Gros virus méchant

Résolu
eronman -  
Bonjour,
et bonne année, a tous, j'ai un gros problème, depuis ce soir, il m'est impossible de faire un scann online, de plus mon anitvirus avast est bloqué, impossible de lancer cccleaner, impossible de démarrer en mode sans échec, et le ponpon, je viens de télécharger hitjacki, et impossible de le lancer, au secour, merci d'avance
Configuration: Windows XP
Internet Explorer 7.0

28 réponses

Résumé de la discussion

Un problème de malware sous Windows XP empêche tout scan en ligne, bloque Avast, empêche le démarrage en mode sans échec et rend inutilisable le lancement d’un outil téléchargé. La meilleure réponse indique que Malwarebytes a détecté et mis en quarantaine des éléments, notamment une clé de registre Rogue.RegistryHelper et plusieurs fichiers Worm.Bagel trouvés dans les points de restauration système. Des éléments du fil montrent des rapports système et des listes de services et programmes lancés au démarrage, avec des outils comme Google Toolbar, Yahoo Toolbar et Spybot S&D présents. En cas de suite, les rapports indiquent que des éléments ont été mis en quarantaine et que l’infection semble nécessiter un nettoyage approfondi et une mise à jour des protections.

Bobot (l’IA à votre service)
  2. V-X
    Re,

    Fait unscan complet avec malwarebyte en mode sans échec.
    0
    1. eronman Auteur
      le scann n'a révéler aucuns problèmes, je te remercie de ton aide, et du temps que tu as passé sur mon problème, grace a des personnes comme toi, les problèmes informatique, trouvent toujours une solution encore un grand merci !
      @+
      0
  3. V-X
    Re,

    Redémarre ton pc et refait un log avec RSIT.
    0
    1. eronman Auteur
      Logfile of random's system information tool 1.05 (written by random/random)
      Run by Propriétaire at 2009-01-03 18:02:18
      Microsoft Windows XP Édition familiale Service Pack 2
      System drive C: has 14 GB (35%) free of 40 GB
      Total RAM: 1022 MB (58% free)

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 18:02:23, on 03/01/2009
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16762)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\drivers\CDAC11BA.EXE
      C:\Program Files\CDBurnerXP\NMSAccessU.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Program Files\Fichiers communs\RbtProt\sgsrv.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\UAService7.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\system32\RunDLL32.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\internet explorer\iexplore.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
      C:\Documents and Settings\Propriétaire\Bureau\utilitaire\securité\RSIT.exe
      C:\Program Files\Trend Micro\HijackThis\Propriétaire.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
      O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
      O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Startup: Anti-Pub.lnk = C:\Program Files\Antipub\antipub.exe
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://D:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
      O9 - Extra button: Outpost Firewall Pro Quick Tune - {44627E97-789B-40d4-B5C2-58BD171129A1} - C:\WINDOWS\system32\shdocvw.dll
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
      O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
      O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
      O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
      O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
      O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
      O16 - DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} (AdVerifierADPCtrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.1.cab
      O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - https://www.f-secure.com/en/home/support
      O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
      O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://signin3.valueactive.com/Register/Branding/olr3313/OCX/v1018/flashax.cab
      O16 - DPF: {F7EDBBEA-1AD2-4EBF-AA07-D453CC29EE65} (Flash Casino Helper Object) - https://fortunelounge.microgaming.com/generic/FlashAX2.cab
      O17 - HKLM\System\CCS\Services\Tcpip\..\{E1B62B07-99B2-4914-BB25-509B432440BA}: NameServer = 192.168.1.1
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
      O23 - Service: Dbrtdi - Unknown owner - (no file)
      O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
      O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Registry Helper Service - Unknown owner - C:\Program Files\Registry Helper\RegistryHelperService.exe (file missing)
      O23 - Service: SoftGuard Service (SG_Service) - Unknown owner - C:\Program Files\Fichiers communs\RbtProt\sgsrv.exe
      O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe
      0
  4. V-X
    Re,

    ---> Télécharge OTMoveIt3 (OldTimer) sur ton Bureau :
    http://oldtimer.geekstogo.com/OTMoveIt3.exe

    ---> Double-clique sur OTMoveIt3.exe afin de le lancer.

    ---> Copie (Ctrl+C) le texte suivant en gras ci-dessous :

    :processes
    explorer.exe

    :reg
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\clbdriver.sys]
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\clbdriver.sys]

    :commands
    [purity]
    [emptytemp]
    [start explorer]
    [reboot]


    ---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.

    ---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

    Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
    Accepte en cliquant sur YES.

    ---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
    Le nom du rapport correspond au moment de sa création : date_heure.log
    0
    1. eronman Auteur
      salut,
      ========== PROCESSES ==========
      Process explorer.exe killed successfully.
      ========== REGISTRY ==========
      ========== COMMANDS ==========
      File delete failed. C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\~DFE5C2.tmp scheduled to be deleted on reboot.
      User's Temp folder emptied.
      User's Temporary Internet Files folder emptied.
      User's Internet Explorer cache folder emptied.
      Local Service Temp folder emptied.
      File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
      Local Service Temporary Internet Files folder emptied.
      File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_4a4.dat scheduled to be deleted on reboot.
      Windows Temp folder emptied.
      Java cache emptied.
      FireFox cache emptied.
      Temp folders emptied.
      Explorer started successfully

      OTMoveIt3 by OldTimer - Version 1.0.7.2 log created on 01032009_175223

      Files moved on Reboot...
      C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\~DFE5C2.tmp moved successfully.
      File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.
      File move failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be moved on reboot.
      C:\WINDOWS\temp\Perflib_Perfdata_4a4.dat moved successfully.
      0
  6. V-X
    Re,

    Redémarre ton pc et fait sa:

    ▶ Télécharge random's system information tool (RSIT) et enregistre le sur ton bureau.

    ▶ Double clique sur RSIT.exe pour lancer l'outil.

    ▶ Clique sur ' continue ' à l'écran Disclaimer.

    ▶ Si l'outil HIjackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera et tu devras accepter la licence.

    ▶ Une fois le scan fini , 2 rapports vont apparaitre. Poste le contenu des 2 rapports
    ( log.txt & info.txt )

    (CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

    Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.
    0
    1. eronman Auteur
      il n'y a qu'un seul rapport qui apparait
      Logfile of random's system information tool 1.05 (written by random/random)
      Run by Propriétaire at 2009-01-02 17:01:35
      Microsoft Windows XP Édition familiale Service Pack 2
      System drive C: has 14 GB (35%) free of 40 GB
      Total RAM: 1022 MB (56% free)

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 17:01:40, on 02/01/2009
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16762)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\RunDLL32.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\WINDOWS\system32\drivers\CDAC11BA.EXE
      C:\Program Files\CDBurnerXP\NMSAccessU.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Program Files\Fichiers communs\RbtProt\sgsrv.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\UAService7.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\internet explorer\iexplore.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
      C:\Documents and Settings\Propriétaire\Bureau\RSIT.exe
      C:\Program Files\Trend Micro\HijackThis\Propriétaire.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
      O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
      O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Startup: Anti-Pub.lnk = C:\Program Files\Antipub\antipub.exe
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://D:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
      O9 - Extra button: Outpost Firewall Pro Quick Tune - {44627E97-789B-40d4-B5C2-58BD171129A1} - C:\WINDOWS\system32\shdocvw.dll
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
      O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
      O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
      O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
      O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
      O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
      O16 - DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} (AdVerifierADPCtrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.1.cab
      O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - https://www.f-secure.com/en/home/support
      O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
      O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://signin3.valueactive.com/Register/Branding/olr3313/OCX/v1018/flashax.cab
      O16 - DPF: {F7EDBBEA-1AD2-4EBF-AA07-D453CC29EE65} (Flash Casino Helper Object) - https://fortunelounge.microgaming.com/generic/FlashAX2.cab
      O17 - HKLM\System\CCS\Services\Tcpip\..\{E1B62B07-99B2-4914-BB25-509B432440BA}: NameServer = 192.168.1.1
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
      O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
      O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Registry Helper Service - Unknown owner - C:\Program Files\Registry Helper\RegistryHelperService.exe (file missing)
      O23 - Service: SoftGuard Service (SG_Service) - Unknown owner - C:\Program Files\Fichiers communs\RbtProt\sgsrv.exe
      O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe
      0
    2. eronman Auteur
      @eronmanje dois m'absenter, si tu permet on continuera tout a l'heure
      @+
      0
  7. V-X
    Re,

    ▶ Télécharge et installe MalwareByte's Anti-Malware
    Malwarebyte

    ▶ Mets le à jour

    ▶ Double clique sur le raccourci de MalwareByte's Anti-Malware qui est sur le bureau.

    ▶ Sélectionne Exécuter un examen complet si ce n'est pas déjà fait

    ▶ clique sur Rechercher

    ▶ Une fois le scan terminé, une fenêtre s'ouvre, clique sur sur Ok

    ▶ Si MalwareByte's n'a rien détecté, clique sur Ok Un rapport va apparaître ferme-le.

    ▶ Si MalwareByte's a détecté des infections, clique sur Afficher les résultats ensuite sur Supprimer la sélection

    ▶ Enregistre le rapport sur ton Bureau comme cela il sera plus facile à retrouver, poste ensuite ce rapport.

    Note : Si MalwareByte's a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok

    Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.

    Tutoriel pour MalwareByte's
    0
    1. eronman Auteur
      Malwarebytes' Anti-Malware 1.31
      Version de la base de données: 1596
      Windows 5.1.2600 Service Pack 2

      02/01/2009 16:36:52
      mbam-log-2009-01-02 (16-36-52).txt

      Type de recherche: Examen complet (C:\|D:\|K:\|)
      Eléments examinés: 179270
      Temps écoulé: 41 minute(s), 29 second(s)

      Processus mémoire infecté(s): 0
      Module(s) mémoire infecté(s): 0
      Clé(s) du Registre infectée(s): 2
      Valeur(s) du Registre infectée(s): 0
      Elément(s) de données du Registre infecté(s): 0
      Dossier(s) infecté(s): 0
      Fichier(s) infecté(s): 14

      Processus mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Module(s) mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Clé(s) du Registre infectée(s):
      HKEY_LOCAL_MACHINE\SOFTWARE\Registry Helper (Rogue.RegistryHelper) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\RegistryHelper.exe (Rogue.RegistryHelper) -> Quarantined and deleted successfully.

      Valeur(s) du Registre infectée(s):
      (Aucun élément nuisible détecté)

      Elément(s) de données du Registre infecté(s):
      (Aucun élément nuisible détecté)

      Dossier(s) infecté(s):
      (Aucun élément nuisible détecté)

      Fichier(s) infecté(s):
      C:\System Volume Information\_restore{6ADED9CC-4188-461E-99F0-6768BEAA95B3}\RP267\A0102764.sys (Worm.Bagel) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{6ADED9CC-4188-461E-99F0-6768BEAA95B3}\RP267\A0103762.sys (Worm.Bagel) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{6ADED9CC-4188-461E-99F0-6768BEAA95B3}\RP268\A0103767.sys (Worm.Bagel) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{6ADED9CC-4188-461E-99F0-6768BEAA95B3}\RP268\A0103783.sys (Worm.Bagel) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{6ADED9CC-4188-461E-99F0-6768BEAA95B3}\RP268\A0103858.sys (Worm.Bagel) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{6ADED9CC-4188-461E-99F0-6768BEAA95B3}\RP268\A0103960.sys (Worm.Bagel) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{6ADED9CC-4188-461E-99F0-6768BEAA95B3}\RP268\A0103981.sys (Worm.Bagel) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{6ADED9CC-4188-461E-99F0-6768BEAA95B3}\RP269\A0103998.sys (Worm.Bagel) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{6ADED9CC-4188-461E-99F0-6768BEAA95B3}\RP269\A0104040.sys (Worm.Bagel) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{6ADED9CC-4188-461E-99F0-6768BEAA95B3}\RP269\A0104064.sys (Worm.Bagel) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{6ADED9CC-4188-461E-99F0-6768BEAA95B3}\RP269\A0104280.sys (Worm.Bagel) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{6ADED9CC-4188-461E-99F0-6768BEAA95B3}\RP269\A0105281.sys (Worm.Bagel) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{6ADED9CC-4188-461E-99F0-6768BEAA95B3}\RP269\A0106281.sys (Worm.Bagel) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{6ADED9CC-4188-461E-99F0-6768BEAA95B3}\RP269\A0106552.sys (Worm.Bagel) -> Quarantined and deleted successfully.
      0
  8. V-X
    Re,

    Combofix. Attention, ce logiciel est très puissant, une mauvaise utilisation peut faire des dégâts...

    Fais exactement ce qui suit :

    Télécharge ComboFix (de sUBs) sur ton Bureau (et pas ailleurs !) :
    Fais un clic droit sur ce lien et choisis "enregistrer la cible sous ... " : dans la fenêtre qui s'ouvre tape C-Fix, choisis le bureau comme destination et valide :

    --------------------------------------------- [ ! ATTENTION ! ] ----------------------------------------------------------
    !! déconnecte toi, ferme toutes tes applications en cours et DESACTIVE TOUTES TES DEFENCES (anti-virus, antispyware, pare-feu) le temps de la manipulation (si jamais tu en as et que je ne les ai pas vu sur le rapport hijackthis....)

    ---> Surtout, si tu rencontres des difficultés à ce niveau là, dis le moi avant de poursuivre...

    --->Je te conseil d'installer la console de récupération.(Voir le tutoriel).

    Tuto ici : TUTO
    ---------------------------------------------------------------------------------------------------------------------------------

    Ensuite :

    Double-clique sur C-Fix.exe (= combofix.exe ) .

    Appuie sur une touche pour démarrer le scan .

    Attention : n'utilise pas ta souris ni ton clavier pendant que le programme tourne. Cela pourrait figer l'ordi ---> si un message d'erreur windows apparait à un moment : clique sur la croix rouge en haut à droite de la fenêtre pour la fermer

    Le rapport sera crée dans: C:\Combofix.txt , poste le ici stp

    Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.
    0
    1. eronman Auteur
      voici le rapport combofix
      ComboFix 09-01-01.02 - Propriétaire 2009-01-02 15:35:39.3 - NTFSx86
      Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.1022.637 [GMT 1:00]
      Lancé depuis: c:\documents and settings\Propriétaire\Bureau\ComboFix.exe
      * Un nouveau point de restauration a été créé
      .

      (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
      .

      c:\documents and settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat
      c:\documents and settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat
      c:\documents and settings\Propriétaire\Application Data\drivers\downld
      c:\documents and settings\Propriétaire\Local Settings\Application Data\gwucw_navup.dat
      c:\hp\KBD\KBD.EXE
      c:\windows\system32\Setup_ver1.1351.25.exe
      c:\windows\system32\tmp.reg

      ----- BITS: Il y a peut-être des sites infectés -----

      hxxp://viewcodec.com
      .
      ((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
      .

      -------\Legacy_VFILT

      ((((((((((((((((((((((((((((( Fichiers créés du 2008-12-02 au 2009-01-02 ))))))))))))))))))))))))))))))))))))
      .

      2009-01-02 15:16 . 2009-01-02 15:16 <REP> d-------- C:\rsit
      2009-01-02 09:56 . 2009-01-02 09:56 <REP> d-------- c:\program files\NOS
      2009-01-02 09:56 . 2009-01-02 09:56 <REP> d-------- c:\documents and settings\All Users\Application Data\NOS
      2009-01-02 04:55 . 2009-01-02 15:36 <REP> d--h----- c:\documents and settings\Propriétaire\Application Data\drivers
      2009-01-02 04:53 . 2009-01-02 04:53 <REP> d-------- c:\program files\Alwil Software
      2009-01-02 04:40 . 2009-01-02 04:50 <REP> d-------- c:\program files\FindyKill
      2009-01-02 02:32 . 2009-01-02 02:32 <REP> d-------- c:\program files\Trend Micro
      2009-01-01 03:39 . 2009-01-01 03:39 <REP> d-------- c:\program files\Nuclear Coffee
      2008-12-25 21:07 . 2004-08-03 23:08 31,616 --a------ c:\windows\system32\drivers\usbccgp.sys
      2008-12-25 21:07 . 2004-08-03 23:08 31,616 --a--c--- c:\windows\system32\dllcache\usbccgp.sys
      2008-12-16 23:44 . 2008-12-16 23:44 <REP> d-------- c:\documents and settings\Propriétaire\Application Data\Eyeblaster
      2008-12-16 23:43 . 2008-12-17 22:55 <REP> d-------- c:\documents and settings\Propriétaire\Application Data\Zylom
      2008-12-16 23:43 . 2008-12-16 23:43 <REP> d-------- c:\documents and settings\All Users\Application Data\Zylom
      2008-12-16 23:42 . 2009-01-01 18:12 <REP> d-------- c:\program files\Zylom Games

      .
      (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2009-01-02 09:15 --------- d-----w c:\program files\Fichiers communs\Adobe
      2009-01-01 23:47 --------- d-----w c:\program files\Fichiers communs\AVSMedia
      2009-01-01 23:41 --------- d-----w c:\program files\Yahoo!
      2009-01-01 23:41 --------- d-----w c:\documents and settings\All Users\Application Data\Yahoo!
      2009-01-01 23:39 --------- d-----w c:\program files\eMule
      2009-01-01 16:01 --------- d-----w c:\documents and settings\Propriétaire\Application Data\uTorrent
      2008-12-30 23:00 --------- d-----w c:\program files\PokerStars
      2008-12-25 23:45 --------- d-----w c:\documents and settings\Propriétaire\Application Data\AVS4YOU
      2008-12-25 22:01 --------- d-----w c:\documents and settings\Propriétaire\Application Data\Vso
      2008-12-13 21:14 --------- d--h--w c:\program files\InstallShield Installation Information
      2008-12-12 04:48 --------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help
      2008-11-30 18:38 --------- d-----w c:\program files\Call of Duty
      2008-11-22 23:13 --------- d-----w c:\documents and settings\All Users\Application Data\Yahoo! Companion
      2008-11-22 22:42 --------- d-----w c:\program files\VirtualDub-MPEG2
      2008-11-22 22:42 --------- d-----w c:\program files\Malwarebytes' Anti-Malware
      2008-11-22 22:41 --------- d-----w c:\program files\Spybot - Search & Destroy
      2008-11-22 22:41 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
      2008-11-22 22:40 --------- d-----w c:\documents and settings\All Users\Application Data\Yahoo! Companion(3)
      2008-11-19 22:16 --------- d-----w c:\program files\Gabest
      2008-11-13 19:04 --------- d-----w c:\documents and settings\All Users\Application Data\NFS Underground
      2008-11-02 22:01 --------- d-----w c:\documents and settings\Propriétaire\Application Data\LimeWire
      2008-11-02 13:46 --------- d-----w c:\documents and settings\Propriétaire\Application Data\UseNeXT
      2008-11-02 01:57 --------- d-----w c:\program files\UnderCoverXP
      2008-11-02 00:39 --------- d-----w c:\program files\FairUse Wizard 2
      2008-01-09 21:55 47,360 ----a-w c:\documents and settings\Propriétaire\Application Data\pcouffin.sys
      2006-05-03 09:06 163,328 --sh--r c:\windows\system32\flvDX.dll
      2007-02-21 10:47 31,232 --sh--r c:\windows\system32\msfDX.dll
      2008-03-16 12:30 216,064 --sh--r c:\windows\system32\nbDX.dll
      .

      ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
      REGEDIT4

      [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}]
      2008-07-28 11:46 160496 --a------ c:\program files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2008-09-16 1833296]
      "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-05 15360]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-06-28 8466432]
      "avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-11-26 81000]
      "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
      "nwiz"="nwiz.exe" [2007-06-28 c:\windows\system32\nwiz.exe]
      "NvMediaCenter"="NvMCTray.dll" [2007-06-28 c:\windows\system32\nvmctray.dll]

      [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
      "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-05 15360]

      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
      "vidc.I420"= i420vfw.dll
      "VIDC.ACDV"= ACDV.dll

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AVG Anti-Spyware Driver]
      @=""

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AVG Anti-Spyware Guard]
      @=""

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\clbdriver.sys]
      @=""

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sr.sys]
      @=""

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SRService]
      @=""

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Winxg64.sys]
      @=""

      [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
      path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Microsoft Office.lnk
      backup=c:\windows\pss\Microsoft Office.lnkCommon Startup

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\!AVG Anti-Spyware]
      --------- 2007-06-11 10:25 6731312 c:\program files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccleaner]
      --a------ 2007-11-22 17:10 787696 c:\program files\CCleaner\CCleaner.exe

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
      --a------ 2001-07-09 10:50 155648 c:\windows\system32\NeroCheck.exe

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
      --a------ 2008-02-28 00:14 68856 c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
      "gusvc"=3 (0x3)

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
      "BitComet"="d:\program files\BitComet\BitComet.exe" /tray
      "ctfmon.exe"=c:\windows\system32\ctfmon.exe
      "YSearchProtection"=c:\program files\Yahoo!\Search Protection\SearchProtection.exe

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
      "SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe"
      "NvCplDaemon"=RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
      "YSearchProtection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe"

      [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
      "%windir%\\system32\\sessmgr.exe"=
      "c:\\Program Files\\Call of Duty\\CoDMP.exe"=
      "d:\\Program Files\\autodesk\\3dsmax.exe"=
      "c:\\Program Files\\backburner 2\\manager.exe"=
      "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
      "c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
      "c:\\Program Files\\uTorrent\\uTorrent.exe"=
      "c:\\Program Files\\eMule\\emule.exe"=
      "d:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
      "%windir%\\Network Diagnostic\\xpnetdiag.exe"=

      [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
      "20541:TCP"= 20541:TCP:BitComet 20541 TCP
      "20541:UDP"= 20541:UDP:BitComet 20541 UDP
      "11300:TCP"= 11300:TCP:omemo
      "11956:TCP"= 11956:TCP:BitComet 11956 TCP
      "11956:UDP"= 11956:UDP:BitComet 11956 UDP

      R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2009-01-02 111184]
      R2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys [2009-01-02 20560]
      R2 SG_Service;SoftGuard Service;c:\program files\Fichiers communs\RbtProt\sgsrv.exe [2006-06-13 159744]
      S0 Winxg64;Winxg64;c:\windows\system32\Drivers\Winxg64.sys []
      S2 Registry Helper Service;Registry Helper Service;c:\program files\Registry Helper\RegistryHelperService.exe []
      S3 Dbrtdi;Dbrtdi; []
      S3 getPlus(R) Helper;getPlus(R) Helper;c:\program files\NOS\bin\getPlus_HelperSvc.exe [2009-01-02 33752]

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1e35df6b-c2d8-11dc-84aa-0013d3264f48}]
      \Shell\AutoRun\command - l:\autorun\autorun.exe
      .
      - - - - ORPHELINS SUPPRIMES - - - -

      BHO-{AB692F9B-27FE-4511-8885-ED62BB45197B} - (no file)
      Notify-vtUnNGvW - vtUnNGvW.dll
      SafeBoot-sglfb.sys
      SafeBoot-tga.sys
      SafeBoot-wd.sys
      SafeBoot-sacsvr
      MSConfigStartUp-Adobe Reader Speed Launcher - c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe
      MSConfigStartUp-Miro - c:\program files\Participatory Culture Foundation\Miro\Miro.exe
      MSConfigStartUp-YSearchProtection - c:\program files\Yahoo!\Search Protection\SearchProtection.exe

      .
      ------- Examen supplémentaire -------
      .
      uStart Page = hxxp://www.orange.fr/
      IE: E&xporter vers Microsoft Excel - d:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
      TCP: {E1B62B07-99B2-4914-BB25-509B432440BA} = 192.168.1.1

      c:\windows\bdoscandellang.ini - c:\windows\bdoscandel.exe
      c:\windows\Downloaded Program Files\live.ini
      c:\windows\Downloaded Program Files\scanoptions.tsi
      c:\windows\Downloaded Program Files\lang.ini
      c:\windows\Downloaded Program Files\ipsupd.dll
      c:\windows\Downloaded Program Files\bdupd.dll
      c:\windows\Downloaded Program Files\libfn.dll
      c:\windows\Downloaded Program Files\bdcore.dll
      c:\windows\Downloaded Program Files\oscan8.ocx
      O16 -: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499}
      hxxp://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
      c:\windows\Downloaded Program Files\oscan8.inf

      O16 -: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - hxxp://fichiers.touslesdrivers.com/fichiers/hardwaredetection/hardwaredetection_2_0_4_12.cab
      c:\windows\Downloaded Program Files\hardwaredetection.inf

      c:\windows\system32\msvcp60.dll - c:\windows\system32\atl.dll
      c:\windows\Downloaded Program Files\AdVerifierADP.dll
      c:\windows\Downloaded Program Files\AdSignerADP.dll
      O16 -: {88764F69-3831-4EC1-B40B-FF21D8381345}
      hxxps://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.1.cab
      c:\windows\Downloaded Program Files\AdSignerADP.inf
      .

      **************************************************************************

      catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2009-01-02 15:38:39
      Windows 5.1.2600 Service Pack 2 NTFS

      Recherche de processus cachés ...

      Recherche d'éléments en démarrage automatique cachés ...

      Recherche de fichiers cachés ...

      Scan terminé avec succès
      Fichiers cachés: 0

      **************************************************************************
      .
      ------------------------ Autres processus actifs ------------------------
      .
      c:\program files\Alwil Software\Avast4\aswUpdSv.exe
      c:\program files\Alwil Software\Avast4\ashServ.exe
      c:\windows\system32\drivers\CDAC11BA.EXE
      c:\windows\system32\rundll32.exe
      c:\program files\CDBurnerXP\NMSAccessU.exe
      c:\windows\system32\nvsvc32.exe
      c:\windows\system32\UAService7.exe
      c:\program files\Alwil Software\Avast4\ashMaiSv.exe
      c:\program files\Alwil Software\Avast4\ashWebSv.exe
      c:\program files\Alwil Software\Avast4\Setup\avast.setup
      .
      **************************************************************************
      .
      Heure de fin: 2009-01-02 15:40:53 - La machine a redémarré
      ComboFix-quarantined-files.txt 2009-01-02 14:40:47

      Avant-CF: 14 803 644 416 octets libres
      Après-CF: 14,812,626,944 octets libres

      WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
      [boot loader]
      timeout=2
      default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
      [operating systems]
      c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
      multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect

      223 --- E O F --- 2008-12-17 19:28:13
      0
  9. V-X
    Re,

    ▶ Télécharge hijackthis

    ▶ Enregistre la cible sous .... "le bureau"

    ▶ Fais un double-clic sur "HJTInstall.exe" afin de lancer l'installation

    ▶ Clique sur Install ensuite sur "I Accept"

    ▶ Clique sur" Do a scan system and save log file"

    ▶ Le bloc-notes s'ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse

    ▶ Tuto hijackthis(Merci à Balltrap34)

    Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.

    Relance RSIT.

    As tu fait combofix regarde ta boite de MP en haut a droite en dessous de ton PSEUDO.
    0
    1. eronman Auteur
      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 15:23:53, on 02/01/2009
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16762)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\WINDOWS\system32\RunDLL32.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\WINDOWS\system32\drivers\CDAC11BA.EXE
      C:\Program Files\CDBurnerXP\NMSAccessU.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Program Files\Fichiers communs\RbtProt\sgsrv.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\UAService7.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Windows Live\Messenger\usnsvc.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=66027
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
      O2 - BHO: WebPerform - {AB692F9B-27FE-4511-8885-ED62BB45197B} - C:\WINDOWS\system32\webperform.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
      O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
      O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://D:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
      O9 - Extra button: Outpost Firewall Pro Quick Tune - {44627E97-789B-40d4-B5C2-58BD171129A1} - C:\WINDOWS\system32\shdocvw.dll
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
      O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
      O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
      O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
      O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
      O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
      O16 - DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} (AdVerifierADPCtrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.1.cab
      O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - https://www.f-secure.com/en/home/support
      O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
      O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://signin3.valueactive.com/Register/Branding/olr3313/OCX/v1018/flashax.cab
      O16 - DPF: {F7EDBBEA-1AD2-4EBF-AA07-D453CC29EE65} (Flash Casino Helper Object) - https://fortunelounge.microgaming.com/generic/FlashAX2.cab
      O17 - HKLM\System\CCS\Services\Tcpip\..\{E1B62B07-99B2-4914-BB25-509B432440BA}: NameServer = 192.168.1.1
      O20 - Winlogon Notify: vtUnNGvW - vtUnNGvW.dll (file missing)
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
      O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
      O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Registry Helper Service - Unknown owner - C:\Program Files\Registry Helper\RegistryHelperService.exe (file missing)
      O23 - Service: SoftGuard Service (SG_Service) - Unknown owner - C:\Program Files\Fichiers communs\RbtProt\sgsrv.exe
      O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe
      0
  10. eronman Auteur
    bonjour, voilà les 2 rapports
    Logfile of random's system information tool 1.05 (written by random/random)
    Run by Propriétaire at 2009-01-02 15:16:49
    Microsoft Windows XP Édition familiale Service Pack 2
    System drive C: has 14 GB (35%) free of 40 GB
    Total RAM: 1022 MB (61% free)

    ======Registry dump======

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
    &Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2008-07-28 882416]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
    Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
    Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2008-09-15 1562960]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
    SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
    Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2007-09-20 328752]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
    Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2008-02-28 2436160]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AB692F9B-27FE-4511-8885-ED62BB45197B}]
    WebPerform Object - C:\WINDOWS\system32\webperform.dll [2008-11-10 217088]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
    Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll [2008-02-28 654320]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}]
    SingleInstance Class - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll [2008-07-28 160496]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    {2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll [2008-02-28 2436160]
    {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2008-07-28 882416]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "KBD"=C:\HP\KBD\KBD.EXE [2006-03-22 794632]
    "nwiz"=nwiz.exe /install []
    "NvMediaCenter"=C:\WINDOWS\system32\NvMCTray.dll [2007-06-28 81920]
    "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-06-28 8466432]
    "avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2008-11-26 81000]
    "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2008-09-16 1833296]
    "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-05 15360]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\!AVG Anti-Spyware]
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe [2007-06-11 6731312]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
    C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe []

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccleaner]
    C:\Program Files\CCleaner\CCleaner.exe [2007-11-22 787696]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Miro]
    C:\Program Files\Participatory Culture Foundation\Miro\Miro.exe []

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
    C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-02-28 68856]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\YSearchProtection]
    C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe []

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
    D:\PROGRA~2\MICROS~1\Office\OSA9.EXE -b -l []

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
    "gusvc"=3

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\vtUnNGvW]
    vtUnNGvW.dll []

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"=C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll [2007-05-30 79408]
    "{7E156AAE-FA60-44A1-8E69-2E0E0030F1F6}"= []

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
    "SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sglfb.sys]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\tga.sys]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\wd.sys]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NBF]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nbf.sys]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProtectedStorage]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sglfb.sys]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\tga.sys]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vds]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "dontdisplaylastusername"=0
    "legalnoticecaption"=
    "legalnoticetext"=
    "shutdownwithoutlogon"=1
    "undockwithoutlogon"=1
    "EnableLUA"=0

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoDriveTypeAutoRun"=145
    "NoDrives"=0

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoDriveAutoRun"=
    "NoDriveTypeAutoRun"=
    "NoDrives"=

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "C:\Program Files\Microsoft Games\Halo\halo.exe"="C:\Program Files\Microsoft Games\Halo\halo.exe:*:Enabled:Halo"
    "C:\Program Files\Call of Duty\CoDMP.exe"="C:\Program Files\Call of Duty\CoDMP.exe:*:Enabled:CoDMP"
    "D:\Program Files\EA GAMES\Medal of Honor Batailles du Pacifique(tm)\mohpa.exe"="D:\Program Files\EA GAMES\Medal of Honor Batailles du Pacifique(tm)\mohpa.exe:*:Enabled:Medal of Honor Pacific Assault(tm)"
    "D:\Program Files\autodesk\3dsmax.exe"="D:\Program Files\autodesk\3dsmax.exe:*:Enabled:3ds max application"
    "C:\Program Files\backburner 2\manager.exe"="C:\Program Files\backburner 2\manager.exe:*:Enabled:backburner Manager Application"
    "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
    "C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
    "C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
    "C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
    "D:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="D:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
    "C:\Program Files\Participatory Culture Foundation\Miro\xulrunner\python\Miro_Downloader.exe"="C:\Program Files\Participatory Culture Foundation\Miro\xulrunner\python\Miro_Downloader.exe:*:Enabled:Miro_Downloader"
    "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger"
    "C:\Program Files\Yahoo!\Messenger\YServer.exe"="C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server"
    "D:\Documents\bousselange\EBP_BATIMENT_2008\EBP_BATIMENT_2008PRO_FR_9_0_0_1681\Crack\BatimentPro.exe"="D:\Documents\bousselange\EBP_BATIMENT_2008\EBP_BATIMENT_2008PRO_FR_9_0_0_1681\Crack\BatimentPro.exe:*:Enabled:EBP Bâtiment 2008 Plus"
    "C:\Program Files\EBP\Batiment9.0\BatimentPro.exe"="C:\Program Files\EBP\Batiment9.0\BatimentPro.exe:*:Enabled:EBP Bâtiment 2008 Plus"
    "D:\Program Files\Omemo\Omemo.exe"="D:\Program Files\Omemo\Omemo.exe:*:Enabled:Omemo"
    "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "D:\Program Files\BitComet\BitComet.exe"="D:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
    "C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
    "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1e35df6b-c2d8-11dc-84aa-0013d3264f48}]
    shell\AutoRun\command - L:\autorun\autorun.exe

    ======File associations======

    .reg - open - regedit.exe "%1" %*

    ======List of files/folders created in the last 1 months======

    2009-01-02 15:16:49 ----D---- C:\rsit
    2009-01-02 10:14:55 ----D---- C:\Program Files\Adobe
    2009-01-02 09:56:50 ----D---- C:\Documents and Settings\All Users\Application Data\NOS
    2009-01-02 09:56:49 ----D---- C:\Program Files\NOS
    2009-01-02 04:55:18 ----HD---- C:\Documents and Settings\Propriétaire\Application Data\drivers
    2009-01-02 04:53:52 ----A---- C:\WINDOWS\system32\aswBoot.exe
    2009-01-02 04:53:50 ----D---- C:\Program Files\Alwil Software
    2009-01-02 04:40:04 ----D---- C:\Program Files\FindyKill
    2009-01-02 04:29:30 ----A---- C:\WINDOWS\SchedLgU.Txt
    2009-01-02 02:32:35 ----D---- C:\Program Files\Trend Micro
    2009-01-01 03:39:22 ----D---- C:\Program Files\Nuclear Coffee
    2008-12-16 23:44:05 ----D---- C:\Documents and Settings\Propriétaire\Application Data\Eyeblaster
    2008-12-16 23:43:11 ----D---- C:\Documents and Settings\Propriétaire\Application Data\Zylom
    2008-12-16 23:43:06 ----D---- C:\Documents and Settings\All Users\Application Data\Zylom
    2008-12-16 23:42:59 ----D---- C:\Program Files\Zylom Games
    2008-12-12 05:48:23 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
    2008-12-12 05:48:18 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$
    2008-12-12 05:45:48 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
    2008-12-12 05:45:41 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$

    ======List of files/folders modified in the last 1 months======

    2009-01-02 14:21:10 ----D---- C:\WINDOWS\TEMP
    2009-01-02 10:48:45 ----D---- C:\WINDOWS\Prefetch
    2009-01-02 10:16:04 ----D---- C:\WINDOWS\system32\CatRoot2
    2009-01-02 10:15:45 ----SHD---- C:\WINDOWS\Installer
    2009-01-02 10:15:44 ----SHD---- C:\Config.Msi
    2009-01-02 10:15:44 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
    2009-01-02 10:15:19 ----D---- C:\Program Files\Fichiers communs\Adobe
    2009-01-02 10:14:55 ----RD---- C:\Program Files
    2009-01-02 10:13:49 ----D---- C:\WINDOWS\system32
    2009-01-02 09:56:51 ----SD---- C:\WINDOWS\Downloaded Program Files
    2009-01-02 09:56:51 ----D---- C:\WINDOWS
    2009-01-02 04:54:08 ----D---- C:\WINDOWS\system32\drivers
    2009-01-02 04:49:58 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
    2009-01-02 02:13:19 ----RSHDC---- C:\WINDOWS\system32\dllcache
    2009-01-02 01:14:15 ----SH---- C:\boot.ini
    2009-01-02 01:14:14 ----A---- C:\WINDOWS\win.ini
    2009-01-02 01:14:14 ----A---- C:\WINDOWS\system.ini
    2009-01-02 00:47:10 ----D---- C:\Program Files\Fichiers communs\AVSMedia
    2009-01-02 00:41:19 ----D---- C:\Program Files\Yahoo!
    2009-01-02 00:41:17 ----D---- C:\Documents and Settings\All Users\Application Data\Yahoo!
    2009-01-02 00:39:01 ----D---- C:\Program Files\eMule
    2009-01-01 18:13:00 ----D---- C:\Poker
    2009-01-01 17:01:59 ----D---- C:\Documents and Settings\Propriétaire\Application Data\uTorrent
    2009-01-01 15:29:04 ----D---- C:\WINDOWS\BDOSCAN8
    2008-12-31 00:00:11 ----D---- C:\Program Files\PokerStars
    2008-12-30 14:06:11 ----D---- C:\WINDOWS\Debug
    2008-12-30 12:52:24 ----A---- C:\WINDOWS\NeroDigital.ini
    2008-12-26 15:36:20 ----A---- C:\Documents and Settings\Propriétaire\Application Data\AutoGK.ini
    2008-12-26 00:45:51 ----D---- C:\Documents and Settings\Propriétaire\Application Data\AVS4YOU
    2008-12-25 23:01:20 ----D---- C:\Documents and Settings\Propriétaire\Application Data\Vso
    2008-12-25 21:05:09 ----HD---- C:\WINDOWS\inf
    2008-12-17 22:55:51 ----D---- C:\Documents and Settings\Propriétaire\Application Data\Identities
    2008-12-17 20:28:07 ----D---- C:\WINDOWS\ie7updates
    2008-12-17 20:27:42 ----HD---- C:\WINDOWS\$hf_mig$
    2008-12-13 22:14:45 ----HD---- C:\Program Files\InstallShield Installation Information
    2008-12-13 07:37:56 ----A---- C:\WINDOWS\system32\mshtml.dll
    2008-12-13 02:14:31 ----D---- C:\Downloads
    2008-12-12 05:48:59 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
    2008-12-12 05:48:08 ----D---- C:\Program Files\Internet Explorer
    2008-12-10 00:24:37 ----A---- C:\WINDOWS\system32\MRT.exe
    2008-12-07 16:26:26 ----D---- C:\WINDOWS\network diagnostic

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2008-11-26 26944]
    R1 AmdPPM;Pilote de processeur AMD HwPState; C:\WINDOWS\system32\DRIVERS\AmdPPM.sys [2007-04-16 33792]
    R1 ASPI32;ASPI32; C:\WINDOWS\system32\drivers\ASPI32.sys [2003-12-22 25244]
    R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2008-11-26 111184]
    R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2008-11-26 50864]
    R1 AVG Anti-Spyware Driver;AVG Anti-Spyware Driver; \??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys []
    R1 AvgAsCln;AVG Anti-Spyware Clean Driver; C:\WINDOWS\System32\DRIVERS\AvgAsCln.sys [2007-05-30 10872]
    R1 PQNTDrv;PQNTDrv; C:\WINDOWS\system32\drivers\PQNTDrv.sys [2004-05-05 4228]
    R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2006-07-24 5632]
    R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-11-26 20560]
    R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2008-11-26 94032]
    R2 CdaC15BA;CdaC15BA; \??\C:\WINDOWS\system32\drivers\CDAC15BA.SYS []
    R2 Haspnt;Haspnt; \??\C:\WINDOWS\system32\drivers\Haspnt.sys []
    R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-08-29 3644928]
    R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-05 60800]
    R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2008-11-26 23152]
    R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
    R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
    R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-05 61824]
    R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2007-06-28 6807328]
    R3 Pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\Pcouffin.sys [2008-01-09 47360]
    R3 Ps2;PS2; C:\WINDOWS\system32\DRIVERS\PS2.sys [2005-12-12 19072]
    R3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
    R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-05 26624]
    R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-05 57600]
    R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2004-08-05 17024]
    R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
    S2 Hardlock;Hardlock; \??\C:\WINDOWS\system32\drivers\hardlock.sys []
    S3 afgbre62;afgbre62; C:\WINDOWS\system32\drivers\afgbre62.sys []
    S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\WINDOWS\system32\DRIVERS\sscdbus.sys [2005-12-22 80272]
    S3 sscdmdfl;SAMSUNG CDMA Modem Filter; C:\WINDOWS\system32\DRIVERS\sscdmdfl.sys [2005-12-22 10864]
    S3 sscdmdm;SAMSUNG CDMA Modem Drivers; C:\WINDOWS\system32\DRIVERS\sscdmdm.sys [2005-12-22 137884]
    S3 ssm_bus;SAMSUNG Mobile USB Device II 1.0 driver (WDM); C:\WINDOWS\system32\DRIVERS\ssm_bus.sys [2005-08-30 58320]
    S3 ssm_mdfl;SAMSUNG Mobile USB Modem II 1.0 Filter; C:\WINDOWS\system32\DRIVERS\ssm_mdfl.sys [2005-08-30 8336]
    S3 ssm_mdm;SAMSUNG Mobile USB Modem II 1.0 Drivers; C:\WINDOWS\system32\DRIVERS\ssm_mdm.sys [2005-08-30 94000]
    S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
    S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
    S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
    S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
    S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2008-11-26 18752]
    R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2008-11-26 155160]
    R2 C-DillaCdaC11BA;C-DillaCdaC11BA; C:\WINDOWS\system32\drivers\CDAC11BA.EXE [2008-01-16 54784]
    R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2007-10-12 71096]
    R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2007-06-28 155716]
    R2 SG_Service;SoftGuard Service; C:\Program Files\Fichiers communs\RbtProt\sgsrv.exe [2006-06-13 159744]
    R2 UserAccess7;SecuROM User Access Service (V7); C:\WINDOWS\system32\UAService7.exe [2008-09-09 126976]
    R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-05 14336]
    R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2008-11-26 254040]
    R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2008-11-26 352920]
    R3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
    S2 AVG Anti-Spyware Guard;AVG Anti-Spyware Guard; C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe [2009-01-02 312880]
    S2 Registry Helper Service;Registry Helper Service; C:\Program Files\Registry Helper\RegistryHelperService.exe []
    S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
    S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
    S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2007-10-09 36864]
    S3 getPlus(R) Helper;getPlus(R) Helper; C:\Program Files\NOS\bin\getPlus_HelperSvc.exe [2008-12-01 33752]
    S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
    S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2007-10-11 864256]
    S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
    S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
    S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
    S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
    S4 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-02-28 138680]
    S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2007-10-11 122880]

    -----------------EOF-----------------
    et le 2eme
    info.txt logfile of random's system information tool 1.05 2009-01-02 15:16:56

    ======Uninstall list======

    -->MsiExec.exe /X{E9F81423-211E-46B6-9AE0-38568BC5CF6F}
    -->C:\PROGRA~1\Yahoo!\Common\UNYT_W~1.EXE
    -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0015-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0019-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {5A2F65A4-808F-4A1E-973E-92E17824982D}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {430971B1-C31E-45DA-81E0-72C095BAB72C}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {B3F4DC34-7F60-4B7C-A79F-1C13012D99D4}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {F7A31780-33C4-4E39-951A-5EC9B91D7BF1}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0044-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
    3ds max 6-->MsiExec.exe /I{29744C5B-47C9-4ea5-A8F9-B0D093121471}
    3dsmax ancillary install-->MsiExec.exe /I{7C8B5E63-821A-4DFB-BDFA-19854D88EC5C}
    ACDSee Pro 2-->MsiExec.exe /I{4AAC95F4-A30E-4EE5-A086-6F79581D0D70}
    Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
    Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
    Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
    Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
    Assistant de connexion Windows Live-->MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986}
    Auto Gordian Knot 2.45-->C:\Program Files\AutoGK\uninst.exe
    avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
    AVG Anti-Spyware 7.5-->C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Uninstall.exe
    AviSynth 2.5-->"C:\Program Files\AviSynth 2.5\Uninstall.exe"
    Ballance-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{42E0783D-3BA4-454B-B58A-BF26E49EB7DE}\Setup.exe"
    Blender (remove only)-->"C:\Program Files\Blender Foundation\Blender\uninstall.exe"
    CA Yahoo! Anti-Spy (remove only)-->"C:\Program Files\CA Yahoo! Anti-Spy\uninstall.exe"
    Call of Duty(R) 2-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{D0A05794-48C2-4424-A15A-9F20FCFDD374}
    Call of Duty-->C:\PROGRA~1\CALLOF~1\Uninstall\Unwise.exe /u C:\PROGRA~1\CALLOF~1\Uninstall\Install.log
    CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
    CD Mate 2.0-->"C:\Program Files\Copystar\unins000.exe"
    CDBurnerXP-->"C:\Program Files\CDBurnerXP\unins000.exe"
    character studio 4.2-->MsiExec.exe /I{AFEDE7CB-FEB8-401e-9352-DE7489FAA7AA}
    Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
    Correctif pour Windows XP (KB914440)-->"C:\WINDOWS\$NtUninstallKB914440$\spuninst\spuninst.exe"
    Correctif pour Windows XP (KB935448)-->"C:\WINDOWS\$NtUninstallKB935448$\spuninst\spuninst.exe"
    Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
    Correctif Windows XP - KB873339-->C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
    Correctif Windows XP - KB885835-->C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
    Correctif Windows XP - KB885836-->C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
    Correctif Windows XP - KB885884-->C:\WINDOWS\$NtUninstallKB885884$\spuninst\spuninst.exe
    Correctif Windows XP - KB886185-->C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe
    Correctif Windows XP - KB888302-->C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
    Correctif Windows XP - KB890859-->"C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
    Correctif Windows XP - KB891781-->C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
    Dessinateur Studio-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{37E80F11-BC6E-4ECD-8466-CFFE9497F090}\SETUP.EXE"
    DivxToDVD 1.99.11-->"D:\programmes\DivxToDVD\unins000.exe"
    DVD Shrink 3.2-->"D:\Program Files\DVD Shrink\unins000.exe"
    DVDFab Platinum 3.1.5.0-->"D:\programmes\DVDFab Platinum 3\unins000.exe"
    eMule-->"C:\Program Files\eMule\Uninstall.exe"
    Enhanced Multimedia Keyboard Solution-->C:\HP\KBD\Install.exe /u
    Eragon-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{322F75E0-71A3-4125-8EB3-761834EDC166}\setup.exe" -l0x40c -removeonly
    EVEREST Home Edition v2.20-->"D:\Program Files\Lavalys\EVEREST Home Edition\unins000.exe"
    FairUse Wizard 2-->"C:\Program Files\FairUse Wizard 2\UnInstall_14333.exe"
    Fichiers de référence de 3ds max 6-->MsiExec.exe /I{E1F0669B-FEDA-48d7-89CE-4670348251A4}
    Fichiers des didacticiels de 3ds max 6-->MsiExec.exe /I{55AC02BB-D296-4431-8CBB-B1139FFC6BDB}
    FindyKill-->C:\Program Files\FindyKill\Uninstal.exe
    FPS Creator-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B91E4360-298A-4306-9E95-9AD91A0952A1}\Setup.exe" -l0x9
    Full Tilt Poker-->"C:\Program Files\InstallShield Installation Information\{D4C9692E-4EFA-4DA0-8B7F-9439466D9E31}\setup.exe" -runfromtemp -l0x040c -removeonly
    getPlus(R) for Adobe-->"C:\Program Files\NOS\bin\getPlus_HelperSvc.exe" /UninstallGet1
    Google Earth-->MsiExec.exe /I{1E04F83B-2AB9-4301-9EF7-E86307F79C72}
    Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
    Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar1.dll"
    Hotfix for Microsoft .NET Framework 3.0 (KB932471)-->C:\WINDOWS\system32\msiexec.exe /promptrestart /uninstall {ECD292A0-0347-4244-8C24-5DBCE990FB40} /package {BAF78226-3200-4DB4-BE33-4D922A799840}
    Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
    Hotfix for Windows XP (KB915865)-->"C:\WINDOWS\$NtUninstallKB915865$\spuninst\spuninst.exe"
    Hotfix for Windows XP (KB926239)-->"C:\WINDOWS\$NtUninstallKB926239$\spuninst\spuninst.exe"
    ImgBurn (Remove Only)-->"C:\Program Files\ImgBurn\uninstall.exe"
    iWizz-->D:\Program Files\iWizz\uninstall.exe
    Java(TM) 6 Update 4-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160040}
    Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
    Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
    Kaspersky Online Scanner-->C:\WINDOWS\system32\KASPER~1\KASPER~1\kavuninstall.exe
    KC Softwares IDPhotoStudio-->"C:\Program Files\KC Softwares\IDPhotoStudio\unins000.exe"
    Le code de la route-->C:\WINDOWS\unin040c.exe -f"d:\program files\DeIsL1.isu" -c"d:\program files\_ISREG32.DLL"
    Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
    Les aventures de Buzz l'Éclair-->C:\WINDOWS\IsUn040c.exe -fC:\PROGRA~1\DISNEY~1\LESAVE~1\DeIsL1.isu
    Mahjong Fortuna 2 Deluxe-->"C:\Program Files\Zylom Games\Mahjong Fortuna 2 Deluxe\GameInstlr.exe" --uninstall UnInstall.log
    Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
    Matériaux Architectural 3ds max 6-->MsiExec.exe /I{909A5F3B-7585-461d-88AE-7984AB0FFD3D}
    Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
    Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
    Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
    Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
    Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{3F7924B9-D148-3141-87B1-68F36043A940}
    Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
    Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{511DF669-2930-30C0-8EB6-552887E29EC8}
    Microsoft .NET Framework 3.0 Service Pack 1-->MsiExec.exe /I{2BA00471-0328-3743-93BD-FA813353A783}
    Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
    Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
    Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
    Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
    Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
    Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}
    Microsoft Office Language Pack 2007 Service Pack 1 (SP1)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {EC50B538-CBE1-42E6-B7FE-87AA540AADFB}
    Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
    Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
    Microsoft Office Professional Plus 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
    Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}
    Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
    Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
    Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
    Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
    Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
    Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
    Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
    Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
    Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
    Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
    Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
    Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
    Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
    Mise à jour de sécurité pour Lecteur Windows Media (KB911564)-->"C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398)-->"C:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 9 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 9 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP9$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB890046)-->"C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB893756)-->"C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB896358)-->"C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB896423)-->"C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB896424)-->"C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB896428)-->"C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB899587)-->"C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB899589)-->"C:\WINDOWS\$NtUninstallKB899589$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB899591)-->"C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB900725)-->"C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB901017)-->"C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB901214)-->"C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB902400)-->"C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB904706)-->"C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB905414)-->"C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB905749)-->"C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB908519)-->"C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB911562)-->"C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB911567)-->"C:\WINDOWS\$NtUninstallKB911567$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB911927)-->"C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB912919)-->"C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB913580)-->"C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB914388)-->"C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB914389)-->"C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB917159)-->"C:\WINDOWS\$NtUninstallKB917159$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB917344)-->"C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB917422)-->"C:\WINDOWS\$NtUninstallKB917422$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB917953)-->"C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB918118)-->"C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB918439)-->"C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB918899)-->"C:\WINDOWS\$NtUninstallKB918899$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB919007)-->"C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB920213)-->"C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB920214)-->"C:\WINDOWS\$NtUninstallKB920214$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB920670)-->"C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB920683)-->"C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB920685)-->"C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB921398)-->"C:\WINDOWS\$NtUninstallKB921398$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB921503)-->"C:\WINDOWS\$NtUninstallKB921503$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB921883)-->"C:\WINDOWS\$NtUninstallKB921883$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB922616)-->"C:\WINDOWS\$NtUninstallKB922616$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB922819)-->"C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB923191)-->"C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB923414)-->"C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB923689)-->"C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
    Mise à jour de sécurité pour Windows XP (KB923980)-->"C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB924270)-->"C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB924496)-->"C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB924667)-->"C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB925902)-->"C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB926255)-->"C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB926436)-->"C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB927779)-->"C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB927802)-->"C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB928255)-->"C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB928843)-->"C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB929123)-->"C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB929969)-->"C:\WINDOWS\$NtUninstallKB929969$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB930178)-->"C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB931261)-->"C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB931784)-->"C:\WINDOWS\$NtUninstallKB931784$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB932168)-->"C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB933729)-->"C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB935839)-->"C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB935840)-->"C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB936021)-->"C:\WINDOWS\$NtUninstallKB936021$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB937894)-->"C:\WINDOWS\$NtUninstallKB937894$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB938127)-->"C:\WINDOWS\$NtUninstallKB938127$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB938829)-->"C:\WINDOWS\$NtUninstallKB938829$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB939653)-->"C:\WINDOWS\$NtUninstallKB939653$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB941202)-->"C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB941568)-->"C:\WINDOWS\$NtUninstallKB941568$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB941644)-->"C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB941693)-->"C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB943055)-->"C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB943460)-->"C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB943485)-->"C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB944338-v2)-->"C:\WINDOWS\$NtUninstallKB944338-v2$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB944653)-->"C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB945553)-->"C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB946026)-->"C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB948590)-->"C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB948881)-->"C:\WINDOWS\$NtUninstallKB948881$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950749)-->"C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB894391)-->"C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB900485)-->"C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB904942)-->"C:\WINDOWS\$NtUninstallKB904942$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB908531)-->"C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB910437)-->"C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB911280)-->"C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB916595)-->"C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB920872)-->"C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB922582)-->"C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB925720)-->"C:\WINDOWS\$NtUninstallKB925720$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB927891)-->"C:\WINDOWS\$NtUninstallKB927891$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB930916)-->"C:\WINDOWS\$NtUninstallKB930916$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB932823-v3)-->"C:\WINDOWS\$NtUninstallKB932823-v3$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB938828)-->"C:\WINDOWS\$NtUninstallKB938828$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB942763)-->"C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
    Mozilla Firefox (3.0.4)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
    MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
    MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
    MSXML 4.0 SP2 Parser and SDK-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
    MSXML 6 Service Pack 2 (KB954459)-->MsiExec.exe /I{1A528690-6A2D-4BC5-B143-8C4AE8D19D96}
    My Free Mahjong v.2.0-->"D:\Program Files\My Free Mahjong\unins000.exe"
    Nero 6 Ultra Edition-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
    NFS Underground-->C:\Program Files\EA GAMES\NFS Underground\EAUninstall.exe
    Norton PartitionMagic 8.0-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{21DBBDD6-93A5-4326-9A04-C9A5C9148502}
    Nuclear Coffee - VideoGet 2.0.2.26 Trial-->"C:\Program Files\Nuclear Coffee\VideoGet\uninstall.exe"
    NVIDIA Drivers-->C:\WINDOWS\system32\nvudisp.exe UninstallGUI
    Package de pilotes Windows - MobileTop (sshpmdm) Modem (02/23/2007 2.5.0.0)-->C:\PROGRA~1\DIFX\7B44739871F4D539FA473F57A832EA4B6A59EF06\DPInst.exe /u C:\WINDOWS\system32\DRVSTORE\shpacm_18A9B92ED8DEDC602E49E767FA4BE98A30525207\shpacm.inf
    Package de pilotes Windows - MobileTop (sshpusb) USB (02/23/2007 2.5.0.0)-->C:\PROGRA~1\DIFX\7B44739871F4D539FA473F57A832EA4B6A59EF06\DPInst.exe /u C:\WINDOWS\system32\DRVSTORE\shpusb_558D416BCEB984F35885804D3E1A9C3773F1B17C\shpusb.inf
    Palace of Chance-->"C:\Program Files\Palace of Chance\Install.exe" -u
    Pochette Express 2-->C:\Program Files\Pochette Express 2\uninstall.exe
    PokerStars-->"C:\Program Files\PokerStars\PokerStarsUninstall.exe" /u:PokerStars
    PSP Grader v006 - Lite-->D:\Program Files\PSP Grader\uninst.exe
    QVGDM Seconde Edition-->MsiExec.exe /I{735D1B9F-A9A4-4FF2-A830-96C150883B97}
    Realtek AC'97 Audio-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\Setup.exe" -l0x40c -removeonly
    SafeCast Shared Components-->C:\Program Files\Fichiers communs\Macrovision Shared\SafeCast\Install\CDAC13BA.EXE /uninstall
    SAMSUNG CDMA Modem Driver Set-->C:\WINDOWS\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe
    SAMSUNG Mobile Composite Device Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\6\SSBCUninstall.exe
    Samsung Mobile phone USB driver Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe
    SAMSUNG Mobile USB Modem 1.0 Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe
    SAMSUNG Mobile USB Modem Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe
    Samsung PC Studio 3 USB Driver Installer-->"C:\Program Files\InstallShield Installation Information\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}\setup.exe" -runfromtemp -l0x040c -removeonly
    Samsung PC Studio 3-->"C:\Program Files\InstallShield Installation Information\{C4A4722E-79F9-417C-BD72-8D359A090C97}\setup.exe" -runfromtemp -l0x040c -removeonly
    SDK de 3ds max 6-->MsiExec.exe /I{B273020B-2AFE-4a87-A90F-8135E0E25DF7}
    Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
    Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
    Security Update for 2007 Microsoft Office System (KB958439)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {6491B8AA-D11C-4648-A461-6234B31EB7E2}
    Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
    Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
    Security Update for Microsoft Office Excel 2007 (KB958437)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {648FC016-2D6B-4A16-8D87-404533642F4B}
    Security Update for Microsoft Office PowerPoint 2007 (KB951338)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {558B709B-821B-4FC5-90FC-9A8890641E77}
    Security Update for Microsoft Office Publisher 2007 (KB950114)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {F9C3CDBA-1F00-4D4D-959D-75C9D3ACDD85}
    Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
    Security Update for Microsoft Office system 2007 (KB956828)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {885E081B-72BD-4E76-8E98-30B4BE468FAC}
    Security Update for Microsoft Office Word 2007 (KB956358)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {4551666D-0FD6-4C69-8A81-1C6F2E64517C}
    Security Update for Visio 2007 (KB947590)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {6BAD036C-261F-4BEF-96CF-C20678D07A41}
    Snowboarding Championship 2004-->D:\PROGRA~2\ACTIVI~2\SNOWBO~1\UNWISE.EXE D:\PROGRA~2\ACTIVI~2\SNOWBO~1\INSTALL.LOG
    Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
    SUPER © Version 2008.bld.33 (Sep 2, 2008)-->D:\PROGRA~2\ERIGHT~1\SUPER\Setup.exe /remove /q0
    Thrustmaster Force Feedback Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8F5A0981-5CDC-41D0-BCA2-AD3B777FC358}\setup.exe" -l0x40c -removeonly
    Torrent Episode Downloader-->MsiExec.exe /I{09D5D2C6-5B0E-4899-A287-4DA97F78ABCE}
    TubeMaster-->"D:\Program Files\TubeMaster\uninstall.exe"
    UnderCoverXP 1.17-->"C:\Program Files\UnderCoverXP\unins000.exe"
    Update for Microsoft Office Outlook 2007 (KB952142)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {4AD3A076-427C-491F-A5B7-7D1DE788A756}
    Update for Office 2007 (KB946691)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {A420F522-7395-4872-9882-C591B4B92278}
    Update for Outlook 2007 Junk Email Filter (kb958619)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {79B301C1-DBC0-467C-AFDA-2A6CDAFA4302}
    Utilitaires Sierra-->C:\Program Files\Sierra On-Line\sutil32.exe uninstall
    VideoLAN VLC media player 0.8.6d-->D:\programmes\VLC\uninstall.exe
    VirtualDub-MPEG2 v1.6.19 b24587 Fr-->"C:\Program Files\VirtualDub-MPEG2\unins000.exe"
    VobSub v2.23 (Remove Only)-->"C:\Program Files\Gabest\VobSub\uninstall.exe"
    Vodafone 804SS USB driver Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\4\SSVDUninstall.exe
    WinCustomize Browser-->C:\PROGRA~1\Stardock\WINCUS~1\SKINBR~1\UNWISE.EXE C:\PROGRA~1\Stardock\WINCUS~1\SKINBR~1\INSTALL.LOG
    Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
    Windows Installer 3.1 (KB893803)-->"C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
    Windows Internet Explorer 7-->"C:\WINDOWS\ie7\spuninst\spuninst.exe"
    Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
    Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
    Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
    Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
    Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
    Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
    XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"
    XviD MPEG4 Video Codec (remove only)-->"C:\WINDOWS\system32\xvid-uninstall.exe"
    Yahoo! Toolbar-->C:\PROGRA~1\Yahoo!\Common\UNYT_W~1.EXE

    ======Hosts File======

    127.0.0.1 www.007guard.com
    127.0.0.1 007guard.com
    127.0.0.1 008i.com
    127.0.0.1 www.008k.com
    127.0.0.1 008k.com
    127.0.0.1 www.00hq.com
    127.0.0.1 00hq.com
    127.0.0.1 010402.com
    127.0.0.1 www.032439.
    0
    1. eronman Auteur
      bonjour, voilà les 2 rapports
      Logfile of random's system information tool 1.05 (written by random/random)
      Run by Propriétaire at 2009-01-02 15:16:49
      Microsoft Windows XP Édition familiale Service Pack 2
      System drive C: has 14 GB (35%) free of 40 GB
      Total RAM: 1022 MB (61% free)

      ======Registry dump======

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
      &Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2008-07-28 882416]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
      Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
      Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2008-09-15 1562960]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
      SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
      Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2007-09-20 328752]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
      Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2008-02-28 2436160]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AB692F9B-27FE-4511-8885-ED62BB45197B}]
      WebPerform Object - C:\WINDOWS\system32\webperform.dll [2008-11-10 217088]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
      Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll [2008-02-28 654320]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}]
      SingleInstance Class - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll [2008-07-28 160496]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
      {2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll [2008-02-28 2436160]
      {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2008-07-28 882416]

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
      "KBD"=C:\HP\KBD\KBD.EXE [2006-03-22 794632]
      "nwiz"=nwiz.exe /install []
      "NvMediaCenter"=C:\WINDOWS\system32\NvMCTray.dll [2007-06-28 81920]
      "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-06-28 8466432]
      "avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2008-11-26 81000]
      "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]

      [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
      "SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2008-09-16 1833296]
      "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-05 15360]

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\!AVG Anti-Spyware]
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe [2007-06-11 6731312]

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
      C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe []

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccleaner]
      C:\Program Files\CCleaner\CCleaner.exe [2007-11-22 787696]

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Miro]
      C:\Program Files\Participatory Culture Foundation\Miro\Miro.exe []

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
      C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-02-28 68856]

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\YSearchProtection]
      C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe []

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
      D:\PROGRA~2\MICROS~1\Office\OSA9.EXE -b -l []

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
      "gusvc"=3

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\vtUnNGvW]
      vtUnNGvW.dll []

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
      WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
      "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"=C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll [2007-05-30 79408]
      "{7E156AAE-FA60-44A1-8E69-2E0E0030F1F6}"= []

      [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
      "SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sglfb.sys]

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\tga.sys]

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\wd.sys]

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NBF]

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nbf.sys]

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProtectedStorage]

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sglfb.sys]

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\tga.sys]

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vds]

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
      "dontdisplaylastusername"=0
      "legalnoticecaption"=
      "legalnoticetext"=
      "shutdownwithoutlogon"=1
      "undockwithoutlogon"=1
      "EnableLUA"=0

      [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
      "NoDriveTypeAutoRun"=145
      "NoDrives"=0

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
      "NoDriveAutoRun"=
      "NoDriveTypeAutoRun"=
      "NoDrives"=

      [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
      "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
      "C:\Program Files\Microsoft Games\Halo\halo.exe"="C:\Program Files\Microsoft Games\Halo\halo.exe:*:Enabled:Halo"
      "C:\Program Files\Call of Duty\CoDMP.exe"="C:\Program Files\Call of Duty\CoDMP.exe:*:Enabled:CoDMP"
      "D:\Program Files\EA GAMES\Medal of Honor Batailles du Pacifique(tm)\mohpa.exe"="D:\Program Files\EA GAMES\Medal of Honor Batailles du Pacifique(tm)\mohpa.exe:*:Enabled:Medal of Honor Pacific Assault(tm)"
      "D:\Program Files\autodesk\3dsmax.exe"="D:\Program Files\autodesk\3dsmax.exe:*:Enabled:3ds max application"
      "C:\Program Files\backburner 2\manager.exe"="C:\Program Files\backburner 2\manager.exe:*:Enabled:backburner Manager Application"
      "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
      "C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
      "C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
      "C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
      "D:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="D:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
      "C:\Program Files\Participatory Culture Foundation\Miro\xulrunner\python\Miro_Downloader.exe"="C:\Program Files\Participatory Culture Foundation\Miro\xulrunner\python\Miro_Downloader.exe:*:Enabled:Miro_Downloader"
      "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger"
      "C:\Program Files\Yahoo!\Messenger\YServer.exe"="C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server"
      "D:\Documents\bousselange\EBP_BATIMENT_2008\EBP_BATIMENT_2008PRO_FR_9_0_0_1681\Crack\BatimentPro.exe"="D:\Documents\bousselange\EBP_BATIMENT_2008\EBP_BATIMENT_2008PRO_FR_9_0_0_1681\Crack\BatimentPro.exe:*:Enabled:EBP Bâtiment 2008 Plus"
      "C:\Program Files\EBP\Batiment9.0\BatimentPro.exe"="C:\Program Files\EBP\Batiment9.0\BatimentPro.exe:*:Enabled:EBP Bâtiment 2008 Plus"
      "D:\Program Files\Omemo\Omemo.exe"="D:\Program Files\Omemo\Omemo.exe:*:Enabled:Omemo"
      "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
      "D:\Program Files\BitComet\BitComet.exe"="D:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client"

      [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
      "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
      "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
      "C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
      "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1e35df6b-c2d8-11dc-84aa-0013d3264f48}]
      shell\AutoRun\command - L:\autorun\autorun.exe

      ======File associations======

      .reg - open - regedit.exe "%1" %*

      ======List of files/folders created in the last 1 months======

      2009-01-02 15:16:49 ----D---- C:\rsit
      2009-01-02 10:14:55 ----D---- C:\Program Files\Adobe
      2009-01-02 09:56:50 ----D---- C:\Documents and Settings\All Users\Application Data\NOS
      2009-01-02 09:56:49 ----D---- C:\Program Files\NOS
      2009-01-02 04:55:18 ----HD---- C:\Documents and Settings\Propriétaire\Application Data\drivers
      2009-01-02 04:53:52 ----A---- C:\WINDOWS\system32\aswBoot.exe
      2009-01-02 04:53:50 ----D---- C:\Program Files\Alwil Software
      2009-01-02 04:40:04 ----D---- C:\Program Files\FindyKill
      2009-01-02 04:29:30 ----A---- C:\WINDOWS\SchedLgU.Txt
      2009-01-02 02:32:35 ----D---- C:\Program Files\Trend Micro
      2009-01-01 03:39:22 ----D---- C:\Program Files\Nuclear Coffee
      2008-12-16 23:44:05 ----D---- C:\Documents and Settings\Propriétaire\Application Data\Eyeblaster
      2008-12-16 23:43:11 ----D---- C:\Documents and Settings\Propriétaire\Application Data\Zylom
      2008-12-16 23:43:06 ----D---- C:\Documents and Settings\All Users\Application Data\Zylom
      2008-12-16 23:42:59 ----D---- C:\Program Files\Zylom Games
      2008-12-12 05:48:23 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
      2008-12-12 05:48:18 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$
      2008-12-12 05:45:48 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
      2008-12-12 05:45:41 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$

      ======List of files/folders modified in the last 1 months======

      2009-01-02 14:21:10 ----D---- C:\WINDOWS\TEMP
      2009-01-02 10:48:45 ----D---- C:\WINDOWS\Prefetch
      2009-01-02 10:16:04 ----D---- C:\WINDOWS\system32\CatRoot2
      2009-01-02 10:15:45 ----SHD---- C:\WINDOWS\Installer
      2009-01-02 10:15:44 ----SHD---- C:\Config.Msi
      2009-01-02 10:15:44 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
      2009-01-02 10:15:19 ----D---- C:\Program Files\Fichiers communs\Adobe
      2009-01-02 10:14:55 ----RD---- C:\Program Files
      2009-01-02 10:13:49 ----D---- C:\WINDOWS\system32
      2009-01-02 09:56:51 ----SD---- C:\WINDOWS\Downloaded Program Files
      2009-01-02 09:56:51 ----D---- C:\WINDOWS
      2009-01-02 04:54:08 ----D---- C:\WINDOWS\system32\drivers
      2009-01-02 04:49:58 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
      2009-01-02 02:13:19 ----RSHDC---- C:\WINDOWS\system32\dllcache
      2009-01-02 01:14:15 ----SH---- C:\boot.ini
      2009-01-02 01:14:14 ----A---- C:\WINDOWS\win.ini
      2009-01-02 01:14:14 ----A---- C:\WINDOWS\system.ini
      2009-01-02 00:47:10 ----D---- C:\Program Files\Fichiers communs\AVSMedia
      2009-01-02 00:41:19 ----D---- C:\Program Files\Yahoo!
      2009-01-02 00:41:17 ----D---- C:\Documents and Settings\All Users\Application Data\Yahoo!
      2009-01-02 00:39:01 ----D---- C:\Program Files\eMule
      2009-01-01 18:13:00 ----D---- C:\Poker
      2009-01-01 17:01:59 ----D---- C:\Documents and Settings\Propriétaire\Application Data\uTorrent
      2009-01-01 15:29:04 ----D---- C:\WINDOWS\BDOSCAN8
      2008-12-31 00:00:11 ----D---- C:\Program Files\PokerStars
      2008-12-30 14:06:11 ----D---- C:\WINDOWS\Debug
      2008-12-30 12:52:24 ----A---- C:\WINDOWS\NeroDigital.ini
      2008-12-26 15:36:20 ----A---- C:\Documents and Settings\Propriétaire\Application Data\AutoGK.ini
      2008-12-26 00:45:51 ----D---- C:\Documents and Settings\Propriétaire\Application Data\AVS4YOU
      2008-12-25 23:01:20 ----D---- C:\Documents and Settings\Propriétaire\Application Data\Vso
      2008-12-25 21:05:09 ----HD---- C:\WINDOWS\inf
      2008-12-17 22:55:51 ----D---- C:\Documents and Settings\Propriétaire\Application Data\Identities
      2008-12-17 20:28:07 ----D---- C:\WINDOWS\ie7updates
      2008-12-17 20:27:42 ----HD---- C:\WINDOWS\$hf_mig$
      2008-12-13 22:14:45 ----HD---- C:\Program Files\InstallShield Installation Information
      2008-12-13 07:37:56 ----A---- C:\WINDOWS\system32\mshtml.dll
      2008-12-13 02:14:31 ----D---- C:\Downloads
      2008-12-12 05:48:59 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
      2008-12-12 05:48:08 ----D---- C:\Program Files\Internet Explorer
      2008-12-10 00:24:37 ----A---- C:\WINDOWS\system32\MRT.exe
      2008-12-07 16:26:26 ----D---- C:\WINDOWS\network diagnostic

      ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

      R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2008-11-26 26944]
      R1 AmdPPM;Pilote de processeur AMD HwPState; C:\WINDOWS\system32\DRIVERS\AmdPPM.sys [2007-04-16 33792]
      R1 ASPI32;ASPI32; C:\WINDOWS\system32\drivers\ASPI32.sys [2003-12-22 25244]
      R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2008-11-26 111184]
      R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2008-11-26 50864]
      R1 AVG Anti-Spyware Driver;AVG Anti-Spyware Driver; \??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys []
      R1 AvgAsCln;AVG Anti-Spyware Clean Driver; C:\WINDOWS\System32\DRIVERS\AvgAsCln.sys [2007-05-30 10872]
      R1 PQNTDrv;PQNTDrv; C:\WINDOWS\system32\drivers\PQNTDrv.sys [2004-05-05 4228]
      R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2006-07-24 5632]
      R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-11-26 20560]
      R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2008-11-26 94032]
      R2 CdaC15BA;CdaC15BA; \??\C:\WINDOWS\system32\drivers\CDAC15BA.SYS []
      R2 Haspnt;Haspnt; \??\C:\WINDOWS\system32\drivers\Haspnt.sys []
      R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-08-29 3644928]
      R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-05 60800]
      R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2008-11-26 23152]
      R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
      R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
      R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-05 61824]
      R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2007-06-28 6807328]
      R3 Pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\Pcouffin.sys [2008-01-09 47360]
      R3 Ps2;PS2; C:\WINDOWS\system32\DRIVERS\PS2.sys [2005-12-12 19072]
      R3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
      R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-05 26624]
      R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-05 57600]
      R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2004-08-05 17024]
      R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
      S2 Hardlock;Hardlock; \??\C:\WINDOWS\system32\drivers\hardlock.sys []
      S3 afgbre62;afgbre62; C:\WINDOWS\system32\drivers\afgbre62.sys []
      S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\WINDOWS\system32\DRIVERS\sscdbus.sys [2005-12-22 80272]
      S3 sscdmdfl;SAMSUNG CDMA Modem Filter; C:\WINDOWS\system32\DRIVERS\sscdmdfl.sys [2005-12-22 10864]
      S3 sscdmdm;SAMSUNG CDMA Modem Drivers; C:\WINDOWS\system32\DRIVERS\sscdmdm.sys [2005-12-22 137884]
      S3 ssm_bus;SAMSUNG Mobile USB Device II 1.0 driver (WDM); C:\WINDOWS\system32\DRIVERS\ssm_bus.sys [2005-08-30 58320]
      S3 ssm_mdfl;SAMSUNG Mobile USB Modem II 1.0 Filter; C:\WINDOWS\system32\DRIVERS\ssm_mdfl.sys [2005-08-30 8336]
      S3 ssm_mdm;SAMSUNG Mobile USB Modem II 1.0 Drivers; C:\WINDOWS\system32\DRIVERS\ssm_mdm.sys [2005-08-30 94000]
      S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
      S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
      S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
      S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
      S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

      ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

      R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2008-11-26 18752]
      R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2008-11-26 155160]
      R2 C-DillaCdaC11BA;C-DillaCdaC11BA; C:\WINDOWS\system32\drivers\CDAC11BA.EXE [2008-01-16 54784]
      R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2007-10-12 71096]
      R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2007-06-28 155716]
      R2 SG_Service;SoftGuard Service; C:\Program Files\Fichiers communs\RbtProt\sgsrv.exe [2006-06-13 159744]
      R2 UserAccess7;SecuROM User Access Service (V7); C:\WINDOWS\system32\UAService7.exe [2008-09-09 126976]
      R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-05 14336]
      R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2008-11-26 254040]
      R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2008-11-26 352920]
      R3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
      S2 AVG Anti-Spyware Guard;AVG Anti-Spyware Guard; C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe [2009-01-02 312880]
      S2 Registry Helper Service;Registry Helper Service; C:\Program Files\Registry Helper\RegistryHelperService.exe []
      S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
      S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
      S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2007-10-09 36864]
      S3 getPlus(R) Helper;getPlus(R) Helper; C:\Program Files\NOS\bin\getPlus_HelperSvc.exe [2008-12-01 33752]
      S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
      S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2007-10-11 864256]
      S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
      S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
      S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
      S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
      S4 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-02-28 138680]
      S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2007-10-11 122880]

      -----------------EOF-----------------
      et le 2eme
      info.txt logfile of random's system information tool 1.05 2009-01-02 15:16:56

      ======Uninstall list======

      -->MsiExec.exe /X{E9F81423-211E-46B6-9AE0-38568BC5CF6F}
      -->C:\PROGRA~1\Yahoo!\Common\UNYT_W~1.EXE
      -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
      2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
      2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0015-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
      2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
      2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
      2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0019-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
      2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
      2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
      2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {5A2F65A4-808F-4A1E-973E-92E17824982D}
      2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
      2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
      2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {430971B1-C31E-45DA-81E0-72C095BAB72C}
      2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {B3F4DC34-7F60-4B7C-A79F-1C13012D99D4}
      2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {F7A31780-33C4-4E39-951A-5EC9B91D7BF1}
      2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0044-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
      3ds max 6-->MsiExec.exe /I{29744C5B-47C9-4ea5-A8F9-B0D093121471}
      3dsmax ancillary install-->MsiExec.exe /I{7C8B5E63-821A-4DFB-BDFA-19854D88EC5C}
      ACDSee Pro 2-->MsiExec.exe /I{4AAC95F4-A30E-4EE5-A086-6F79581D0D70}
      Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
      Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
      Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
      Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
      Assistant de connexion Windows Live-->MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986}
      Auto Gordian Knot 2.45-->C:\Program Files\AutoGK\uninst.exe
      avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
      AVG Anti-Spyware 7.5-->C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Uninstall.exe
      AviSynth 2.5-->"C:\Program Files\AviSynth 2.5\Uninstall.exe"
      Ballance-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{42E0783D-3BA4-454B-B58A-BF26E49EB7DE}\Setup.exe"
      Blender (remove only)-->"C:\Program Files\Blender Foundation\Blender\uninstall.exe"
      CA Yahoo! Anti-Spy (remove only)-->"C:\Program Files\CA Yahoo! Anti-Spy\uninstall.exe"
      Call of Duty(R) 2-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{D0A05794-48C2-4424-A15A-9F20FCFDD374}
      Call of Duty-->C:\PROGRA~1\CALLOF~1\Uninstall\Unwise.exe /u C:\PROGRA~1\CALLOF~1\Uninstall\Install.log
      CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
      CD Mate 2.0-->"C:\Program Files\Copystar\unins000.exe"
      CDBurnerXP-->"C:\Program Files\CDBurnerXP\unins000.exe"
      character studio 4.2-->MsiExec.exe /I{AFEDE7CB-FEB8-401e-9352-DE7489FAA7AA}
      Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
      Correctif pour Windows XP (KB914440)-->"C:\WINDOWS\$NtUninstallKB914440$\spuninst\spuninst.exe"
      Correctif pour Windows XP (KB935448)-->"C:\WINDOWS\$NtUninstallKB935448$\spuninst\spuninst.exe"
      Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
      Correctif Windows XP - KB873339-->C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
      Correctif Windows XP - KB885835-->C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
      Correctif Windows XP - KB885836-->C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
      Correctif Windows XP - KB885884-->C:\WINDOWS\$NtUninstallKB885884$\spuninst\spuninst.exe
      Correctif Windows XP - KB886185-->C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe
      Correctif Windows XP - KB888302-->C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
      Correctif Windows XP - KB890859-->"C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
      Correctif Windows XP - KB891781-->C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
      Dessinateur Studio-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{37E80F11-BC6E-4ECD-8466-CFFE9497F090}\SETUP.EXE"
      DivxToDVD 1.99.11-->"D:\programmes\DivxToDVD\unins000.exe"
      DVD Shrink 3.2-->"D:\Program Files\DVD Shrink\unins000.exe"
      DVDFab Platinum 3.1.5.0-->"D:\programmes\DVDFab Platinum 3\unins000.exe"
      eMule-->"C:\Program Files\eMule\Uninstall.exe"
      Enhanced Multimedia Keyboard Solution-->C:\HP\KBD\Install.exe /u
      Eragon-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{322F75E0-71A3-4125-8EB3-761834EDC166}\setup.exe" -l0x40c -removeonly
      EVEREST Home Edition v2.20-->"D:\Program Files\Lavalys\EVEREST Home Edition\unins000.exe"
      FairUse Wizard 2-->"C:\Program Files\FairUse Wizard 2\UnInstall_14333.exe"
      Fichiers de référence de 3ds max 6-->MsiExec.exe /I{E1F0669B-FEDA-48d7-89CE-4670348251A4}
      Fichiers des didacticiels de 3ds max 6-->MsiExec.exe /I{55AC02BB-D296-4431-8CBB-B1139FFC6BDB}
      FindyKill-->C:\Program Files\FindyKill\Uninstal.exe
      FPS Creator-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B91E4360-298A-4306-9E95-9AD91A0952A1}\Setup.exe" -l0x9
      Full Tilt Poker-->"C:\Program Files\InstallShield Installation Information\{D4C9692E-4EFA-4DA0-8B7F-9439466D9E31}\setup.exe" -runfromtemp -l0x040c -removeonly
      getPlus(R) for Adobe-->"C:\Program Files\NOS\bin\getPlus_HelperSvc.exe" /UninstallGet1
      Google Earth-->MsiExec.exe /I{1E04F83B-2AB9-4301-9EF7-E86307F79C72}
      Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
      Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar1.dll"
      Hotfix for Microsoft .NET Framework 3.0 (KB932471)-->C:\WINDOWS\system32\msiexec.exe /promptrestart /uninstall {ECD292A0-0347-4244-8C24-5DBCE990FB40} /package {BAF78226-3200-4DB4-BE33-4D922A799840}
      Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
      Hotfix for Windows XP (KB915865)-->"C:\WINDOWS\$NtUninstallKB915865$\spuninst\spuninst.exe"
      Hotfix for Windows XP (KB926239)-->"C:\WINDOWS\$NtUninstallKB926239$\spuninst\spuninst.exe"
      ImgBurn (Remove Only)-->"C:\Program Files\ImgBurn\uninstall.exe"
      iWizz-->D:\Program Files\iWizz\uninstall.exe
      Java(TM) 6 Update 4-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160040}
      Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
      Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
      Kaspersky Online Scanner-->C:\WINDOWS\system32\KASPER~1\KASPER~1\kavuninstall.exe
      KC Softwares IDPhotoStudio-->"C:\Program Files\KC Softwares\IDPhotoStudio\unins000.exe"
      Le code de la route-->C:\WINDOWS\unin040c.exe -f"d:\program files\DeIsL1.isu" -c"d:\program files\_ISREG32.DLL"
      Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
      Les aventures de Buzz l'Éclair-->C:\WINDOWS\IsUn040c.exe -fC:\PROGRA~1\DISNEY~1\LESAVE~1\DeIsL1.isu
      Mahjong Fortuna 2 Deluxe-->"C:\Program Files\Zylom Games\Mahjong Fortuna 2 Deluxe\GameInstlr.exe" --uninstall UnInstall.log
      Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
      Matériaux Architectural 3ds max 6-->MsiExec.exe /I{909A5F3B-7585-461d-88AE-7984AB0FFD3D}
      Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
      Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
      Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
      Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
      Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{3F7924B9-D148-3141-87B1-68F36043A940}
      Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
      Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{511DF669-2930-30C0-8EB6-552887E29EC8}
      Microsoft .NET Framework 3.0 Service Pack 1-->MsiExec.exe /I{2BA00471-0328-3743-93BD-FA813353A783}
      Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
      Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
      Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
      Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
      Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
      Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}
      Microsoft Office Language Pack 2007 Service Pack 1 (SP1)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {EC50B538-CBE1-42E6-B7FE-87AA540AADFB}
      Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
      Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
      Microsoft Office Professional Plus 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
      Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}
      Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
      Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
      Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
      Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
      Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
      Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
      Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
      Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
      Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
      Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
      Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
      Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
      Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
      Mise à jour de sécurité pour Lecteur Windows Media (KB911564)-->"C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398)-->"C:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Lecteur Windows Media 9 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Lecteur Windows Media 9 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP9$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB890046)-->"C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB893756)-->"C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB896358)-->"C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB896423)-->"C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB896424)-->"C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB896428)-->"C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB899587)-->"C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB899589)-->"C:\WINDOWS\$NtUninstallKB899589$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB899591)-->"C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB900725)-->"C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB901017)-->"C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB901214)-->"C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB902400)-->"C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB904706)-->"C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB905414)-->"C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB905749)-->"C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB908519)-->"C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB911562)-->"C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB911567)-->"C:\WINDOWS\$NtUninstallKB911567$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB911927)-->"C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB912919)-->"C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB913580)-->"C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB914388)-->"C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB914389)-->"C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB917159)-->"C:\WINDOWS\$NtUninstallKB917159$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB917344)-->"C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB917422)-->"C:\WINDOWS\$NtUninstallKB917422$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB917953)-->"C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB918118)-->"C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB918439)-->"C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB918899)-->"C:\WINDOWS\$NtUninstallKB918899$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB919007)-->"C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB920213)-->"C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB920214)-->"C:\WINDOWS\$NtUninstallKB920214$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB920670)-->"C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB920683)-->"C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB920685)-->"C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB921398)-->"C:\WINDOWS\$NtUninstallKB921398$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB921503)-->"C:\WINDOWS\$NtUninstallKB921503$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB921883)-->"C:\WINDOWS\$NtUninstallKB921883$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB922616)-->"C:\WINDOWS\$NtUninstallKB922616$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB922819)-->"C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB923191)-->"C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB923414)-->"C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB923689)-->"C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
      Mise à jour de sécurité pour Windows XP (KB923980)-->"C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB924270)-->"C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB924496)-->"C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB924667)-->"C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB925902)-->"C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB926255)-->"C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB926436)-->"C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB927779)-->"C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB927802)-->"C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB928255)-->"C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB928843)-->"C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB929123)-->"C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB929969)-->"C:\WINDOWS\$NtUninstallKB929969$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB930178)-->"C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB931261)-->"C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB931784)-->"C:\WINDOWS\$NtUninstallKB931784$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB932168)-->"C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB933729)-->"C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB935839)-->"C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB935840)-->"C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB936021)-->"C:\WINDOWS\$NtUninstallKB936021$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB937894)-->"C:\WINDOWS\$NtUninstallKB937894$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB938127)-->"C:\WINDOWS\$NtUninstallKB938127$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB938829)-->"C:\WINDOWS\$NtUninstallKB938829$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB939653)-->"C:\WINDOWS\$NtUninstallKB939653$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB941202)-->"C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB941568)-->"C:\WINDOWS\$NtUninstallKB941568$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB941644)-->"C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB941693)-->"C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB943055)-->"C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB943460)-->"C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB943485)-->"C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB944338-v2)-->"C:\WINDOWS\$NtUninstallKB944338-v2$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB944653)-->"C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB945553)-->"C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB946026)-->"C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB948590)-->"C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB948881)-->"C:\WINDOWS\$NtUninstallKB948881$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB950749)-->"C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB894391)-->"C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB900485)-->"C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB904942)-->"C:\WINDOWS\$NtUninstallKB904942$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB908531)-->"C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB910437)-->"C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB911280)-->"C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB916595)-->"C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB920872)-->"C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB922582)-->"C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB925720)-->"C:\WINDOWS\$NtUninstallKB925720$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB927891)-->"C:\WINDOWS\$NtUninstallKB927891$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB930916)-->"C:\WINDOWS\$NtUninstallKB930916$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB932823-v3)-->"C:\WINDOWS\$NtUninstallKB932823-v3$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB938828)-->"C:\WINDOWS\$NtUninstallKB938828$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB942763)-->"C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
      Mozilla Firefox (3.0.4)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
      MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
      MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
      MSXML 4.0 SP2 Parser and SDK-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
      MSXML 6 Service Pack 2 (KB954459)-->MsiExec.exe /I{1A528690-6A2D-4BC5-B143-8C4AE8D19D96}
      My Free Mahjong v.2.0-->"D:\Program Files\My Free Mahjong\unins000.exe"
      Nero 6 Ultra Edition-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
      NFS Underground-->C:\Program Files\EA GAMES\NFS Underground\EAUninstall.exe
      Norton PartitionMagic 8.0-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{21DBBDD6-93A5-4326-9A04-C9A5C9148502}
      Nuclear Coffee - VideoGet 2.0.2.26 Trial-->"C:\Program Files\Nuclear Coffee\VideoGet\uninstall.exe"
      NVIDIA Drivers-->C:\WINDOWS\system32\nvudisp.exe UninstallGUI
      Package de pilotes Windows - MobileTop (sshpmdm) Modem (02/23/2007 2.5.0.0)-->C:\PROGRA~1\DIFX\7B44739871F4D539FA473F57A832EA4B6A59EF06\DPInst.exe /u C:\WINDOWS\system32\DRVSTORE\shpacm_18A9B92ED8DEDC602E49E767FA4BE98A30525207\shpacm.inf
      Package de pilotes Windows - MobileTop (sshpusb) USB (02/23/2007 2.5.0.0)-->C:\PROGRA~1\DIFX\7B44739871F4D539FA473F57A832EA4B6A59EF06\DPInst.exe /u C:\WINDOWS\system32\DRVSTORE\shpusb_558D416BCEB984F35885804D3E1A9C3773F1B17C\shpusb.inf
      Palace of Chance-->"C:\Program Files\Palace of Chance\Install.exe" -u
      Pochette Express 2-->C:\Program Files\Pochette Express 2\uninstall.exe
      PokerStars-->"C:\Program Files\PokerStars\PokerStarsUninstall.exe" /u:PokerStars
      PSP Grader v006 - Lite-->D:\Program Files\PSP Grader\uninst.exe
      QVGDM Seconde Edition-->MsiExec.exe /I{735D1B9F-A9A4-4FF2-A830-96C150883B97}
      Realtek AC'97 Audio-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\Setup.exe" -l0x40c -removeonly
      SafeCast Shared Components-->C:\Program Files\Fichiers communs\Macrovision Shared\SafeCast\Install\CDAC13BA.EXE /uninstall
      SAMSUNG CDMA Modem Driver Set-->C:\WINDOWS\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe
      SAMSUNG Mobile Composite Device Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\6\SSBCUninstall.exe
      Samsung Mobile phone USB driver Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe
      SAMSUNG Mobile USB Modem 1.0 Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe
      SAMSUNG Mobile USB Modem Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe
      Samsung PC Studio 3 USB Driver Installer-->"C:\Program Files\InstallShield Installation Information\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}\setup.exe" -runfromtemp -l0x040c -removeonly
      Samsung PC Studio 3-->"C:\Program Files\InstallShield Installation Information\{C4A4722E-79F9-417C-BD72-8D359A090C97}\setup.exe" -runfromtemp -l0x040c -removeonly
      SDK de 3ds max 6-->MsiExec.exe /I{B273020B-2AFE-4a87-A90F-8135E0E25DF7}
      Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
      Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
      Security Update for 2007 Microsoft Office System (KB958439)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {6491B8AA-D11C-4648-A461-6234B31EB7E2}
      Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
      Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
      Security Update for Microsoft Office Excel 2007 (KB958437)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {648FC016-2D6B-4A16-8D87-404533642F4B}
      Security Update for Microsoft Office PowerPoint 2007 (KB951338)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {558B709B-821B-4FC5-90FC-9A8890641E77}
      Security Update for Microsoft Office Publisher 2007 (KB950114)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {F9C3CDBA-1F00-4D4D-959D-75C9D3ACDD85}
      Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
      Security Update for Microsoft Office system 2007 (KB956828)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {885E081B-72BD-4E76-8E98-30B4BE468FAC}
      Security Update for Microsoft Office Word 2007 (KB956358)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {4551666D-0FD6-4C69-8A81-1C6F2E64517C}
      Security Update for Visio 2007 (KB947590)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {6BAD036C-261F-4BEF-96CF-C20678D07A41}
      Snowboarding Championship 2004-->D:\PROGRA~2\ACTIVI~2\SNOWBO~1\UNWISE.EXE D:\PROGRA~2\ACTIVI~2\SNOWBO~1\INSTALL.LOG
      Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
      SUPER © Version 2008.bld.33 (Sep 2, 2008)-->D:\PROGRA~2\ERIGHT~1\SUPER\Setup.exe /remove /q0
      Thrustmaster Force Feedback Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8F5A0981-5CDC-41D0-BCA2-AD3B777FC358}\setup.exe" -l0x40c -removeonly
      Torrent Episode Downloader-->MsiExec.exe /I{09D5D2C6-5B0E-4899-A287-4DA97F78ABCE}
      TubeMaster-->"D:\Program Files\TubeMaster\uninstall.exe"
      UnderCoverXP 1.17-->"C:\Program Files\UnderCoverXP\unins000.exe"
      Update for Microsoft Office Outlook 2007 (KB952142)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {4AD3A076-427C-491F-A5B7-7D1DE788A756}
      Update for Office 2007 (KB946691)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {A420F522-7395-4872-9882-C591B4B92278}
      Update for Outlook 2007 Junk Email Filter (kb958619)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {79B301C1-DBC0-467C-AFDA-2A6CDAFA4302}
      Utilitaires Sierra-->C:\Program Files\Sierra On-Line\sutil32.exe uninstall
      VideoLAN VLC media player 0.8.6d-->D:\programmes\VLC\uninstall.exe
      VirtualDub-MPEG2 v1.6.19 b24587 Fr-->"C:\Program Files\VirtualDub-MPEG2\unins000.exe"
      VobSub v2.23 (Remove Only)-->"C:\Program Files\Gabest\VobSub\uninstall.exe"
      Vodafone 804SS USB driver Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\4\SSVDUninstall.exe
      WinCustomize Browser-->C:\PROGRA~1\Stardock\WINCUS~1\SKINBR~1\UNWISE.EXE C:\PROGRA~1\Stardock\WINCUS~1\SKINBR~1\INSTALL.LOG
      Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
      Windows Installer 3.1 (KB893803)-->"C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
      Windows Internet Explorer 7-->"C:\WINDOWS\ie7\spuninst\spuninst.exe"
      Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
      Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
      Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
      Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
      Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
      Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
      XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"
      XviD MPEG4 Video Codec (remove only)-->"C:\WINDOWS\system32\xvid-uninstall.exe"
      Yahoo! Toolbar-->C:\PROGRA~1\Yahoo!\Common\UNYT_W~1.EXE

      ======Hosts File======

      127.0.0.1 www.007guard.com
      127.0.0.1 007guard.com
      127.0.0.1 008i.com
      127.0.0.1 www.008k.com
      127.0.0.1 008k.com
      127.0.0.1 www.00hq.com
      127.0.0.1 00hq.com
      127.0.0.1 010402.com
      127.0.0.1 www.032439.
      0
      2. eronman Auteur
        excuse moi, mais je vais aller me coucher, je ferais ça demain, encore merci de ton aide, et bonne nuit
        @+
        0
        1. V-X
          Re,

          Vire tout sa:=> Source d'infection. 

          C:\Documents and Settings\Propri‚taire\Application Data\Macromedia\Flash Player\#SharedObjects\TK9BCLFC\localhost\Robobat Robot Office 19 with crack
C:\Documents and Settings\Propri‚taire\Application Data\Macromedia\Flash Player\#SharedObjects\TK9BCLFC\localhost\Robobat Robot Office 19 with crack\Intro
C:\Documents and Settings\Propri‚taire\Application Data\Macromedia\Flash Player\#SharedObjects\TK9BCLFC\localhost\Robobat Robot Office 19 with crack\Intro\Fra
C:\Documents and Settings\Propri‚taire\Application Data\Macromedia\Flash Player\#SharedObjects\TK9BCLFC\localhost\Robobat Robot Office 19 with crack\Intro\Fra\5pack_fr.exe
C:\Documents and Settings\Propri‚taire\Bureau\jeux\image a monter\3D Studio Max 6 Fr (Iso + Crack).iso
C:\Documents and Settings\Propri‚taire\Bureau\jeux\image a monter\Jeux.PC.Qui.veut.gagner.des.millions.-.Seconde.Edition.avec.Crack.ISO
C:\Documents and Settings\Propri‚taire\Favoris\pc\Bienvenue sur INFORMAGUN. le site qui vous instruit en hacking, cracking, ...ing....url
C:\Documents and Settings\Propri‚taire\Favoris\pc\KEYGEN.MS - Generates cracks serials keygens for the software to unlock it for free.url
C:\Documents and Settings\All Users\Application Data\MGS\cache\c\crackerjack1.a67bc53dc3f76ad51f07ff7b93734168.inf
C:\Documents and Settings\All Users\Application Data\MGS\cache\c\crackerjack1.b49d2ddd320948ad790aa39df760c775.inf
C:\Documents and Settings\All Users\Application Data\MGS\cache\c\crackerjack1.f97d5f24e7d2d1a2b7f52b4dc211ed43.inf
C:\Documents and Settings\All Users\Application Data\MGS\cache\c\crackerjackcommon.30e8e1c899235111d3b1b84c91bce0ae.inf
C:\Documents and Settings\All Users\Application Data\MGS\cache\c\crackerjackcommon.b4fc0002a0c341b1251a31ea5012f803.inf


          Fait sa maintenant:

          ▶ Télécharge random's system information tool (RSIT) et enregistre le sur ton bureau.

          ▶ Double clique sur RSIT.exe pour lancer l'outil.

          ▶ Clique sur ' continue ' à l'écran Disclaimer.

          ▶ Si l'outil HIjackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera et tu devras accepter la licence.

          ▶ Une fois le scan fini , 2 rapports vont apparaitre. Poste le contenu des 2 rapports
          ( log.txt & info.txt )

          (CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

          Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.
          0
          1. eronman Auteur
            ----------------- FindyKill V4.710 ------------------

            * User : Propri‚taire - GHOST3
            * executed from : C:\Program Files\FindyKill
            * Update on 21/12/08 par Chiquitine29
            * Start at 4:47:06 the 02/01/2009
            * Windows XP - Internet Explorer 7.0.5730.13

            ((((((((((((((( *** deleting *** ))))))))))))))))))

            --------------- [ Active Processes ] ----------------

            C:\WINDOWS\System32\smss.exe
            C:\WINDOWS\system32\csrss.exe
            C:\WINDOWS\system32\winlogon.exe
            C:\WINDOWS\system32\services.exe
            C:\WINDOWS\system32\lsass.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\system32\logonui.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\system32\userinit.exe
            C:\WINDOWS\system32\spoolsv.exe

            --------------- [ Infected files / folders ] ----------------

            »»»» Supression files in C:

            »»»» Supression files in C:\WINDOWS

            »»»» Supression files in C:\WINDOWS\Prefetch

            Deleted ! - C:\WINDOWS\prefetch\151984.EXE-2FCED10C.pf
            Deleted ! - C:\WINDOWS\prefetch\161859.EXE-0C1C371F.pf
            Deleted ! - C:\WINDOWS\prefetch\283812.EXE-004516B8.pf
            Deleted ! - C:\WINDOWS\prefetch\331734.EXE-1601AC55.pf
            Deleted ! - C:\WINDOWS\prefetch\403484.EXE-184A5557.pf
            Deleted ! - C:\WINDOWS\prefetch\565156.EXE-0E048255.pf
            Deleted ! - C:\WINDOWS\prefetch\CRACK.EXE-28E5359E.pf
            Deleted ! - C:\WINDOWS\prefetch\FLEC006.EXE-041A0D93.pf
            Deleted ! - C:\WINDOWS\prefetch\KEYGEN.EXE-2B398603.pf
            Deleted ! - C:\WINDOWS\prefetch\MDELK.EXE-1D176F91.pf
            Deleted ! - C:\WINDOWS\prefetch\WINTEMS.EXE-2A563F9B.pf

            »»»» Supression files in C:\WINDOWS\system32

            »»»» Supression files in C:\WINDOWS\system32\config\systemprofile\AppData\Roaming

            »»»» Supression files in C:\WINDOWS\system32\drivers

            »»»» Supression files in C:\Documents and Settings\Propri‚taire\Application Data

            Deleted ! - "C:\Documents and Settings\Propri‚taire\Application Data\drivers\srosa2.sys"
            Deleted ! - "C:\Documents and Settings\Propri‚taire\Application Data\drivers\winupgro.exe"
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\132921.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\134265.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\134312.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\135953.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\136828.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\136843.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\139531.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\140890.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\142562.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\179281.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\180437.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\181828.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\181937.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\182296.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\182640.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\182703.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\182718.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\183765.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\188062.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\188859.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\189218.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\191593.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\192500.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\193406.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\212984.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\213546.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\213812.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\217921.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\218609.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\219187.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\229421.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\229765.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\229921.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\241203.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\266265.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\266828.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\267296.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\271046.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\272125.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\272687.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\288343.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\289125.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\289281.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\328046.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\328093.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\345687.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\346078.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\346234.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\350718.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\351734.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\352218.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\353203.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\353937.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\355625.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\378015.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\379359.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\405562.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\408578.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\409796.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\411546.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\413609.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\414250.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\416890.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\417531.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\417734.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\421218.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\421656.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\422015.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\432640.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\432703.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\44046.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\44937.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\45281.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\454390.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\46187.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\469421.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\470078.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\470437.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\47203.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\48406.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\48421.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\499828.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\501156.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\501765.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\524046.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\525265.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\525328.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\526656.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\526687.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\53156.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\54343.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\54359.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\55359.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\565156.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\56687.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\596343.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\598656.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\599468.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\608359.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\609375.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\610109.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\610875.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\611609.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\612343.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\681296.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\682437.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\683281.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\740265.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\740281.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\740296.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\761156.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\779468.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\779984.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\780281.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\80218.exe
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\81421.exe
            Deleted ! - "C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld"
            Deleted ! - "C:\Documents and Settings\Propri‚taire\Application Data\drivers"

            »»»» Supression files in C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp

            »»»» Supression files in C:\Documents and Settings\Propri‚taire\Local Settings\Temporary Internet Files\Content.IE5

            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\Participatory Culture Foundation\Miro\Support\icon-cache\66dbe2c8fb354601660a59a1523b64b2.77139019.108x81.jpg
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\Participatory Culture Foundation\Miro\Support\icon-cache\66dbe2c8fb354601660a59a1523b64b2.77139019.226x170.jpg
            Deleted ! - C:\Documents and Settings\Propri‚taire\Application Data\Participatory Culture Foundation\Miro\Support\icon-cache\66dbe2c8fb354601660a59a1523b64b2.77139019.jpg
            Deleted ! - C:\Documents and Settings\Propri‚taire\iWizz\Thumbnails\1962F791-19E8-4B64-A608-A111805B6545.jpg
            Deleted ! - C:\Documents and Settings\Propri‚taire\iWizz\Thumbnails\28FDE204-FB64-4965-9903-4445C6EEAF2D.jpg
            Deleted ! - C:\Documents and Settings\Propri‚taire\iWizz\Thumbnails\40ACC61B-8C4C-427D-AB64-81B781164AD7.jpg
            Deleted ! - C:\Documents and Settings\Propri‚taire\iWizz\Thumbnails\5696F4B1-7A76-476C-B647-2264C74492D2.jpg
            Deleted ! - C:\Documents and Settings\Propri‚taire\iWizz\Thumbnails\63B64114-7395-4337-9F62-42B17A1280FE.jpg
            Deleted ! - C:\Documents and Settings\Propri‚taire\iWizz\Thumbnails\72D11080-9C9F-4CE4-B640-318C5EB59CBB.jpg
            Deleted ! - C:\Documents and Settings\Propri‚taire\iWizz\Thumbnails\77931EF2-BC8E-4A11-B9F5-FA0B64B12F0D.jpg
            Deleted ! - C:\Documents and Settings\Propri‚taire\iWizz\Thumbnails\A4BBFAF6-15FF-41FB-9D81-DF5FAE9B649B.jpg
            Deleted ! - C:\Documents and Settings\Propri‚taire\iWizz\Thumbnails\BB64B015-3EDA-47C7-A3E8-6D62E62A0CCA.jpg
            Deleted ! - C:\Documents and Settings\Propri‚taire\iWizz\Thumbnails\D8C8A97F-8A9A-453C-B64D-51355EB2B58F.jpg

            --------------- [ Registry / Infected keys ] ----------------

            Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA
            Deleted ! - HKEY_CURRENT_CONFIG\System\CurrentControlSet\Enum\ROOT\LEGACY_SROSA
            Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S
            Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SK9OU0S
            Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Enum\Root\LEGACY_SK9OU0S
            Deleted ! - HKEY_USERS\S-1-5-21-220523388-920026266-839522115-1003\Software\Local AppWizard-Generated Applications\winupgro

            --------------- [ States / Restarting of services ] ----------------

            +- Services : [ Auto=2 / Request=3 / Disable=4 ]

            Ndisuio - Type of startup = 3

            Ip6Fw - Type of startup = 2

            SharedAccess - Type of startup = 2

            wuauserv - Type of startup = 2

            wscsvc - Type of startup = 2

            --------------- [ Cleaning removable drives ] ----------------

            +- Informations :

            C: - Lecteur fixe

            D: - Lecteur fixe

            K: - Lecteur fixe

            +- deleting files :

            --------------- [ Registry / Mountpoint2 ] ----------------

            -> Not found !

            --------------- [ Searching Cracks / Keygen ] ----------------

            C:\Documents and Settings\Propri‚taire\Application Data\Macromedia\Flash Player\#SharedObjects\TK9BCLFC\localhost\Robobat Robot Office 19 with crack
            C:\Documents and Settings\Propri‚taire\Application Data\Macromedia\Flash Player\#SharedObjects\TK9BCLFC\localhost\Robobat Robot Office 19 with crack\Intro
            C:\Documents and Settings\Propri‚taire\Application Data\Macromedia\Flash Player\#SharedObjects\TK9BCLFC\localhost\Robobat Robot Office 19 with crack\Intro\Fra
            C:\Documents and Settings\Propri‚taire\Application Data\Macromedia\Flash Player\#SharedObjects\TK9BCLFC\localhost\Robobat Robot Office 19 with crack\Intro\Fra\5pack_fr.exe
            C:\Documents and Settings\Propri‚taire\Bureau\jeux\image a monter\3D Studio Max 6 Fr (Iso + Crack).iso
            C:\Documents and Settings\Propri‚taire\Bureau\jeux\image a monter\Jeux.PC.Qui.veut.gagner.des.millions.-.Seconde.Edition.avec.Crack.ISO
            C:\Documents and Settings\Propri‚taire\Favoris\pc\Bienvenue sur INFORMAGUN. le site qui vous instruit en hacking, cracking, ...ing....url
            C:\Documents and Settings\Propri‚taire\Favoris\pc\KEYGEN.MS - Generates cracks serials keygens for the software to unlock it for free.url
            C:\Documents and Settings\All Users\Application Data\MGS\cache\c\crackerjack1.a67bc53dc3f76ad51f07ff7b93734168.inf
            C:\Documents and Settings\All Users\Application Data\MGS\cache\c\crackerjack1.b49d2ddd320948ad790aa39df760c775.inf
            C:\Documents and Settings\All Users\Application Data\MGS\cache\c\crackerjack1.f97d5f24e7d2d1a2b7f52b4dc211ed43.inf
            C:\Documents and Settings\All Users\Application Data\MGS\cache\c\crackerjackcommon.30e8e1c899235111d3b1b84c91bce0ae.inf
            C:\Documents and Settings\All Users\Application Data\MGS\cache\c\crackerjackcommon.b4fc0002a0c341b1251a31ea5012f803.inf

            ---------------- ! End of report ! ------------------
            0
            2. eronman Auteur
              ----------------- FindyKill V4.710 ------------------

              * User : Propri‚taire - GHOST3
              * Emplacement : C:\Program Files\FindyKill
              * Outils Mis a jours le 21/12/08 par Chiquitine29
              * Recherche effectuée à 4:40:36 le 02/01/2009
              * Windows XP - Internet Explorer 7.0.5730.13

              ((((((((((((((((( *** Recherche *** ))))))))))))))))))

              --------------- [ Processus actifs ] ----------------

              C:\WINDOWS\System32\smss.exe
              C:\WINDOWS\system32\csrss.exe
              C:\WINDOWS\system32\winlogon.exe
              C:\WINDOWS\system32\services.exe
              C:\WINDOWS\system32\lsass.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\System32\svchost.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\system32\spoolsv.exe
              C:\WINDOWS\Explorer.EXE
              C:\WINDOWS\system32\RunDLL32.exe
              C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
              C:\WINDOWS\system32\ctfmon.exe
              C:\WINDOWS\system32\drivers\CDAC11BA.EXE
              C:\Program Files\CDBurnerXP\NMSAccessU.exe
              C:\WINDOWS\system32\nvsvc32.exe
              C:\Program Files\Fichiers communs\RbtProt\sgsrv.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\system32\UAService7.exe
              C:\WINDOWS\System32\alg.exe
              C:\WINDOWS\System32\svchost.exe
              C:\WINDOWS\system32\wuauclt.exe

              --------------- [ Fichiers/Dossiers infectieux ] ----------------

              »»»» Presence des fichiers dans C:

              »»»» Presence des fichiers dans C:\WINDOWS

              »»»» Presence des fichiers dans C:\WINDOWS\Prefetch

              Found ! - C:\WINDOWS\prefetch\151984.EXE-2FCED10C.pf
              Found ! - C:\WINDOWS\prefetch\161859.EXE-0C1C371F.pf
              Found ! - C:\WINDOWS\prefetch\283812.EXE-004516B8.pf
              Found ! - C:\WINDOWS\prefetch\331734.EXE-1601AC55.pf
              Found ! - C:\WINDOWS\prefetch\403484.EXE-184A5557.pf
              Found ! - C:\WINDOWS\prefetch\565156.EXE-0E048255.pf
              Found ! - C:\WINDOWS\prefetch\FLEC006.EXE-041A0D93.pf
              Found ! - C:\WINDOWS\prefetch\MDELK.EXE-1D176F91.pf
              Found ! - C:\WINDOWS\prefetch\WINTEMS.EXE-2A563F9B.pf
              Found ! - C:\WINDOWS\Prefetch\CRACK.EXE-28E5359E.pf
              Found ! - C:\WINDOWS\Prefetch\CRACK.EXE-28E5359E.pf
              Found ! - C:\WINDOWS\Prefetch\KEYGEN.EXE-2B398603.pf
              Found ! - C:\WINDOWS\Prefetch\KEYGEN.EXE-2B398603.pf

              »»»» Presence des fichiers dans C:\WINDOWS\system32

              »»»» Presence des fichiers dans C:\WINDOWS\system32\config\systemprofile\AppData\Roaming

              »»»» Presence des fichiers dans C:\WINDOWS\system32\drivers

              »»»» Presence des fichiers dans C:\Documents and Settings\Propri‚taire\Application Data

              Found ! [02/01/2009 04:00] - "C:\Documents and Settings\Propri‚taire\Application Data\drivers"
              Found ! [02/01/2009 03:06] - "C:\Documents and Settings\Propri‚taire\Application Data\drivers\srosa2.sys"
              Found ! [22/03/2006 06:02] - "C:\Documents and Settings\Propri‚taire\Application Data\drivers\winupgro.exe"
              Found ! [02/01/2009 04:00] - "C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld"
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\132921.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\134265.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\134312.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\135953.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\136828.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\136843.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\139531.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\140890.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\142562.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\179281.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\180437.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\181828.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\181937.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\182296.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\182640.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\182703.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\182718.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\183765.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\188062.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\188859.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\189218.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\191593.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\192500.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\193406.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\212984.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\213546.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\213812.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\217921.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\218609.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\219187.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\229421.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\229765.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\229921.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\241203.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\266265.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\266828.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\267296.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\271046.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\272125.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\272687.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\288343.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\289125.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\289281.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\328046.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\328093.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\345687.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\346078.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\346234.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\350718.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\351734.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\352218.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\353203.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\353937.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\355625.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\378015.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\379359.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\405562.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\408578.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\409796.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\411546.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\413609.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\414250.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\416890.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\417531.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\417734.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\421218.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\421656.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\422015.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\432640.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\432703.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\44046.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\44937.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\45281.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\454390.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\46187.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\469421.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\470078.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\470437.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\47203.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\48406.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\48421.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\499828.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\501156.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\501765.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\524046.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\525265.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\525328.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\526656.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\526687.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\53156.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\54343.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\54359.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\55359.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\565156.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\56687.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\596343.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\598656.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\599468.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\608359.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\609375.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\610109.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\610875.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\611609.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\612343.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\681296.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\682437.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\683281.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\740265.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\740281.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\740296.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\761156.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\779468.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\779984.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\780281.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\80218.exe
              Found ! [02/01/2009 04:00] - C:\Documents and Settings\Propri‚taire\Application Data\drivers\downld\81421.exe

              »»»» Presence des fichiers dans C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp

              »»»» Presence des fichiers dans C:\Documents and Settings\Propri‚taire\Local Settings\Temporary Internet Files\Content.IE5

              Found ! [06/06/2008 23:00] - C:\Documents and Settings\Propri‚taire\Application Data\Participatory Culture Foundation\Miro\Support\icon-cache\66dbe2c8fb354601660a59a1523b64b2.77139019.108x81.jpg
              Found ! [06/06/2008 23:00] - C:\Documents and Settings\Propri‚taire\Application Data\Participatory Culture Foundation\Miro\Support\icon-cache\66dbe2c8fb354601660a59a1523b64b2.77139019.226x170.jpg
              Found ! [06/06/2008 23:00] - C:\Documents and Settings\Propri‚taire\Application Data\Participatory Culture Foundation\Miro\Support\icon-cache\66dbe2c8fb354601660a59a1523b64b2.77139019.jpg
              Found ! [05/09/2008 23:16] - C:\Documents and Settings\Propri‚taire\iWizz\Thumbnails\1962F791-19E8-4B64-A608-A111805B6545.jpg
              Found ! [19/07/2008 23:22] - C:\Documents and Settings\Propri‚taire\iWizz\Thumbnails\28FDE204-FB64-4965-9903-4445C6EEAF2D.jpg
              Found ! [19/07/2008 23:21] - C:\Documents and Settings\Propri‚taire\iWizz\Thumbnails\40ACC61B-8C4C-427D-AB64-81B781164AD7.jpg
              Found ! [19/07/2008 23:24] - C:\Documents and Settings\Propri‚taire\iWizz\Thumbnails\5696F4B1-7A76-476C-B647-2264C74492D2.jpg
              Found ! [05/09/2008 23:16] - C:\Documents and Settings\Propri‚taire\iWizz\Thumbnails\63B64114-7395-4337-9F62-42B17A1280FE.jpg
              Found ! [05/09/2008 23:16] - C:\Documents and Settings\Propri‚taire\iWizz\Thumbnails\72D11080-9C9F-4CE4-B640-318C5EB59CBB.jpg
              Found ! [05/09/2008 23:15] - C:\Documents and Settings\Propri‚taire\iWizz\Thumbnails\77931EF2-BC8E-4A11-B9F5-FA0B64B12F0D.jpg
              Found ! [19/07/2008 23:24] - C:\Documents and Settings\Propri‚taire\iWizz\Thumbnails\A4BBFAF6-15FF-41FB-9D81-DF5FAE9B649B.jpg
              Found ! [19/07/2008 23:23] - C:\Documents and Settings\Propri‚taire\iWizz\Thumbnails\BB64B015-3EDA-47C7-A3E8-6D62E62A0CCA.jpg
              Found ! [19/07/2008 23:23] - C:\Documents and Settings\Propri‚taire\iWizz\Thumbnails\D8C8A97F-8A9A-453C-B64D-51355EB2B58F.jpg

              --------------- [ Registre / Startup ] ----------------

              [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
              SpybotSD TeaTimer=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
              ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
              KBD=C:\HP\KBD\KBD.EXE
              nwiz=nwiz.exe /install
              NvMediaCenter=RunDLL32.exe NvMCTray.dll,NvTaskbarInit
              Adobe Reader Speed Launcher="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
              NvCplDaemon=RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
              HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
              <NO NAME>=
              HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL=
              Installed=1
              <NO NAME>=
              HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI=
              NoChange=1
              Installed=1
              <NO NAME>=
              HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS=
              Installed=1
              <NO NAME>=

              [HKEY_CURRENT_USER\software\local appwizard-generated applications\Flash]
              [HKEY_CURRENT_USER\software\local appwizard-generated applications\KBD]
              [HKEY_CURRENT_USER\software\local appwizard-generated applications\run]
              [HKEY_CURRENT_USER\software\local appwizard-generated applications\winupgro]

              --------------- [ Registre / Clés infectieuses ] ----------------

              Found ! - HKEY_USERS\S-1-5-21-220523388-920026266-839522115-1003\Software\Local AppWizard-Generated Applications\winupgro
              Found ! - HKEY_USERS\S-1-5-21-220523388-920026266-839522115-1003\Software\bisoft
              Found ! - HKEY_USERS\S-1-5-21-220523388-920026266-839522115-1003\Software\FirtR
              Found ! - HKEY_USERS\S-1-5-21-220523388-920026266-839522115-1003\Software\MuleAppData
              Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winupgro
              Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\srosa
              Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA
              Found ! - HKEY_CURRENT_USER\Software\bisoft
              Found ! - HKEY_CURRENT_USER\Software\FirtR
              Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sK9Ou0s
              Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S
              Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SK9OU0S
              Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_SK9OU0S
              Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Enum\Root\LEGACY_SK9OU0S
              Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sK9Ou0s
              Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sK9Ou0s
              Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sK9Ou0s
              Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sK9Ou0s

              --------------- [ Etat / Services ] ----------------

              +- Services : [ Auto=2 / Demande=3 / Désactivé=4 ]

              /!\ Ndisuio - Type de démarrage = 4

              /!\ Ip6Fw - Type de démarrage = 4

              SharedAccess - Type de démarrage = 2

              wuauserv - Type de démarrage = 2

              /!\ wscsvc - Type de démarrage = 4

              --------------- [ Recherche dans supports amovibles] ----------------

              +- Informations :

              C: - Lecteur fixe

              D: - Lecteur fixe

              K: - Lecteur fixe

              +- presence des fichiers :

              --------------- [ Registre / Mountpoint2 ] ----------------

              -> Not found !

              ------------------- ! Fin du rapport ! --------------------
              0
              1. V-X
                Re,

                Supprime ellibagla et repasse findykill.
                0
                1. eronman Auteur
                  voilà le rapport

                  Fri Jan 02 03:56:52 2009
                  EliBagle v12.07 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 30 de Diciembre del 2008)
                  ----------------------------------------------
                  Lista de Acciones (por Acción Directa):
                  C:\WINDOWS\SYSTEM32\WINTEMS.EXE --> Bagle Acceso Denegado.
                  C:\WINDOWS\SYSTEM32\MDELK.EXE --> Bagle Acceso Denegado.
                  C:\WINDOWS\SYSTEM32\BAN_LIST.TXT --> Eliminado Bagle
                  C:\DOCUMENTS AND SETTINGS\PROPRIéTAIRE\APPLICATION DATA\M\FLEC006.EXE --> Bagle.dldr Acceso Denegado.
                  C:\DOCUMENTS AND SETTINGS\PROPRIéTAIRE\APPLICATION DATA\M\LIST.OCT --> Eliminado Bagle

                  Fri Jan 02 03:58:56 2009
                  EliBagle v12.07 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 30 de Diciembre del 2008)
                  ----------------------------------------------
                  Lista de Acciones (por Acción Directa):
                  C:\WINDOWS\SYSTEM32\WINTEMS.EXE --> Eliminado Bagle
                  C:\WINDOWS\SYSTEM32\MDELK.EXE --> Eliminado Bagle
                  C:\DOCUMENTS AND SETTINGS\PROPRIéTAIRE\APPLICATION DATA\M\FLEC006.EXE --> Eliminado Bagle.dldr
                  Restaurada Clave: "SafeBoot\Minimal y Network"

                  Fri Jan 02 03:59:14 2009
                  EliBagle v12.07 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 30 de Diciembre del 2008)
                  ----------------------------------------------
                  Lista de Acciones (por Exploración):
                  Explorando "C:\"
                  C:\Documents and Settings\Propriétaire\Application Data\drivers\SROSA.SYS --> Eliminado Bagle(rootkit)
                  C:\Documents and Settings\Propriétaire\Application Data\drivers\downld\151984.EXE --> Eliminado Bagle
                  C:\Documents and Settings\Propriétaire\Application Data\drivers\downld\161859.EXE --> Eliminado Bagle
                  C:\Documents and Settings\Propriétaire\Application Data\drivers\downld\206265.EXE --> Eliminado Bagle.dldr
                  C:\Documents and Settings\Propriétaire\Application Data\drivers\downld\224359.EXE --> Eliminado Bagle.dldr
                  C:\Documents and Settings\Propriétaire\Application Data\drivers\downld\283812.EXE --> Eliminado Bagle.dldr
                  C:\Documents and Settings\Propriétaire\Application Data\drivers\downld\331734.EXE --> Eliminado Bagle.dldr
                  C:\Documents and Settings\Propriétaire\Application Data\drivers\downld\403484.EXE --> Eliminado Bagle.dldr
                  C:\Documents and Settings\Propriétaire\Application Data\drivers\downld\49015.EXE --> Eliminado Bagle
                  C:\Documents and Settings\Propriétaire\Application Data\drivers\downld\61828.EXE --> Eliminado Bagle
                  C:\Documents and Settings\Propriétaire\Application Data\drivers\downld\76359.EXE --> Eliminado Bagle
                  C:\Documents and Settings\Propriétaire\Application Data\drivers\downld\88031.EXE --> Eliminado Bagle

                  Nº Total de Directorios: 5980
                  Nº Total de Ficheros: 75912
                  Nº de Ficheros Analizados: 11982
                  Nº de Ficheros Infectados: 12
                  Nº de Ficheros Limpiados: 12

                  Fri Jan 02 04:04:22 2009
                  EliBagle v12.07 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 30 de Diciembre del 2008)
                  ----------------------------------------------
                  Lista de Acciones (por Exploración):
                  Explorando "C:\"

                  Nº Total de Directorios: 5980
                  Nº Total de Ficheros: 75900
                  Nº de Ficheros Analizados: 11970
                  Nº de Ficheros Infectados: 0
                  Nº de Ficheros Limpiados: 0

                  Fri Jan 02 04:09:12 2009
                  EliBagle v12.07 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 30 de Diciembre del 2008)
                  ----------------------------------------------
                  Lista de Acciones (por Acción Directa):
                  Eliminada Carpeta "%AppData%\M"

                  Fri Jan 02 04:09:16 2009
                  EliBagle v12.07 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 30 de Diciembre del 2008)
                  ----------------------------------------------
                  Lista de Acciones (por Exploración):
                  Explorando "C:\"

                  Nº Total de Directorios: 5979
                  Nº Total de Ficheros: 75909
                  Nº de Ficheros Analizados: 11970
                  Nº de Ficheros Infectados: 0
                  Nº de Ficheros Limpiados: 0

                  Fri Jan 02 04:23:59 2009
                  EliBagle v12.07 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 30 de Diciembre del 2008)
                  ----------------------------------------------
                  Lista de Acciones (por Exploración):
                  Explorando "D:\"

                  Nº Total de Directorios: 3561
                  Nº Total de Ficheros: 58016
                  Nº de Ficheros Analizados: 885
                  Nº de Ficheros Infectados: 0
                  Nº de Ficheros Limpiados: 0

                  Fri Jan 02 04:25:58 2009
                  EliBagle v12.07 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 30 de Diciembre del 2008)
                  ----------------------------------------------
                  Lista de Acciones (por Exploración):
                  Explorando "C:\"

                  Nº Total de Directorios: 5979
                  Nº Total de Ficheros: 75909
                  Nº de Ficheros Analizados: 11970
                  Nº de Ficheros Infectados: 0
                  Nº de Ficheros Limpiados: 0

                  Fri Jan 02 04:26:41 2009
                  EliBagle v12.07 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 30 de Diciembre del 2008)
                  ----------------------------------------------
                  Lista de Acciones (por Exploración):
                  Explorando "D:\"

                  Nº Total de Directorios: 3561
                  Nº Total de Ficheros: 58016
                  Nº de Ficheros Analizados: 885
                  Nº de Ficheros Infectados: 0
                  Nº de Ficheros Limpiados: 0

                  Fri Jan 02 04:27:18 2009
                  EliBagle v12.07 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 30 de Diciembre del 2008)
                  ----------------------------------------------
                  Lista de Acciones (por Exploración):
                  Explorando "K:\"

                  Nº Total de Directorios: 15
                  Nº Total de Ficheros: 665
                  Nº de Ficheros Analizados: 18
                  Nº de Ficheros Infectados: 0
                  Nº de Ficheros Limpiados: 0

                  Fri Jan 02 04:27:25 2009
                  EliBagle v12.07 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 30 de Diciembre del 2008)
                  ----------------------------------------------
                  Lista de Acciones (por Exploración):
                  Explorando "K:\"

                  Nº Total de Directorios: 15
                  Nº Total de Ficheros: 665
                  Nº de Ficheros Analizados: 18
                  Nº de Ficheros Infectados: 0
                  Nº de Ficheros Limpiados: 0
                  0
                  1. V-X
                    Re,
                    J'ai oublier de te dire que tu doit supprimer de ton pc findykill.

                    Ensuite tu peut faire "ellibagla".
                    0
                    1. eronman Auteur
                      ok,et encore merci de t'occuper de mon problème a une heure si tardive
                      0
                      • 1
                      • 2

                      Discussions similaires

                      Softonic,est-ce un virus ?
                      techmel1

                      6 réponses
                      Chrome://newtab
                      Nova

                      14 réponses
                      Désinstaller Softonic
                      Diguimette

                      5 réponses
                      Supprimer New Tab
                      tysaozon

                      8 réponses
                      Bouton pause/break
                      frans003

                      3 réponses