C:\DOCUME~1\SOLANGE\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 07/12/2008|16:28 - Option : [1]

--------------------\\ Fin du rapport a 16:28:01

ça a pris un peu d temps : j ai du redemarrer plusieurs fois car j n avais plus rien sur le bureau?! mais voila :

--------------------\\ Lop S&D 4.2.4-9c XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) M processor 1.60GHz )
BIOS : Insyde Software MobilePRO BIOS Version 4.00.00
USER : SOLANGE ( Administrator )
BOOT : Normal boot
Antivirus : Kaspersky Anti-Virus 8.0.0.506 (Activated)
C:\ (Local Disk) - NTFS - Total:51 Go (Free:6 Go)
D:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
Option : [2] ( 07/12/2008|17:36 )


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans APPLIC~1

[16/08/2004|18:19] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[07/12/2008|12:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[18/01/2005|09:19] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun
[18/01/2005|09:29] C:\DOCUME~1\ADMINI~1\APPLIC~1\Symantec
[18/01/2005|09:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\You've Got Pictures Screensaver

[07/12/2008|01:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[18/01/2005|09:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
[08/10/2005|00:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[10/01/2008|13:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[06/01/2007|12:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[07/12/2008|01:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[22/11/2007|15:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[07/12/2008|17:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Lab
[07/12/2008|13:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[04/12/2008|21:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[13/11/2008|21:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[17/02/2007|12:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Napster
[17/08/2006|12:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\OD2
[24/06/2005|20:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[17/08/2006|18:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\River Past G4
[16/08/2004|18:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[26/10/2008|11:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[07/12/2008|12:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[20/08/2006|15:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[07/12/2008|17:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[24/11/2005|23:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[13/03/2007|20:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[17/06/2007|12:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Wipe send support heart
[06/12/2008|16:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

[16/08/2004|18:19] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[16/08/2004|17:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[18/01/2005|09:19] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
[18/01/2005|09:29] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec
[18/01/2005|09:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver

[11/02/2007|19:02] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[16/08/2004|18:19] C:\DOCUME~1\LUC\APPLIC~1\Identities
[24/09/2005|23:07] C:\DOCUME~1\LUC\APPLIC~1\Microsoft
[24/09/2005|20:41] C:\DOCUME~1\LUC\APPLIC~1\OD2
[24/09/2005|14:52] C:\DOCUME~1\LUC\APPLIC~1\PC Suite
[10/08/2005|14:42] C:\DOCUME~1\LUC\APPLIC~1\Real
[18/01/2005|09:19] C:\DOCUME~1\LUC\APPLIC~1\Sun
[18/01/2005|09:29] C:\DOCUME~1\LUC\APPLIC~1\Symantec
[18/01/2005|09:28] C:\DOCUME~1\LUC\APPLIC~1\You've Got Pictures Screensaver

[16/08/2004|17:54] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[07/04/2005|13:41] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec

[05/11/2005|16:03] C:\DOCUME~1\PROPRI~1\APPLIC~1\Symantec
[27/03/2005|15:56] C:\DOCUME~1\PROPRI~1\APPLIC~1\You've Got Pictures Screensaver

[11/02/2008|19:36] C:\DOCUME~1\SOLANGE\APPLIC~1\Adobe
[30/08/2008|12:55] C:\DOCUME~1\SOLANGE\APPLIC~1\AdobeUM
[11/11/2005|19:04] C:\DOCUME~1\SOLANGE\APPLIC~1\Apple Computer
[28/05/2005|16:57] C:\DOCUME~1\SOLANGE\APPLIC~1\ArcSoft
[13/04/2008|10:28] C:\DOCUME~1\SOLANGE\APPLIC~1\Azureus
[26/03/2005|21:25] C:\DOCUME~1\SOLANGE\APPLIC~1\CyberLink
[09/03/2008|10:29] C:\DOCUME~1\SOLANGE\APPLIC~1\dvdcss
[28/11/2006|20:58] C:\DOCUME~1\SOLANGE\APPLIC~1\Google
[14/04/2008|20:14] C:\DOCUME~1\SOLANGE\APPLIC~1\GrabIt
[18/04/2005|16:38] C:\DOCUME~1\SOLANGE\APPLIC~1\Help
[16/08/2004|18:19] C:\DOCUME~1\SOLANGE\APPLIC~1\Identities
[04/03/2007|11:32] C:\DOCUME~1\SOLANGE\APPLIC~1\LaCie
[23/03/2005|10:58] C:\DOCUME~1\SOLANGE\APPLIC~1\Leadertech
[10/04/2005|20:35] C:\DOCUME~1\SOLANGE\APPLIC~1\Macromedia
[07/12/2008|13:57] C:\DOCUME~1\SOLANGE\APPLIC~1\Malwarebytes
[04/12/2008|21:14] C:\DOCUME~1\SOLANGE\APPLIC~1\Microsoft
[01/12/2007|20:41] C:\DOCUME~1\SOLANGE\APPLIC~1\Mozilla
[31/08/2008|01:49] C:\DOCUME~1\SOLANGE\APPLIC~1\Nokia
[29/08/2005|22:29] C:\DOCUME~1\SOLANGE\APPLIC~1\Nokia Multimedia Player
[10/05/2005|17:43] C:\DOCUME~1\SOLANGE\APPLIC~1\OD2
[29/08/2005|22:26] C:\DOCUME~1\SOLANGE\APPLIC~1\PC Suite
[06/12/2008|23:58] C:\DOCUME~1\SOLANGE\APPLIC~1\PC Tools
[16/08/2008|17:30] C:\DOCUME~1\SOLANGE\APPLIC~1\Real
[07/11/2005|20:29] C:\DOCUME~1\SOLANGE\APPLIC~1\River Past G4
[16/05/2005|14:56] C:\DOCUME~1\SOLANGE\APPLIC~1\Roxio
[26/10/2008|11:56] C:\DOCUME~1\SOLANGE\APPLIC~1\Skype
[26/10/2008|11:54] C:\DOCUME~1\SOLANGE\APPLIC~1\skypePM
[23/03/2005|10:58] C:\DOCUME~1\SOLANGE\APPLIC~1\Sonic
[18/01/2005|09:19] C:\DOCUME~1\SOLANGE\APPLIC~1\Sun
[20/08/2006|15:23] C:\DOCUME~1\SOLANGE\APPLIC~1\Symantec
[06/12/2008|21:23] C:\DOCUME~1\SOLANGE\APPLIC~1\uTorrent
[06/01/2008|06:10] C:\DOCUME~1\SOLANGE\APPLIC~1\vlc
[18/01/2005|09:28] C:\DOCUME~1\SOLANGE\APPLIC~1\You've Got Pictures Screensaver

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[07/12/2008 00:32][--a------] C:\WINDOWS\tasks\Norton Security Scan for SOLANGE.job
[07/12/2008 17:29][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[07/12/2008|01:39] C:\Program Files\Adobe
[20/08/2006|15:34] C:\Program Files\Alwil Software
[30/12/2005|01:18] C:\Program Files\AOL 9.0
[18/01/2005|09:28] C:\Program Files\AOL Compagnon
[19/09/2005|19:07] C:\Program Files\ArcSoft
[18/01/2005|09:19] C:\Program Files\ATI Technologies
[28/03/2005|18:47] C:\Program Files\Aubade
[02/09/2005|21:27] C:\Program Files\AVSMedia
[15/04/2008|17:59] C:\Program Files\Azureus
[25/02/2006|19:03] C:\Program Files\Canon
[06/12/2008|15:52] C:\Program Files\CCleaner
[16/08/2004|18:05] C:\Program Files\ComPlus Applications
[18/01/2005|09:33] C:\Program Files\CyberLink
[22/11/2008|20:53] C:\Program Files\eMule
[23/03/2005|11:17] C:\Program Files\EPSON
[20/04/2005|14:52] C:\Program Files\EZFace
[07/12/2008|15:25] C:\Program Files\Fichiers communs
[06/01/2008|00:35] C:\Program Files\Freeplayer
[17/02/2007|12:42] C:\Program Files\GIMP-2.0
[19/02/2006|23:58] C:\Program Files\GOlive
[07/12/2008|00:26] C:\Program Files\Google
[22/11/2007|17:40] C:\Program Files\Grisoft
[28/11/2008|22:32] C:\Program Files\HomePlayer1.5.3.1
[07/12/2008|12:30] C:\Program Files\InstallShield Installation Information
[18/01/2005|09:15] C:\Program Files\Intel
[08/09/2008|16:39] C:\Program Files\Internet Explorer
[06/12/2008|22:46] C:\Program Files\Java
[06/12/2008|17:39] C:\Program Files\Kaspersky Lab
[04/03/2007|11:31] C:\Program Files\LaCie
[18/01/2005|09:28] C:\Program Files\Learn2.com
[18/11/2007|21:32] C:\Program Files\Live-Prod
[07/12/2008|13:57] C:\Program Files\Malwarebytes' Anti-Malware
[27/11/2007|13:40] C:\Program Files\MaxiMemo
[27/11/2005|20:25] C:\Program Files\mco_install
[02/03/2007|19:30] C:\Program Files\Mediafour
[08/09/2008|16:46] C:\Program Files\Messenger
[10/05/2007|19:33] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[16/08/2004|18:11] C:\Program Files\microsoft frontpage
[06/03/2008|21:07] C:\Program Files\microsoft office
[18/01/2005|09:36] C:\Program Files\Microsoft Visual Studio
[06/03/2008|21:08] C:\Program Files\Microsoft Works
[06/03/2008|21:05] C:\Program Files\Microsoft.NET
[08/09/2008|16:39] C:\Program Files\Movie Maker
[07/12/2008|17:35] C:\Program Files\Mozilla Firefox
[16/08/2004|18:03] C:\Program Files\MSN
[16/08/2004|18:03] C:\Program Files\MSN Gaming Zone
[08/09/2008|17:15] C:\Program Files\MSN Messenger
[18/11/2006|02:08] C:\Program Files\MSXML 4.0
[17/08/2006|12:59] C:\Program Files\Music Manager
[30/12/2005|01:18] C:\Program Files\My Music
[06/12/2008|17:26] C:\Program Files\Navilog1
[08/09/2008|16:31] C:\Program Files\NetMeeting
[17/02/2007|16:16] C:\Program Files\Nokia
[07/12/2008|01:19] C:\Program Files\Norton Security Scan
[16/08/2004|18:03] C:\Program Files\Online Services
[08/09/2008|16:30] C:\Program Files\Outlook Express
[07/12/2008|17:29] C:\Program Files\Packard Bell EverSafe
[07/12/2008|00:30] C:\Program Files\Picasa2
[07/12/2008|02:51] C:\Program Files\QuickTime
[18/01/2005|09:27] C:\Program Files\Real
[03/04/2005|12:08] C:\Program Files\rec
[07/11/2005|20:23] C:\Program Files\River Past
[16/08/2004|18:07] C:\Program Files\Services en ligne
[26/10/2008|11:58] C:\Program Files\Skype
[18/08/2005|12:49] C:\Program Files\Softwin
[18/01/2005|09:34] C:\Program Files\Sonic
[07/12/2008|02:00] C:\Program Files\Spybot - Search & Destroy
[07/12/2008|00:02] C:\Program Files\Spyware Doctor
[29/03/2008|09:06] C:\Program Files\Sweet Home 3D
[18/01/2005|09:07] C:\Program Files\Synaptics
[06/12/2008|22:15] C:\Program Files\trend micro
[16/08/2004|18:19] C:\Program Files\Uninstall Information
[16/11/2006|17:34] C:\Program Files\VeriSign
[02/12/2005|22:31] C:\Program Files\VideoLAN
[17/02/2007|13:15] C:\Program Files\Winamp
[24/11/2005|23:17] C:\Program Files\Windows Journal Viewer
[29/11/2007|23:47] C:\Program Files\Windows Live Toolbar
[10/05/2008|15:06] C:\Program Files\Windows Media Connect 2
[08/09/2008|16:30] C:\Program Files\Windows Media Player
[08/09/2008|16:30] C:\Program Files\Windows NT
[16/08/2004|18:07] C:\Program Files\WindowsUpdate
[22/11/2008|19:51] C:\Program Files\WinRAR
[16/08/2004|18:11] C:\Program Files\xerox
[06/12/2008|15:52] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[07/12/2008|01:42] C:\Program Files\Fichiers communs\Adobe
[18/01/2005|09:28] C:\Program Files\Fichiers communs\AOL
[18/01/2005|09:28] C:\Program Files\Fichiers communs\aolshare
[18/01/2005|09:36] C:\Program Files\Fichiers communs\Designer
[23/03/2005|11:18] C:\Program Files\Fichiers communs\EPSON
[10/05/2005|15:26] C:\Program Files\Fichiers communs\InstallShield
[18/01/2005|09:19] C:\Program Files\Fichiers communs\Java
[08/08/2008|09:33] C:\Program Files\Fichiers communs\Microsoft Shared
[16/08/2004|18:06] C:\Program Files\Fichiers communs\MSSoap
[29/08/2005|22:24] C:\Program Files\Fichiers communs\Nokia
[25/02/2006|02:07] C:\Program Files\Fichiers communs\NSV
[18/01/2005|09:28] C:\Program Files\Fichiers communs\Nullsoft
[16/08/2004|17:57] C:\Program Files\Fichiers communs\ODBC
[29/08/2005|22:24] C:\Program Files\Fichiers communs\PCSuite
[25/08/2008|11:24] C:\Program Files\Fichiers communs\Real
[10/05/2005|15:28] C:\Program Files\Fichiers communs\Roxio Shared
[16/08/2004|18:06] C:\Program Files\Fichiers communs\Services
[24/07/2006|17:53] C:\Program Files\Fichiers communs\Softwin
[16/08/2004|17:56] C:\Program Files\Fichiers communs\SpeechEngines
[18/01/2005|09:35] C:\Program Files\Fichiers communs\SureThing Shared
[07/12/2008|00:41] C:\Program Files\Fichiers communs\Symantec Shared
[08/09/2008|16:30] C:\Program Files\Fichiers communs\System
[18/01/2005|09:32] C:\Program Files\Fichiers communs\TVNavigTechnologies Shared
[25/08/2008|11:24] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 48 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-07 17:44:45
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 494

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:8][D:8]-> C:\DOCUME~1\SOLANGE\LOCALS~1\Temp
[F:14][D:0]-> C:\DOCUME~1\SOLANGE\Cookies
[F:247][D:4]-> C:\DOCUME~1\SOLANGE\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 07/12/2008|16:28 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 07/12/2008|17:47 - Option : [2]

--------------------\\ Fin du rapport a 17:47:45

-------------------\\ Lop S&D 4.2.4-9c XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) M processor 1.60GHz )
BIOS : Insyde Software MobilePRO BIOS Version 4.00.00
USER : SOLANGE ( Administrator )
BOOT : Normal boot
Antivirus : Kaspersky Anti-Virus 8.0.0.506 (Activated)
C:\ (Local Disk) - NTFS - Total:51 Go (Free:6 Go)
D:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
Option : [2] ( 07/12/2008|17:36 )


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans APPLIC~1

[16/08/2004|18:19] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[07/12/2008|12:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[18/01/2005|09:19] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun
[18/01/2005|09:29] C:\DOCUME~1\ADMINI~1\APPLIC~1\Symantec
[18/01/2005|09:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\You've Got Pictures Screensaver

[07/12/2008|01:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[18/01/2005|09:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
[08/10/2005|00:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[10/01/2008|13:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[06/01/2007|12:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[07/12/2008|01:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[22/11/2007|15:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[07/12/2008|17:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Lab
[07/12/2008|13:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[04/12/2008|21:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[13/11/2008|21:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[17/02/2007|12:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Napster
[17/08/2006|12:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\OD2
[24/06/2005|20:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[17/08/2006|18:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\River Past G4
[16/08/2004|18:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[26/10/2008|11:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[07/12/2008|12:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[20/08/2006|15:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[07/12/2008|17:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[24/11/2005|23:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[13/03/2007|20:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[17/06/2007|12:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Wipe send support heart
[06/12/2008|16:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

[16/08/2004|18:19] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[16/08/2004|17:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[18/01/2005|09:19] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
[18/01/2005|09:29] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec
[18/01/2005|09:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver

[11/02/2007|19:02] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[16/08/2004|18:19] C:\DOCUME~1\LUC\APPLIC~1\Identities
[24/09/2005|23:07] C:\DOCUME~1\LUC\APPLIC~1\Microsoft
[24/09/2005|20:41] C:\DOCUME~1\LUC\APPLIC~1\OD2
[24/09/2005|14:52] C:\DOCUME~1\LUC\APPLIC~1\PC Suite
[10/08/2005|14:42] C:\DOCUME~1\LUC\APPLIC~1\Real
[18/01/2005|09:19] C:\DOCUME~1\LUC\APPLIC~1\Sun
[18/01/2005|09:29] C:\DOCUME~1\LUC\APPLIC~1\Symantec
[18/01/2005|09:28] C:\DOCUME~1\LUC\APPLIC~1\You've Got Pictures Screensaver

[16/08/2004|17:54] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[07/04/2005|13:41] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec

[05/11/2005|16:03] C:\DOCUME~1\PROPRI~1\APPLIC~1\Symantec
[27/03/2005|15:56] C:\DOCUME~1\PROPRI~1\APPLIC~1\You've Got Pictures Screensaver

[11/02/2008|19:36] C:\DOCUME~1\SOLANGE\APPLIC~1\Adobe
[30/08/2008|12:55] C:\DOCUME~1\SOLANGE\APPLIC~1\AdobeUM
[11/11/2005|19:04] C:\DOCUME~1\SOLANGE\APPLIC~1\Apple Computer
[28/05/2005|16:57] C:\DOCUME~1\SOLANGE\APPLIC~1\ArcSoft
[13/04/2008|10:28] C:\DOCUME~1\SOLANGE\APPLIC~1\Azureus
[26/03/2005|21:25] C:\DOCUME~1\SOLANGE\APPLIC~1\CyberLink
[09/03/2008|10:29] C:\DOCUME~1\SOLANGE\APPLIC~1\dvdcss
[28/11/2006|20:58] C:\DOCUME~1\SOLANGE\APPLIC~1\Google
[14/04/2008|20:14] C:\DOCUME~1\SOLANGE\APPLIC~1\GrabIt
[18/04/2005|16:38] C:\DOCUME~1\SOLANGE\APPLIC~1\Help
[16/08/2004|18:19] C:\DOCUME~1\SOLANGE\APPLIC~1\Identities
[04/03/2007|11:32] C:\DOCUME~1\SOLANGE\APPLIC~1\LaCie
[23/03/2005|10:58] C:\DOCUME~1\SOLANGE\APPLIC~1\Leadertech
[10/04/2005|20:35] C:\DOCUME~1\SOLANGE\APPLIC~1\Macromedia
[07/12/2008|13:57] C:\DOCUME~1\SOLANGE\APPLIC~1\Malwarebytes
[04/12/2008|21:14] C:\DOCUME~1\SOLANGE\APPLIC~1\Microsoft
[01/12/2007|20:41] C:\DOCUME~1\SOLANGE\APPLIC~1\Mozilla
[31/08/2008|01:49] C:\DOCUME~1\SOLANGE\APPLIC~1\Nokia
[29/08/2005|22:29] C:\DOCUME~1\SOLANGE\APPLIC~1\Nokia Multimedia Player
[10/05/2005|17:43] C:\DOCUME~1\SOLANGE\APPLIC~1\OD2
[29/08/2005|22:26] C:\DOCUME~1\SOLANGE\APPLIC~1\PC Suite
[06/12/2008|23:58] C:\DOCUME~1\SOLANGE\APPLIC~1\PC Tools
[16/08/2008|17:30] C:\DOCUME~1\SOLANGE\APPLIC~1\Real
[07/11/2005|20:29] C:\DOCUME~1\SOLANGE\APPLIC~1\River Past G4
[16/05/2005|14:56] C:\DOCUME~1\SOLANGE\APPLIC~1\Roxio
[26/10/2008|11:56] C:\DOCUME~1\SOLANGE\APPLIC~1\Skype
[26/10/2008|11:54] C:\DOCUME~1\SOLANGE\APPLIC~1\skypePM
[23/03/2005|10:58] C:\DOCUME~1\SOLANGE\APPLIC~1\Sonic
[18/01/2005|09:19] C:\DOCUME~1\SOLANGE\APPLIC~1\Sun
[20/08/2006|15:23] C:\DOCUME~1\SOLANGE\APPLIC~1\Symantec
[06/12/2008|21:23] C:\DOCUME~1\SOLANGE\APPLIC~1\uTorrent
[06/01/2008|06:10] C:\DOCUME~1\SOLANGE\APPLIC~1\vlc
[18/01/2005|09:28] C:\DOCUME~1\SOLANGE\APPLIC~1\You've Got Pictures Screensaver

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[07/12/2008 00:32][--a------] C:\WINDOWS\tasks\Norton Security Scan for SOLANGE.job
[07/12/2008 17:29][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[07/12/2008|01:39] C:\Program Files\Adobe
[20/08/2006|15:34] C:\Program Files\Alwil Software
[30/12/2005|01:18] C:\Program Files\AOL 9.0
[18/01/2005|09:28] C:\Program Files\AOL Compagnon
[19/09/2005|19:07] C:\Program Files\ArcSoft
[18/01/2005|09:19] C:\Program Files\ATI Technologies
[28/03/2005|18:47] C:\Program Files\Aubade
[02/09/2005|21:27] C:\Program Files\AVSMedia
[15/04/2008|17:59] C:\Program Files\Azureus
[25/02/2006|19:03] C:\Program Files\Canon
[06/12/2008|15:52] C:\Program Files\CCleaner
[16/08/2004|18:05] C:\Program Files\ComPlus Applications
[18/01/2005|09:33] C:\Program Files\CyberLink
[22/11/2008|20:53] C:\Program Files\eMule
[23/03/2005|11:17] C:\Program Files\EPSON
[20/04/2005|14:52] C:\Program Files\EZFace
[07/12/2008|15:25] C:\Program Files\Fichiers communs
[06/01/2008|00:35] C:\Program Files\Freeplayer
[17/02/2007|12:42] C:\Program Files\GIMP-2.0
[19/02/2006|23:58] C:\Program Files\GOlive
[07/12/2008|00:26] C:\Program Files\Google
[22/11/2007|17:40] C:\Program Files\Grisoft
[28/11/2008|22:32] C:\Program Files\HomePlayer1.5.3.1
[07/12/2008|12:30] C:\Program Files\InstallShield Installation Information
[18/01/2005|09:15] C:\Program Files\Intel
[08/09/2008|16:39] C:\Program Files\Internet Explorer
[06/12/2008|22:46] C:\Program Files\Java
[06/12/2008|17:39] C:\Program Files\Kaspersky Lab
[04/03/2007|11:31] C:\Program Files\LaCie
[18/01/2005|09:28] C:\Program Files\Learn2.com
[18/11/2007|21:32] C:\Program Files\Live-Prod
[07/12/2008|13:57] C:\Program Files\Malwarebytes' Anti-Malware
[27/11/2007|13:40] C:\Program Files\MaxiMemo
[27/11/2005|20:25] C:\Program Files\mco_install
[02/03/2007|19:30] C:\Program Files\Mediafour
[08/09/2008|16:46] C:\Program Files\Messenger
[10/05/2007|19:33] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[16/08/2004|18:11] C:\Program Files\microsoft frontpage
[06/03/2008|21:07] C:\Program Files\microsoft office
[18/01/2005|09:36] C:\Program Files\Microsoft Visual Studio
[06/03/2008|21:08] C:\Program Files\Microsoft Works
[06/03/2008|21:05] C:\Program Files\Microsoft.NET
[08/09/2008|16:39] C:\Program Files\Movie Maker
[07/12/2008|17:35] C:\Program Files\Mozilla Firefox
[16/08/2004|18:03] C:\Program Files\MSN
[16/08/2004|18:03] C:\Program Files\MSN Gaming Zone
[08/09/2008|17:15] C:\Program Files\MSN Messenger
[18/11/2006|02:08] C:\Program Files\MSXML 4.0
[17/08/2006|12:59] C:\Program Files\Music Manager
[30/12/2005|01:18] C:\Program Files\My Music
[06/12/2008|17:26] C:\Program Files\Navilog1
[08/09/2008|16:31] C:\Program Files\NetMeeting
[17/02/2007|16:16] C:\Program Files\Nokia
[07/12/2008|01:19] C:\Program Files\Norton Security Scan
[16/08/2004|18:03] C:\Program Files\Online Services
[08/09/2008|16:30] C:\Program Files\Outlook Express
[07/12/2008|17:29] C:\Program Files\Packard Bell EverSafe
[07/12/2008|00:30] C:\Program Files\Picasa2
[07/12/2008|02:51] C:\Program Files\QuickTime
[18/01/2005|09:27] C:\Program Files\Real
[03/04/2005|12:08] C:\Program Files\rec
[07/11/2005|20:23] C:\Program Files\River Past
[16/08/2004|18:07] C:\Program Files\Services en ligne
[26/10/2008|11:58] C:\Program Files\Skype
[18/08/2005|12:49] C:\Program Files\Softwin
[18/01/2005|09:34] C:\Program Files\Sonic
[07/12/2008|02:00] C:\Program Files\Spybot - Search & Destroy
[07/12/2008|00:02] C:\Program Files\Spyware Doctor
[29/03/2008|09:06] C:\Program Files\Sweet Home 3D
[18/01/2005|09:07] C:\Program Files\Synaptics
[06/12/2008|22:15] C:\Program Files\trend micro
[16/08/2004|18:19] C:\Program Files\Uninstall Information
[16/11/2006|17:34] C:\Program Files\VeriSign
[02/12/2005|22:31] C:\Program Files\VideoLAN
[17/02/2007|13:15] C:\Program Files\Winamp
[24/11/2005|23:17] C:\Program Files\Windows Journal Viewer
[29/11/2007|23:47] C:\Program Files\Windows Live Toolbar
[10/05/2008|15:06] C:\Program Files\Windows Media Connect 2
[08/09/2008|16:30] C:\Program Files\Windows Media Player
[08/09/2008|16:30] C:\Program Files\Windows NT
[16/08/2004|18:07] C:\Program Files\WindowsUpdate
[22/11/2008|19:51] C:\Program Files\WinRAR
[16/08/2004|18:11] C:\Program Files\xerox
[06/12/2008|15:52] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[07/12/2008|01:42] C:\Program Files\Fichiers communs\Adobe
[18/01/2005|09:28] C:\Program Files\Fichiers communs\AOL
[18/01/2005|09:28] C:\Program Files\Fichiers communs\aolshare
[18/01/2005|09:36] C:\Program Files\Fichiers communs\Designer
[23/03/2005|11:18] C:\Program Files\Fichiers communs\EPSON
[10/05/2005|15:26] C:\Program Files\Fichiers communs\InstallShield
[18/01/2005|09:19] C:\Program Files\Fichiers communs\Java
[08/08/2008|09:33] C:\Program Files\Fichiers communs\Microsoft Shared
[16/08/2004|18:06] C:\Program Files\Fichiers communs\MSSoap
[29/08/2005|22:24] C:\Program Files\Fichiers communs\Nokia
[25/02/2006|02:07] C:\Program Files\Fichiers communs\NSV
[18/01/2005|09:28] C:\Program Files\Fichiers communs\Nullsoft
[16/08/2004|17:57] C:\Program Files\Fichiers communs\ODBC
[29/08/2005|22:24] C:\Program Files\Fichiers communs\PCSuite
[25/08/2008|11:24] C:\Program Files\Fichiers communs\Real
[10/05/2005|15:28] C:\Program Files\Fichiers communs\Roxio Shared
[16/08/2004|18:06] C:\Program Files\Fichiers communs\Services
[24/07/2006|17:53] C:\Program Files\Fichiers communs\Softwin
[16/08/2004|17:56] C:\Program Files\Fichiers communs\SpeechEngines
[18/01/2005|09:35] C:\Program Files\Fichiers communs\SureThing Shared
[07/12/2008|00:41] C:\Program Files\Fichiers communs\Symantec Shared
[08/09/2008|16:30] C:\Program Files\Fichiers communs\System
[18/01/2005|09:32] C:\Program Files\Fichiers communs\TVNavigTechnologies Shared
[25/08/2008|11:24] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 48 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-07 17:44:45
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 494

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:8][D:8]-> C:\DOCUME~1\SOLANGE\LOCALS~1\Temp
[F:14][D:0]-> C:\DOCUME~1\SOLANGE\Cookies
[F:247][D:4]-> C:\DOCUME~1\SOLANGE\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 07/12/2008|16:28 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 07/12/2008|17:47 - Option : [2]

--------------------\\ Fin du rapport a 17:47:45

c est quoi un rapport RSIT?

c est quoi le RSIT???

Logfile of random's system information tool 1.04 (written by random/random)
Run by SOLANGE at 2008-12-07 19:57:44
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 7 GB (13%) free of 53 GB
Total RAM: 511 MB (17% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:57:46, on 07/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\drivers\Icon.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Apps\Powercinema\PCMService.exe
C:\Program Files\Packard Bell EverSafe\TrayControl.exe
C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXE
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\LaCie\Backup Software\LaCieBackup.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\SOLANGE\Bureau\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\SOLANGE.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.mini60.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [Icon] C:\WINDOWS\system32\drivers\Icon.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [EPSON Stylus C42 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P23 "EPSON Stylus C42 Series" /O6 "USB001" /M "Stylus C42"
O4 - HKLM\..\Run: [NovaNet-WEB Tray Control] C:\Program Files\Packard Bell EverSafe\TrayControl.exe
O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [LaCie Backup] C:\Program Files\LaCie\Backup Software\\LaCieBackup.exe /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_1_0
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Packard Bell EverSafe Tray Control.lnk = C:\Program Files\Packard Bell EverSafe\TrayControl.exe
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: MP3Chansons - {EF6D6AE3-2625-40D6-A5AB-920DFD2DAF8C} - C:\Documents and Settings\SOLANGE\Application Data\MP3Chansons[1].exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
O16 - DPF: {8731163E-77B9-4F91-9122-F112521C28AF} (MMSPlayerX Class) - http://62.201.137.56/mmawap/jsp/composer/player/mmsPlayer.cab
O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.1.cab
O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by105fd.bay105.hotmail.msn.com/activex/HMAtchmt.ocx
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: MySqlInventime - Unknown owner - c:\mysql\bin\mysqld-max-nt.exe (file missing)
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

ATTENTION : je suis allee dans le poste de travail pour trouver lUN info.txt mais il date d HIER ou j ai deja fait cette analyse!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!



info.txt logfile of random's system information tool 1.04 2008-12-06 22:15:51

======Uninstall list======

-->"C:\Program Files\Fichiers communs\aolshare\Coach\AolCInUn.exe" -lang="fr-fr"
-->C:\PROGRA~1\FICHIE~1\AOL\ACS\AcsUninstall.exe /c
-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{09B44E78-A988-4BC0-962F-63ECD3333708} /l1036
-->C:\Program Files\Fichiers communs\AOL\Screensaver\uninst_ygpss.exe
-->C:\Program Files\Fichiers communs\aolshare\Aolunins_fr.exe
-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\Program Files\Learn2.com\StRunner\stuninst.exe
-->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Adobe\PDF IFilter 6.0\Uninst.isu"
-->C:\WINDOWS\Modio\SLAMR2KO\Setup.exe /Remove
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}
-->C:\WINDOWS\system32\drivers\unMTCDIO.exe
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.EXE" -uninstall
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\SETUP.EXE" -uninstall
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" REMOVE
-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0015-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0019-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {5A2F65A4-808F-4A1E-973E-92E17824982D}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {430971B1-C31E-45DA-81E0-72C095BAB72C}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {B3F4DC34-7F60-4B7C-A79F-1C13012D99D4}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {F7A31780-33C4-4E39-951A-5EC9B91D7BF1}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe PDF IFilter 6.0-->C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Adobe\PDF IFilter 6.0\Uninst.isu"
Adobe Reader 7.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70000000000}
ArcSoft PhotoImpression 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7D090F28-CC6C-43A7-ABF2-8F4F26B4E187}\setup.exe" -l0x40c
AVG Anti-Spyware 7.5-->C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Uninstall.exe
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
eMule-->"C:\Program Files\eMule\Uninstall.exe"
EPSON Logiciel imprimante-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
EZface ActiveX 205-->C:\PROGRA~1\EZFace\ActiveX\uninst.bat 205 C:\PROGRA~1\EZFace\ActiveX
Freeplayer-->C:\Program Files\Freeplayer\Uninstall.exe
Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar2.dll"
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
HomePlayer 1.5.3.1-->C:\Program Files\HomePlayer1.5.3.1\uninst.exe
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
J2SE Runtime Environment 5.0 Update 11-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150110}
Java(TM) 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
Java(TM) 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Java(TM) SE Runtime Environment 6 Update 1-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
Kaspersky Anti-Virus 2009-->MsiExec.exe /I{6580C5A3-2336-4EC5-85F1-3448C5F6208A}
Kaspersky Anti-Virus 2009-->MsiExec.exe /I{6580C5A3-2336-4EC5-85F1-3448C5F6208A}
LaCie Backup Software v1.5.2042-->MsiExec.exe /I{6DD9963C-271A-4A14-82B0-4DC148C52E58}
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Look 316-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CD89BDD5-E758-42D5-B34B-C149F88CE515}\setup.exe" -l0x40c
MailSkinner-->MsiExec.exe /I{D046FF69-D86A-42C6-AE7F-B372C680446D}
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office Language Pack 2007 Service Pack 1 (SP1)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {EC50B538-CBE1-42E6-B7FE-87AA540AADFB}
Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint Viewer 2003-->MsiExec.exe /X{90AF040C-6000-11D3-8CFE-0150048383C9}
Microsoft Office Professional 2007-->MsiExec.exe /X{91120000-0014-0000-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Word 2002-->MsiExec.exe /I{911B040C-6000-11D3-8CFE-0050048383C9}
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956390)-->"C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mozilla Firefox (2.0.0.18)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML4 Parser-->MsiExec.exe /I{01501EBA-EC35-4F9F-8889-3BE346E5DA13}
Music Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5AFA4872-16B2-419E-ADCA-8E96E739115D}\setup.exe" -l0x40c
My DSC-->C:\Program Files\InstallShield Installation Information\{225af9a1-b556-88d5-94aa-0010b5426419}\setup.exe
Nokia PC Suite-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{617095DB-B523-4D11-BBFD-2D74C2AD98B8}
Packard Bell EverSafe-->"C:\Program Files\Packard Bell EverSafe\Uninstall.exe" C:\WINDOWS\ISUN040C.EXE -y -f"C:\Program Files\Packard Bell EverSafe\Uninst.isu"
Packard Bell InfoCentre-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B04AC0A3-7A0F-4E38-9DE7-FD1E4CE47D8C}\setup.exe"
QuickTime-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{4E5E22C2-1386-47AE-8EDE-32DDCDCD6653} /l1036
RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
Security Update for 2007 Microsoft Office System (KB955936)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {1D94099C-2BBA-440E-BD5E-093BBDF8F028}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for Microsoft Office Excel 2007 (KB955470)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {6E8637D8-10D6-4568-AA06-E2706F31685E}
Security Update for Microsoft Office PowerPoint 2007 (KB951338)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {558B709B-821B-4FC5-90FC-9A8890641E77}
Security Update for Microsoft Office Publisher 2007 (KB950114)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {F9C3CDBA-1F00-4D4D-959D-75C9D3ACDD85}
Security Update for Microsoft Office system 2007 (KB951808)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {8F375E11-4FD6-4B89-9E2B-A76D48B51E00}
Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
Security Update for Microsoft Office Word 2007 (KB950113)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {AD72BABE-C733-4FCF-9674-4314466191B9}
Security Update for Visio 2007 (KB947590)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {6BAD036C-261F-4BEF-96CF-C20678D07A41}
Sonic RecordNow!-->MsiExec.exe /I{9541FED0-327F-4DF0-8B96-EF57EF622F19}
Sweet Home 3D version 1.2.1-->"C:\Program Files\Sweet Home 3D\unins000.exe"
TorrentQ version 2.1.0.0-->"C:\Program Files\TorrentQ\unins000.exe"
Update for Microsoft Office Outlook 2007 (KB952142)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {4AD3A076-427C-491F-A5B7-7D1DE788A756}
Update for Office 2007 (KB946691)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {A420F522-7395-4872-9882-C591B4B92278}
Update for Outlook 2007 Junk Email Filter (kb957829)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {07A1F6B6-4F1C-418C-A605-755A121C4A16}
Version d'évaluation de Microsoft Office Professional 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROR /dll OSETUP.DLL
VideoLAN VLC media player 0.8.4a-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Visionneuse Journal Windows Microsoft-->MsiExec.exe /X{43DCF766-6838-4F9A-8C91-D92DA586DFA8}
Windows Live Messenger-->MsiExec.exe /I{F6326B60-1B1D-4ABF-BFCD-7B7404F44411}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
WinRAR archiver-->C:\Program Files\WinRAR\uninstall.exe
Yahoo! Toolbar avec bloqueur de fenêtres pop-up-->C:\PROGRA~1\Yahoo!\Common\unyt.exe

======Hosts File======

127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD

======Security center information======

AV: Kaspersky Anti-Virus

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI Control Panel;C:\PROGRA~1\FICHIE~1\TVNAVI~1;C:\Program Files\QuickTime\QTSystem\;C:\Program Files\Fichiers communs\GTK\2.0\bin
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 13 Stepping 6, GenuineIntel
"PROCESSOR_REVISION"=0d06
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=C:\Program Files\Java\jre1.5.0_02\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.5.0_02\lib\ext\QTJava.zip
"VeriSign"=C:\Program Files\VeriSign
"VRSN"=C:\Program Files\VeriSign
"VeriSignTemp"=C:\Program Files\VeriSign\Temp
"VRSNTemp"=C:\Program Files\VeriSign\Temp

-----------------EOF-----------------

je ne sais pas comment te remercier pour toute cette aide mais malheureusement le MailSkinner apparait toujours dans panneau de configuration, ajouter/supprimer programmes... et comme auparavant quand je tente de le supprimer j ai cette reponse a nouveau : "Un probleme s est produit sur ce package Windows Installer. Un programme necessaire pour que cette installation puisse se terminer n a pas pu etre execute. Contactez votre service de support ou le distributeur du package."
Ai je encore des virus, chevaux de troie, blablabla...? Pourquoi MailSkinner (0,23 Mo) apparait toujours?

JE N ARRIVE PAS A A COPIER COLLER LE RAPPORT?!

LA PAGE N EXISTE PLUS

Erreur 404 !
Erreur404

Objet non trouvé !

L'URL requise n'a pu être trouvée sur ce serveur. Si vous avez tapé l'URL à la main, veuillez vérifier l'orthographe et réessayer.

Si vous pensez qu'il s'agit d'une erreur du serveur, veuillez contacter un administrateur à cette adresse : archive.host@gmail.com

apparemment l antivirus gene le navilog.. ça a tout saute... donc j ai du reprendre à .. voila donc le 1 ett 2


Search Navipromo version 3.6.9 commencé le 10/12/2008 à 20:36:24,04

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "SOLANGE"

Mise à jour le 05.11.2008 à 21h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 6.0.2900.5512
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***

MailSkinner

*** Recherche dossiers dans "C:\WINDOWS" ***


*** Recherche dossiers dans "C:\Program Files" ***


*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\SOLANGE\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\LUC\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\PROPRI~1\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\SOLANGE\locals~1\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\LUC\locals~1\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\SOLANGE\menudm~1\progra~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\menudm~1\progra~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\LUC\menudm~1\progra~1" ***


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\SOLANGE\locals~1\applic~1" *

* Recherche dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *

* Recherche dans "C:\DOCUME~1\LUC\locals~1\applic~1" *



*** Recherche fichiers ***



*** Recherche clés spécifiques dans le Registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :


* Dans "C:\Documents and Settings\SOLANGE\locals~1\applic~1" :


* Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" :


* Dans "C:\DOCUME~1\LUC\locals~1\applic~1" :


3)Recherche Certificats :

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat Montorgueil absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :



*** Analyse terminée le 10/12/2008 à 20:46:37,71 ***
ute et j ai du reprendreà 0... mais voici le 1 et 2 :

Search Navipromo version 3.6.9 commencé le 10/12/2008 à 21:10:43,38

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "SOLANGE"

Mise à jour le 05.11.2008 à 21h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 6.0.2900.5512
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***

MailSkinner

*** Recherche dossiers dans "C:\WINDOWS" ***


*** Recherche dossiers dans "C:\Program Files" ***


*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\SOLANGE\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\LUC\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\PROPRI~1\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\SOLANGE\locals~1\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\LUC\locals~1\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\SOLANGE\menudm~1\progra~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\menudm~1\progra~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\LUC\menudm~1\progra~1" ***


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\SOLANGE\locals~1\applic~1" *

* Recherche dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *

* Recherche dans "C:\DOCUME~1\LUC\locals~1\applic~1" *



*** Recherche fichiers ***



*** Recherche clés spécifiques dans le Registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :


* Dans "C:\Documents and Settings\SOLANGE\locals~1\applic~1" :


* Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" :


* Dans "C:\DOCUME~1\LUC\locals~1\applic~1" :


3)Recherche Certificats :

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat Montorgueil absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :



*** Analyse terminée le 10/12/2008 à 21:18:09,66 ***

[b] Nettoyage executé en mode normal et non au reboot
!! Les résultats ne seront pas optimisés !! [/b]


*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)


*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans "C:\WINDOWS\System32" *


* Suppression dans "C:\Documents and Settings\SOLANGE\locals~1\applic~1" *


* Suppression dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *

* Suppression dans "C:\DOCUME~1\LUC\locals~1\applic~1" *


*** Suppression dossiers dans "C:\WINDOWS" ***


*** Suppression dossiers dans "C:\Program Files" ***


*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***


*** Suppression dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\SOLANGE\applic~1" ***


*** Suppression dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" ***


*** Suppression dossiers dans "C:\DOCUME~1\LUC\applic~1" ***


*** Suppression dossiers dans "C:\DOCUME~1\PROPRI~1\applic~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\SOLANGE\locals~1\applic~1" ***


*** Suppression dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" ***


*** Suppression dossiers dans "C:\DOCUME~1\LUC\locals~1\applic~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\SOLANGE\menudm~1\progra~1" ***


*** Suppression dossiers dans "C:\DOCUME~1\ADMINI~1\menudm~1\progra~1" ***


*** Suppression dossiers dans "C:\DOCUME~1\LUC\menudm~1\progra~1" ***



*** Suppression fichiers ***


*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\SOLANGE\locals~1\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :


* Dans "C:\WINDOWS\system32" *


* Dans "C:\Documents and Settings\SOLANGE\locals~1\applic~1" *


* Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *


* Dans "C:\DOCUME~1\LUC\locals~1\applic~1" *


*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok


*** Certificats ***

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat Montorgueil absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltdt absent !

*** Nettoyage terminé le 10/12/2008 à 21:32:45,84 ***

--------- Logfile of AD-Remover 1.0.7.1 by C_XX ---------

# START at: 21:36:53 | Mer 10/12/2008 | Microsoft® Windows XP™ (v5.1.2600)
# BOOT MODE: Normal

# OPTION: Scan | EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat

# PC: ANGE | USER: SOLANGE ( Current user is an administrator)

# DRIVE(S): C:\
# Systemdrive: C:\ (NTFS)
# Internet Explorer v6.0.2900.5512

--------- [ RUNNING PROCESSES: 43 ] ---------

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\drivers\Icon.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Apps\Powercinema\PCMService.exe
C:\Program Files\Packard Bell EverSafe\TrayControl.exe
C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXE
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\LaCie\Backup Software\LaCieBackup.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\ntvdm.exe

-----------------------------------


+-----------------------| Boonty/Boonty Games Elements found :

.

+-----------------------| Eorezo Elements found :

.

+-----------------------| Everest Poker Elements found :

.

+-----------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements found :

.

+-----------------------| Messenger Skinner Elements found :

.

+-----------------------| Sweetim Elements found :

.

+-----------------------| ADDED SCAN :



+---------- Scanning prefs.js ... ( # Mozilla User Preferences )

...\2wsndtuo.default\prefs.js :

~~~~ Mozilla FireFox version 2.0.0.18 ~~~~

Start Page : "https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fwww.msn.fr%2fimg%2ffr%2ffr-fr%2fdivertissement%2fcelebrites%2fgalery%2fwentworth02.jpg%3f"

+----------+


+---------------------------------------------------------------------------+

+--[HKEY_CURRENT_USER\..\Run]

MsnMsgr REG_SZ "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
PcSync REG_SZ C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
LaCie Backup REG_SZ C:\Program Files\LaCie\Backup Software\\LaCieBackup.exe /background
ctfmon.exe REG_SZ C:\WINDOWS\system32\ctfmon.exe
updateMgr REG_SZ C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_1_0
swg REG_SZ C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
SpybotSD TeaTimer REG_SZ C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

+--[HKEY_LOCAL_MACHINE\..\Run]

IMJPMIG8.1 REG_SZ "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
PHIME2002ASync REG_SZ C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
PHIME2002A REG_SZ C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
Icon REG_SZ C:\WINDOWS\system32\drivers\Icon.exe
SynTPLpr REG_SZ C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
SynTPEnh REG_SZ C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
SoundMan REG_SZ SOUNDMAN.EXE
ATIPTA REG_SZ C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
PCMService REG_SZ "c:\Apps\Powercinema\PCMService.exe"
EPSON Stylus C42 Series REG_SZ C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P23 "EPSON Stylus C42 Series" /O6 "USB001" /M "Stylus C42"
NovaNet-WEB Tray Control REG_SZ C:\Program Files\Packard Bell EverSafe\TrayControl.exe
DataLayer REG_SZ C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
TkBellExe REG_SZ "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
ISTray REG_SZ "C:\Program Files\Spyware Doctor\pctsTray.exe"
Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

+--[HKEY_USERS\.DEFAULT\..\Run]

CTFMON.EXE REG_SZ C:\WINDOWS\system32\CTFMON.EXE

+--[HKEY_CURRENT_USER\..\Internet Explorer\MAIN]

Start Page : hxxp://google.mini60.com/

+--[HKEY_LOCAL_MACHINE\..\Internet Explorer\MAIN]

Start Page : hxxp://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home

+---------------------------------------------------------------------------+

- "C:\AD-report-10.12.2008.log" (5271 octets)

[ END at: 21:37:19 | 10/12/2008 ] - [ Time elapsed: 26.7 seconds ]

+---------------------------------------------------------------------------+
+------------------------------- [ E.O.F - 103 lines ]
+---------------------------------------------------------------------------+

Search Navipromo version 3.6.9 commencé le 11/12/2008 à 17:30:48,10

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "SOLANGE"

Mise à jour le 05.11.2008 à 21h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 6.0.2900.5512
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***

MailSkinner

*** Recherche dossiers dans "C:\WINDOWS" ***


*** Recherche dossiers dans "C:\Program Files" ***


*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\SOLANGE\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\LUC\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\PROPRI~1\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\SOLANGE\locals~1\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\LUC\locals~1\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\SOLANGE\menudm~1\progra~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\menudm~1\progra~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\LUC\menudm~1\progra~1" ***


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\SOLANGE\locals~1\applic~1" *

* Recherche dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *

* Recherche dans "C:\DOCUME~1\LUC\locals~1\applic~1" *



*** Recherche fichiers ***



*** Recherche clés spécifiques dans le Registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :


* Dans "C:\Documents and Settings\SOLANGE\locals~1\applic~1" :


* Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" :


* Dans "C:\DOCUME~1\LUC\locals~1\applic~1" :


3)Recherche Certificats :

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat Montorgueil absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :



*** Analyse terminée le 11/12/2008 à 17:43:57,91 ***
Clean Navipromo version 3.6.9 commencé le 11/12/2008 à 17:46:49,25

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "SOLANGE"

Mise à jour le 05.11.2008 à 21h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 6.0.2900.5512
Système de fichiers : NTFS

Mode suppression automatique
avec prise en charge résultats Catchme et GNS


Nettoyage exécuté au redémarrage de l'ordinateur


*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)


*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans "C:\WINDOWS\System32" *


* Suppression dans "C:\Documents and Settings\SOLANGE\locals~1\applic~1" *


* Suppression dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *

* Suppression dans "C:\DOCUME~1\LUC\locals~1\applic~1" *


*** Suppression dossiers dans "C:\WINDOWS" ***


*** Suppression dossiers dans "C:\Program Files" ***


*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***


*** Suppression dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\SOLANGE\applic~1" ***


*** Suppression dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" ***


*** Suppression dossiers dans "C:\DOCUME~1\LUC\applic~1" ***


*** Suppression dossiers dans "C:\DOCUME~1\PROPRI~1\applic~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\SOLANGE\locals~1\applic~1" ***


*** Suppression dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" ***


*** Suppression dossiers dans "C:\DOCUME~1\LUC\locals~1\applic~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\SOLANGE\menudm~1\progra~1" ***


*** Suppression dossiers dans "C:\DOCUME~1\ADMINI~1\menudm~1\progra~1" ***


*** Suppression dossiers dans "C:\DOCUME~1\LUC\menudm~1\progra~1" ***



*** Suppression fichiers ***


*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\SOLANGE\locals~1\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :


* Dans "C:\WINDOWS\system32" *


* Dans "C:\Documents and Settings\SOLANGE\locals~1\applic~1" *


* Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *


* Dans "C:\DOCUME~1\LUC\locals~1\applic~1" *


*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok


*** Certificats ***

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat Montorgueil absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltdt absent !

*** Nettoyage terminé le 11/12/2008 à 17:53:44,76 ***


--------- Logfile of AD-Remover 1.0.7.1 by C_XX ---------

# START at: 17:55:37 | Jeu 11/12/2008 | Microsoft® Windows XP™ (v5.1.2600)
# BOOT MODE: Normal

# OPTION: Scan | EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat

# PC: ANGE | USER: SOLANGE ( Current user is an administrator)

# DRIVE(S): C:\
# Systemdrive: C:\ (NTFS)
# Internet Explorer v6.0.2900.5512

--------- [ RUNNING PROCESSES: 47 ] ---------

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\drivers\Icon.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Apps\Powercinema\PCMService.exe
C:\Program Files\Packard Bell EverSafe\TrayControl.exe
C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXE
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\LaCie\Backup Software\LaCieBackup.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
C:\WINDOWS\system32\ntvdm.exe

-----------------------------------


+-----------------------| Boonty/Boonty Games Elements found :

.

+-----------------------| Eorezo Elements found :

.

+-----------------------| Everest Poker Elements found :

.

+-----------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements found :

.

+-----------------------| Messenger Skinner Elements found :

.

+-----------------------| Sweetim Elements found :

.

+-----------------------| ADDED SCAN :



+---------- Scanning prefs.js ... ( # Mozilla User Preferences )

...\2wsndtuo.default\prefs.js :

~~~~ Mozilla FireFox version 2.0.0.18 ~~~~

Start Page : "https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fwww.msn.fr%2fimg%2ffr%2ffr-fr%2fdivertissement%2fcelebrites%2fgalery%2fwentworth02.jpg%3f"

+----------+


+---------------------------------------------------------------------------+

+--[HKEY_CURRENT_USER\..\Run]

MsnMsgr REG_SZ "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
PcSync REG_SZ C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
LaCie Backup REG_SZ C:\Program Files\LaCie\Backup Software\\LaCieBackup.exe /background
ctfmon.exe REG_SZ C:\WINDOWS\system32\ctfmon.exe
updateMgr REG_SZ C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_1_0
swg REG_SZ C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
SpybotSD TeaTimer REG_SZ C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

+--[HKEY_LOCAL_MACHINE\..\Run]

IMJPMIG8.1 REG_SZ "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
PHIME2002ASync REG_SZ C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
PHIME2002A REG_SZ C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
Icon REG_SZ C:\WINDOWS\system32\drivers\Icon.exe
SynTPLpr REG_SZ C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
SynTPEnh REG_SZ C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
SoundMan REG_SZ SOUNDMAN.EXE
ATIPTA REG_SZ C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
PCMService REG_SZ "c:\Apps\Powercinema\PCMService.exe"
EPSON Stylus C42 Series REG_SZ C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P23 "EPSON Stylus C42 Series" /O6 "USB001" /M "Stylus C42"
NovaNet-WEB Tray Control REG_SZ C:\Program Files\Packard Bell EverSafe\TrayControl.exe
DataLayer REG_SZ C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
TkBellExe REG_SZ "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
ISTray REG_SZ "C:\Program Files\Spyware Doctor\pctsTray.exe"
Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

+--[HKEY_USERS\.DEFAULT\..\Run]

CTFMON.EXE REG_SZ C:\WINDOWS\system32\CTFMON.EXE

+--[HKEY_CURRENT_USER\..\Internet Explorer\MAIN]

Start Page : hxxp://google.mini60.com/

+--[HKEY_LOCAL_MACHINE\..\Internet Explorer\MAIN]

Start Page : hxxp://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home

+---------------------------------------------------------------------------+

- "C:\AD-report-11.12.2008.log" (5446 octets)

[ END at: 17:56:02 | 11/12/2008 ] - [ Time elapsed: 25.3 seconds ]

+---------------------------------------------------------------------------+
+------------------------------- [ E.O.F - 107 lines ]
+---------------------------------------------------------------------------+

[ Rapport ToolsCleaner version 2.2.7 (par A.Rothstein & dj QUIOU) ]

-->- Recherche:

C:\Combofix.txt: trouvé !
C:\fixnavi.txt: trouvé !
C:\cleannavi.txt: trouvé !
C:\lopR.txt: trouvé !
C:\Lop SD: trouvé !
C:\Qoobox: trouvé !
C:\Rsit: trouvé !
C:\Documents and Settings\All Users\Bureau\Navilog1.lnk: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: trouvé !
C:\Documents and Settings\SOLANGE\Bureau\Navilog1.exe: trouvé !
C:\Documents and Settings\SOLANGE\Bureau\fixnavi.txt: trouvé !
C:\Documents and Settings\SOLANGE\Bureau\cleannavi.txt: trouvé !
C:\Program Files\Navilog1: trouvé !
C:\Program Files\Ad-remover\TOOLS\NIRCMD.exe: trouvé !
C:\Program Files\Mozilla Firefox\SmitFraudfix: trouvé !
C:\Program Files\Navilog1\Navilog1.bat: trouvé !
C:\Program Files\trend micro\HijackThis.exe: trouvé !
C:\Program Files\trend micro\hijackthis.log: trouvé !
C:\RECYCLER\S-1-5-21-1343682896-1045235972-2641860311-1008\Dc6\LopSD.exe: trouvé !
C:\RECYCLER\S-1-5-21-1343682896-1045235972-2641860311-1008\Dc6\SmitFraudFix.exe: trouvé !
C:\RECYCLER\S-1-5-21-1343682896-1045235972-2641860311-1008\Dc6\SmitFraudfix: trouvé !
C:\WINDOWS\NIRCMD.exe: trouvé !

---------------------------------
-->- Suppression:

C:\Documents and Settings\All Users\Bureau\Navilog1.lnk: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: supprimé !
C:\Documents and Settings\SOLANGE\Bureau\Navilog1.exe: supprimé !
C:\Program Files\Navilog1\Navilog1.bat: supprimé !
C:\Program Files\trend micro\HijackThis.exe: supprimé !
C:\RECYCLER\S-1-5-21-1343682896-1045235972-2641860311-1008\Dc6\LopSD.exe: supprimé !
C:\RECYCLER\S-1-5-21-1343682896-1045235972-2641860311-1008\Dc6\SmitFraudFix.exe: supprimé !
C:\Combofix.txt: supprimé !
C:\fixnavi.txt: supprimé !
C:\cleannavi.txt: supprimé !
C:\lopR.txt: supprimé !
C:\Documents and Settings\SOLANGE\Bureau\fixnavi.txt: supprimé !
C:\Documents and Settings\SOLANGE\Bureau\cleannavi.txt: supprimé !
C:\Program Files\Ad-remover\TOOLS\NIRCMD.exe: supprimé !
C:\Program Files\trend micro\hijackthis.log: supprimé !
C:\WINDOWS\NIRCMD.exe: supprimé !
C:\Lop SD: supprimé !
C:\Qoobox: supprimé !
C:\Rsit: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: supprimé !
C:\Program Files\Navilog1: supprimé !
C:\Program Files\Mozilla Firefox\SmitFraudfix: supprimé !
C:\RECYCLER\S-1-5-21-1343682896-1045235972-2641860311-1008\Dc6\SmitFraudfix: supprimé !

Corbeille vidée!
Fichiers temporaires nettoyés !

aie aie aire
d apres spyware doctor j ai toujours : "Dialer.MatrixDialer, Adware.IEPlugin, TrojanMailSkinner, Application.NirCmd, Adware.123mania_com, Trojan Generic."
et mail skinner apparait toujours dans "ajouter supprimer progr/panneau configuration"

je ne trouve pas la case ds options avnce effacer les fichiers de + de 48 h.. c est "vieilles donnees? historique?...)

ça va g trouvé ;-)

reparer 3 fois le registre??? : je vais ds l icone gauche "registre" c est ça? sur le tutorial c est recherche des erreurs???? quelles options???

"Créez de nouveau point de restauration du système" : comment fait on?

dans " Pour activer la Restauration du système de Windows XP


Suivez les étapes de la section précédente mais, à l'étape 3, désélectionnez l'option Désactiver la Restauration du système ou Désactiver la Restauration du système sur tous les lecteurs

Puis cliquez sur OK

Créez de nouveau point de restauration du système : JE NE SAIS PAS CREER DE NOUVEAU POINT

puis dans " Cliquez sur Démarrer

Puis sur Tous les programmes

Ensuite Accessoires

Système " C EST MARQUE "VIDE"????

en tatonnant j ai pu, je crois, restaurer le pc systeme a l heure d aujourd hui mais ne suis pas sure de ma procedure, peux tu m envoyer vers un tutorial plus detaille? (lien vide sur mon pc sur l aide d avant)
en tous as mails kinner apparait toujours... merci

pour info mailskinner a disparu en lançant une recherche dans execueter regeditt en supprimant tous les elements trouvers avec executer editer recherche mail skinner !!! d apres spywaril ne rste pus maintenant qu a suprimer matrix dialer et IE plugin ;-)