Scan trend micro online IMPOSSIBLE ??

non pas du tout

Bonjour Gene
merci pour tes dernieres instructions.
pour la mise a jour de java proposé dernierement par update checker et pas par la verification JAVA:
Aujourd'hui,c'est bon la verification de Java me propose une nouvelle version update 6 to 12 mais javaRa ne me l'a propose pas ,IL DIT QUE JE SUIS A JOUR !!!!
je suppose qu'il faut encore attendre un peu pour utiliser javara.....

re bonjour Gene,
j'ai besoin de l'avis d'un connaisseur qui est capable de désinfecter un PC.....................
vous m'avez dit que pour bien protéger un ordi il faut :
1 SEUL antivirus + 1 seul pare feu (les routeurs et box en possede 1 ) + 1 bon antispyware avec immunisation + mise a jour récent windows et logiciel de protection
j'ai actuellement mcafee security center UNE vrai PASSOIRE...
j'ai scanné mon ordi avant de vous contacter ...kaspersky:RAS, nod32 : 2 infectiojns puis apres nod,avira antivir :2 infections de plus ??!!!??
je suis sous vista avec la freebox 32bits haut debit !!!
peux tu me donner une ASSOCIATION d'av+pare-feu (?=celui de la freebox est il suffisant???)+MBAM(je suppose..)+ spybotS&d (je ne sais pas...)et spywareblaster (je suppose...) qui marche bien avec VISTA??? S.V.P(payant ou pas n'est pas la question!!)
merci d'avance pour tes renseignements.

Re bonjour Gene,
j'ai besoin de l'avis d'un connaisseur qui est capable de désinfecter un PC.....................
vous m'avez dit que pour bien protéger un ordi il faut :
1 SEUL antivirus + 1 seul pare feu (les routeurs et box en possede 1 ) + 1 bon antispyware avec immunisation + mise a jour récent windows et logiciel de protection
j'ai actuellement mcafee security center UNE vrai PASSOIRE...
j'ai scanné mon ordi avant de vous contacter ...kaspersky:RAS, nod32 : 2 infectiojns puis apres nod,avira antivir :2 infections de plus ??!!!??
je suis sous vista avec la freebox 32bits haut debit !!!
peux tu me donner une ASSOCIATION d'av+pare-feu (?=celui de la freebox est il suffisant???)+MBAM(je suppose..)+ spybotS&d (je ne sais pas...)et spywareblaster (je suppose...) qui marche bien avec VISTA??? S.V.P(payant ou pas n'est pas la question!!)
merci d'avance pour tes renseignements.

mais non ce n'est pas une version beta!!!
je ne comprend pas pourquoi il me propose ça puisque la verification me dit que c'est bon !! et en plus je n'ai pas de java runtime environment dans mes prog ????????
il faut peut etre 2 java runtime et update....

re GENE,
mais non ce n'est pas une version beta!!!
je ne comprend pas pourquoi il me propose ça puisque la verification me dit que c'est bon !! et en plus je n'ai pas de java runtime environment dans mes prog ????????
il faut peut etre 2 java runtime et update....

bonjour,
je ne comprends pas si je verifie la version de java avec le lien que vous m'avez donné on me répond que j'ai la version recommandée java update 6 to 11.
aujourd'hui updatechecker de filehippo me propose une mise à jour java runtime environment 1.6.0.12(version installé 1.6.0.11).ds prog et fonctionnalités ,je n'ai pas java runtime environment j'ai seulement java(TM) update 6 to 11.
pourquoi filehippo me propose cette mise a jour ??? dois je l'installé??
merci d'avance pour ta réponse...

suite a la desinfection et au nettoyage(updatechecker a mis à jour ad aware) j'ai fai un scan avec ad-aware et il me trouve 14 files infectés apres le nettoyage?????? :
j'ai touché a rien dans action recommandée et j'ai lancé le nettoyage il les a tous skipped=sauter (autoriser)
sauf le cookie trouvé ( supprimé).
il faut que je choississe une action bien sûr : JE PEUX TOUT SUPPRIMER ?????(voir ci dessous le rapport du scan)

Logfile created: 29/01/2009 6:12:25
Lavasoft Ad-Aware version: 8.0
Extended engine version: 8.1
User performing scan: soft

*********************** Definitions database information ***********************
Lavasoft definition file: 146.2
Extended engine definition file: 8.1

******************************** Scan results: *********************************
Scan profile name: Analyse complète (ID: full)
Objects scanned: 361849
Objects detected: 15

Type Detected
==========================
Processes.......: 0
Registry entries: 0
Hostfile entries: 0
Files...........: 14
Folders.........: 0
LSPs............: 0
Cookies.........: 1
Browser hijacks.: 0
MRU objects.....: 0

Skipped items:
Description: C:\Windows\System32\404Fix.exe Family Name: Suspicious Object Clean status: Success Item ID: 0 Family ID: 0
Description: C:\Windows\System32\Agent.OMZ.Fix.exe Family Name: Suspicious Object Clean status: Success Item ID: 0 Family ID: 0
Description: C:\Windows\System32\fmod.dll Family Name: Suspicious Object Clean status: Success Item ID: 0 Family ID: 0
Description: C:\Windows\System32\IEDFix.C.exe Family Name: Suspicious Object Clean status: Success Item ID: 0 Family ID: 0
Description: C:\Windows\System32\IEDFix.exe Family Name: Suspicious Object Clean status: Success Item ID: 0 Family ID: 0
Description: C:\Windows\System32\o4Patch.exe Family Name: Suspicious Object Clean status: Success Item ID: 0 Family ID: 0
Description: C:\Windows\System32\openports.dll Family Name: Suspicious Object Clean status: Success Item ID: 0 Family ID: 0
Description: C:\Windows\System32\SrchSTS.exe Family Name: Suspicious Object Clean status: Success Item ID: 0 Family ID: 0
Description: C:\Windows\System32\swreg.exe Family Name: Suspicious Object Clean status: Success Item ID: 0 Family ID: 0
Description: C:\Windows\System32\swsc.exe Family Name: Suspicious Object Clean status: Success Item ID: 0 Family ID: 0
Description: C:\Windows\System32\swxcacls.exe Family Name: Suspicious Object Clean status: Success Item ID: 0 Family ID: 0
Description: C:\Windows\System32\VACFix.exe Family Name: Suspicious Object Clean status: Success Item ID: 0 Family ID: 0
Description: C:\Windows\System32\VCCLSID.exe Family Name: Suspicious Object Clean status: Success Item ID: 0 Family ID: 0
Description: C:\Windows\System32\WS2Fix.exe Family Name: Suspicious Object Clean status: Success Item ID: 0 Family ID: 0

Removed items:
Description: *weborama* Family Name: Cookies Clean status: Success Item ID: 408955 Family ID: 0

Scan and cleaning complete: Finished correctly after 5668 seconds

*********************************** Settings ***********************************

Scan profile:
ID: full, enabled:1, value: Analyse complète
ID: scancriticalareas, enabled:1, value: true
ID: scanrunningapps, enabled:1, value: true
ID: scanregistry, enabled:1, value: true
ID: scanlsp, enabled:1, value: true
ID: scanads, enabled:1, value: true
ID: scanhostsfile, enabled:1, value: true
ID: scanmru, enabled:1, value: true
ID: scanbrowserhijacks, enabled:1, value: true
ID: scantrackingcookies, enabled:1, value: true
ID: closebrowsers, enabled:1, value: false
ID: folderstoscan, enabled:1, value: C:\
ID: scanrootkits, enabled:1, value: true
ID: usespywareheuristics, enabled:1, value: true
ID: extendedengine, enabled:0, value: true
ID: useheuristics, enabled:0, value: true
ID: heuristicslevel, enabled:0, value: mild, domain: medium,mild,strict
ID: filescanningoptions, enabled:1
ID: archives, enabled:1, value: true
ID: onlyexecutables, enabled:1, value: false
ID: skiplargerthan, enabled:1, value: 20480

Scan global:
ID: global, enabled:1
ID: addtocontextmenu, enabled:1, value: true
ID: playsoundoninfection, enabled:1, value: false
ID: soundfile, enabled:0, value: *to be filled in automatically*\alert.wav

Scheduled scan settings:
<Empty>

Update settings:
ID: updates, enabled:1
ID: launchthreatworksafterscan, enabled:1, value: normal, domain: normal,off,silently
ID: displaystatus, enabled:1, value: false
ID: deffiles, enabled:1, value: downloadandinstall, domain: dontcheck,downloadandinstall
ID: autodetectproxy, enabled:1, value: false
ID: useautoconfigscript, enabled:1, value: false
ID: autoconfigurl, enabled:0, value:
ID: useproxy, enabled:1, value: false
ID: proxyserver, enabled:0, value:
ID: softwareupdates, enabled:1, value: downloadandinstall, domain: dontcheck,downloadandinstall
ID: licenseandinfo, enabled:1, value: downloadandinstall, domain: dontcheck,downloadandinstall
ID: schedules, enabled:1, value: true
ID: updatedaily, enabled:1, value: Daily
ID: time, enabled:1, value: Thu Jan 29 04:26:00 2009
ID: frequency, enabled:1, value: daily, domain: daily,monthly,once,systemstart,weekly
ID: weekdays, enabled:1
ID: monday, enabled:1, value: false
ID: tuesday, enabled:1, value: false
ID: wednesday, enabled:1, value: false
ID: thursday, enabled:1, value: false
ID: friday, enabled:1, value: false
ID: saturday, enabled:1, value: false
ID: sunday, enabled:1, value: false
ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31
ID: scanprofile, enabled:1, value:
ID: auto_deal_with_infections, enabled:1, value: false
ID: updateweekly, enabled:1, value: Weekly
ID: time, enabled:1, value: Thu Jan 29 04:26:00 2009
ID: frequency, enabled:1, value: weekly, domain: daily,monthly,once,systemstart,weekly
ID: weekdays, enabled:1
ID: monday, enabled:1, value: true
ID: tuesday, enabled:1, value: false
ID: wednesday, enabled:1, value: false
ID: thursday, enabled:1, value: true
ID: friday, enabled:1, value: false
ID: saturday, enabled:1, value: false
ID: sunday, enabled:1, value: false
ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31
ID: scanprofile, enabled:1, value:
ID: auto_deal_with_infections, enabled:1, value: false

Appearance settings:
ID: appearance, enabled:1
ID: skin, enabled:1, value: default.egl, reglocation: HKEY_LOCAL_MACHINE\SOFTWARE\Lavasoft\Ad-Aware\Resource
ID: showtrayicon, enabled:1, value: true
ID: language, enabled:1, value: fr, reglocation: HKEY_LOCAL_MACHINE\SOFTWARE\Lavasoft\Ad-Aware\Language

Realtime protection settings:
ID: realtime, enabled:1
ID: processprotection, enabled:1, value: true
ID: registryprotection, enabled:0, value: false
ID: networkprotection, enabled:0, value: false
ID: loadatstartup, enabled:1, value: true
ID: usespywareheuristics, enabled:0, value: false
ID: extendedengine, enabled:0, value: false
ID: useheuristics, enabled:0, value: false
ID: heuristicslevel, enabled:0, value: mild, domain: medium,mild,strict
ID: infomessages, enabled:1, value: animated, domain: animated,display,dontnotify

****************************** System information ******************************
Computer name: PC-DE-JACK
Processor name: Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz
Processor identifier: x86 Family 6 Model 15 Stepping 11
Raw info: processorarchitecture 0, processortype 586, processorlevel 6, processor revision 3851, number of processors 4
Physical memory available: 874364928 bytes
Physical memory total: 2144567296 bytes
Virtual memory available: 1985806336 bytes
Virtual memory total: 2147352576 bytes
Memory load: 59%
Microsoft Windows Vista Ultimate Edition, 32-bit Service Pack 1 (build 6001)
Windows startup mode:

Running processes:
PID: 512 name: C:\Windows\System32\smss.exe owner: SYSTEM domain: AUTORITE NT
PID: 592 name: C:\Windows\System32\csrss.exe owner: SYSTEM domain: AUTORITE NT
PID: 664 name: C:\Windows\System32\wininit.exe owner: SYSTEM domain: AUTORITE NT
PID: 716 name: C:\Windows\System32\services.exe owner: SYSTEM domain: AUTORITE NT
PID: 728 name: C:\Windows\System32\lsass.exe owner: SYSTEM domain: AUTORITE NT
PID: 744 name: C:\Windows\System32\lsm.exe owner: SYSTEM domain: AUTORITE NT
PID: 896 name: C:\Windows\System32\svchost.exe owner: SYSTEM domain: AUTORITE NT
PID: 984 name: C:\Windows\System32\nvvsvc.exe owner: SYSTEM domain: AUTORITE NT
PID: 1016 name: C:\Windows\System32\svchost.exe owner: SERVICE RÉSEAU domain: AUTORITE NT
PID: 1128 name: C:\Windows\System32\svchost.exe owner: SERVICE LOCAL domain: AUTORITE NT
PID: 1160 name: C:\Windows\System32\svchost.exe owner: SYSTEM domain: AUTORITE NT
PID: 1180 name: C:\Windows\System32\svchost.exe owner: SYSTEM domain: AUTORITE NT
PID: 1296 name: C:\Program Files\Creative\Shared Files\CTAudSvc.exe owner: SYSTEM domain: AUTORITE NT
PID: 1316 name: C:\Windows\System32\svchost.exe owner: SYSTEM domain: AUTORITE NT
PID: 1360 name: C:\Windows\System32\SLsvc.exe owner: SERVICE RÉSEAU domain: AUTORITE NT
PID: 1420 name: C:\Windows\System32\svchost.exe owner: SERVICE LOCAL domain: AUTORITE NT
PID: 1528 name: C:\Windows\System32\svchost.exe owner: SERVICE RÉSEAU domain: AUTORITE NT
PID: 1752 name: C:\Windows\System32\WUDFHost.exe owner: SERVICE LOCAL domain: AUTORITE NT
PID: 1980 name: C:\Windows\System32\spoolsv.exe owner: SYSTEM domain: AUTORITE NT
PID: 2016 name: C:\Windows\System32\svchost.exe owner: SERVICE LOCAL domain: AUTORITE NT
PID: 2024 name: C:\Program Files\a-squared Free\a2service.exe owner: SYSTEM domain: AUTORITE NT
PID: 1524 name: C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe owner: SYSTEM domain: AUTORITE NT
PID: 396 name: C:\Program Files\Intel\IntelDH\CCU\AlertService.exe owner: SYSTEM domain: AUTORITE NT
PID: 2056 name: C:\Program Files\Bonjour\mDNSResponder.exe owner: SYSTEM domain: AUTORITE NT
PID: 2076 name: C:\Windows\System32\svchost.exe owner: SERVICE LOCAL domain: AUTORITE NT
PID: 2100 name: C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe owner: SYSTEM domain: AUTORITE NT
PID: 2148 name: C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe owner: SYSTEM domain: AUTORITE NT
PID: 2260 name: C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe owner: SYSTEM domain: AUTORITE NT
PID: 2340 name: C:\Program Files\McAfee\SiteAdvisor\McSACore.exe owner: SYSTEM domain: AUTORITE NT
PID: 2372 name: C:\PROGRA~1\COMMON~1\McAfee\McProxy\McProxy.exe owner: SYSTEM domain: AUTORITE NT
PID: 2400 name: C:\PROGRA~1\McAfee\VIRUSS~1\Mcshield.exe owner: SYSTEM domain: AUTORITE NT
PID: 2484 name: C:\Program Files\McAfee\MPF\MpfSrv.exe owner: SYSTEM domain: AUTORITE NT
PID: 2536 name: C:\Program Files\McAfee\MSK\msksrver.exe owner: SYSTEM domain: AUTORITE NT
PID: 2796 name: C:\Program Files\Common Files\Intel\IntelDH\NMS\NMSCore\NMSCore.exe owner: IUSR_NMPR domain: PC-de-jack
PID: 2828 name: C:\Windows\System32\svchost.exe owner: SERVICE RÉSEAU domain: AUTORITE NT
PID: 2848 name: C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\QualityManager.exe owner: IUSR_NMPR domain: PC-de-jack
PID: 2884 name: C:\Program Files\CyberLink\Shared files\RichVideo.exe owner: SYSTEM domain: AUTORITE NT
PID: 3080 name: C:\Program Files\Dell Support Center\bin\sprtsvc.exe owner: SYSTEM domain: AUTORITE NT
PID: 3100 name: C:\Windows\System32\svchost.exe owner: SERVICE LOCAL domain: AUTORITE NT
PID: 3152 name: C:\Windows\System32\svchost.exe owner: SYSTEM domain: AUTORITE NT
PID: 3188 name: C:\Windows\System32\SearchIndexer.exe owner: SYSTEM domain: AUTORITE NT
PID: 3244 name: C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\issm.exe owner: SYSTEM domain: AUTORITE NT
PID: 3300 name: C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe owner: SYSTEM domain: AUTORITE NT
PID: 3416 name: C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe owner: SYSTEM domain: AUTORITE NT
PID: 3624 name: C:\Windows\System32\WUDFHost.exe owner: SERVICE LOCAL domain: AUTORITE NT
PID: 3968 name: C:\Windows\System32\taskeng.exe owner: SYSTEM domain: AUTORITE NT
PID: 3016 name: C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe owner: IUSR_NMPR domain: PC-de-jack
PID: 4376 name: C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe owner: IUSR_NMPR domain: PC-de-jack
PID: 3644 name: C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe owner: SYSTEM domain: AUTORITE NT
PID: 3904 name: C:\Windows\System32\wbem\WmiPrvSE.exe owner: SYSTEM domain: AUTORITE NT
PID: 5604 name: C:\Program Files\Windows Media Player\wmpnetwk.exe owner: SERVICE RÉSEAU domain: AUTORITE NT
PID: 5228 name: C:\Windows\System32\taskeng.exe owner: SERVICE LOCAL domain: AUTORITE NT
PID: 2980 name: C:\Windows\System32\SearchProtocolHost.exe owner: SYSTEM domain: AUTORITE NT
PID: 1280 name: C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe owner: SYSTEM domain: AUTORITE NT
PID: 4028 name: C:\PROGRA~1\COMMON~1\McAfee\MNA\McNASvc.exe owner: SYSTEM domain: AUTORITE NT
PID: 4856 name: C:\Windows\System32\svchost.exe owner: SYSTEM domain: AUTORITE NT
PID: 5868 name: C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe owner: SYSTEM domain: AUTORITE NT
PID: 6072 name: C:\Windows\System32\wbem\unsecapp.exe owner: SYSTEM domain: AUTORITE NT
PID: 5060 name: C:\Windows\System32\csrss.exe owner: SYSTEM domain: AUTORITE NT
PID: 5864 name: C:\Windows\System32\winlogon.exe owner: SYSTEM domain: AUTORITE NT
PID: 4340 name: C:\Windows\System32\rundll32.exe owner: SYSTEM domain: AUTORITE NT
PID: 1380 name: C:\Program Files\McAfee.com\Agent\mcagent.exe owner: soft domain: PC-de-jack
PID: 1408 name: C:\Windows\System32\dwm.exe owner: soft domain: PC-de-jack
PID: 3744 name: C:\Windows\explorer.exe owner: soft domain: PC-de-jack
PID: 4960 name: C:\Windows\System32\taskeng.exe owner: soft domain: PC-de-jack
PID: 2160 name: C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe owner: soft domain: PC-de-jack
PID: 5152 name: C:\Program Files\Dell Support Center\bin\sprtcmd.exe owner: soft domain: PC-de-jack
PID: 3824 name: C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe owner: soft domain: PC-de-jack
PID: 5976 name: C:\Program Files\CyberLink\Shared files\brs.exe owner: soft domain: PC-de-jack
PID: 1732 name: C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe owner: soft domain: PC-de-jack
PID: 4840 name: C:\Program Files\Java\jre6\bin\jusched.exe owner: soft domain: PC-de-jack
PID: 6040 name: C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe owner: soft domain: PC-de-jack
PID: 4636 name: C:\Windows\System32\Ctxfihlp.exe owner: soft domain: PC-de-jack
PID: 1644 name: C:\Program Files\Unlocker\UnlockerAssistant.exe owner: soft domain: PC-de-jack
PID: 5124 name: C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe owner: soft domain: PC-de-jack
PID: 5872 name: C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe owner: soft domain: PC-de-jack
PID: 5652 name: C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe owner: soft domain: PC-de-jack
PID: 4660 name: C:\Windows\System32\CTxfispi.exe owner: soft domain: PC-de-jack
PID: 5676 name: C:\Program Files\Windows Live\Messenger\msnmsgr.exe owner: soft domain: PC-de-jack
PID: 1884 name: C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe owner: soft domain: PC-de-jack
PID: 5072 name: C:\Program Files\Windows Media Player\wmpnscfg.exe owner: soft domain: PC-de-jack
PID: 4464 name: C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe owner: soft domain: PC-de-jack
PID: 3780 name: C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe owner: soft domain: PC-de-jack
PID: 424 name: C:\Program Files\XPSMiniViewGadget\XPSMiniViewGadget.exe owner: soft domain: PC-de-jack
PID: 168 name: C:\Program Files\Windows Live\Contacts\wlcomm.exe owner: soft domain: PC-de-jack
PID: 1436 name: C:\Windows\System32\rundll32.exe owner: soft domain: PC-de-jack
PID: 4280 name: C:\Program Files\Windows Live\Mail\wlmail.exe owner: soft domain: PC-de-jack
PID: 5272 name: C:\Program Files\Internet Explorer\ieuser.exe owner: soft domain: PC-de-jack
PID: 2268 name: C:\Program Files\Lavasoft\Ad-Aware\Ad-Aware.exe owner: soft domain: PC-de-jack
PID: 2064 name: C:\Windows\System32\SearchFilterHost.exe owner: SYSTEM domain: AUTORITE NT

Startup items:
Name: WebCheck
imagepath: {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
Name: DelayShred
imagepath: c:\PROGRA~1\mcafee\mshr\ShrCL.EXE /P2 /q C:\Users\Wild\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\9EIMX00Q\IFR_1_~1.SH!
Name: {8C7461EF-2B13-11d2-BE35-3078302C2030}
imagepath: Component Categories cache daemon
Name: {E31004D1-A431-41B8-826F-E902F9D95C81}
imagepath: Windows DreamScene
Name: {EC654325-1273-C2A9-2B7C-45D29BCE68FB}
imagepath: Deskscapes
Name: {EC654325-1273-C2A9-2B7C-45D29BCE68FD}
imagepath: Stardock Vista ControlPanel Extension
Name: {EC654325-1273-C2A9-2B7C-45D29BCE68FF}
imagepath: StardockDreamController
Name: Google Desktop Search
imagepath: "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
Name: DellSupportCenter
imagepath: "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
Name: dscactivate
imagepath: "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
Name: BDRegion
imagepath: "C:\Program Files\Cyberlink\Shared Files\brs.exe"
Name: IAAnotif
imagepath: "C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe"
Name: SunJavaUpdateSched
imagepath: "C:\Program Files\Java\jre6\bin\jusched.exe"
Name: VolPanel
imagepath: "C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" /r
Name: UpdReg
imagepath: "C:\Windows\UpdReg.EXE"
Name: CTxfiHlp
imagepath: "C:\Windows\system32\CTXFIHLP.EXE"
Name: UnlockerAssistant
imagepath: "C:\Program Files\Unlocker\UnlockerAssistant.exe"
Name: PDVDDXSrv
imagepath: "C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
Name: mcagent_exe
imagepath: "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
Name: Ad-Watch
imagepath: C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe

Bootexecute items:
Name:
imagepath: autocheck autochk *
Name:
imagepath: lsdelete

Running services:
Name: a2free
displayname: a-squared Free Service
Name: AdobeActiveFileMonitor6.0
displayname: Adobe Active File Monitor V6
Name: AeLookupSvc
displayname: Expérience d

pour java et adobe reader j'avais deja les dernieres versions

Login Download our FREE Update Checker
and scan your PC for the latest software updates! Home » Update Checker Results
5 Updates Detected
Ad-Aware 2009 8.0.0.0
Installed Version: 7.1.0.12 32.94MB
a-squared Free 4.0.0.38
Installed Version: 4.0.0.21 44.24MB
CCleaner 2.16.830
Installed Version: 2.15.0.815 3.02MB
Spybot Search & Destroy 1.6.2
Installed Version: 1.6.0.30 15.65MB
WinRAR 3.80
Installed Version: 3.62.0.0 1.18MB
Total size: 97.03MB

Computer scan time: 7.786 secs
FileHippo processing time: 0.001 secs
Update Checker version: 1.029
Clear results - Report a Problem A new version of the Update Checker is available to download

Windows Vista

Options
Show updates only
Show beta versions
Show install path

--------------------------------------------------------------------------------

Homepage-About-Terms and Conditions-Advertise-Update Checker© Copyright 2004-2009 FileHippo.com. All rights reserved.
Powered by F-Engine v2.126 All Updates

pour Ccleaner je fais option ,propriete et je mets effacement securisé du fichier(lent) :Gutmann,C'est TOUT ???

ccleaner je coche aussi nettoyer automatiquement l'ordi au demarrage c'est ça reglage au demarrage de windows

re GENE,
j'ai lancer toolscleaner2 ,il m'a trouvé des trucs,suppression puis quitter pour le rapport et j'ai eu acces refusé ??
je l'ai relancer en ayant desactiver le controle des comptes et la j'ai pu voir le rapport(voir plus bas):

EST CE QU'IL FAUT LE REPASSER JUSQU'A CA QU'IL NE TROUVE PLUS RIEN !!!(au vu ce que j'ai fait ci dessus ça a l'air d'etre le cas puisque le second lancement m'a retrouvé des trucs...)
il y a un erreur de suppression ds le rapport ???

[ Rapport ToolsCleaner version 2.3.0 (par A.Rothstein & dj QUIOU) ]

-->- Recherche:

C:\lopR.txt: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
C:\Users\Invité\Desktop\HijackThis.lnk: trouvé !
C:\Users\IUSR_NMPR\Desktop\HijackThis.lnk: trouvé !
C:\Users\Wild\AppData\Roaming\Microsoft\Windows\Recent\HijackThis.lnk: trouvé !
C:\Users\Wild\Desktop\HijackThis.lnk: trouvé !
C:\Users\Wild\Desktop\LopSD.exe: trouvé !
C:\Users\Wild\Desktop\HJTInstall.exe: trouvé !
C:\Users\Wild\Desktop\SmitFraudFix.exe: trouvé !
C:\Users\Wild\Desktop\SmitFraudfix: trouvé !
C:\Users\Zirconium\AppData\Roaming\Microsoft\Windows\Recent\HijackThis.lnk: trouvé !

---------------------------------
-->- Suppression:

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: supprimé !
C:\Users\Invité\Desktop\HijackThis.lnk: supprimé !
C:\Users\IUSR_NMPR\Desktop\HijackThis.lnk: supprimé !
C:\Users\Wild\AppData\Roaming\Microsoft\Windows\Recent\HijackThis.lnk: supprimé !
C:\Users\Wild\Desktop\HijackThis.lnk: supprimé !
C:\Users\Wild\Desktop\LopSD.exe: supprimé !
C:\Users\Wild\Desktop\HJTInstall.exe: supprimé !
C:\Users\Wild\Desktop\SmitFraudFix.exe: supprimé !
C:\Users\Zirconium\AppData\Roaming\Microsoft\Windows\Recent\HijackThis.lnk: supprimé !
C:\lopR.txt: supprimé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\HijackThis: ERREUR DE SUPPRESSION !!
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis: supprimé !
C:\Users\Wild\Desktop\SmitFraudfix: supprimé !

bon, je laisse tomber ce scan online!!!!
je vais suivre vos instructions pour le NETTOYAGE...
un tres grand merci pour tout !
A+

bonjour gene,
pour la phrase : ds le souhait de vouloir désinstaller un antivirus au profit d'1 autre voici les liens
j'ai déjà installé antivir,avast et avg et utilisé bitdefender et kaspersky on line et j'ai tout supprimer NORMALEMENT !!!
ces outils servent a désintaller l'antivirus installé sur l'ordi plus proprement je suppose...
faut il que je les passe pour les av que j'ai installé auparavant même si il n'y sont plus ???

NON,cela ne fonctionne pas !!!!
je vous rappelle que je suis sous vista.....
cela vient alors peut etre de moi ,voila ce que j'ai fait pour lancer le scan online de trend:
j'ouvre ma session administrateur
je clic droit sur IE7 et je choisis exécuter en tant q'administrateur
je clic sur outils ,options internet,onglet sécurité, internet et je choisis moyenne
je vais sur le site de trend micro et le lancement 'bloque' (pas de changement au bout de 20min) avec un curseur rouge en mouvement (ouverture de tren micro housecall)

si je désactive avant le controle des comptes cela se passe comme si je n'avais pas executé IE en tant qu'admi.
c'est a dire que cette fois ci le curseur rouge n'est plus en mouvement(inactif) et sur l'ecran j'ai mise a jour de trend micro housecall.

pas de changement si désactive le pare feu

j'ai cru lire aussi une seule et unique fois seulement (en surfant) que trend micro house call 2008 ne fonctionnait pas
sous vista.....
je ne sais plus quoi penser ,c'est possible ou non ???
j'attends avec impatience vos instructions de nettoyage

re bonjour,
j'avais déjà MBAM sur mon bureau et pendant le scan en MSE je me suis apperçu que je l'avais modifié dernierement
ds parametres en cochant la case arrêter IE pd la suppression .le scan est fait avec cette modif IL FAUT laisser la case cocher ou non?
il semblerait qu'un scan en MSE reactive le controle des comptes utilisateurs dans le mode normal.
(vous m'aviez dit de désactiver pd la désinfection et maintenent c'est activé )

je laisse comme ça ou je désactive de nouveau le controle des comptes???

Malwarebytes' Anti-Malware 1.33
Version de la base de données: 1698
Windows 6.0.6001 Service Pack 1

27/01/2009 08:05:15
mbam-log-2009-01-27 (08-05-15).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 234271
Temps écoulé: 46 minute(s), 55 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

pour la question s'il te manque COMCTL32.OCX lors de l'installe alors telecharge le ici ???
je ne comprends pas !!!
comment saurai je s'il est manquant sur le MBAM que j'avais déja installé ???
est ce que je peux/dois le telecharger ........... ???

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7 REPORT
Tuesday, January 27, 2009
Operating System: Microsoft Windows Vista Ultimate Edition, 32-bit Service Pack 1 (build 6001)
Kaspersky Online Scanner 7 version: 7.0.25.0
Program database last update: Monday, January 26, 2009 18:49:02
Records in database: 1701953
--------------------------------------------------------------------------------

Scan settings:
Scan using the following database: extended
Scan archives: yes
Scan mail databases: yes

Scan area - My Computer:
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\

Scan statistics:
Files scanned: 310755
Threat name: 1
Infected objects: 3
Suspicious objects: 0
Duration of the scan: 03:02:45

File name / Threat name / Threats count
C:\Program Files\Ad-remover\TOOLS\cmdow.$$A Infected: not-a-virus:RiskTool.Win32.HideWindows 1
C:\Program Files\Ad-remover\TOOLS\cmdow.exe Infected: not-a-virus:RiskTool.Win32.HideWindows 1
C:\Users\soft.PC-de-jack\Desktop\AD-R.exe Infected: not-a-virus:RiskTool.Win32.HideWindows 1

The selected area was scanned.

voilà GENE:

Logfile of random's system information tool 1.05 (written by random/random)
Run by soft at 2009-01-26 20:26:52
Microsoft® Windows Vista™ Édition Intégrale Service Pack 1
System drive C: has 359 GB (78%) free of 461 GB
Total RAM: 2045 MB (50% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:27:23, on 26/01/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Windows\System32\mobsync.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\CyberLink\Shared files\brs.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe
C:\Windows\System32\Ctxfihlp.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Windows\SYSTEM32\CTXFISPI.EXE
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\XPSMiniViewGadget\XPSMiniViewGadget.exe
C:\Users\soft.PC-de-jack\Desktop\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\soft.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/webhp?sourceid=navclient&hl=fr&ie=UTF-8
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\mskapbho.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [BDRegion] "C:\Program Files\Cyberlink\Shared Files\brs.exe"
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [VolPanel] "C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" /r
O4 - HKLM\..\Run: [UpdReg] "C:\Windows\UpdReg.EXE"
O4 - HKLM\..\Run: [CTxfiHlp] "C:\Windows\system32\CTXFIHLP.EXE"
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [PDVDDXSrv] "C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [SUPERAntiSpyware] "C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-2838385541-2699793272-862096273-1000\..\Run: [Sidebar] "C:\Program Files\Windows Sidebar\Sidebar.exe" /detectMem (User 'IUSR_NMPR')
O4 - HKUS\S-1-5-18\..\Run: [DelayShred] c:\PROGRA~1\mcafee\mshr\ShrCL.EXE /P2 /q C:\Users\Wild\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\9EIMX00Q\IFR_1_~1.SH! (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DelayShred] c:\PROGRA~1\mcafee\mshr\ShrCL.EXE /P2 /q C:\Users\Wild\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\9EIMX00Q\IFR_1_~1.SH! (User 'Default user')
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O15 - Trusted Zone: http://*.mcafee.com
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/3.0.0.0/srl_bin/sysreqlab3.cab
O16 - DPF: {32305793-C19A-48E7-AD2F-D87FF7B264A4} (TenebrilSpywareScanner Control) - http://download.tenebril.com/pub/bin/scanner2008/TenebrilSpywareScanner.ocx
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O22 - SharedTaskScheduler: Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll
O22 - SharedTaskScheduler: Deskscapes - {EC654325-1273-C2A9-2B7C-45D29BCE68FB} - C:\PROGRA~1\Stardock\OBJECT~1\DESKSC~1\deskscapes.dll
O22 - SharedTaskScheduler: Stardock Vista ControlPanel Extension - {EC654325-1273-C2A9-2B7C-45D29BCE68FD} - C:\PROGRA~1\Stardock\OBJECT~1\DESKSC~1\DesktopControlPanel.dll
O22 - SharedTaskScheduler: StardockDreamController - {EC654325-1273-C2A9-2B7C-45D29BCE68FF} - C:\PROGRA~1\Stardock\OBJECT~1\DESKSC~1\DreamControl.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: Intel(R) Alert Service (AlertService) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\CCU\AlertService.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTAudSvc.exe
O23 - Service: Intel(R) DHTrace Controller (DHTRACE) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\IntelDH\bin\DHTraceController.exe
O23 - Service: DQLWinService - Unknown owner - C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Google Desktop Manager 5.8.811.4345 (GoogleDesktopManager-110408-113106) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Intel(R) Software Services Manager (ISSM) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe
O23 - Service: Intel(R) Viiv(TM) Media Server (M1 Server) - Unknown owner - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: Intel(R) Application Tracker (MCLServiceATL) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: Intel(R) NMSCore (NMSCore) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\IntelDH\NMS\NMSCore\NMSCore.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Intel(R) Quality Manager (QualityManager) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\qualitymanager.exe
O23 - Service: Intel(R) Remoting Service (Remote UI Service) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: LiveShare P2P Server 10 (RoxLiveShare10) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe
O23 - Service: RoxMediaDB10 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe
O23 - Service: Roxio Hard Drive Watcher 10 (RoxWatch10) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatch10.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: SessionLauncher - Unknown owner - C:\Users\ADMINI~1\AppData\Local\Temp\DX9\SessionLauncher.exe (file missing)
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

oui !c'est bizarre MAIS pas désagréable ......

voila ce qui a été demandé:

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft® Windows Vista™ Édition Intégrale ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A03
USER : soft ( Not Administrator ! )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:450 Go (Free:350 Go)
D:\ (Local Disk) - NTFS - Total:14 Go (Free:4 Go)
E:\ (CD or DVD)
F:\ (USB) - FAT - Total:953 Mo (Free:0 Go)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (USB)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 26/01/2009|19:52 )

[ UAC => 0 ]

--------------------\\ Listing des dossiers dans Local

[01/12/2008|05:03] C:\Users\SOFT~1.PC-\AppData\Local\Adobe
[01/12/2008|03:20] C:\Users\SOFT~1.PC-\AppData\Local\Application Data
[20/01/2009|03:23] C:\Users\SOFT~1.PC-\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[26/01/2009|14:36] C:\Users\SOFT~1.PC-\AppData\Local\GDIPFONTCACHEV1.DAT
[07/01/2009|23:11] C:\Users\SOFT~1.PC-\AppData\Local\Google
[01/12/2008|03:20] C:\Users\SOFT~1.PC-\AppData\Local\Historique
[26/01/2009|16:23] C:\Users\SOFT~1.PC-\AppData\Local\IconCache.db
[21/01/2009|21:44] C:\Users\SOFT~1.PC-\AppData\Local\Microsoft
[24/01/2009|04:33] C:\Users\SOFT~1.PC-\AppData\Local\PowerDVD DX
[01/12/2008|03:20] C:\Users\SOFT~1.PC-\AppData\Local\SupportSoft
[26/01/2009|19:50] C:\Users\SOFT~1.PC-\AppData\Local\Temp
[01/12/2008|03:20] C:\Users\SOFT~1.PC-\AppData\Local\Temporary Internet Files
[07/12/2008|11:13] C:\Users\SOFT~1.PC-\AppData\Local\VirtualStore
[01/12/2008|03:20] C:\Users\SOFT~1.PC-\AppData\Local\Windows SideShow

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[23/01/2009 08:03][--a------] C:\Windows\tasks\McDefragTask.job
[23/01/2009 08:03][--a------] C:\Windows\tasks\McQcTask.job
[26/01/2009 19:50][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{B0EC28F6-B552-47E4-A0FE-0936F6155BBE}.job
[26/01/2009 19:50][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{82D6089A-AAA6-4147-A647-AACC34CFD8CA}.job
[26/01/2009 19:50][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{564C7CA8-5A7B-401F-BE73-05A4DFB80A8B}.job
[26/01/2009 19:45][--ah-----] C:\Windows\tasks\SA.DAT
[26/01/2009 19:44][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[10/03/2008|22:58] C:\ProgramData\118300.34
[20/10/2008|22:41] C:\ProgramData\Adobe
[29/02/2008|06:53] C:\ProgramData\Application Data
[21/01/2009|21:44] C:\ProgramData\Avg8
[29/02/2008|06:53] C:\ProgramData\Bureau
[21/10/2008|00:54] C:\ProgramData\Creative
[22/10/2008|11:46] C:\ProgramData\Creative Labs
[22/01/2009|03:50] C:\ProgramData\CyberLink
[21/11/2008|00:01] C:\ProgramData\D3E375728B.sys
[24/06/2008|16:45] C:\ProgramData\Dell
[29/02/2008|06:53] C:\ProgramData\Documents
[18/03/2008|03:43] C:\ProgramData\Downloaded Installations
[26/11/2008|00:28] C:\ProgramData\Emjysoft
[29/02/2008|06:53] C:\ProgramData\Favoris
[29/02/2008|07:29] C:\ProgramData\FLEXnet
[03/01/2009|13:42] C:\ProgramData\Google
[26/01/2009|03:14] C:\ProgramData\Google Updater
[09/03/2008|23:15] C:\ProgramData\Grisoft
[29/02/2008|06:59] C:\ProgramData\Gtek
[26/04/2008|00:56] C:\ProgramData\hohabqvg
[14/05/2008|22:51] C:\ProgramData\IM
[14/05/2008|22:49] C:\ProgramData\IncrediMail
[22/02/2008|04:03] C:\ProgramData\InstallShield
[22/02/2008|03:25] C:\ProgramData\Intel
[20/11/2008|23:47] C:\ProgramData\InterVideo
[26/04/2008|00:50] C:\ProgramData\ivigkfrb
[23/01/2009|00:03] C:\ProgramData\Kaspersky Lab Setup Files
[21/11/2008|00:01] C:\ProgramData\KGyGaAvL.sys
[25/01/2009|03:30] C:\ProgramData\Lavasoft
[22/02/2008|03:20] C:\ProgramData\Lumanate
[20/01/2009|00:30] C:\ProgramData\ma-config.com
[26/11/2008|22:08] C:\ProgramData\Malwarebytes
[23/01/2009|07:45] C:\ProgramData\McAfee
[06/09/2008|04:36] C:\ProgramData\Media Center Programs
[29/02/2008|06:53] C:\ProgramData\Menu D‚marrer
[17/05/2008|10:28] C:\ProgramData\MGS
[17/05/2008|10:25] C:\ProgramData\Microgaming
[09/01/2009|21:50] C:\ProgramData\Microsoft
[29/02/2008|06:53] C:\ProgramData\ModŠles
[20/10/2008|22:37] C:\ProgramData\NOS
[24/01/2009|02:51] C:\ProgramData\ntuser.pol
[15/11/2008|16:42] C:\ProgramData\NVIDIA
[26/04/2008|00:50] C:\ProgramData\pbxdczqe
[22/02/2008|04:11] C:\ProgramData\Roxio
[01/10/2008|08:44] C:\ProgramData\SiteAdvisor
[11/03/2008|03:21] C:\ProgramData\SITEguard
[22/02/2008|04:07] C:\ProgramData\Sonic
[26/01/2009|08:26] C:\ProgramData\Spybot - Search & Destroy
[04/12/2008|02:12] C:\ProgramData\Stardock
[11/03/2008|03:56] C:\ProgramData\STOPzilla!
[26/01/2009|06:58] C:\ProgramData\Sunbelt
[26/01/2009|04:27] C:\ProgramData\Sunbelt Software
[20/01/2009|23:02] C:\ProgramData\SUPERAntiSpyware.com
[22/02/2008|04:02] C:\ProgramData\SupportSoft
[26/01/2009|06:56] C:\ProgramData\Svclog.log
[26/04/2008|00:50] C:\ProgramData\syeztrus
[26/01/2009|10:53] C:\ProgramData\TEMP
[26/04/2008|00:56] C:\ProgramData\ucjqejan
[22/02/2008|04:08] C:\ProgramData\Uninstall
[26/04/2008|00:50] C:\ProgramData\vtehmcic
[26/04/2008|00:50] C:\ProgramData\vylxgpgt
[20/10/2008|20:59] C:\ProgramData\WindowsSearch
[23/04/2008|18:19] C:\ProgramData\WinZip
[06/09/2008|12:51] C:\ProgramData\WLInstaller

--------------------\\ Listing des dossiers dans C:\Program Files

[20/10/2008|22:40] C:\Program Files\Adobe
[26/01/2009|15:34] C:\Program Files\Ad-remover
[31/10/2008|11:14] C:\Program Files\AGEIA Technologies
[23/11/2008|04:47] C:\Program Files\Apple Software Update
[24/01/2009|05:56] C:\Program Files\a-squared Free
[23/09/2008|20:52] C:\Program Files\BitLocker
[22/02/2008|03:53] C:\Program Files\Bonjour
[29/12/2008|23:13] C:\Program Files\CCleaner
[23/01/2009|07:43] C:\Program Files\Common Files
[24/09/2008|07:35] C:\Program Files\Conduit
[14/01/2009|22:10] C:\Program Files\Creative
[14/01/2009|21:47] C:\Program Files\Creative Installation Information
[22/01/2009|03:50] C:\Program Files\CyberLink
[19/11/2008|00:02] C:\Program Files\Dell
[22/02/2008|04:02] C:\Program Files\Dell Support Center
[03/04/2008|15:52] C:\Program Files\DVD Region+CSS Free
[05/11/2008|00:53] C:\Program Files\Enigma Software Group
[07/03/2008|21:28] C:\Program Files\ffdshow
[29/02/2008|06:53] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[01/12/2008|02:20] C:\Program Files\filehippo.com
[03/01/2009|13:42] C:\Program Files\Google
[22/02/2008|03:18] C:\Program Files\HCW85
[22/01/2009|03:50] C:\Program Files\InstallShield Installation Information
[20/10/2008|18:46] C:\Program Files\Intel
[19/03/2008|09:28] C:\Program Files\Internet Explorer
[03/12/2008|20:59] C:\Program Files\Java
[30/09/2008|07:47] C:\Program Files\K-Lite Codec Pack
[25/01/2009|03:30] C:\Program Files\Lavasoft
[22/02/2008|02:58] C:\Program Files\Lumanate
[20/01/2009|00:30] C:\Program Files\ma-config.com
[16/01/2009|23:40] C:\Program Files\Malwarebytes' Anti-Malware
[06/09/2008|04:36] C:\Program Files\Mass Effect
[24/01/2009|01:45] C:\Program Files\McAfee
[23/01/2009|07:43] C:\Program Files\McAfee.com
[09/01/2009|22:57] C:\Program Files\Microsoft
[02/11/2006|13:35] C:\Program Files\Microsoft Games
[22/02/2008|03:20] C:\Program Files\Microsoft Office
[20/05/2008|06:29] C:\Program Files\Microsoft SQL Server Compact Edition
[27/12/2008|23:16] C:\Program Files\Microsoft Works
[19/03/2008|07:05] C:\Program Files\Movie Maker
[02/11/2006|13:35] C:\Program Files\MSBuild
[22/02/2008|03:22] C:\Program Files\My Company Name
[20/10/2008|22:35] C:\Program Files\NOS
[26/06/2008|21:59] C:\Program Files\OpenAL
[23/01/2009|08:50] C:\Program Files\Panda Security
[20/11/2008|23:24] C:\Program Files\Real
[02/11/2006|13:35] C:\Program Files\Reference Assemblies
[27/12/2008|23:16] C:\Program Files\Roxio
[27/12/2008|23:16] C:\Program Files\Spybot - Search & Destroy
[26/01/2009|10:46] C:\Program Files\Spyware Doctor
[06/10/2008|13:53] C:\Program Files\Stardock
[26/01/2009|04:26] C:\Program Files\Sunbelt Software
[20/01/2009|23:01] C:\Program Files\SUPERAntiSpyware
[21/10/2008|23:30] C:\Program Files\SystemRequirementsLab
[26/01/2009|11:15] C:\Program Files\Trend Micro
[02/11/2006|14:00] C:\Program Files\Uninstall Information
[18/01/2009|20:44] C:\Program Files\Unlocker
[18/03/2008|03:42] C:\Program Files\VirginMega
[22/02/2008|03:15] C:\Program Files\WIDCOMM
[19/03/2008|07:05] C:\Program Files\Windows Calendar
[19/03/2008|07:05] C:\Program Files\Windows Collaboration
[19/03/2008|07:05] C:\Program Files\Windows Defender
[19/03/2008|07:05] C:\Program Files\Windows Journal
[09/01/2009|22:57] C:\Program Files\Windows Live
[19/01/2009|08:42] C:\Program Files\Windows Live Safety Center
[09/01/2009|22:57] C:\Program Files\Windows Live SkyDrive
[04/09/2008|19:25] C:\Program Files\Windows Live Toolbar
[14/01/2009|15:53] C:\Program Files\Windows Mail
[19/03/2008|07:05] C:\Program Files\Windows Media Player
[29/02/2008|06:53] C:\Program Files\Windows NT
[19/03/2008|07:05] C:\Program Files\Windows Photo Gallery
[19/03/2008|07:05] C:\Program Files\Windows Sidebar
[23/11/2008|04:32] C:\Program Files\WinRAR
[22/02/2008|03:18] C:\Program Files\WinTV
[27/12/2008|23:16] C:\Program Files\XPSMiniViewGadget

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[20/10/2008|22:40] C:\Program Files\Common Files\Adobe
[06/09/2008|04:36] C:\Program Files\Common Files\BioWare
[22/02/2008|03:13] C:\Program Files\Common Files\Creative
[21/10/2008|00:47] C:\Program Files\Common Files\Creative Labs Shared
[22/02/2008|04:03] C:\Program Files\Common Files\InstallShield
[22/02/2008|03:25] C:\Program Files\Common Files\Intel
[11/03/2008|02:18] C:\Program Files\Common Files\iS3
[22/02/2008|03:30] C:\Program Files\Common Files\Macrovision Shared
[23/01/2009|07:43] C:\Program Files\Common Files\McAfee
[09/01/2009|23:23] C:\Program Files\Common Files\microsoft shared
[24/10/2008|23:08] C:\Program Files\Common Files\MSSoap
[08/03/2008|10:04] C:\Program Files\Common Files\PX Storage Engine
[21/11/2008|00:09] C:\Program Files\Common Files\Real
[22/02/2008|04:06] C:\Program Files\Common Files\Roxio Shared
[02/11/2006|12:18] C:\Program Files\Common Files\Services
[22/02/2008|04:07] C:\Program Files\Common Files\Sonic Shared
[02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
[22/02/2008|04:02] C:\Program Files\Common Files\supportsoft
[27/12/2008|23:16] C:\Program Files\Common Files\SureThing Shared
[19/03/2008|07:05] C:\Program Files\Common Files\System
[02/01/2009|22:59] C:\Program Files\Common Files\Webroot Shared
[09/01/2009|21:50] C:\Program Files\Common Files\Windows Live
[20/05/2008|05:42] C:\Program Files\Common Files\WindowsLiveInstaller
[25/01/2009|03:29] C:\Program Files\Common Files\Wise Installation Wizard

--------------------\\ Process

( 90 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-26 19:52:25
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

[F:120][D:10]-> C:\Users\SOFT~1.PC-\AppData\Local\Temp
[F:54][D:1]-> C:\Users\SOFT~1.PC-\AppData\Roaming\MICROS~1\Windows\Cookies
[F:316][D:4]-> C:\Users\SOFT~1.PC-\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:166][D:47]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 26/01/2009|19:54 - Option : [1]

--------------------\\ Fin du rapport a 19:54:06
[ UAC => 1 ]

c'est bizarre j'ai reçu un message qui t'es adressé te demandant de l'aide sur des RAPPORT et qui n'apparait pas dans la discussion venant de OUYVES

je suis un idiot,j'ai eu une alerte de superantispyware qui m'avertissent d'un changement et j'ai autoriser
maintenant je n'ai plus ma page initiale personnalisée par defaut quand jouvre IE7,j'ai par defaut msnhome
peut on remettre ma page initiale personnalisé ???

------- LOGFILE OF AD-REMOVER 1.0.9.3 | ONLY XP/VISTA -------

Updated by C_XX on 17/01/2009 at 12:00

*** LIMITED TO ***

Boonty/Boontygames
Eorezo
Everest casino/Everest poker
Funwebproduct/Myway/Mywebsearch
It's TV
Sweetim

******************

Start at: 15:33:18 | Mon 26/01/2009 | Microsoft® Windows Vista™ Ultimate SP1 (V6.0.6001)
Boot mode: Normal
Option: CLEAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
Pc: PC-DE-JACK | User: soft ( Current user is an administrator)
Drive(s):
- C:\ (File System: NTFS)
- D:\ (File System: NTFS)
- F:\ (File System: FAT)
System Drive: C:\
Windows Directory: C:\Windows\
System Directory: C:\Windows\System32\

--- Running Processes: 88

(!) ---- IE start pages reset

+--------------------| Boonty/Boonty Games Elements Deleted :

.
.

+--------------------| Eorezo Elements Deleted :

.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKLM\SOFTWARE\EoRezo
.

+--------------------| Everest Casino/Everest Poker Elements Deleted :

.
.

+--------------------| Funwebproducts/Myway/Mywebsearch/Myglobalsearch Elements Deleted :

.
.

+--------------------| It's TV Elements Deleted :

.

+--------------------| Sweetim Elements Deleted :

.
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\02F47BF73B948514FAACADD8CBBDF37D
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\080D9F5E1E95FEE4794CE438E635239E
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\1E264E0A5959A1C46BA9175A878B12EA
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\2E6768B6932D112438F047C54D180635
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\351716A953E21214898904032EAE2E81
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\397C771A7BCAC904697C3EC629ED33ED
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\98CC8BF5A4A6E6C4ABF7051DDAB8B058
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\A189D17A469616C4688D23E192996267
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\D15DAF33C220F91468A1D7D57C31ACD7
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\D3BA76A44C779424889063D5098ED2D6
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\D6D0EB9FDBD90C04D92A7E729058F10D
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\E4748F9A4181FCE46A23C13B517B9420
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\07D5290CDBDAE4242926B8E6CA650501
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\08E33F7B61DEFF24BB9673ED7D467636
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\0E3D8A5B48622A445A7DF73FEFF32C3F
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\1AC67655DD68F8240B2860F2D511EBD8
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\46A5861A389ADB844AF89E31BC9DF0A1
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\34EDDB1BFB3A2D448845F3EFD0F15A43
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\4318DF19719275242801CBE292063A4C
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\45FC115D1FEAEF849A4E1610D6EC8BF0
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\49B0E1A6FF50BBE4289E4E23DE6EA0C7
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\4CCCAC049F34D0540AAC13011398BEDB
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\5C4389D0BFB302C479DE4178BD5D9EBA
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\5D19F074C042AD34BAB463D4175A062E
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\5D2B09BDEF4FE54418E6F3373CDBC7AC
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\61B65D3397A1FBF4CB1571B5E4F6B5B0
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\68E8A05C60DD9254591DBD16C94EDDBF
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\697E782CF574CC34CBB9566440BA12BC
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\6AE27A8613CF7EA4782F2886F67295E5
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\7CE172051F585E04187BCB97570BFA74
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\86A901BA5265452499DCBF719C378EE3
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\88ABD1CD5C40EC84789A7F6EF86DAC5E
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\980289C22F80A7C4BB9323DC61255E4E
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\9A4B7EF3789F871419D9302583B20C15
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\A6C53B0F76C44004A8F36716213017DB
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\B59F2D8189784CC46A4597F2842480B0
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\BD746FB95FB8E5B45BF66BE54D5FD91F
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\CCF399FCD6D2D3F46BF02A1378654FC9
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\D149C1355C98DE24E82CEFBD996FE06A
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\DB59FDB786388EA4D897F3EE715683AC
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\DB8DAD19CFBCC2049A4477183787E8C5
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\E337925F629CF4C4FB08F3D9674DD839
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\EC65F200D112357449C8B1BC3CFA03D0
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\F327D0C73C0973644A21E8CC852267A0
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\FA96423FE2B98E248A3B23548D1E22D9
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\0FF2AEFF45EEA0A48A4B33C1973B6094
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\305B09CE8C53A214DB58887F62F25536
HKCR\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
HKCR\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SweetIM
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
.
C:\Windows\INSTALLER\125327d.msi
C:\Windows\INSTALLER\1253283.msi
C:\ProgramData\SweetIM

(!) ---- Temp files deleted.
(!) ---- Recycle bin emptied in all drives.

+--------------------| Added Scan :

+---------------------------------------------------------------------------+

~~~~ INTERNET EXPLORER VERSION 7.0.6001.18000 ~~~~

+--[HKEY_CURRENT_USER\..\INTERNET EXPLORER\MAIN]

Start page : hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

+--[HKEY_LOCAL_MACHINE\..\INTERNET EXPLORER\MAIN]

Start page : hxxp://fr.msn.com/

+---------------------------------------------------------------------------+

[~5655 BYTES] - "C:\AD-REPORT-CLEAN-26.01.2009.LOG"
[~6925 BYTES] - "C:\AD-REPORT-SCAN-26.01.2009.LOG"

End at: 15:34:58 | 26/01/2009 - Time elapsed: 99.7 seconds

+---------------------------------------------------------------------------+
+------------------------------- [ E.O.F - 107 Lines ]
+---------------------------------------------------------------------------+

GEN ????C'est FINI ????
faut il ensuite utiliser toolscleaner pour supprimer tous ces nouveaux programmes ??
si c'est fini (?) est ce que je peux tenter maintenant un scan online avec trend micro ???
et pour le cadenas fermé de hostsxpert comment peut on l'ouvrir ????
(pour la page initiale perso c'est pas bien grave et ce n'est surtout pas de votre faute)
merci de votre aide

------- LOGFILE OF AD-REMOVER 1.0.9.3 | ONLY XP/VISTA -------

Updated by C_XX on 17/01/2009 at 12:00

Start at: 15:21:16 | Mon 26/01/2009 | Microsoft® Windows Vista™ Ultimate SP1 (V6.0.6001)
Boot mode: Normal
Option: SCAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
Pc: PC-DE-JACK | User: soft ( Current user is an administrator)
Drive(s):
- C:\ (File System: NTFS)
- D:\ (File System: NTFS)
- F:\ (File System: FAT)
System Drive: C:\
Windows Directory: C:\Windows\
System Directory: C:\Windows\System32\

--- Running Processes: 90

+--------------------| Boonty/Boonty Games Elements Found :

.
.

+--------------------| Eorezo Elements Found :

.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKLM\SOFTWARE\EoRezo
.

+--------------------| Everest Casino/Everest Poker Elements Found :

.
.

+--------------------| Funwebproducts/Myway/Mywebsearch/Myglobalsearch Elements Found :

.
.

+--------------------| It's TV Elements Found :

.

+--------------------| Sweetim Elements Found :

.
HKCR\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
HKCR\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SweetIM
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\02F47BF73B948514FAACADD8CBBDF37D
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\080D9F5E1E95FEE4794CE438E635239E
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\1E264E0A5959A1C46BA9175A878B12EA
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\2E6768B6932D112438F047C54D180635
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\351716A953E21214898904032EAE2E81
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\397C771A7BCAC904697C3EC629ED33ED
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\98CC8BF5A4A6E6C4ABF7051DDAB8B058
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\A189D17A469616C4688D23E192996267
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\D15DAF33C220F91468A1D7D57C31ACD7
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\D3BA76A44C779424889063D5098ED2D6
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\D6D0EB9FDBD90C04D92A7E729058F10D
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\E4748F9A4181FCE46A23C13B517B9420
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\07D5290CDBDAE4242926B8E6CA650501
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\08E33F7B61DEFF24BB9673ED7D467636
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\0E3D8A5B48622A445A7DF73FEFF32C3F
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\1AC67655DD68F8240B2860F2D511EBD8
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\46A5861A389ADB844AF89E31BC9DF0A1
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\34EDDB1BFB3A2D448845F3EFD0F15A43
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\4318DF19719275242801CBE292063A4C
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\45FC115D1FEAEF849A4E1610D6EC8BF0
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\49B0E1A6FF50BBE4289E4E23DE6EA0C7
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\4CCCAC049F34D0540AAC13011398BEDB
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\5C4389D0BFB302C479DE4178BD5D9EBA
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\5D19F074C042AD34BAB463D4175A062E
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\5D2B09BDEF4FE54418E6F3373CDBC7AC
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\61B65D3397A1FBF4CB1571B5E4F6B5B0
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\68E8A05C60DD9254591DBD16C94EDDBF
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\697E782CF574CC34CBB9566440BA12BC
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\6AE27A8613CF7EA4782F2886F67295E5
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\7CE172051F585E04187BCB97570BFA74
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\86A901BA5265452499DCBF719C378EE3
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\88ABD1CD5C40EC84789A7F6EF86DAC5E
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\980289C22F80A7C4BB9323DC61255E4E
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\9A4B7EF3789F871419D9302583B20C15
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\A6C53B0F76C44004A8F36716213017DB
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\B59F2D8189784CC46A4597F2842480B0
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\BD746FB95FB8E5B45BF66BE54D5FD91F
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\CCF399FCD6D2D3F46BF02A1378654FC9
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\D149C1355C98DE24E82CEFBD996FE06A
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\DB59FDB786388EA4D897F3EE715683AC
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\DB8DAD19CFBCC2049A4477183787E8C5
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\E337925F629CF4C4FB08F3D9674DD839
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\EC65F200D112357449C8B1BC3CFA03D0
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\F327D0C73C0973644A21E8CC852267A0
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\FA96423FE2B98E248A3B23548D1E22D9
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\0FF2AEFF45EEA0A48A4B33C1973B6094
HKLM\~\USERDATA\S-1-5-18\COMPONENTS\305B09CE8C53A214DB58887F62F25536
.
C:\Windows\INSTALLER\125327d.msi
C:\Windows\INSTALLER\1253283.msi
C:\ProgramData\SweetIM
C:\ProgramData\SweetIM\Messenger
C:\ProgramData\SweetIM\Messenger\conf
C:\ProgramData\SweetIM\Messenger\data
C:\ProgramData\SweetIM\Messenger\logs
C:\ProgramData\SweetIM\Messenger\update
C:\ProgramData\SweetIM\Messenger\conf\adapter.xml
C:\ProgramData\SweetIM\Messenger\conf\autoupdate.xml
C:\ProgramData\SweetIM\Messenger\conf\logger.xml
C:\ProgramData\SweetIM\Messenger\conf\messages.xml
C:\ProgramData\SweetIM\Messenger\conf\sweetim.xml
C:\ProgramData\SweetIM\Messenger\conf\sweetimapp.xml
C:\ProgramData\SweetIM\Messenger\conf\users
C:\ProgramData\SweetIM\Messenger\conf\users\j.roquefort@live.fr
C:\ProgramData\SweetIM\Messenger\conf\users\jacques.roquefort@free.fr
C:\ProgramData\SweetIM\Messenger\conf\users\main_user_config.xml
C:\ProgramData\SweetIM\Messenger\conf\users\j.roquefort@live.fr\emoticons_shortcut.xml
C:\ProgramData\SweetIM\Messenger\conf\users\j.roquefort@live.fr\user_config.xml
C:\ProgramData\SweetIM\Messenger\conf\users\jacques.roquefort@free.fr\emoticons_shortcut.xml
C:\ProgramData\SweetIM\Messenger\conf\users\jacques.roquefort@free.fr\user_config.xml
C:\ProgramData\SweetIM\Messenger\data\contentdb
C:\ProgramData\SweetIM\Messenger\data\contentdb\cache_indx.dat

+--------------------| Added Scan :

~~~~ INTERNET EXPLORER VERSION 7.0.6001.18000 ~~~~

+--[HKEY_CURRENT_USER\..\INTERNET EXPLORER\MAIN]

Start page : hxxp://www.google.fr/ig/dell?hl=fr&client=dell-row&channel=fr&ibd=2080222

+--[HKEY_LOCAL_MACHINE\..\INTERNET EXPLORER\MAIN]

Start page : hxxp://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home

+---------------------------------------------------------------------------+

[~6592 BYTES] - "C:\AD-REPORT-SCAN-26.01.2009.LOG"

End at: 15:21:47 | 26/01/2009 - Time elapsed: 31.3 seconds

+---------------------------------------------------------------------------+
+------------------------------- [ E.O.F - 116 Lines ]
+---------------------------------------------------------------------------+

1er rapport:

Logfile of random's system information tool 1.05 (written by random/random)
Run by soft at 2009-01-26 14:49:45
Microsoft® Windows Vista™ Édition Intégrale Service Pack 1
System drive C: has 361 GB (78%) free of 461 GB
Total RAM: 2045 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:50:13, on 26/01/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\XPSMiniViewGadget\XPSMiniViewGadget.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\CyberLink\Shared files\brs.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe
C:\Windows\System32\Ctxfihlp.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Windows\SYSTEM32\CTXFISPI.EXE
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\rundll32.exe
C:\Users\soft.PC-de-jack\Desktop\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\soft.exe
C:\Windows\system32\SearchFilterHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\mskapbho.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [BDRegion] "C:\Program Files\Cyberlink\Shared Files\brs.exe"
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [VolPanel] "C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" /r
O4 - HKLM\..\Run: [UpdReg] "C:\Windows\UpdReg.EXE"
O4 - HKLM\..\Run: [CTxfiHlp] "C:\Windows\system32\CTXFIHLP.EXE"
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [PDVDDXSrv] "C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [SUPERAntiSpyware] "C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-2838385541-2699793272-862096273-1000\..\Run: [Sidebar] "C:\Program Files\Windows Sidebar\Sidebar.exe" /detectMem (User 'IUSR_NMPR')
O4 - HKUS\S-1-5-18\..\Run: [DelayShred] c:\PROGRA~1\mcafee\mshr\ShrCL.EXE /P2 /q C:\Users\Wild\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\9EIMX00Q\IFR_1_~1.SH! (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DelayShred] c:\PROGRA~1\mcafee\mshr\ShrCL.EXE /P2 /q C:\Users\Wild\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\9EIMX00Q\IFR_1_~1.SH! (User 'Default user')
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O15 - Trusted Zone: http://*.mcafee.com
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - https://www.nvidia.com/content/DriverDownload/srl/3.0.0.0/srl_bin/sysreqlab3.cab
O16 - DPF: {32305793-C19A-48E7-AD2F-D87FF7B264A4} (TenebrilSpywareScanner Control) - http://download.tenebril.com/pub/bin/scanner2008/TenebrilSpywareScanner.ocx
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O22 - SharedTaskScheduler: Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll
O22 - SharedTaskScheduler: Deskscapes - {EC654325-1273-C2A9-2B7C-45D29BCE68FB} - C:\PROGRA~1\Stardock\OBJECT~1\DESKSC~1\deskscapes.dll
O22 - SharedTaskScheduler: Stardock Vista ControlPanel Extension - {EC654325-1273-C2A9-2B7C-45D29BCE68FD} - C:\PROGRA~1\Stardock\OBJECT~1\DESKSC~1\DesktopControlPanel.dll
O22 - SharedTaskScheduler: StardockDreamController - {EC654325-1273-C2A9-2B7C-45D29BCE68FF} - C:\PROGRA~1\Stardock\OBJECT~1\DESKSC~1\DreamControl.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: Intel(R) Alert Service (AlertService) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\CCU\AlertService.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTAudSvc.exe
O23 - Service: Intel(R) DHTrace Controller (DHTRACE) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\IntelDH\bin\DHTraceController.exe
O23 - Service: DQLWinService - Unknown owner - C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Google Desktop Manager 5.8.811.4345 (GoogleDesktopManager-110408-113106) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Intel(R) Software Services Manager (ISSM) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe
O23 - Service: Intel(R) Viiv(TM) Media Server (M1 Server) - Unknown owner - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: Intel(R) Application Tracker (MCLServiceATL) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: Intel(R) NMSCore (NMSCore) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\IntelDH\NMS\NMSCore\NMSCore.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Intel(R) Quality Manager (QualityManager) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\qualitymanager.exe
O23 - Service: Intel(R) Remoting Service (Remote UI Service) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: LiveShare P2P Server 10 (RoxLiveShare10) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe
O23 - Service: RoxMediaDB10 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe
O23 - Service: Roxio Hard Drive Watcher 10 (RoxWatch10) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatch10.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: SessionLauncher - Unknown owner - C:\Users\ADMINI~1\AppData\Local\Temp\DX9\SessionLauncher.exe (file missing)
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

2eme rapport:

info.txt logfile of random's system information tool 1.05 2009-01-26 14:50:15

======Uninstall list======

-->"C:\Program Files\Creative Installation Information\CREATIVE_MEDIASOURCE_U\Setup.exe" /remove /l0x040c
-->"C:\Program Files\Creative Installation Information\CTCMSGO\Setup.exe" /remove /l0x040c
-->"C:\Program Files\Creative Installation Information\E-CENTER_NET_CONTENT_U\Setup.exe" /remove /l0x040c
-->"C:\Program Files\Creative Installation Information\E-CENTER_PLUGIN_MINIDISC_U\Setup.exe" /remove /l0x040c
-->"C:\Program Files\Creative Installation Information\MEDIASOURCE_PLAYER_SKINPACK_U\Setup.exe" /remove /l0x040c
-->"C:\Program Files\Creative\Sound Blaster X-Fi\Program\SETUP.EXE" /S /U /W /L:FRN
-->MsiExec /X{A7E07C2B-2220-4415-87E3-784D5814BC93}
-->MsiExec.exe /I{403EF592-953B-4794-BCEF-ECAB835C2095}
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{06E3E953-0570-4DFF-A7B5-46114C390228}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{06E3E953-0570-4DFF-A7B5-46114C390228}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{17E96A7F-AFE3-4171-87B1-583E376319E8}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2670895A-4E6C-4450-B868-7B7DB80A3357}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2670895A-4E6C-4450-B868-7B7DB80A3357}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{700932B3-A964-4878-82A2-96054622A1F7}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{700932B3-A964-4878-82A2-96054622A1F7}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{73919E2B-725C-4FAA-8473-45E063A3575F}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{73919E2B-725C-4FAA-8473-45E063A3575F}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7AB55EC6-1158-41EF-B87D-90555A8F5C92}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{84F573D3-0F71-4768-978A-D35310E3FBA6}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{84F573D3-0F71-4768-978A-D35310E3FBA6}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{888347B3-AEC5-4BB5-8BAB-781D72A57C73}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{888347B3-AEC5-4BB5-8BAB-781D72A57C73}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8B026740-A400-48FF-8F6B-B37C4F61C937}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8B026740-A400-48FF-8F6B-B37C4F61C937}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9605AE52-2172-448F-BE56-B2086F932412}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9605AE52-2172-448F-BE56-B2086F932412}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A82F10CB-18B5-4EAC-AEF2-FA49CD565626}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AA9944C8-7D34-475E-8C90-2788685B2C47}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AA9944C8-7D34-475E-8C90-2788685B2C47}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BD6928A2-9F8F-4AA7-9A3A-FD4A271712EE}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BD6928A2-9F8F-4AA7-9A3A-FD4A271712EE}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C88C3C27-AECE-4137-A6CC-D7A6FFAD2F84}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C88C3C27-AECE-4137-A6CC-D7A6FFAD2F84}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CAAE8EC2-2340-4D6E-A74D-07814046A11B}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CAAE8EC2-2340-4D6E-A74D-07814046A11B}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CC3D3A93-C433-4329-AC3A-7EFC52A332C2}\setup.exe" -l0x9
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CC3D3A93-C433-4329-AC3A-7EFC52A332C2}\setup.exe" -l0x9 /remove
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DCCC08BD-FC52-4AEB-ACF8-6A5C06550468}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DCCC08BD-FC52-4AEB-ACF8-6A5C06550468}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FBFF2411-D066-4D24-BCE0-893086009E1B}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FBFF2411-D066-4D24-BCE0-893086009E1B}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FCCDA302-32D9-4AE7-A094-4BE677554F26}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FCCDA302-32D9-4AE7-A094-4BE677554F26}\setup.exe" -l0x40c /remove
Ad-Aware-->MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
Adobe Anchor Service CS3-->MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}
Adobe Asset Services CS3-->MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}
Adobe Bridge CS3-->MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394}
Adobe Bridge Start Meeting-->MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23}
Adobe Camera Raw 4.0-->MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
Adobe CMaps-->MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
Adobe Common File Installer-->MsiExec.exe /I{8EDBA74D-0686-4C99-BFDD-F894678E5102}
Adobe Default Language CS3-->MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
Adobe Device Central CS3-->MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}
Adobe ExtendScript Toolkit 2-->C:\Program Files\Common Files\Adobe\Installers\3e054d2218e7aa282c2369d939e58ff\Setup.exe
Adobe ExtendScript Toolkit 2-->MsiExec.exe /I{24D7346D-D4B4-45E8-98EA-75EC14B42DD8}
Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Help Viewer CS3-->MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245}
Adobe PDF Library Files-->MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
Adobe Photoshop Elements 6.0-->msiexec /I {F54AC413-D2C6-4A24-B324-370C223C6250}
Adobe Premiere Elements 4.0 Templates-->msiexec /I {F85C7118-F3DC-4ED9-AB27-3E7931EA3D88}
Adobe Premiere Elements 4.0 Templates-->MsiExec.exe /I{F85C7118-F3DC-4ED9-AB27-3E7931EA3D88}
Adobe Premiere Elements 4.0-->msiexec /I {3E2C691B-B7E6-4053-B5C3-94B8BC407E7A}
Adobe Premiere Elements 4.0-->MsiExec.exe /I{3E2C691B-B7E6-4053-B5C3-94B8BC407E7A}
Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
Adobe Setup-->MsiExec.exe /I{84D58782-A2F0-47D4-A557-3041363893CF}
Adobe Setup-->MsiExec.exe /I{B3C02EC1-A7B0-4987-9A43-8789426AAA7D}
Adobe Soundbooth CS3 Codecs-->MsiExec.exe /I{0327FA9D-975C-448C-A086-577D57BB25B8}
Adobe Soundbooth CS3 Scores-->MsiExec.exe /I{92A300C0-E97B-48CC-9702-AB1AAED167E1}
Adobe Soundbooth CS3-->C:\Program Files\Common Files\Adobe\Installers\19c4ee81f9cc4b3dffb9a17d9b648b2\Setup.exe
Adobe Soundbooth CS3-->MsiExec.exe /I{A6B23EFA-6590-482C-A11F-5ACE1B91F5B9}
Adobe Type Support-->MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
Adobe Update Manager CS3-->MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8}
Adobe Version Cue CS3 Client-->MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}
Adobe XMP DVA Panels CS3-->MsiExec.exe /I{0224CACC-994D-45F8-B973-D65056EA9C2F}
Adobe XMP Panels CS3-->MsiExec.exe /I{D5A31AB1-345D-47C7-A87B-036A669F6DF1}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
a-squared Free 4.0-->"C:\Program Files\a-squared Free\unins000.exe"
Assistant de connexion Windows Live-->MsiExec.exe /I{D6E592B3-67DA-4BBB-9783-E1838FB253A2}
Browser Address Error Redirector-->MsiExec.exe /I{62230596-37E5-4618-A329-0D21F529A86F}
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Creative Audio Console-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{17E96A7F-AFE3-4171-87B1-583E376319E8}\setup.exe" -l0x40c /remove
Creative MediaSource 5-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}\setup.exe" -l0x40c /remove
Dell Support Center (Support Software)-->MsiExec.exe /X{E3BFEE55-39E2-4BE0-B966-89FE583822C1}
Dell Xcelerator(TM) for Portable Devices-->MsiExec.exe /X{ABA1C13F-D76E-4E8C-80CE-13BB88BBD955}
DeskScapes-->C:\PROGRA~1\Stardock\OBJECT~1\DESKSC~1\UNWISE.EXE C:\PROGRA~1\Stardock\OBJECT~1\DESKSC~1\INSTALL.LOG
DirectXInstallService-->MsiExec.exe /X{098122AB-C605-4853-B441-C0A4EB359B75}
DVD Region+CSS Free 5.9.8.3-->"C:\Program Files\DVD Region+CSS Free\unins000.exe"
filehippo.com Update Checker-->"C:\Program Files\filehippo.com\uninstall.exe"
getPlus(R) for Adobe-->"C:\Program Files\NOS\bin\getPlus_HelperSvc.exe" /UninstallGet1
Google Desktop-->C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_0531C63A913CC9D1.exe" /uninstall
Guide de l'utilisateur-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5CD29180-A95E-11D3-A4EB-00C04F7BDB2C}\setup.exe"
Hauppauge MCE XP/Vista Software Encoder (2.0.25296)-->C:\PROGRA~1\WinTV\UNSftMCE.EXE C:\PROGRA~1\WinTV\softMCE.LOG
Hauppauge TV Tuner Driver-->MsiExec.exe /I{AF094932-91E6-4EF8-8AB8-1C7226DFEECB}
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{3CCB732A-E472-4CF9-B1EE-F18365341FE0}
Intel(R) PRO Network Connections 12.1.12.4-->MsiExec.exe /i{777CA40C-0206-4EF6-A0FC-618BF06BF8D0} ARPREMOVE=1
Intel(R) PRO Network Connections 12.1.12.4-->MsiExec.exe /i{777CA40C-0206-4EF6-A0FC-618BF06BF8D0} ARPREMOVE=1
Intel® Matrix Storage Manager-->C:\Program Files\Intel\Intel Matrix Storage Manager\Uninstall\imsmudlg.exe -uninstall
Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Junk Mail filter update-->MsiExec.exe /I{4AB8B41B-3AF1-46BE-99B0-0ACD3B300C0A}
K-Lite Codec Pack 3.9.0 Full-->"C:\Program Files\K-Lite Codec Pack\unins001.exe"
Logiciel Intel® Viiv™-->MsiExec.exe /X{A7472CEE-6E85-4D43-9C71-BDFC0D471F70} /qb!
LogonStudio Vista-->C:\PROGRA~1\Stardock\OBJECT~1\LOGONS~1\UNWISE.EXE C:\PROGRA~1\Stardock\OBJECT~1\LOGONS~1\INSTALL.LOG
Ma-Config.com-->MsiExec.exe /X{EC7FE2ED-F305-41B7-90B8-3DAE9E35307A}
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Mass Effect-->C:\Program Files\Common Files\BioWare\Uninstall Mass Effect.exe
McAfee SecurityCenter-->C:\Program Files\McAfee\MSC\mcuninst.exe
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Works-->MsiExec.exe /I{6B1CB38D-E2E4-4A30-933D-EFDEBA76AD9C}
Mouse Suite for Desktop Computers-->C:\Program Files\InstallShield Installation Information\{448E2D77-E504-4221-B2C2-93646B344729}\setup.exe -runfromtemp -l0x040c -removeonly
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB941833)-->MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 and SOAP Toolkit 3.0-->MsiExec.exe /I{32343DB6-9A52-40C9-87E4-5E7C79791C87}
NVIDIA Drivers-->C:\Windows\system32\NVUNINST.EXE UninstallGUI
NVIDIA PhysX v8.09.04-->MsiExec.exe /X{A7E07C2B-2220-4415-87E3-784D5814BC93}
OpenAL-->"C:\Program Files\OpenAL\OALInst.exe" /U
Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
PowerDVD-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe" -l0x40c -cluninstall
Propriétés de Creative Sound Blaster-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7AB55EC6-1158-41EF-B87D-90555A8F5C92}\setup.exe" -l0x40c /remove
Roxio Activation Module-->MsiExec.exe /I{EC877639-07AB-495C-BFD1-D63AF9140810}
Roxio CinePlayer Decoder Pack-->MsiExec.exe /I{8D337F77-BE7F-41A2-A7CB-D5A63FD7049B}
Roxio Creator Audio-->MsiExec.exe /I{73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}
Roxio Creator Copy-->MsiExec.exe /I{B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}
Roxio Creator Data-->MsiExec.exe /I{08E81ABD-79F7-49C2-881F-FD6CB0975693}
Roxio Creator Premier 10-->MsiExec.exe /I{CF5C7154-98F4-4D44-A58C-8BC19751CCCC}
Roxio Creator Premier-->C:\ProgramData\Uninstall\{BB2CB14A-F3A3-4BBF-9111-EBC82049ABA6}\setup.exe /x {BB2CB14A-F3A3-4BBF-9111-EBC82049ABA6}
Roxio Creator Premier-->MsiExec.exe /I{ED439A64-F018-4DD4-8BA5-328D85AB09AB}
Roxio Creator Tools-->MsiExec.exe /I{1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}
Roxio Express Labeler-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
Roxio Update Manager-->MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
Sound Blaster X-Fi-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{18F11181-EA1A-42AE-AF89-4867C7F7A6FA}\SETUP.EXE" -l0x40c /remove
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Spyware Doctor 6.0-->C:\Program Files\Spyware Doctor\unins000.exe /LOG
SUPERAntiSpyware Free Edition-->MsiExec.exe /X{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}
SweetIM for Messenger 2.5-->MsiExec.exe /X{C3576005-01B0-4C25-AA5F-40134CC78C42}
SweetIM Toolbar for Internet Explorer 3.1-->MsiExec.exe /X{59971D79-8111-42C2-9E40-883A0C277E78}
System Requirements Lab-->C:\Program Files\SystemRequirementsLab\Uninstall.exe
The Matrix Trilogy Screensaver 0.45-->C:\Windows\Installer\The Matrix Trilogy UnInstaller.exe
Unlocker 1.8.7-->C:\Program Files\Unlocker\uninst.exe
VirginMega.Fr Premium-->MsiExec.exe /I{EE467474-04A8-48D5-8DDF-0F8D3A3CCBE5}
WIDCOMM Bluetooth Software 6.0.1.4300-->MsiExec.exe /X{03D1988F-469F-4843-8E6E-E5FE9D17889D}
Windows Live Call-->MsiExec.exe /I{01523985-2098-43AF-9C97-12B07BE02A9B}
Windows Live Communications Platform-->MsiExec.exe /I{F69E83CF-B440-43F8-89E6-6EA80712109B}
Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Live OneCare safety scanner-->MsiExec.exe /X{FE0646A7-19D0-41B4-A2BB-2C35D644270D}
Windows Live Upload Tool-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
XPS MiniView Gadget-->MsiExec.exe /I{A73BDB2A-E4A7-4FE8-960E-6A5C8BF76FCB}

=====HijackThis Backups=====

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing

======Hosts File======

127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com

======Security center information======

AS: AVG Anti-Spyware (disabled) (outdated)
AS: Windows Defender
AS: SUPERAntiSpyware

System event log

Computer Name: PC-de-jack
Event Code: 20003
Message: La gestion des pilotes a terminé le processus d’ajout du service tunnel pour l’ID d’instance de périphérique ROOT\*6TO4MP\0005 avec le statut suivant : 0.
Record Number: 419040
Source Name: Microsoft-Windows-User-PnP
Time Written: 20090126134650.212411-000
Event Type: Information
User: AUTORITE NT\SYSTEM

Computer Name: PC-de-jack
Event Code: 1103
Message: Votre ordinateur a obtenu une adresse auprès du réseau, et vous pouvez maintenant vous connecter à d'autres ordinateurs.
Record Number: 419041
Source Name: Microsoft-Windows-Dhcp-Client
Time Written: 20090126134738.000000-000
Event Type: Information
User:

Computer Name: PC-de-jack
Event Code: 8033
Message: L'explorateur a forcé une élection sur le réseau \Device\NetBT_Tcpip_{D31A105B-E09C-4F4C-BE0A-8ECF97B4C9B7} car un maître explorateur a été arrêté.
Record Number: 419042
Source Name: BROWSER
Time Written: 20090126134821.000000-000
Event Type: Information
User:

Computer Name: PC-de-jack
Event Code: 4202
Message: Le système a détecté que la carte réseau Connexion au réseau local est déconnectée du réseau ; sa configuration réseau a été abandonnée. Si la carte réseau n’est pas déconnectée, cela signifie peut-être qu’elle fonctionne mal. Essayez de mettre à jour le pilote de la carte réseau.
Record Number: 419043
Source Name: Tcpip
Time Written: 20090126134821.417411-000
Event Type: Information
User:

Computer Name: PC-de-jack
Event Code: 4202
Message: Le système a détecté que la carte réseau Connexion au réseau local est déconnectée du réseau ; sa configuration réseau a été abandonnée. Si la carte réseau n’est pas déconnectée, cela signifie peut-être qu’elle fonctionne mal. Essayez de mettre à jour le pilote de la carte réseau.
Record Number: 419044
Source Name: Tcpip
Time Written: 20090126134821.417411-000
Event Type: Information
User:

Application event log

Computer Name: PC-de-jack
Event Code: 1
Message: Le client des services de certification a démarré correctement.
Record Number: 77974
Source Name: Microsoft-Windows-CertificateServicesClient
Time Written: 20090126133646.277411-000
Event Type: Information
User: PC-de-jack\soft

Computer Name: PC-de-jack
Event Code: 1
Message: Le service Centre de sécurité Windows a démarré.
Record Number: 77975
Source Name: SecurityCenter
Time Written: 20090126133807.000000-000
Event Type: Information
User:

Computer Name: PC-de-jack
Event Code: 1001
Message: Les compteurs de performances pour le service WmiApRpl (WmiApRpl) ont été supprimés. Les données d'enregistrement contiennent les nouvelles valeurs du dernier compteur système et les dernières entrées du registre d'aide.
Record Number: 77976
Source Name: Microsoft-Windows-LoadPerf
Time Written: 20090126134010.000000-000
Event Type: Information
User:

Computer Name: PC-de-jack
Event Code: 1000
Message: Les compteurs de performances pour le service WmiApRpl (WmiApRpl) ont été chargés. Les données d'enregistrement dans la section des données contiennent les nouvelles valeurs d'index assignées à ce service.
Record Number: 77977
Source Name: Microsoft-Windows-LoadPerf
Time Written: 20090126134011.000000-000
Event Type: Information
User:

Computer Name: PC-de-jack
Event Code: 0
Message:
Record Number: 77978
Source Name: DQLWinService
Time Written: 20090126135015.000000-000
Event Type: Information
User:

Security event log

Computer Name: PC-de-jack
Event Code: 4648
Message: Tentative d’ouverture de session en utilisant des informations d’identification explicites.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : PC-DE-JACK$
Domaine du compte : WORKGROUP
ID d’ouverture de session : 0x3e7
GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

Compte dont les informations d’identification ont été utilisées :
Nom du compte : soft
Domaine du compte : PC-de-jack
GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

Serveur cible :
Nom du serveur cible : localhost
Informations supplémentaires : localhost

Informations sur le processus :
ID du processus : 0x116c
Nom du processus : C:\Windows\System32\consent.exe

Informations sur le réseau :
Adresse du réseau : ::1
Port : 0

Cet événement est généré lorsqu’un processus tente d’ouvrir une session pour un compte en spécifiant explicitement les informations d’identification de ce compte. Ceci se produit le plus souvent dans les configurations par lot comme les tâches planifiées, ou avec l’utilisation de la commande RUNAS.
Record Number: 108465
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090103081126.073006-000
Event Type: Succès de l'audit
User:

Computer Name: PC-de-jack
Event Code: 4624
Message: L’ouverture de session d’un compte s’est correctement déroulée.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : PC-DE-JACK$
Domaine du compte : WORKGROUP
ID d’ouverture de session : 0x3e7

Type d’ouverture de session : 2

Nouvelle ouverture de session :
ID de sécurité : S-1-5-21-2838385541-2699793272-862096273-1032
Nom du compte : soft
Domaine du compte : PC-de-jack
ID d’ouverture de session : 0x29fb1e
GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

Informations sur le processus :
ID du processus : 0x116c
Nom du processus : C:\Windows\System32\consent.exe

Informations sur le réseau :
Nom de la station de travail : PC-DE-JACK
Adresse du réseau source : ::1
Port source : 0

Informations détaillées sur l’authentification :
Processus d’ouverture de session : CredPro
Package d’authentification : Negotiate
Services en transit : -
Nom du package (NTLM uniquement) : -
Longueur de la clé : 0

Cet événement est généré lors de la création d’une ouverture de session. Il est généré sur l’ordinateur sur lequel l’ouverture de session a été effectuée.

Le champ Objet indique le compte sur le système local qui a demandé l’ouverture de session. Il s’agit le plus souvent d’un service, comme le service Serveur, ou un processus local tel que Winlogon.exe ou Services.exe.

Le champ Type d’ouverture de session indique le type d’ouverture de session qui s’est produit. Les types les plus courants sont 2 (interactif) et 3 (réseau).

Le champ Nouvelle ouverture de session indique le compte pour lequel la nouvelle ouverture de session a été créée, par exemple, le compte qui s’est connecté.

Les champs relatifs au réseau indiquent la provenance d’une demande d’ouverture de session à distance. Le nom de la station de travail n’étant pas toujours disponible, peut être laissé vide dans certains cas.

Les champs relatifs aux informations d’authentification fournissent des détails sur cette demande d’ouverture de session spécifique.
- Le GUID d’ouverture de session est un identificateur unique pouvant servir à associer cet événement à un événement KDC .
- Les services en transit indiquent les services intermédiaires qui ont participé à cette demande d’ouverture de session.
- Nom du package indique quel est le sous-protocole qui a été utilisé parmi les protocoles NTLM.
- La longueur de la clé indique la longueur de la clé de session générée. Elle a la valeur 0 si aucune clé de session n’a été demandée.
Record Number: 108466
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090103081126.073006-000
Event Type: Succès de l'audit
User:

Computer Name: PC-de-jack
Event Code: 4624
Message: L’ouverture de session d’un compte s’est correctement déroulée.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : PC-DE-JACK$
Domaine du compte : WORKGROUP
ID d’ouverture de session : 0x3e7

Type d’ouverture de session : 2

Nouvelle ouverture de session :
ID de sécurité : S-1-5-21-2838385541-2699793272-862096273-1032
Nom du compte : soft
Domaine du compte : PC-de-jack
ID d’ouverture de session : 0x29fb29
GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

Informations sur le processus :
ID du processus : 0x116c
Nom du processus : C:\Windows\System32\consent.exe

Informations sur le réseau :
Nom de la station de travail : PC-DE-JACK
Adresse du réseau source : ::1
Port source : 0

Informations détaillées sur l’authentification :
Processus d’ouverture de session : CredPro
Package d’authentification : Negotiate
Services en transit : -
Nom du package (NTLM uniquement) : -
Longueur de la clé : 0

Cet événement est généré lors de la création d’une ouverture de session. Il est généré sur l’ordinateur sur lequel l’ouverture de session a été effectuée.

Le champ Objet indique le compte sur le système local qui a demandé l’ouverture de session. Il s’agit le plus souvent d’un service, comme le service Serveur, ou un processus local tel que Winlogon.exe ou Services.exe.

Le champ Type d’ouverture de session indique le type d’ouverture de session qui s’est produit. Les types les plus courants sont 2 (interactif) et 3 (réseau).

Le champ Nouvelle ouverture de session indique le compte pour lequel la nouvelle ouverture de session a été créée, par exemple, le compte qui s’est connecté.

Les champs relatifs au réseau indiquent la provenance d’une demande d’ouverture de session à distance. Le nom de la station de travail n’étant pas toujours disponible, peut être laissé vide dans certains cas.

Les champs relatifs aux informations d’authentification fournissent des détails sur cette demande d’ouverture de session spécifique.
- Le GUID d’ouverture de session est un identificateur unique pouvant servir à associer cet événement à un événement KDC .
- Les services en transit indiquent les services intermédiaires qui ont participé à cette demande d’ouverture de session.
- Nom du package indique quel est le sous-protocole qui a été utilisé parmi les protocoles NTLM.
- La longueur de la clé indique la longueur de la clé de session générée. Elle a la valeur 0 si aucune clé de session n’a été demandée.
Record Number: 108467
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090103081126.073006-000
Event Type: Succès de l'audit
User:

Computer Name: PC-de-jack
Event Code: 4672
Message: Privilèges spéciaux attribués à la nouvelle ouverture de session.

Sujet :
ID de sécurité : S-1-5-21-2838385541-2699793272-862096273-1032
Nom du compte : soft
Domaine du compte : PC-de-jack
ID d’ouverture de session : 0x29fb1e

Privilèges : SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeSystemEnvironmentPrivilege
SeImpersonatePrivilege
Record Number: 108468
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090103081126.073006-000
Event Type: Succès de l'audit
User:

Computer Name: PC-de-jack
Event Code: 4634
Message: Fermeture de session d’un compte.

Sujet :
ID de sécurité : S-1-5-21-2838385541-2699793272-862096273-1032
Nom du compte : soft
Domaine du compte : PC-de-jack
ID du compte : 0x29fb29

Type d’ouverture de session : 2

Cet événement est généré lorsqu’une session ouverte est supprimée. Il peut être associé à un événement d’ouverture de session en utilisant la valeur ID d’ouverture de session. Les ID d’ouverture de session ne sont uniques qu’entre les redémarrages sur un même ordinateur.
Record Number: 108469
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090103081126.074006-000
Event Type: Succès de l'audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Intel\DMIX;C:\Program Files\Common Files\Adobe\AGL;C:\Program Files\Common Files\Roxio Shared\10.0\DLLShared\;C:\Program Files\Common Files\Roxio Shared\DLLShared\;C:\Program Files\Common Files\Roxio Shared\DLLShared\;C:\Program Files\Common Files\Roxio Shared\10.0\DLLShared\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=x86
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 11, GenuineIntel
"PROCESSOR_REVISION"=0f0b
"NUMBER_OF_PROCESSORS"=4
"RoxioCentral"=C:\Program Files\Common Files\Roxio Shared\10.0\Roxio Central36\
"EMC_AUTOPLAY"=C:\Program Files\Common Files\Roxio Shared\

-----------------EOF-----------------