Msnfix est-il compatible avec...
Résolu
Bonjour,
j'ai surement attrapé un virus avec msn.
Sur une fenêtre de discution msn, j'ai ouvert un lien commençant http: //www.PictureSchotz.com ... et le message de mon amie finissait par hahaha !
J'ai appris que l'on pouvait l'éliminer avec msnfix.
Sur mon ordi j'ai :
Avast antivirus, Malwarebytes, Spybot search and destroy, et Ad-aware. Tout cela est-il compatible avec msnfix?
Msnfix sert-il uniquement à détruire les virus msn ? Faut-il le désinstaller après son utilisation ?
En préventif, j'ai déjà fait une analyse avec malwarebytes qui a détecté 2 spyware banker? Est-il possible que ce soit le virus Msn que j'ai attrapé ou des autres ? faut-il quand même installer Msnfix par précaution?
Merci d'avance pour vos réponses
j'ai surement attrapé un virus avec msn.
Sur une fenêtre de discution msn, j'ai ouvert un lien commençant http: //www.PictureSchotz.com ... et le message de mon amie finissait par hahaha !
J'ai appris que l'on pouvait l'éliminer avec msnfix.
Sur mon ordi j'ai :
Avast antivirus, Malwarebytes, Spybot search and destroy, et Ad-aware. Tout cela est-il compatible avec msnfix?
Msnfix sert-il uniquement à détruire les virus msn ? Faut-il le désinstaller après son utilisation ?
En préventif, j'ai déjà fait une analyse avec malwarebytes qui a détecté 2 spyware banker? Est-il possible que ce soit le virus Msn que j'ai attrapé ou des autres ? faut-il quand même installer Msnfix par précaution?
Merci d'avance pour vos réponses
Configuration: Windows XP Firefox 3.0.10
32 réponses
Résumé de la discussion
Infection supposée liée à MSN et utilité potentielle de msnfix, avec des questions sur la compatibilité de msnfix avec Avast, Malwarebytes, Spybot S&D et Ad-Aware. Plusieurs réponses recommandent d’utiliser des outils de nettoyage tels que GenProc, PureRa, CleaAfterMe et CCleaner, puis OTCleanIt, ATF Cleaner et Defraggler pour éliminer les restes et optimiser le système. D’autres propositions suggèrent un diagnostic via HijackThis pour identifier les éventuelles infections et insistent sur la vérification des programmes et des restes après les nettoyages, plutôt que sur une solution unique. La discussion rappelle aussi l’importance des mises à jour et de la prudence en fonction du système (Windows XP et Firefox 3.0.10 dans l’exemple) et des symptômes observés.
-
ok alors du menage qui va supprimer les outils utilisés devenus inutiles ainsi que des fichiers inutiles et qui genent le fonctionnement du PC avant de partir , ainsi que quelques mises à jour:
Il se peut que tu aies à rebrancher ton clavier ou ta souris pendant le nettoyage
Telecharge :
-------------
PureRa
executes-le
coche tout a droite sauf config.msi et "clean"
_________________________________________________
Telecharge :
-------------
CleaAfterMe
executes-le
meme chose tu coches tout et "clean selected items"
__________________________________________________
Télécharge :ATF Cleaner par Atribune
Double-clique ATF-Cleaner.exe afin de lancer le programme.
Sous l'onglet Main, choisis : Select All
Clique sur le bouton Empty Selected
Si tu utilises le navigateur Firefox :
Clique Firefox au haut et choisis : Select All
Clique le bouton Empty Selected
NOTE : Si tu veux conserver tes mots de passe sauvegardés, clique No à l'invite.
Si tu utilises le navigateur Opera :
Clique Opera au haut et choisis : Select All
Clique le bouton Empty Selected
NOTE : Si tu veux conserver tes mots de passe sauvegardés, clique No à l'invite.
Clique Exit, du menu prinicipal, afin de fermer le programme.
Pour obtenir du Support technique, double-clique l'adresse électronique située au bas de chacun des menus.
__________________________________________________
Télécharge OTCleanIt de OldTimer sur ton Bureau
Lance OTCleanIt avec un double-clic (sous Vista, lance-le en cliquant droit sur OTCleanIt.exe et en sélectionnant "exécuter en tant qu'administrateur")
Appuie sur le bouton "CleanUp!"
A la question "begin cleanup process?", réponds "YES"
A la fin de l'opération, si OTCleanIt demande de redémarrer ("Do you want to reboot now?"), ferme ce que tu es en train de faire (internet, documents divers...) et clique sur "YES":
Au redémarrage, OTCleanIt aura supprimé les outils de désinfection, et se sera même auto-détruit!
________________________________________________
---> Télécharge et installe CCleaner (N'installe pas la Yahoo Toolbar) :
* Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
* Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage.
* Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs tant de fois qu il en trouve a l analyse
* Veille a ce que dans les options le reglage soit au demarrage de windows et réglé sur "effacement securisé" 35 passes (guttman)
__________________________________________________
Attention : ne pas toucher au PC pendant qu'il travaille !
B-Nettoyage et Défragmentation de tes Disques
*Nettoyage :
Clic droit sur "poste de travail" ==>"ouvrir" ==>clic droit sur le disque C ==>Propriétés ==>onglet "Général"
Cliques sur le bouton "nettoyage de disque", OK
tu le fais pour chacun de tes disques
________________________________________________
*Vérifications des erreurs :
Clic droit sur "poste de travail" ==>"ouvrir" ==>clic droit sur le disque C ==>Propriétés ==>onglet "Outil"
"Vérifier maintenant", une boîte s'ouvre, cocher les cases :
-réparer automatiquement les erreurs...
-rechercher et tenter une récupération...
--->Démarrer, ok
Note : s'il te dis de redémarrer ton Pc pour le faire , tu redémarres et tu laisses faire, cela prend un peu de temps c'est normal
tu le fais pour chacun de tes disques
________________________________________________
ensuite toujours dans le même onglet tu choisis :
*Défragmentation :
"défragmenter maintenant", OK
une boîte s'ouvre, tu sélectionnes le disque à défragmenter, et tu cliques sur "analyser", puis après l'analyse, "défragmenter" . OK
tu le fais pour chacun de tes disques
_______________________________________________
Note : si tu as un utilitaire pour défragmenter , utilises le à la place
pour ce faire Defraggler est proposé
_________________________________________________
> Peux-tu vérifier Console Java ? :
et installer la nouvelle version si besoin est (dans ce cas désinstalle avant l'ancienne version).
Pour info. ou en cas de problème :
Tuto
voici pour desinstaller :
JavaRa
Décompresse le fichier sur le Bureau (Clic droit > Extraire tout).
* Double-clique sur le répertoire JavaRa.
* Puis double-clique sur le fichier JavaRa.exe (le exe peut ne pas s'afficher).
* Choisis Français puis clique sur Select.
* Clique sur Recherche de mises à jour.
* Sélectionne Mettre à jour via jucheck.exe puis clique sur Rechercher.
* Autorise le processus à se connecter s'il le demande, clique sur Installer et suis les instructions d'installation qui prennent quelques minutes.
* L'installation est terminée, reviens à l'écran de JavaRa et clique sur Effacer les anciennes versions.
* Clique sur Oui pour confirmer. Laisse travailler et clique ensuite sur OK, puis une deuxième fois sur OK.
* Un rapport va s'ouvrir. Poste-le dans ta prochaine réponse.
* Ferme l'application.
Note : le rapport se trouve aussi dans C:\ sous le nom JavaRa.log.
_________________________________________________
> Mets à jour Adobe Reader si ce n'est pas le cas (désinstalle avant la version antérieure)
__________________________________________________
> Tu peux aussi vider ta corbeille,quoi que Ccleaner le fasse tout seul
_____________________________________________________
> Si nous avons utilisé MalwaresByte's Anti-Malware : vide sa quarantaine.
- Lance le programme puis clique sur <Quarantaine>.
- Sélectionne tous les éléments puis clique sur <supprime>.
- Quitte la programme.
______________________________________________________
>si tu as installé Antivir :
Configuration de Antivir (Merci a Nico):
clic droit sur son icone dans la barre des taches et séléctionner Configurer Antivir.
cocher la case : Mode Expert.
=> Cliquer sur Scanner dans le volet de gauche :
> Dans "Fichiers" séléctionner Tous les fichiers.
> Dans procédure de recherche, cocher Autoriser l'arrêt, et dans "priorité scanner" séléctionner Elevé.
> Dans "Autres réglages" cocher toutes les cases.
NE SURTOUT PAS OUBLIER LA RECHERCHE DES ROOTKIT QUI EST TRES IMPORTANTE !
=> Cliquer sur "Recherche" dans le volet de gauche et appliquer les mêmes paramètres que précédemment.
=> Dérouler "Recherche" en cliquant sur le +. Cliquer sur "Heuristique" :
> Cocher "Heuristique de MacroVirus" et "Heuristique fichier Win32" avec degré d'indentification ELEVE !
=> Dans le volet de gauche, dérouler "Guard" puis dérouler "Recherche" :
> Cocher "Heuristique de MacroVirus" et "Heuristique fichier Win32" avec degré d'identification ELEVE !
________________________________________________________
> Idem pour ton antivirus : vide sa quarantaine si ce n'est pas déjà fait
______________________________________________________
> Désactive et réactive la restauration de système, pour cela : suis les instructions du lien :
Lien XP
Lien Vista
Recrées un point de retauration dit "sain" pour d'eventuels problemes ulterieurs
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Quelques conseils et recommandations pour l'avenir :
> Passe un coup de MalwareByte's Anti-Malware de temps en temps (1 fois par semaine , suivant l'utilisation que tu fais de ton PC.
- Utilise aussi tes autres logiciels de protection (scannes antivirus, antispywares...). N'oublie pas de faire les mises à jour avant de les utiliser.
- Pense aussi à faire une défragmentation de tes disques durs de temps en temps (garde suffisamment d'espace sur C:\ (1/3 de libre pour être à l'aise))
_____________
> Pour bien protéger ton PC :
[1 seul Antivirus] + [1 seul Pare feu (/!\ les routeurs et box en possèdent un)] + [Un bon Antispyware avec immunisation] + [Mises à Jour récentes Windows et Logiciels de Protection] + [Utilisation de Firefox -ou autres- (Internet Explorer présente des failles de sécurité qui mettent longtemps avant d'être corrigées mais il faut absolument le conserver pour les mises à jour Windows et Windows live Messenger)]
PS : En fait la meilleure des protections c'est toi même : ce que tu fais avec ton PC : où tu surfes, télécharges...ect....
Les virus utilisent les failles de ton PC pour infecter un système
dans le souhait de vouloir desinstaller un antivirus au profit d'un autre , voici quelques liens :
Desinstaller Avast
Desinstaller BitDefender
Desinstaller Norton
Desinstaller Kaspersky
Desinstaller AVG
ou tout en un :
Désinstallation Antivirus , Parefeu , Antispyware
_____________
>lien utile
>SpywareBlaster = petit logiciel qui bloque l'installation d'activeX nuisibles au PC.(Fonctionne en arrière plan)
____________
Si tu as Vista n'oublie pas de réactiver le controle des comptes des utilisateurs(UAC)
___________
Si tu as Spybot S&D et que nous avons desactive le "Tea-timer" tu peux le réactiver
____________
Voila,
Bonne lecture, à bientot,une fois tout ceci fait tu peux mettre le topic en resolu
Gen-hackman
-
ok bon surf :)
-
non car les mises a jours des autres programmes sont des complements donc si tu les vires ca marche plus comme il faut
pour les spybots vois si les deux se trouvent dans ajout/suppression si oui (j'en doute) vire le plus vieux oui -
supprimes l'update 7
-
je l'ai supprimé ..
Du coup, je me suis baladée dans la liste et j'ai vu que j'avais 2 spybot j'enlève le plus vieux ?
et les mises à jour de sécurité de window xp faut-il aussi supprimer les plus vieilles ?et celles de mozilla, microsoft etc ... ?
En fait est-ce qu'il faut faire pareil avec les mises à jour ?
-
-
ok il doit te rester de Java uniquement ceci :
update_13-
je ne comprends pas car JavaRa dit que j'ai la dernière version et que toute les autres ont été supprimées mais en plus de Java(TM) 6 update 13 j'ai aussi Java(TM) 6 update 7 et J2SE Runtime Environment 5.0 Update 16 dans panneau de config /ajout suppression de programme , ils ont un dessin representant un ordinateur devant
que dois je faire les laisser ou les supprimer ?
merci
voilà le nouveau rapport de JavaRa :
JavaRa 1.13 Removal Log.
Report follows after line.
------------------------------------
The JavaRa removal process was started on Sun May 24 18:03:37 2009
------------------------------------
Finished reporting.
JavaRa 1.13 Removal Log.
Report follows after line.
------------------------------------
The JavaRa removal process was started on Sun May 24 18:04:17 2009
------------------------------------
Finished reporting.
-
-
passe au logiciel suivant ?
-
Bonjour, ça y est j'ai tout fait saufle 1er truc à cause de l'alerte !?!
merci beaucoup
voilà le rapport de JavaRa que vous aviez demandé :
JavaRa 1.13 Removal Log.
Report follows after line.
------------------------------------
The JavaRa removal process was started on Sun May 24 16:04:49 2009
Found and removed: C:\Program Files\Java\jre1.5.0_04
Found and removed: C:\Program Files\Java\jre1.5.0_09
Found and removed: C:\Program Files\Java\jre1.5.0_10
Found and removed: C:\Program Files\Java\jre1.5.0_16
Found and removed: C:\Program Files\Java\jre1.6.0_01
Found and removed: C:\Program Files\Java\jre1.6.0_02
Found and removed: C:\Program Files\Java\jre1.6.0_03
Found and removed: C:\Program Files\Java\jre1.6.0_04
Found and removed: C:\Program Files\Java\jre1.6.0_05
Found and removed: C:\Program Files\Java\jre1.6.0_07
Found and removed: Software\JavaSoft\Java2D\1.5.0_04
Found and removed: Software\JavaSoft\Java2D\1.5.0_09
Found and removed: Software\JavaSoft\Java2D\1.5.0_10
Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D510004
Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D510009
Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D511000
Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D510004
Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D510009
Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D511000
Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D510004
Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D510009
Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D511000
Found and removed: SOFTWARE\Classes\JavaPlugin.150_04
Found and removed: SOFTWARE\Classes\JavaPlugin.150_09
Found and removed: SOFTWARE\Classes\JavaPlugin.150_10
Found and removed: SOFTWARE\Classes\JavaWebStart.isInstalled.1.5.0.0
Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.5.0_04
Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.5.0_09
Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.5.0_10
Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5
Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_04
Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_09
Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_10
Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}
Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}
Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D510004
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D510009
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D511000
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D510004
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D510009
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D511000
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150040}
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150090}
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150100}
Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D610001
Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D610002
Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D610003
Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D610004
Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D610005
Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610001
Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610002
Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610003
Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610004
Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610005
Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610001
Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610002
Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610003
Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610004
Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610005
Found and removed: SOFTWARE\Classes\JavaPlugin.160_01
Found and removed: SOFTWARE\Classes\JavaPlugin.160_02
Found and removed: SOFTWARE\Classes\JavaPlugin.160_03
Found and removed: SOFTWARE\Classes\JavaPlugin.160_04
Found and removed: SOFTWARE\Classes\JavaPlugin.160_05
Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_01
Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_02
Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_03
Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_04
Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_05
Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_01
Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_02
Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_03
Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_04
Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_05
Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}
Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610001
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610002
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610003
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610004
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610005
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D610001
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D610002
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D610003
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D610004
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D610005
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610001
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610002
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610003
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610004
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610005
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160010}
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160020}
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160030}
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160040}
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160050}
Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.5.0_04
Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.5.0_09
Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.5.0_10
Found and removed: Software\Classes\JavaPlugin.160_01
Found and removed: Software\Classes\JavaPlugin.160_02
Found and removed: Software\Classes\JavaPlugin.160_03
Found and removed: Software\Classes\JavaPlugin.160_04
Found and removed: Software\Classes\JavaPlugin.160_05
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}
Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1
Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02
Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03
Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04
Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2
Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01
Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_01
Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_02
Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_03
Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_04
Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_05
Found and removed: Software\JavaSoft\Java2D\1.5.0_16
Found and removed: Software\JavaSoft\Java2D\1.6.0_01
Found and removed: Software\JavaSoft\Java2D\1.6.0_02
Found and removed: Software\JavaSoft\Java2D\1.6.0_03
Found and removed: Software\JavaSoft\Java2D\1.6.0_04
Found and removed: Software\JavaSoft\Java2D\1.6.0_05
Found and removed: Software\JavaSoft\Java Runtime Environment\1.6.0_01
Found and removed: Software\JavaSoft\Java Runtime Environment\1.6.0_02
Found and removed: Software\JavaSoft\Java Runtime Environment\1.6.0_03
Found and removed: Software\JavaSoft\Java Runtime Environment\1.6.0_05
Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.5.0_16
Found and removed: SOFTWARE\Classes\JavaPlugin.150_16
Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_16
Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}
Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.5.0_04\
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.5.0_09\
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.5.0_10\
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_01\
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_02\
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_03\
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_04\
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_05\
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_01\bin\
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_02\bin\
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_03\bin\
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_04\bin\
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_05\bin\
Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_07\bin\
JavaRa 1.13 Removal Log.
Report follows after line.
------------------------------------
The JavaRa removal process was started on Sun May 24 16:11:30 2009
------------------------------------
Finished reporting.
-
-
non ce n est pas derangeant :)
-
bonsoir
j'ai fait votre démarche décrite dans votre message précédent ... mais j'ai oublié de cliquer sur appliquer aprés avoir décocher les cases dans panneau de config... options dossier.....
est ce dérangeant pour les analyse de virus total ? ou dois je tout refaire ?
merci-
sinon pas d'autre soucis depuis la suppression des chevaux de Troie et des barres d'outils ou "chepaquoi"...
Moi, je vous suivais à la lettre car comme le dit mon pseudo... je n'y connais pas grand chose...
Donc, si vous pensez que tout est ok on peut arrêter là dans les manips et je vous remercie fortement pour votre aide et le temps passé avec moi.
-
-
ok quels soucis persistent ?
-
essaie de faire ceci :
Clique sur le menu Demarrer /Panneau de configuration/Options des dossiers/ puis dans l'onglet Affichage
- Coche Afficher les fichiers et dossiers cachés
- Décoche Masquer les extensions des fichiers dont le type est connu
- Décoche Masquer les fichiers protégés du système d'exploitation (recommandé)
clique sur Appliquer, puis OK.
N'oublie pas de recacher à nouveau les fichiers cachés et protégés du système d'exploitation en fin de désinfection, c'est important
Fais analyser le(s) fichier(s) suivants sur Virustotal :
Virus Total
* Clique sur Parcourir en haut, choisis Poste de travail et cherche ces fichiers :
C:\WINDOWS\system32\SIntfNT.dll
C:\WINDOWS\system32\SIntf32.dll
C:\WINDOWS\system32\SIntf16.dll
* Clique maintenant sur Envoyer le fichier. et laisse travailler tant que "Situation actuelle : en cours d'analyse" est affiché.
* Il est possible que le fichier soit mis en file d'attente en raison d'un grand nombre de demandes d'analyses. En ce cas, il te faudra patienter sans actualiser la page.
* Lorsque l'analyse est terminée ("Situation actuelle: terminé"), clique sur Formaté
* Une nouvelle fenêtre de ton navigateur va apparaître
* Clique alors sur les deux fleches
* Fais un clic droit sur la page, et choisis Sélectionner tout, puis copier
* Enfin colle le résultat dans ta prochaine réponse.
-
bonsoir,
j'ai analysé le 1er fichier voilà le rapport :
Fichier SIntfNT.dll reçu le 2009.05.22 20:36:12 (UTC)Antivirus Version Dernière mise à jour Résultat
a-squared 4.0.0.101 2009.05.22 -
AhnLab-V3 5.0.0.2 2009.05.22 -
AntiVir 7.9.0.168 2009.05.22 -
Antiy-AVL 2.0.3.1 2009.05.22 -
Authentium 5.1.2.4 2009.05.22 -
Avast 4.8.1335.0 2009.05.22 -
AVG 8.5.0.339 2009.05.22 -
BitDefender 7.2 2009.05.22 -
CAT-QuickHeal 10.00 2009.05.22 -
ClamAV 0.94.1 2009.05.22 -
Comodo 1157 2009.05.08 -
DrWeb 5.0.0.12182 2009.05.22 -
eSafe 7.0.17.0 2009.05.21 Suspicious File
eTrust-Vet 31.6.6518 2009.05.22 -
F-Prot 4.4.4.56 2009.05.22 -
F-Secure 8.0.14470.0 2009.05.22 -
Fortinet 3.117.0.0 2009.05.22 -
GData 19 2009.05.22 -
Ikarus T3.1.1.49.0 2009.05.22 -
K7AntiVirus 7.10.741 2009.05.21 -
Kaspersky 7.0.0.125 2009.05.22 -
McAfee 5623 2009.05.22 -
McAfee+Artemis 5623 2009.05.22 -
McAfee-GW-Edition 6.7.6 2009.05.22 -
Microsoft 1.4701 2009.05.22 -
NOD32 4098 2009.05.22 -
Norman 6.01.05 2009.05.22 -
nProtect 2009.1.8.0 2009.05.22 -
Panda 10.0.0.14 2009.05.22 -
PCTools 4.4.2.0 2009.05.21 -
Prevx 3.0 2009.05.22 -
Rising 21.30.42.00 2009.05.22 -
Sophos 4.42.0 2009.05.22 -
Sunbelt 3.2.1858.2 2009.05.22 -
Symantec 1.4.4.12 2009.05.22 -
TheHacker 6.3.4.3.331 2009.05.22 -
TrendMicro 8.950.0.1092 2009.05.22 -
VBA32 3.12.10.5 2009.05.22 -
ViRobot 2009.5.22.1747 2009.05.22 -
Information additionnelle
File size: 21840 bytes
MD5...: 222810667d9fc2fab1bef82a8e510a1b
SHA1..: 663000df604807aac920620cc76840ef4f1411c8
SHA256: 21d5c5740e44807bc1da355ae1decff08f9412b3364d37feeb8ee5e379166e86
SHA512: 83670a24867c06879906b39a31c3136f34b800b0698bb6d60eded49a69bd6cc8<BR>3ad9008e8f6bac81f78b96c8f1cfcd5ba085a70dd285918001c0d99c75e3d113
ssdeep: 384:s/iiye8zdTyBsyqAIZhgEwJodqA0oclPYnYFoZ5MKcuk/cNeUM6DF+bRSf8F<BR>:LWsyqAggLyUA0ocCYI5MKPNRp44S<BR>
PEiD..: Petite v2.1 (2)
TrID..: File type identification<BR>Win32 Executable Generic (42.3%)<BR>Win32 Dynamic Link Library (generic) (37.6%)<BR>Generic Win/DOS Executable (9.9%)<BR>DOS Executable Generic (9.9%)<BR>Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
PEInfo: PE Structure information<BR><BR>( base data )<BR>entrypointaddress.: 0x910b<BR>timedatestamp.....: 0x383909ec (Mon Nov 22 09:16:28 1999)<BR>machinetype.......: 0x14c (I386)<BR><BR>( 3 sections )<BR>name viradd virsiz rawdsiz ntrpy md5<BR>.text 0x1000 0x8000 0x3750 7.98 60afa73e3ee534a28512b1514f88f5ec<BR>.petite 0x9000 0x1863 0x1a00 6.23 304c9fc835e4f88e9bc961b7f6a88f83<BR>0xb000 0x1000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e<BR><BR>( 2 imports ) <BR>> KERNEL32.dll: ExitProcess, LoadLibraryA, GetProcAddress, GlobalAlloc<BR>> user32.dll: MessageBoxA, wsprintfA<BR><BR>( 17 exports ) <BR>ADI32, ATI32, C32, FGDM32, GCDL32, GDS32, GFP32, GGDM32, GNOCD32, INQ32, LD32, LOH32, MSEL32, RLOS32, STS32, TC32, TUR32<BR>
PDFiD.: -
RDS...: NSRL Reference Data Set<BR>-
packers (Kaspersky): Petite
packers (F-Prot): Petite
Antivirus Version Dernière mise à jour Résultat
a-squared 4.0.0.101 2009.05.22 -
AhnLab-V3 5.0.0.2 2009.05.22 -
AntiVir 7.9.0.168 2009.05.22 -
Antiy-AVL 2.0.3.1 2009.05.22 -
Authentium 5.1.2.4 2009.05.22 -
Avast 4.8.1335.0 2009.05.22 -
AVG 8.5.0.339 2009.05.22 -
BitDefender 7.2 2009.05.22 -
CAT-QuickHeal 10.00 2009.05.22 -
ClamAV 0.94.1 2009.05.22 -
Comodo 1157 2009.05.08 -
DrWeb 5.0.0.12182 2009.05.22 -
eSafe 7.0.17.0 2009.05.21 Suspicious File
eTrust-Vet 31.6.6518 2009.05.22 -
F-Prot 4.4.4.56 2009.05.22 -
F-Secure 8.0.14470.0 2009.05.22 -
Fortinet 3.117.0.0 2009.05.22 -
GData 19 2009.05.22 -
Ikarus T3.1.1.49.0 2009.05.22 -
K7AntiVirus 7.10.741 2009.05.21 -
Kaspersky 7.0.0.125 2009.05.22 -
McAfee 5623 2009.05.22 -
McAfee+Artemis 5623 2009.05.22 -
McAfee-GW-Edition 6.7.6 2009.05.22 -
Microsoft 1.4701 2009.05.22 -
NOD32 4098 2009.05.22 -
Norman 6.01.05 2009.05.22 -
nProtect 2009.1.8.0 2009.05.22 -
Panda 10.0.0.14 2009.05.22 -
PCTools 4.4.2.0 2009.05.21 -
Prevx 3.0 2009.05.22 -
Rising 21.30.42.00 2009.05.22 -
Sophos 4.42.0 2009.05.22 -
Sunbelt 3.2.1858.2 2009.05.22 -
Symantec 1.4.4.12 2009.05.22 -
TheHacker 6.3.4.3.331 2009.05.22 -
TrendMicro 8.950.0.1092 2009.05.22 -
VBA32 3.12.10.5 2009.05.22 -
ViRobot 2009.5.22.1747 2009.05.22 -
Information additionnelle
File size: 21840 bytes
MD5...: 222810667d9fc2fab1bef82a8e510a1b
SHA1..: 663000df604807aac920620cc76840ef4f1411c8
SHA256: 21d5c5740e44807bc1da355ae1decff08f9412b3364d37feeb8ee5e379166e86
SHA512: 83670a24867c06879906b39a31c3136f34b800b0698bb6d60eded49a69bd6cc8<BR>3ad9008e8f6bac81f78b96c8f1cfcd5ba085a70dd285918001c0d99c75e3d113
ssdeep: 384:s/iiye8zdTyBsyqAIZhgEwJodqA0oclPYnYFoZ5MKcuk/cNeUM6DF+bRSf8F<BR>:LWsyqAggLyUA0ocCYI5MKPNRp44S<BR>
PEiD..: Petite v2.1 (2)
TrID..: File type identification<BR>Win32 Executable Generic (42.3%)<BR>Win32 Dynamic Link Library (generic) (37.6%)<BR>Generic Win/DOS Executable (9.9%)<BR>DOS Executable Generic (9.9%)<BR>Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
PEInfo: PE Structure information<BR><BR>( base data )<BR>entrypointaddress.: 0x910b<BR>timedatestamp.....: 0x383909ec (Mon Nov 22 09:16:28 1999)<BR>machinetype.......: 0x14c (I386)<BR><BR>( 3 sections )<BR>name viradd virsiz rawdsiz ntrpy md5<BR>.text 0x1000 0x8000 0x3750 7.98 60afa73e3ee534a28512b1514f88f5ec<BR>.petite 0x9000 0x1863 0x1a00 6.23 304c9fc835e4f88e9bc961b7f6a88f83<BR>0xb000 0x1000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e<BR><BR>( 2 imports ) <BR>> KERNEL32.dll: ExitProcess, LoadLibraryA, GetProcAddress, GlobalAlloc<BR>> user32.dll: MessageBoxA, wsprintfA<BR><BR>( 17 exports ) <BR>ADI32, ATI32, C32, FGDM32, GCDL32, GDS32, GFP32, GGDM32, GNOCD32, INQ32, LD32, LOH32, MSEL32, RLOS32, STS32, TC32, TUR32<BR>
PDFiD.: -
RDS...: NSRL Reference Data Set<BR>-
packers (Kaspersky): Petite
packers (F-Prot): Petite -
@novice48me revoilà avec le rapport du 2eme fichier :
Fichier SIntf16.dll reçu le 2009.05.22 20:48:10 (UTC)
Antivirus Version Dernière mise à jour Résultat
a-squared 4.0.0.101 2009.05.22 -
AhnLab-V3 5.0.0.2 2009.05.22 -
AntiVir 7.9.0.168 2009.05.22 -
Antiy-AVL 2.0.3.1 2009.05.22 -
Authentium 5.1.2.4 2009.05.22 -
Avast 4.8.1335.0 2009.05.22 -
AVG 8.5.0.339 2009.05.22 -
BitDefender 7.2 2009.05.22 -
CAT-QuickHeal 10.00 2009.05.22 -
ClamAV 0.94.1 2009.05.22 -
Comodo 1157 2009.05.08 -
DrWeb 5.0.0.12182 2009.05.22 -
eSafe 7.0.17.0 2009.05.21 -
eTrust-Vet 31.6.6518 2009.05.22 -
F-Prot 4.4.4.56 2009.05.22 -
F-Secure 8.0.14470.0 2009.05.22 -
Fortinet 3.117.0.0 2009.05.22 -
GData 19 2009.05.22 -
Ikarus T3.1.1.49.0 2009.05.22 -
K7AntiVirus 7.10.741 2009.05.21 -
Kaspersky 7.0.0.125 2009.05.22 -
McAfee 5623 2009.05.22 -
McAfee+Artemis 5623 2009.05.22 -
McAfee-GW-Edition 6.7.6 2009.05.22 -
Microsoft 1.4701 2009.05.22 -
NOD32 4098 2009.05.22 -
Norman 6.01.05 2009.05.22 -
nProtect 2009.1.8.0 2009.05.22 -
Panda 10.0.0.14 2009.05.22 -
PCTools 4.4.2.0 2009.05.21 -
Prevx 3.0 2009.05.22 -
Rising 21.30.42.00 2009.05.22 -
Sophos 4.42.0 2009.05.22 -
Sunbelt 3.2.1858.2 2009.05.22 -
Symantec 1.4.4.12 2009.05.22 -
TheHacker 6.3.4.3.331 2009.05.22 -
TrendMicro 8.950.0.1092 2009.05.22 -
VBA32 3.12.10.5 2009.05.22 -
ViRobot 2009.5.22.1747 2009.05.22 -
VirusBuster 4.6.5.0 2009.05.22 -
Information additionnelle
File size: 12067 bytes
MD5...: c72263a0b16b36e0b4bd2fd442fffd54
SHA1..: eeefb634c1077a4dccaa99f3db6ed3d935650110
SHA256: d263e730a51fe2f103fd592ab3489c8c10ecbc66b951a5e8bde7bf4f79c75c45
SHA512: 61ed743f75ab790cacc14eee62456a0d081d7adf252c3b18149ef4f74dade63c<br>39d33da1a7cc23dc19a169e29decd41365e67df208037fd89307fd489f3ec7ec
ssdeep: 192:0HMPKPN+Yi6MdvNiIQol4/RkooyizvJyHK0tdi1mj5mExmGd8Uhb:0sPi+Yi<br>nWIQoUkolizMqyzLd8ab<br>
PEiD..: -
TrID..: File type identification<br>Generic Win/DOS Executable (49.9%)<br>DOS Executable Generic (49.8%)<br>Autodesk FLIC Image File (extensions: flc, fli, cel) (0.1%)
PEInfo: -
PDFiD.: -
RDS...: NSRL Reference Data Set<br>-
CWSandbox info: <a href='http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=c72263a0b16b36e0b4bd2fd442fffd54' target='_blank'>http://research.sunbelt-software.com/...
ThreatExpert info: <a href='http://www.threatexpert.com/report.aspx?md5=c72263a0b16b36e0b4bd2fd442fffd54' target='_blank'>https://www.symantec.com?md5=c72263a0b16b36e0b4bd2fd442fffd54</a>
packers (Kaspersky): PkLite
Antivirus Version Dernière mise à jour Résultat
a-squared 4.0.0.101 2009.05.22 -
AhnLab-V3 5.0.0.2 2009.05.22 -
AntiVir 7.9.0.168 2009.05.22 -
Antiy-AVL 2.0.3.1 2009.05.22 -
Authentium 5.1.2.4 2009.05.22 -
Avast 4.8.1335.0 2009.05.22 -
AVG 8.5.0.339 2009.05.22 -
BitDefender 7.2 2009.05.22 -
CAT-QuickHeal 10.00 2009.05.22 -
ClamAV 0.94.1 2009.05.22 -
Comodo 1157 2009.05.08 -
DrWeb 5.0.0.12182 2009.05.22 -
eSafe 7.0.17.0 2009.05.21 -
eTrust-Vet 31.6.6518 2009.05.22 -
F-Prot 4.4.4.56 2009.05.22 -
F-Secure 8.0.14470.0 2009.05.22 -
Fortinet 3.117.0.0 2009.05.22 -
GData 19 2009.05.22 -
Ikarus T3.1.1.49.0 2009.05.22 -
K7AntiVirus 7.10.741 2009.05.21 -
Kaspersky 7.0.0.125 2009.05.22 -
McAfee 5623 2009.05.22 -
McAfee+Artemis 5623 2009.05.22 -
McAfee-GW-Edition 6.7.6 2009.05.22 -
Microsoft 1.4701 2009.05.22 -
NOD32 4098 2009.05.22 -
Norman 6.01.05 2009.05.22 -
nProtect 2009.1.8.0 2009.05.22 -
Panda 10.0.0.14 2009.05.22 -
PCTools 4.4.2.0 2009.05.21 -
Prevx 3.0 2009.05.22 -
Rising 21.30.42.00 2009.05.22 -
Sophos 4.42.0 2009.05.22 -
Sunbelt 3.2.1858.2 2009.05.22 -
Symantec 1.4.4.12 2009.05.22 -
TheHacker 6.3.4.3.331 2009.05.22 -
TrendMicro 8.950.0.1092 2009.05.22 -
VBA32 3.12.10.5 2009.05.22 -
ViRobot 2009.5.22.1747 2009.05.22 -
VirusBuster 4.6.5.0 2009.05.22 -
Information additionnelle
File size: 12067 bytes
MD5...: c72263a0b16b36e0b4bd2fd442fffd54
SHA1..: eeefb634c1077a4dccaa99f3db6ed3d935650110
SHA256: d263e730a51fe2f103fd592ab3489c8c10ecbc66b951a5e8bde7bf4f79c75c45
SHA512: 61ed743f75ab790cacc14eee62456a0d081d7adf252c3b18149ef4f74dade63c<br>39d33da1a7cc23dc19a169e29decd41365e67df208037fd89307fd489f3ec7ec
ssdeep: 192:0HMPKPN+Yi6MdvNiIQol4/RkooyizvJyHK0tdi1mj5mExmGd8Uhb:0sPi+Yi<br>nWIQoUkolizMqyzLd8ab<br>
PEiD..: -
TrID..: File type identification<br>Generic Win/DOS Executable (49.9%)<br>DOS Executable Generic (49.8%)<br>Autodesk FLIC Image File (extensions: flc, fli, cel) (0.1%)
PEInfo: -
PDFiD.: -
RDS...: NSRL Reference Data Set<br>-
CWSandbox info: <a href='http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=c72263a0b16b36e0b4bd2fd442fffd54' target='_blank'>http://research.sunbelt-software.com/...
ThreatExpert info: <a href='http://www.threatexpert.com/report.aspx?md5=c72263a0b16b36e0b4bd2fd442fffd54' target='_blank'>https://www.symantec.com?md5=c72263a0b16b36e0b4bd2fd442fffd54</a>
packers (Kaspersky): PkLite -
@novice48et maintenant le rapport du 3eme fichier :
Fichier SIntf32.dll reçu le 2009.05.22 20:56:25 (UTC)
Antivirus Version Dernière mise à jour Résultat
a-squared 4.0.0.101 2009.05.22 -
AhnLab-V3 5.0.0.2 2009.05.22 -
AntiVir 7.9.0.168 2009.05.22 -
Antiy-AVL 2.0.3.1 2009.05.22 -
Authentium 5.1.2.4 2009.05.22 -
Avast 4.8.1335.0 2009.05.22 -
AVG 8.5.0.339 2009.05.22 -
BitDefender 7.2 2009.05.22 -
CAT-QuickHeal 10.00 2009.05.22 -
ClamAV 0.94.1 2009.05.22 -
Comodo 1157 2009.05.08 -
DrWeb 5.0.0.12182 2009.05.22 -
eSafe 7.0.17.0 2009.05.21 Suspicious File
eTrust-Vet 31.6.6518 2009.05.22 -
F-Prot 4.4.4.56 2009.05.22 -
F-Secure 8.0.14470.0 2009.05.22 -
Fortinet 3.117.0.0 2009.05.22 -
GData 19 2009.05.22 -
Ikarus T3.1.1.49.0 2009.05.22 -
K7AntiVirus 7.10.741 2009.05.21 -
Kaspersky 7.0.0.125 2009.05.22 -
McAfee 5623 2009.05.22 -
McAfee+Artemis 5623 2009.05.22 -
McAfee-GW-Edition 6.7.6 2009.05.22 -
Microsoft 1.4701 2009.05.22 -
NOD32 4098 2009.05.22 -
Norman 6.01.05 2009.05.22 -
nProtect 2009.1.8.0 2009.05.22 -
Panda 10.0.0.14 2009.05.22 -
PCTools 4.4.2.0 2009.05.21 -
Prevx 3.0 2009.05.22 -
Rising 21.30.42.00 2009.05.22 -
Sophos 4.42.0 2009.05.22 -
Sunbelt 3.2.1858.2 2009.05.22 -
Symantec 1.4.4.12 2009.05.22 -
TheHacker 6.3.4.3.331 2009.05.22 -
TrendMicro 8.950.0.1092 2009.05.22 -
VBA32 3.12.10.5 2009.05.22 -
ViRobot 2009.5.22.1747 2009.05.22 -
VirusBuster 4.6.5.0 2009.05.22 -
Information additionnelle
File size: 17212 bytes
MD5...: 9a7a95e48e629a075c6d883d0ee524c8
SHA1..: 8dd7c09354a5b9396ceb5ceefb11dde9aee1f2dc
SHA256: 48f7be0521aad955fbc9af57608a76d0c0222d5cf628b2448b9a04071e2d77a3
SHA512: 149bca9d42799d5cf6cd6ac1d3642c90f47912f511106794621dad0e5e40c6db<br>f0a5d11bd9152f247099230ba6a77f7734bae596c776607132996d7b50944644
ssdeep: 384:g/iwCe8zdTyBsyqAIZhgJYGRPOdhHDOjPDpFycsHni3UUj6xc:JWsyqAggJ1<br>Od1Gzytn3xc<br>
PEiD..: Petite v2.1 (2)
TrID..: File type identification<br>Win32 Executable Generic (42.3%)<br>Win32 Dynamic Link Library (generic) (37.6%)<br>Generic Win/DOS Executable (9.9%)<br>DOS Executable Generic (9.9%)<br>Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
PEInfo: PE Structure information<br><br>( base data )<br>entrypointaddress.: 0x710b<br>timedatestamp.....: 0x383909f8 (Mon Nov 22 09:16:40 1999)<br>machinetype.......: 0x14c (I386)<br><br>( 3 sections )<br>name viradd virsiz rawdsiz ntrpy md5<br>.text 0x1000 0x6000 0x253c 7.98 ff03a803806f5fb778ca56586c77df23<br>.petite 0x7000 0x184c 0x1a00 6.21 358fc1182ddc173909407b9e5bde7b85<br> 0x9000 0x1000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e<br><br>( 2 imports ) <br>> KERNEL32.dll: ExitProcess, LoadLibraryA, GetProcAddress, GlobalAlloc<br>> user32.dll: MessageBoxA, wsprintfA<br><br>( 15 exports ) <br>ADI32, ATI32, C32, FGDM32, GCDL32, GDS32, GFP32, GGDM32, GNOCD32, LD32, LOH32, RLOS32, STS32, TC32, thk_ThunkData32<br>
PDFiD.: -
RDS...: NSRL Reference Data Set<br>-
packers (Kaspersky): Petite
packers (F-Prot): Petite
Antivirus Version Dernière mise à jour Résultat
a-squared 4.0.0.101 2009.05.22 -
AhnLab-V3 5.0.0.2 2009.05.22 -
AntiVir 7.9.0.168 2009.05.22 -
Antiy-AVL 2.0.3.1 2009.05.22 -
Authentium 5.1.2.4 2009.05.22 -
Avast 4.8.1335.0 2009.05.22 -
AVG 8.5.0.339 2009.05.22 -
BitDefender 7.2 2009.05.22 -
CAT-QuickHeal 10.00 2009.05.22 -
ClamAV 0.94.1 2009.05.22 -
Comodo 1157 2009.05.08 -
DrWeb 5.0.0.12182 2009.05.22 -
eSafe 7.0.17.0 2009.05.21 Suspicious File
eTrust-Vet 31.6.6518 2009.05.22 -
F-Prot 4.4.4.56 2009.05.22 -
F-Secure 8.0.14470.0 2009.05.22 -
Fortinet 3.117.0.0 2009.05.22 -
GData 19 2009.05.22 -
Ikarus T3.1.1.49.0 2009.05.22 -
K7AntiVirus 7.10.741 2009.05.21 -
Kaspersky 7.0.0.125 2009.05.22 -
McAfee 5623 2009.05.22 -
McAfee+Artemis 5623 2009.05.22 -
McAfee-GW-Edition 6.7.6 2009.05.22 -
Microsoft 1.4701 2009.05.22 -
NOD32 4098 2009.05.22 -
Norman 6.01.05 2009.05.22 -
nProtect 2009.1.8.0 2009.05.22 -
Panda 10.0.0.14 2009.05.22 -
PCTools 4.4.2.0 2009.05.21 -
Prevx 3.0 2009.05.22 -
Rising 21.30.42.00 2009.05.22 -
Sophos 4.42.0 2009.05.22 -
Sunbelt 3.2.1858.2 2009.05.22 -
Symantec 1.4.4.12 2009.05.22 -
TheHacker 6.3.4.3.331 2009.05.22 -
TrendMicro 8.950.0.1092 2009.05.22 -
VBA32 3.12.10.5 2009.05.22 -
ViRobot 2009.5.22.1747 2009.05.22 -
VirusBuster 4.6.5.0 2009.05.22 -
Information additionnelle
File size: 17212 bytes
MD5...: 9a7a95e48e629a075c6d883d0ee524c8
SHA1..: 8dd7c09354a5b9396ceb5ceefb11dde9aee1f2dc
SHA256: 48f7be0521aad955fbc9af57608a76d0c0222d5cf628b2448b9a04071e2d77a3
SHA512: 149bca9d42799d5cf6cd6ac1d3642c90f47912f511106794621dad0e5e40c6db<br>f0a5d11bd9152f247099230ba6a77f7734bae596c776607132996d7b50944644
ssdeep: 384:g/iwCe8zdTyBsyqAIZhgJYGRPOdhHDOjPDpFycsHni3UUj6xc:JWsyqAggJ1<br>Od1Gzytn3xc<br>
PEiD..: Petite v2.1 (2)
TrID..: File type identification<br>Win32 Executable Generic (42.3%)<br>Win32 Dynamic Link Library (generic) (37.6%)<br>Generic Win/DOS Executable (9.9%)<br>DOS Executable Generic (9.9%)<br>Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
PEInfo: PE Structure information<br><br>( base data )<br>entrypointaddress.: 0x710b<br>timedatestamp.....: 0x383909f8 (Mon Nov 22 09:16:40 1999)<br>machinetype.......: 0x14c (I386)<br><br>( 3 sections )<br>name viradd virsiz rawdsiz ntrpy md5<br>.text 0x1000 0x6000 0x253c 7.98 ff03a803806f5fb778ca56586c77df23<br>.petite 0x7000 0x184c 0x1a00 6.21 358fc1182ddc173909407b9e5bde7b85<br> 0x9000 0x1000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e<br><br>( 2 imports ) <br>> KERNEL32.dll: ExitProcess, LoadLibraryA, GetProcAddress, GlobalAlloc<br>> user32.dll: MessageBoxA, wsprintfA<br><br>( 15 exports ) <br>ADI32, ATI32, C32, FGDM32, GCDL32, GDS32, GFP32, GGDM32, GNOCD32, LD32, LOH32, RLOS32, STS32, TC32, thk_ThunkData32<br>
PDFiD.: -
RDS...: NSRL Reference Data Set<br>-
packers (Kaspersky): Petite
packers (F-Prot): Petite -
@novice48je vais refaire j'ai oublié de cliquer sur appliquer !!!!
-
-
ok salut désolé pour l abandon involontaire mais forcé de ma part
relances rsit stp-
Logfile of random's system information tool 1.06 (written by random/random)
Run by xp at 2009-05-21 22:37:56
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 12 GB (40%) free of 31 GB
Total RAM: 1022 MB (33% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:38:15, on 21/05/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Motive\McciCMService.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Apps\Softex\OmniPass\Omniserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
C:\WINDOWS\system32\SearchIndexer.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Microsoft LifeCam\LifeTray.exe
C:\Apps\Softex\OmniPass\OPXPApp.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
C:\APPS\Powercinema\PCMService.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
C:\Program Files\USB Disk Win98 Driver\Res.EXE
C:\Program Files\Orange\LiveAssistant.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\vVX1000.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\APPS\SMP\SmpSys.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
C:\program files\orange\media player\Media Player.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\OFFICE One6.5\OFFICE One Clock\ooneclockv65.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Micro Application\Les 4 Dictionnaires Utiles\MediaDICO4Ut.EXE
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\Micro Application\Les 4 Dictionnaires Utiles\Rac4Ut.EXE
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\APC\APC PowerChute Personal Edition\apcsystray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
D:\Documents and Settings\xp\Bureau\RSIT.exe
C:\Program Files\trend micro\xp.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://config.aolbox/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
O4 - HKLM\..\Run: [DetectorApp] C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [OmniPass] C:\Apps\Softex\OmniPass\scureapp.exe
O4 - HKLM\..\Run: [PCMService] "c:\APPS\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [BOOT] C:\Program Files\ISSENDIS\ISSENDIS WebUpdate v6\issendiswebupdatev6.exe /BOOT
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
O4 - HKLM\..\Run: [USB Storage Toolbox] C:\Program Files\USB Disk Win98 Driver\Res.EXE
O4 - HKLM\..\Run: [Orange_McciTrayApp] C:\Program Files\Orange\LiveAssistant.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [SmpcSys] C:\APPS\SMP\SmpSys.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKCU\..\Run: [MediaDICO4Ut] C:\Program Files\Micro Application\Les 4 Dictionnaires Utiles\LanceMediaDICO4Ut.exe Lancement
O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
O4 - HKCU\..\Run: [OrangePlayer] c:\program files\orange\media player\Media Player.exe /systray
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [OrangePlayer] c:\program files\orange\media player\Media Player.exe /systray (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: APC UPS Status.lnk = ?
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O4 - Global Startup: OFFICE One Clock v6.5.lnk = C:\Program Files\OFFICE One6.5\OFFICE One Clock\ooneclockv65.exe
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll (file missing)
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O15 - Trusted Zone: http://pfttbc.ft.motive.com
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Plugin Control) - http://appldnld.apple.com.edgesuite.net/...
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.av.fr.aol.com/molbin/shared/mcinsctl/fr/4,0,0,84/mcinsctl.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {745395C8-D0E1-4227-8586-624CA9A10A8D} (AxisMediaControl Class) - http://admyvorne.dyndns.org:8888/activex/AMC.cab
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://asprettes.spaces.live.com/PhotoUpload/MsnPUpld.cab
O16 - DPF: {9DF1C00D-8426-4337-972C-DC042D19A916} (FTMediaPlayer Class) - http://webtv.guidetv.orange.fr/resources/OCS_8884.cab
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.extrafilm.fr/NET/Import/ImageUploader3.cab
O16 - DPF: {BA3BAF69-72B1-4BCE-BE96-A4D304EAFBB4} (PhotoBox uploader) - http://assets.photobox.com/assets/aurigma/ImageUploader4.cab?20080930140356
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.av.fr.aol.com/molbin/shared/mcgdmgr/fr/1,0,0,21/mcgdmgr.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://a532.g.akamai.net/...
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: APC UPS Service - American Power Conversion Corporation - C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: McciCMService - Motive Communications, Inc. - C:\Program Files\Fichiers communs\Motive\McciCMService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Softex OmniPass Service (omniserv) - Softex Inc. - C:\Apps\Softex\OmniPass\Omniserv.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
-
-
---> Désactive ton antivirus le temps de la manipulation car OTMoveIt3 est détecté comme une infection à tort.
---> Télécharge OTMoveIt3 (OldTimer) sur ton Bureau :
---> Double-clique sur OTMoveIt3.exe afin de le lancer.
---> Copie (Ctrl+C) le texte suivant ci-dessous :
:processes
explorer.exe
:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7C554162-8CB7-45A4-B8F4-8EA1C75885F9}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"PHIME2002ASync"=-
"PHIME2002A"=-
"nwiz"=-
"RTHDCPL"=-
"Alcmtr"=-
"ISUSScheduler"=-
"IMJPMIG8.1"=-
"RealTray"=-
"SSBkgdUpdate"=-
"Adobe Reader Speed Launcher"=-
"SunJavaUpdateSched"=-
"QuickTime Task"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=-
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\Internet Explorer\IEXPLORE.EXE"="C:\Program Files\Internet Explorer\IEXPLORE.EXE:*:Enabled:Internet Explorer"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d93753a0-f530-11dd-8a45-0016e61ccca0}\shell\AutoRun\command]
:commands
[purity]
[emptytemp]
[start explorer]
[reboot]
---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.
---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.
Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.
---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
Le nom du rapport correspond au moment de sa création : date_heure.log
-
bonjour, voilà le rapport :
========== PROCESSES ==========
Process explorer.exe killed successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7C554162-8CB7-45A4-B8F4-8EA1C75885F9}\\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\PHIME2002ASync deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\PHIME2002A deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\nwiz deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\RTHDCPL deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Alcmtr deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ISUSScheduler deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\IMJPMIG8.1 deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\RealTray deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SSBkgdUpdate deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\swg deleted successfully.
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\"C:\Program Files\Internet Explorer\IEXPLORE.EXE"|"C:\Program Files\Internet Explorer\IEXPLORE.EXE:*:Enabled:Internet Explorer" /E : value set successfully!
========== COMMANDS ==========
File delete failed. D:\DOCUME~1\xp\LOCALS~1\Temp\etilqs_xSpmxvYBeUkeVhnrfA2C scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. D:\Documents and Settings\xp\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
User's Temporary Internet Files folder emptied.
File delete failed. D:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. D:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. D:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
Local Service Temp folder emptied.
File delete failed. D:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Network Service Temp folder emptied.
File delete failed. D:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Network Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\CLML_AGENT_LOG1.txt scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_5c8.dat scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\sqlite_a0ROOk550tHiqoC scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
File delete failed. D:\Documents and Settings\xp\Local Settings\Application Data\Mozilla\Firefox\Profiles\znc585mq.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. D:\Documents and Settings\xp\Local Settings\Application Data\Mozilla\Firefox\Profiles\znc585mq.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. D:\Documents and Settings\xp\Local Settings\Application Data\Mozilla\Firefox\Profiles\znc585mq.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. D:\Documents and Settings\xp\Local Settings\Application Data\Mozilla\Firefox\Profiles\znc585mq.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
File delete failed. D:\Documents and Settings\xp\Local Settings\Application Data\Mozilla\Firefox\Profiles\znc585mq.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
File delete failed. D:\Documents and Settings\xp\Local Settings\Application Data\Mozilla\Firefox\Profiles\znc585mq.default\XUL.mfl scheduled to be deleted on reboot.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully
OTMoveIt3 by OldTimer - Version 1.0.11.0 log created on 05152009_190311
Files moved on Reboot...
File D:\DOCUME~1\xp\LOCALS~1\Temp\etilqs_xSpmxvYBeUkeVhnrfA2C not found!
File move failed. C:\WINDOWS\temp\CLML_AGENT_LOG1.txt scheduled to be moved on reboot.
File C:\WINDOWS\temp\Perflib_Perfdata_5c8.dat not found!
File C:\WINDOWS\temp\sqlite_a0ROOk550tHiqoC not found!
D:\Documents and Settings\xp\Local Settings\Application Data\Mozilla\Firefox\Profiles\znc585mq.default\Cache\_CACHE_001_ moved successfully.
D:\Documents and Settings\xp\Local Settings\Application Data\Mozilla\Firefox\Profiles\znc585mq.default\Cache\_CACHE_002_ moved successfully.
D:\Documents and Settings\xp\Local Settings\Application Data\Mozilla\Firefox\Profiles\znc585mq.default\Cache\_CACHE_003_ moved successfully.
D:\Documents and Settings\xp\Local Settings\Application Data\Mozilla\Firefox\Profiles\znc585mq.default\Cache\_CACHE_MAP_ moved successfully.
D:\Documents and Settings\xp\Local Settings\Application Data\Mozilla\Firefox\Profiles\znc585mq.default\urlclassifier3.sqlite moved successfully.
D:\Documents and Settings\xp\Local Settings\Application Data\Mozilla\Firefox\Profiles\znc585mq.default\XUL.mfl moved successfully.
-
-
ok fin pret(e) , previens moi
-
bonjour,
j'ai bien dormi (j'espère que vous aussi) et je suis d'attaque pour continuer...
Biensûr si pour vous, c'est toujours ok !
D'ailleurs je vous remercie encore de prendre de votre temps pour m'aider même si je ne comprends pas tout...
ce que je vois pour l'instant c'est quelqu'un qui analyse mon ordi dans les plus petits détails pour trouver et supprimer les virus et les trucs bidules chouettes nuisibles... c'est ça non ? et vous en trouver ? moi, en tout cas je vois des noms qui ne devrait plus être sur mon ordi comme mac afee , aol... je l'ai avais supprimer ??? surtout aol ... car c'est 3 lettres je les ai en horreur... !!!!
Bon, que dois je faire aujourd'hui ... après le rapport de hier soir...
Ah , je voulais vous dire aussi hier soir j'ai télé charger nouvelle version d' antivir et ce matin j'ai lancé antivir et il a trouvé un cheval de troie et il est en quarantaine...
voilà à+
-
-
voilà le rapport ... est ce que c'est possible de continuer demain ou quand vous le pouvez car pour moi il est tard... et je vous avoue que je ne sais plus trop ce que je fais ... merci beaucoup
Logfile of random's system information tool 1.06 (written by random/random)
Run by xp at 2009-05-14 22:56:56
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 12 GB (40%) free of 31 GB
Total RAM: 1022 MB (21% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:57:09, on 14/05/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Motive\McciCMService.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Apps\Softex\OmniPass\Omniserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
C:\WINDOWS\system32\SearchIndexer.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Apps\Softex\OmniPass\OPXPApp.exe
C:\Program Files\Microsoft LifeCam\LifeTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\APPS\Powercinema\PCMService.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
C:\Program Files\USB Disk Win98 Driver\Res.EXE
C:\Program Files\Orange\LiveAssistant.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\vVX1000.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\APPS\SMP\SmpSys.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
C:\program files\orange\media player\Media Player.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\OFFICE One6.5\OFFICE One Clock\ooneclockv65.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\APC\APC PowerChute Personal Edition\apcsystray.exe
C:\Program Files\Micro Application\Les 4 Dictionnaires Utiles\MediaDICO4Ut.EXE
C:\Program Files\Micro Application\Les 4 Dictionnaires Utiles\Rac4Ut.EXE
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
D:\Documents and Settings\xp\Mes documents\Mes images\photosfirefox\RSIT(3).exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\trend micro\xp.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://config.aolbox/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
O2 - BHO: (no name) - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
O4 - HKLM\..\Run: [DetectorApp] C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [OmniPass] C:\Apps\Softex\OmniPass\scureapp.exe
O4 - HKLM\..\Run: [PCMService] "c:\APPS\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32"
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [BOOT] C:\Program Files\ISSENDIS\ISSENDIS WebUpdate v6\issendiswebupdatev6.exe /BOOT
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
O4 - HKLM\..\Run: [USB Storage Toolbox] C:\Program Files\USB Disk Win98 Driver\Res.EXE
O4 - HKLM\..\Run: [Orange_McciTrayApp] C:\Program Files\Orange\LiveAssistant.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [SmpcSys] C:\APPS\SMP\SmpSys.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKCU\..\Run: [MediaDICO4Ut] C:\Program Files\Micro Application\Les 4 Dictionnaires Utiles\LanceMediaDICO4Ut.exe Lancement
O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
O4 - HKCU\..\Run: [OrangePlayer] c:\program files\orange\media player\Media Player.exe /systray
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [OrangePlayer] c:\program files\orange\media player\Media Player.exe /systray (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: APC UPS Status.lnk = ?
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O4 - Global Startup: OFFICE One Clock v6.5.lnk = C:\Program Files\OFFICE One6.5\OFFICE One Clock\ooneclockv65.exe
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll (file missing)
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O15 - Trusted Zone: http://pfttbc.ft.motive.com
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Plugin Control) - http://appldnld.apple.com/QuickTime/qtactivex/qtplugin.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.av.fr.aol.com/molbin/shared/mcinsctl/fr/4,0,0,84/mcinsctl.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {745395C8-D0E1-4227-8586-624CA9A10A8D} (AxisMediaControl Class) - http://admyvorne.dyndns.org:8888/activex/AMC.cab
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://asprettes.spaces.live.com/PhotoUpload/MsnPUpld.cab
O16 - DPF: {9DF1C00D-8426-4337-972C-DC042D19A916} (FTMediaPlayer Class) - http://webtv.guidetv.orange.fr/resources/OCS_8884.cab
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.extrafilm.fr/NET/Import/ImageUploader3.cab
O16 - DPF: {BA3BAF69-72B1-4BCE-BE96-A4D304EAFBB4} (PhotoBox uploader) - http://assets.photobox.com/assets/aurigma/ImageUploader4.cab?20080930140356
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.av.fr.aol.com/molbin/shared/mcgdmgr/fr/1,0,0,21/mcgdmgr.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://a532.g.akamai.net/...
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: APC UPS Service - American Power Conversion Corporation - C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: McciCMService - Motive Communications, Inc. - C:\Program Files\Fichiers communs\Motive\McciCMService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Softex OmniPass Service (omniserv) - Softex Inc. - C:\Apps\Softex\OmniPass\Omniserv.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
-
relances rsit stp
-
double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option "Suppression + Hosts"
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)-
le rapport :
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) D CPU 2.80GHz )
BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
USER : xp ( Administrator )
BOOT : Normal boot
Antivirus : AntiVir Desktop 9.0.1.26 (Activated)
Firewall : Norton Internet Worm Protection 2006 (Not Activated)
C:\ (Local Disk) - NTFS - Total:29 Go (Free:11 Go)
D:\ (Local Disk) - NTFS - Total:195 Go (Free:181 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 14/05/2009|22:42 )
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION
-
[ Fichier Hosts ] .. Restaure!
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
Supprime! - C:\Program Files\Viewpoint
Supprime! - D:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans APPLIC~1
[07/11/2008|12:00] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[07/02/2009|18:09] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[24/03/2009|10:34] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[14/05/2009|17:58] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[08/06/2007|21:21] D:\DOCUME~1\ALLUSE~1\APPLIC~1\blah 16 cdrom tool
[28/07/2008|18:26] D:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
[27/01/2007|22:36] D:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
[26/01/2007|16:20] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Ciel
[03/01/2007|17:23] D:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[26/11/2006|00:00] D:\DOCUME~1\ALLUSE~1\APPLIC~1\EnterNHelp
[12/05/2009|08:58] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[14/05/2009|20:36] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[03/08/2006|12:05] D:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[08/07/2008|22:46] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[06/09/2007|21:38] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Macromedia
[02/03/2009|12:41] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[15/10/2007|14:27] D:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee
[01/09/2007|22:14] D:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee.com
[23/10/2007|11:23] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[17/03/2009|22:03] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[13/10/2008|22:26] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive
[26/11/2006|12:54] D:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies
[25/11/2006|23:53] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Nikon
[02/09/2006|15:04] D:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[03/08/2006|12:02] D:\DOCUME~1\ALLUSE~1\APPLIC~1\OD2
[03/08/2006|20:39] D:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[27/01/2007|22:41] D:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
[15/10/2007|14:24] D:\DOCUME~1\ALLUSE~1\APPLIC~1\SiteAdvisor
[22/02/2009|19:58] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[28/01/2009|21:55] D:\DOCUME~1\ALLUSE~1\APPLIC~1\SmartSound Software Inc
[28/07/2008|18:25] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Ericsson
[14/05/2009|18:23] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[03/09/2006|21:26] D:\DOCUME~1\ALLUSE~1\APPLIC~1\SSScanAppDataDir
[02/09/2006|15:20] D:\DOCUME~1\ALLUSE~1\APPLIC~1\SSScanWizard
[16/11/2006|10:00] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[03/08/2006|12:13] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[26/11/2006|00:00] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Ultima_T15
[03/08/2006|12:04] D:\DOCUME~1\ALLUSE~1\APPLIC~1\VadeRetro
[05/12/2006|17:17] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[04/01/2007|16:26] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[07/09/2007|12:06] D:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[03/08/2006|20:39] D:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[31/01/2009|20:31] D:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[03/08/2006|12:22] D:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[03/08/2006|12:03] D:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver
[05/02/2009|09:11] D:\DOCUME~1\INVIT~1\APPLIC~1\Adobe
[27/01/2007|17:18] D:\DOCUME~1\INVIT~1\APPLIC~1\Google
[03/08/2006|20:39] D:\DOCUME~1\INVIT~1\APPLIC~1\Identities
[03/08/2006|12:10] D:\DOCUME~1\INVIT~1\APPLIC~1\Macromedia
[05/09/2007|15:21] D:\DOCUME~1\INVIT~1\APPLIC~1\McAfee
[03/04/2007|18:46] D:\DOCUME~1\INVIT~1\APPLIC~1\McAfee.com Personal Firewall
[27/01/2007|17:18] D:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft
[05/02/2009|09:13] D:\DOCUME~1\INVIT~1\APPLIC~1\Motive
[05/02/2009|09:08] D:\DOCUME~1\INVIT~1\APPLIC~1\Windows Desktop Search
[03/08/2006|12:03] D:\DOCUME~1\INVIT~1\APPLIC~1\You've Got Pictures Screensaver
[02/09/2007|10:56] D:\DOCUME~1\LOCALS~1\APPLIC~1\McAfee
[03/12/2008|23:26] D:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[07/09/2007|12:14] D:\DOCUME~1\NETWOR~1\APPLIC~1\Identities
[07/09/2007|19:12] D:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[30/07/2007|11:38] D:\DOCUME~1\quentin\APPLIC~1\Adobe
[01/04/2007|18:10] D:\DOCUME~1\quentin\APPLIC~1\Canon
[04/10/2006|19:14] D:\DOCUME~1\quentin\APPLIC~1\CyberLink
[29/01/2009|17:52] D:\DOCUME~1\quentin\APPLIC~1\Google
[11/12/2006|19:32] D:\DOCUME~1\quentin\APPLIC~1\Ice Age 2
[03/08/2006|20:39] D:\DOCUME~1\quentin\APPLIC~1\Identities
[11/12/2006|19:22] D:\DOCUME~1\quentin\APPLIC~1\Macromedia
[08/09/2007|15:39] D:\DOCUME~1\quentin\APPLIC~1\McAfee
[03/04/2007|18:05] D:\DOCUME~1\quentin\APPLIC~1\McAfee.com Personal Firewall
[18/09/2006|18:06] D:\DOCUME~1\quentin\APPLIC~1\Microsoft
[23/10/2007|17:25] D:\DOCUME~1\quentin\APPLIC~1\Mozilla
[01/04/2007|18:25] D:\DOCUME~1\quentin\APPLIC~1\Sun
[23/10/2007|17:26] D:\DOCUME~1\quentin\APPLIC~1\Talkback
[18/09/2006|20:51] D:\DOCUME~1\quentin\APPLIC~1\Ulead Systems
[08/09/2007|15:39] D:\DOCUME~1\quentin\APPLIC~1\Windows Desktop Search
[03/08/2006|12:03] D:\DOCUME~1\quentin\APPLIC~1\You've Got Pictures Screensaver
[29/07/2008|21:21] D:\DOCUME~1\xp\APPLIC~1\Adobe
[01/03/2007|22:32] D:\DOCUME~1\xp\APPLIC~1\AdobeUM
[22/03/2009|10:46] D:\DOCUME~1\xp\APPLIC~1\Apple Computer
[26/11/2006|00:40] D:\DOCUME~1\xp\APPLIC~1\ArcSoft
[11/01/2007|13:01] D:\DOCUME~1\xp\APPLIC~1\Canon
[03/09/2006|18:46] D:\DOCUME~1\xp\APPLIC~1\CyberLink
[08/03/2009|15:16] D:\DOCUME~1\xp\APPLIC~1\dvdcss
[30/01/2009|15:45] D:\DOCUME~1\xp\APPLIC~1\Google
[19/09/2006|19:43] D:\DOCUME~1\xp\APPLIC~1\Help
[14/01/2009|19:04] D:\DOCUME~1\xp\APPLIC~1\Ice Age 2
[03/08/2006|20:39] D:\DOCUME~1\xp\APPLIC~1\Identities
[28/07/2008|18:23] D:\DOCUME~1\xp\APPLIC~1\InstallShield
[23/03/2007|15:39] D:\DOCUME~1\xp\APPLIC~1\Lavasoft
[26/11/2006|11:40] D:\DOCUME~1\xp\APPLIC~1\Leadertech
[29/04/2008|17:36] D:\DOCUME~1\xp\APPLIC~1\ma-config.com
[04/11/2006|17:25] D:\DOCUME~1\xp\APPLIC~1\Macromedia
[02/03/2009|12:41] D:\DOCUME~1\xp\APPLIC~1\Malwarebytes
[15/10/2007|14:25] D:\DOCUME~1\xp\APPLIC~1\McAfee
[03/04/2007|09:32] D:\DOCUME~1\xp\APPLIC~1\McAfee.com Personal Firewall
[14/05/2009|13:54] D:\DOCUME~1\xp\APPLIC~1\Media Player
[04/01/2007|22:00] D:\DOCUME~1\xp\APPLIC~1\Microsoft
[13/10/2008|22:25] D:\DOCUME~1\xp\APPLIC~1\Motive
[25/06/2008|21:27] D:\DOCUME~1\xp\APPLIC~1\Mozilla
[03/01/2007|22:29] D:\DOCUME~1\xp\APPLIC~1\MSNInstaller
[26/11/2006|12:54] D:\DOCUME~1\xp\APPLIC~1\muvee Technologies
[26/11/2006|00:02] D:\DOCUME~1\xp\APPLIC~1\Nikon
[03/09/2006|19:07] D:\DOCUME~1\xp\APPLIC~1\OD2
[02/09/2006|15:14] D:\DOCUME~1\xp\APPLIC~1\OFFICE One v6
[10/02/2009|22:37] D:\DOCUME~1\xp\APPLIC~1\OnlineStorage
[23/12/2008|22:54] D:\DOCUME~1\xp\APPLIC~1\OpenOffice.org
[23/12/2008|22:46] D:\DOCUME~1\xp\APPLIC~1\OpenOffice.org2
[26/10/2007|06:50] D:\DOCUME~1\xp\APPLIC~1\Real
[27/01/2007|22:41] D:\DOCUME~1\xp\APPLIC~1\ScanSoft
[07/05/2009|17:58] D:\DOCUME~1\xp\APPLIC~1\Skype
[07/05/2009|17:56] D:\DOCUME~1\xp\APPLIC~1\skypePM
[26/11/2006|11:42] D:\DOCUME~1\xp\APPLIC~1\Sonic
[03/09/2006|18:00] D:\DOCUME~1\xp\APPLIC~1\Sun
[15/10/2007|13:56] D:\DOCUME~1\xp\APPLIC~1\Talkback
[05/09/2006|12:58] D:\DOCUME~1\xp\APPLIC~1\Ulead Systems
[05/11/2006|10:01] D:\DOCUME~1\xp\APPLIC~1\VadeRetro
[29/04/2008|18:27] D:\DOCUME~1\xp\APPLIC~1\vlc
[24/09/2008|22:32] D:\DOCUME~1\xp\APPLIC~1\Windows Desktop Search
[25/09/2008|11:43] D:\DOCUME~1\xp\APPLIC~1\Windows Search
[03/08/2006|12:03] D:\DOCUME~1\xp\APPLIC~1\You've Got Pictures Screensaver
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[14/05/2009 20:36][--a------] C:\WINDOWS\tasks\Google Software Updater.job
[11/05/2009 22:16][--a------] C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[14/05/2009 17:56][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[07/11/2008|12:00] C:\Program Files\Adobe
[17/10/2008|13:58] C:\Program Files\AGI
[15/10/2007|15:41] C:\Program Files\Alwil Software
[02/07/2007|18:23] C:\Program Files\Anuman Interactive
[18/01/2009|10:58] C:\Program Files\APC
[07/02/2009|18:09] C:\Program Files\Apple Software Update
[25/11/2006|23:47] C:\Program Files\ArcSoft
[02/02/2009|22:10] C:\Program Files\Avanquest update
[14/05/2009|17:58] C:\Program Files\Avira
[22/08/2007|09:19] C:\Program Files\Axis Communications
[27/01/2007|22:45] C:\Program Files\Canon
[27/01/2007|22:35] C:\Program Files\CanonBJ
[14/05/2009|14:43] C:\Program Files\CCleaner
[16/08/2008|09:47] C:\Program Files\ComfyWare
[26/11/2008|10:34] C:\Program Files\directx
[02/10/2008|14:55] C:\Program Files\EMME
[24/03/2009|10:34] C:\Program Files\Fichiers communs
[03/08/2006|12:05] C:\Program Files\GMixon
[30/01/2009|15:44] C:\Program Files\Google
[03/08/2006|12:04] C:\Program Files\Goto Software
[28/03/2009|16:35] C:\Program Files\InstallShield Installation Information
[08/05/2009|16:35] C:\Program Files\Internet Explorer
[27/11/2008|18:32] C:\Program Files\IrfanView
[02/09/2006|15:07] C:\Program Files\ISSENDIS
[10/04/2009|23:58] C:\Program Files\Java
[23/12/2008|22:50] C:\Program Files\JRE
[14/05/2009|14:06] C:\Program Files\Lavasoft
[03/08/2006|12:03] C:\Program Files\Learn2.com
[29/04/2008|17:36] C:\Program Files\ma-config.com
[10/04/2009|23:52] C:\Program Files\Malwarebytes' Anti-Malware
[10/02/2009|22:28] C:\Program Files\mes donn‚es
[14/08/2008|10:15] C:\Program Files\Messenger
[14/04/2009|21:57] C:\Program Files\Messenger Plus! Live
[09/04/2008|16:10] C:\Program Files\Micro Application
[09/05/2007|08:42] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[16/08/2004|18:11] C:\Program Files\microsoft frontpage
[16/02/2009|22:40] C:\Program Files\Microsoft LifeCam
[06/11/2007|19:30] C:\Program Files\Microsoft Office
[25/02/2009|20:37] C:\Program Files\Microsoft Silverlight
[07/09/2007|12:14] C:\Program Files\Microsoft SQL Server Compact Edition
[28/03/2009|16:32] C:\Program Files\Mindscape
[04/08/2008|20:04] C:\Program Files\Movie Maker
[14/05/2009|22:38] C:\Program Files\Mozilla Firefox
[25/02/2009|20:17] C:\Program Files\MSBuild
[17/10/2007|12:39] C:\Program Files\MSN
[16/08/2004|18:03] C:\Program Files\MSN Gaming Zone
[12/11/2008|13:54] C:\Program Files\MSXML 4.0
[07/02/2009|15:49] C:\Program Files\My Company Name
[04/08/2008|20:02] C:\Program Files\NetMeeting
[25/11/2006|23:53] C:\Program Files\Nikon
[10/01/2009|15:47] C:\Program Files\OFFICE One6.5
[16/08/2004|18:03] C:\Program Files\Online Services
[05/06/2008|21:13] C:\Program Files\OpenOffice.org 2.3
[23/12/2008|22:50] C:\Program Files\OpenOffice.org 2.4
[23/12/2008|22:50] C:\Program Files\OpenOffice.org 3
[29/04/2009|21:11] C:\Program Files\Orange
[04/08/2008|20:01] C:\Program Files\Outlook Express
[09/05/2009|12:30] C:\Program Files\QuickTime
[03/08/2006|12:02] C:\Program Files\Real
[15/10/2007|13:52] C:\Program Files\Realtek
[25/02/2009|20:17] C:\Program Files\Reference Assemblies
[27/01/2007|22:40] C:\Program Files\ScanSoft
[16/08/2004|18:07] C:\Program Files\Services en ligne
[03/08/2006|12:10] C:\Program Files\ShowTime
[14/01/2009|16:11] C:\Program Files\Sierra
[03/08/2006|12:13] C:\Program Files\SmartSound Software
[03/08/2006|12:05] C:\Program Files\Sonic
[28/07/2008|18:25] C:\Program Files\Sony Ericsson
[11/03/2009|19:50] C:\Program Files\Spybot - Search & Destroy
[14/05/2009|21:34] C:\Program Files\Trend Micro
[03/08/2006|12:13] C:\Program Files\Ulead Systems
[07/06/2007|19:58] C:\Program Files\USB Disk Win98 Driver
[29/04/2008|18:26] C:\Program Files\VideoLAN
[01/07/2007|08:29] C:\Program Files\Virtools Web Player 3.5
[24/09/2008|22:32] C:\Program Files\Windows Desktop Search
[28/02/2008|08:39] C:\Program Files\Windows Live
[17/12/2008|13:49] C:\Program Files\Windows Live SkyDrive
[13/09/2007|15:32] C:\Program Files\Windows Live Toolbar
[03/08/2006|12:12] C:\Program Files\Windows Media Components
[08/02/2007|19:51] C:\Program Files\Windows Media Connect 2
[04/08/2008|20:10] C:\Program Files\Windows Media Player
[04/08/2008|20:01] C:\Program Files\Windows NT
[16/08/2004|18:11] C:\Program Files\xerox
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[07/11/2008|12:00] C:\Program Files\Fichiers communs\Adobe
[02/09/2006|15:07] C:\Program Files\Fichiers communs\Borland Shared
[26/11/2008|11:12] C:\Program Files\Fichiers communs\DirectX
[03/08/2006|12:14] C:\Program Files\Fichiers communs\InstallShield
[03/08/2006|11:58] C:\Program Files\Fichiers communs\Java
[14/05/2009|17:53] C:\Program Files\Fichiers communs\Microsoft Shared
[13/10/2008|22:24] C:\Program Files\Fichiers communs\Motive
[16/08/2004|18:06] C:\Program Files\Fichiers communs\MSSoap
[25/11/2006|23:53] C:\Program Files\Fichiers communs\muvee Technologies
[26/11/2006|00:02] C:\Program Files\Fichiers communs\Nikon
[03/08/2006|12:03] C:\Program Files\Fichiers communs\Nullsoft
[03/08/2006|12:03] C:\Program Files\Fichiers communs\Real
[16/11/2006|16:37] C:\Program Files\Fichiers communs\Scanner
[27/01/2007|22:41] C:\Program Files\Fichiers communs\ScanSoft Shared
[16/08/2004|18:06] C:\Program Files\Fichiers communs\Services
[22/02/2009|19:58] C:\Program Files\Fichiers communs\Skype
[03/08/2006|12:04] C:\Program Files\Fichiers communs\Sonic Shared
[16/08/2004|17:56] C:\Program Files\Fichiers communs\SpeechEngines
[03/08/2006|12:04] C:\Program Files\Fichiers communs\SureThing Shared
[15/04/2007|08:40] C:\Program Files\Fichiers communs\SWF Studio
[16/11/2006|10:00] C:\Program Files\Fichiers communs\Symantec Shared
[04/08/2008|20:01] C:\Program Files\Fichiers communs\System
[03/08/2006|12:05] C:\Program Files\Fichiers communs\TiVo Shared
[03/08/2006|12:13] C:\Program Files\Fichiers communs\Ulead Systems
[17/03/2009|22:03] C:\Program Files\Fichiers communs\Windows Live
[28/02/2008|08:31] C:\Program Files\Fichiers communs\WindowsLiveInstaller
--------------------\\ Process
( 67 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-14 22:44:42
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0
--------------------\\ Recherche d'autres infections
Aucune autre infection trouvée !
[F:8][D:4]-> D:\DOCUME~1\xp\LOCALS~1\Temp
[F:29][D:0]-> D:\DOCUME~1\xp\Cookies
[F:783][D:6]-> D:\DOCUME~1\xp\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 14/05/2009|22:14 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 14/05/2009|22:45 - Option : [2]
--------------------\\ Fin du rapport a 22:45:22
-
-
tu télécharge LOP S&D sur ton Bureau.
* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)-
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) D CPU 2.80GHz )
BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
USER : xp ( Administrator )
BOOT : Normal boot
Antivirus : AntiVir Desktop 9.0.1.26 (Activated)
Firewall : Norton Internet Worm Protection 2006 (Not Activated)
C:\ (Local Disk) - NTFS - Total:29 Go (Free:11 Go)
D:\ (Local Disk) - NTFS - Total:195 Go (Free:181 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 14/05/2009|22:12 )
--------------------\\ Listing des dossiers dans APPLIC~1
[07/11/2008|12:00] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[07/02/2009|18:09] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[24/03/2009|10:34] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[14/05/2009|17:58] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[08/06/2007|21:21] D:\DOCUME~1\ALLUSE~1\APPLIC~1\blah 16 cdrom tool
[28/07/2008|18:26] D:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
[27/01/2007|22:36] D:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
[26/01/2007|16:20] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Ciel
[03/01/2007|17:23] D:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[26/11/2006|00:00] D:\DOCUME~1\ALLUSE~1\APPLIC~1\EnterNHelp
[12/05/2009|08:58] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[14/05/2009|20:36] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[03/08/2006|12:05] D:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[08/07/2008|22:46] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[06/09/2007|21:38] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Macromedia
[02/03/2009|12:41] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[15/10/2007|14:27] D:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee
[01/09/2007|22:14] D:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee.com
[23/10/2007|11:23] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[17/03/2009|22:03] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[13/10/2008|22:26] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive
[26/11/2006|12:54] D:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies
[25/11/2006|23:53] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Nikon
[02/09/2006|15:04] D:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[03/08/2006|12:02] D:\DOCUME~1\ALLUSE~1\APPLIC~1\OD2
[03/08/2006|20:39] D:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[27/01/2007|22:41] D:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
[15/10/2007|14:24] D:\DOCUME~1\ALLUSE~1\APPLIC~1\SiteAdvisor
[22/02/2009|19:58] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[28/01/2009|21:55] D:\DOCUME~1\ALLUSE~1\APPLIC~1\SmartSound Software Inc
[28/07/2008|18:25] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Ericsson
[14/05/2009|18:23] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[03/09/2006|21:26] D:\DOCUME~1\ALLUSE~1\APPLIC~1\SSScanAppDataDir
[02/09/2006|15:20] D:\DOCUME~1\ALLUSE~1\APPLIC~1\SSScanWizard
[16/11/2006|10:00] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[03/08/2006|12:13] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[26/11/2006|00:00] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Ultima_T15
[03/08/2006|12:04] D:\DOCUME~1\ALLUSE~1\APPLIC~1\VadeRetro
[03/08/2006|12:03] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
[05/12/2006|17:17] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[04/01/2007|16:26] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[07/09/2007|12:06] D:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[03/08/2006|20:39] D:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[31/01/2009|20:31] D:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[03/08/2006|12:22] D:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[03/08/2006|12:03] D:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver
[05/02/2009|09:11] D:\DOCUME~1\INVIT~1\APPLIC~1\Adobe
[27/01/2007|17:18] D:\DOCUME~1\INVIT~1\APPLIC~1\Google
[03/08/2006|20:39] D:\DOCUME~1\INVIT~1\APPLIC~1\Identities
[03/08/2006|12:10] D:\DOCUME~1\INVIT~1\APPLIC~1\Macromedia
[05/09/2007|15:21] D:\DOCUME~1\INVIT~1\APPLIC~1\McAfee
[03/04/2007|18:46] D:\DOCUME~1\INVIT~1\APPLIC~1\McAfee.com Personal Firewall
[27/01/2007|17:18] D:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft
[05/02/2009|09:13] D:\DOCUME~1\INVIT~1\APPLIC~1\Motive
[05/02/2009|09:08] D:\DOCUME~1\INVIT~1\APPLIC~1\Windows Desktop Search
[03/08/2006|12:03] D:\DOCUME~1\INVIT~1\APPLIC~1\You've Got Pictures Screensaver
[02/09/2007|10:56] D:\DOCUME~1\LOCALS~1\APPLIC~1\McAfee
[03/12/2008|23:26] D:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[07/09/2007|12:14] D:\DOCUME~1\NETWOR~1\APPLIC~1\Identities
[07/09/2007|19:12] D:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[30/07/2007|11:38] D:\DOCUME~1\quentin\APPLIC~1\Adobe
[01/04/2007|18:10] D:\DOCUME~1\quentin\APPLIC~1\Canon
[04/10/2006|19:14] D:\DOCUME~1\quentin\APPLIC~1\CyberLink
[29/01/2009|17:52] D:\DOCUME~1\quentin\APPLIC~1\Google
[11/12/2006|19:32] D:\DOCUME~1\quentin\APPLIC~1\Ice Age 2
[03/08/2006|20:39] D:\DOCUME~1\quentin\APPLIC~1\Identities
[11/12/2006|19:22] D:\DOCUME~1\quentin\APPLIC~1\Macromedia
[08/09/2007|15:39] D:\DOCUME~1\quentin\APPLIC~1\McAfee
[03/04/2007|18:05] D:\DOCUME~1\quentin\APPLIC~1\McAfee.com Personal Firewall
[18/09/2006|18:06] D:\DOCUME~1\quentin\APPLIC~1\Microsoft
[23/10/2007|17:25] D:\DOCUME~1\quentin\APPLIC~1\Mozilla
[01/04/2007|18:25] D:\DOCUME~1\quentin\APPLIC~1\Sun
[23/10/2007|17:26] D:\DOCUME~1\quentin\APPLIC~1\Talkback
[18/09/2006|20:51] D:\DOCUME~1\quentin\APPLIC~1\Ulead Systems
[08/09/2007|15:39] D:\DOCUME~1\quentin\APPLIC~1\Windows Desktop Search
[03/08/2006|12:03] D:\DOCUME~1\quentin\APPLIC~1\You've Got Pictures Screensaver
[29/07/2008|21:21] D:\DOCUME~1\xp\APPLIC~1\Adobe
[01/03/2007|22:32] D:\DOCUME~1\xp\APPLIC~1\AdobeUM
[22/03/2009|10:46] D:\DOCUME~1\xp\APPLIC~1\Apple Computer
[26/11/2006|00:40] D:\DOCUME~1\xp\APPLIC~1\ArcSoft
[11/01/2007|13:01] D:\DOCUME~1\xp\APPLIC~1\Canon
[03/09/2006|18:46] D:\DOCUME~1\xp\APPLIC~1\CyberLink
[08/03/2009|15:16] D:\DOCUME~1\xp\APPLIC~1\dvdcss
[30/01/2009|15:45] D:\DOCUME~1\xp\APPLIC~1\Google
[19/09/2006|19:43] D:\DOCUME~1\xp\APPLIC~1\Help
[14/01/2009|19:04] D:\DOCUME~1\xp\APPLIC~1\Ice Age 2
[03/08/2006|20:39] D:\DOCUME~1\xp\APPLIC~1\Identities
[28/07/2008|18:23] D:\DOCUME~1\xp\APPLIC~1\InstallShield
[23/03/2007|15:39] D:\DOCUME~1\xp\APPLIC~1\Lavasoft
[26/11/2006|11:40] D:\DOCUME~1\xp\APPLIC~1\Leadertech
[29/04/2008|17:36] D:\DOCUME~1\xp\APPLIC~1\ma-config.com
[04/11/2006|17:25] D:\DOCUME~1\xp\APPLIC~1\Macromedia
[02/03/2009|12:41] D:\DOCUME~1\xp\APPLIC~1\Malwarebytes
[15/10/2007|14:25] D:\DOCUME~1\xp\APPLIC~1\McAfee
[03/04/2007|09:32] D:\DOCUME~1\xp\APPLIC~1\McAfee.com Personal Firewall
[14/05/2009|13:54] D:\DOCUME~1\xp\APPLIC~1\Media Player
[04/01/2007|22:00] D:\DOCUME~1\xp\APPLIC~1\Microsoft
[13/10/2008|22:25] D:\DOCUME~1\xp\APPLIC~1\Motive
[25/06/2008|21:27] D:\DOCUME~1\xp\APPLIC~1\Mozilla
[03/01/2007|22:29] D:\DOCUME~1\xp\APPLIC~1\MSNInstaller
[26/11/2006|12:54] D:\DOCUME~1\xp\APPLIC~1\muvee Technologies
[26/11/2006|00:02] D:\DOCUME~1\xp\APPLIC~1\Nikon
[03/09/2006|19:07] D:\DOCUME~1\xp\APPLIC~1\OD2
[02/09/2006|15:14] D:\DOCUME~1\xp\APPLIC~1\OFFICE One v6
[10/02/2009|22:37] D:\DOCUME~1\xp\APPLIC~1\OnlineStorage
[23/12/2008|22:54] D:\DOCUME~1\xp\APPLIC~1\OpenOffice.org
[23/12/2008|22:46] D:\DOCUME~1\xp\APPLIC~1\OpenOffice.org2
[26/10/2007|06:50] D:\DOCUME~1\xp\APPLIC~1\Real
[27/01/2007|22:41] D:\DOCUME~1\xp\APPLIC~1\ScanSoft
[07/05/2009|17:58] D:\DOCUME~1\xp\APPLIC~1\Skype
[07/05/2009|17:56] D:\DOCUME~1\xp\APPLIC~1\skypePM
[26/11/2006|11:42] D:\DOCUME~1\xp\APPLIC~1\Sonic
[03/09/2006|18:00] D:\DOCUME~1\xp\APPLIC~1\Sun
[15/10/2007|13:56] D:\DOCUME~1\xp\APPLIC~1\Talkback
[05/09/2006|12:58] D:\DOCUME~1\xp\APPLIC~1\Ulead Systems
[05/11/2006|10:01] D:\DOCUME~1\xp\APPLIC~1\VadeRetro
[29/04/2008|18:27] D:\DOCUME~1\xp\APPLIC~1\vlc
[24/09/2008|22:32] D:\DOCUME~1\xp\APPLIC~1\Windows Desktop Search
[25/09/2008|11:43] D:\DOCUME~1\xp\APPLIC~1\Windows Search
[03/08/2006|12:03] D:\DOCUME~1\xp\APPLIC~1\You've Got Pictures Screensaver
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[14/05/2009 20:36][--a------] C:\WINDOWS\tasks\Google Software Updater.job
[11/05/2009 22:16][--a------] C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[14/05/2009 17:56][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[07/11/2008|12:00] C:\Program Files\Adobe
[17/10/2008|13:58] C:\Program Files\AGI
[15/10/2007|15:41] C:\Program Files\Alwil Software
[02/07/2007|18:23] C:\Program Files\Anuman Interactive
[18/01/2009|10:58] C:\Program Files\APC
[07/02/2009|18:09] C:\Program Files\Apple Software Update
[25/11/2006|23:47] C:\Program Files\ArcSoft
[02/02/2009|22:10] C:\Program Files\Avanquest update
[14/05/2009|17:58] C:\Program Files\Avira
[22/08/2007|09:19] C:\Program Files\Axis Communications
[27/01/2007|22:45] C:\Program Files\Canon
[27/01/2007|22:35] C:\Program Files\CanonBJ
[14/05/2009|14:43] C:\Program Files\CCleaner
[16/08/2008|09:47] C:\Program Files\ComfyWare
[26/11/2008|10:34] C:\Program Files\directx
[02/10/2008|14:55] C:\Program Files\EMME
[24/03/2009|10:34] C:\Program Files\Fichiers communs
[03/08/2006|12:05] C:\Program Files\GMixon
[30/01/2009|15:44] C:\Program Files\Google
[03/08/2006|12:04] C:\Program Files\Goto Software
[28/03/2009|16:35] C:\Program Files\InstallShield Installation Information
[08/05/2009|16:35] C:\Program Files\Internet Explorer
[27/11/2008|18:32] C:\Program Files\IrfanView
[02/09/2006|15:07] C:\Program Files\ISSENDIS
[10/04/2009|23:58] C:\Program Files\Java
[23/12/2008|22:50] C:\Program Files\JRE
[14/05/2009|14:06] C:\Program Files\Lavasoft
[03/08/2006|12:03] C:\Program Files\Learn2.com
[29/04/2008|17:36] C:\Program Files\ma-config.com
[10/04/2009|23:52] C:\Program Files\Malwarebytes' Anti-Malware
[10/02/2009|22:28] C:\Program Files\mes donn‚es
[14/08/2008|10:15] C:\Program Files\Messenger
[14/04/2009|21:57] C:\Program Files\Messenger Plus! Live
[09/04/2008|16:10] C:\Program Files\Micro Application
[09/05/2007|08:42] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[16/08/2004|18:11] C:\Program Files\microsoft frontpage
[16/02/2009|22:40] C:\Program Files\Microsoft LifeCam
[06/11/2007|19:30] C:\Program Files\Microsoft Office
[25/02/2009|20:37] C:\Program Files\Microsoft Silverlight
[07/09/2007|12:14] C:\Program Files\Microsoft SQL Server Compact Edition
[28/03/2009|16:32] C:\Program Files\Mindscape
[04/08/2008|20:04] C:\Program Files\Movie Maker
[14/05/2009|21:54] C:\Program Files\Mozilla Firefox
[25/02/2009|20:17] C:\Program Files\MSBuild
[17/10/2007|12:39] C:\Program Files\MSN
[16/08/2004|18:03] C:\Program Files\MSN Gaming Zone
[12/11/2008|13:54] C:\Program Files\MSXML 4.0
[07/02/2009|15:49] C:\Program Files\My Company Name
[04/08/2008|20:02] C:\Program Files\NetMeeting
[25/11/2006|23:53] C:\Program Files\Nikon
[10/01/2009|15:47] C:\Program Files\OFFICE One6.5
[16/08/2004|18:03] C:\Program Files\Online Services
[05/06/2008|21:13] C:\Program Files\OpenOffice.org 2.3
[23/12/2008|22:50] C:\Program Files\OpenOffice.org 2.4
[23/12/2008|22:50] C:\Program Files\OpenOffice.org 3
[29/04/2009|21:11] C:\Program Files\Orange
[04/08/2008|20:01] C:\Program Files\Outlook Express
[09/05/2009|12:30] C:\Program Files\QuickTime
[03/08/2006|12:02] C:\Program Files\Real
[15/10/2007|13:52] C:\Program Files\Realtek
[25/02/2009|20:17] C:\Program Files\Reference Assemblies
[27/01/2007|22:40] C:\Program Files\ScanSoft
[16/08/2004|18:07] C:\Program Files\Services en ligne
[03/08/2006|12:10] C:\Program Files\ShowTime
[14/01/2009|16:11] C:\Program Files\Sierra
[03/08/2006|12:13] C:\Program Files\SmartSound Software
[03/08/2006|12:05] C:\Program Files\Sonic
[28/07/2008|18:25] C:\Program Files\Sony Ericsson
[11/03/2009|19:50] C:\Program Files\Spybot - Search & Destroy
[14/05/2009|21:34] C:\Program Files\Trend Micro
[03/08/2006|12:13] C:\Program Files\Ulead Systems
[07/06/2007|19:58] C:\Program Files\USB Disk Win98 Driver
[29/04/2008|18:26] C:\Program Files\VideoLAN
[03/08/2006|12:03] C:\Program Files\Viewpoint
[01/07/2007|08:29] C:\Program Files\Virtools Web Player 3.5
[24/09/2008|22:32] C:\Program Files\Windows Desktop Search
[28/02/2008|08:39] C:\Program Files\Windows Live
[17/12/2008|13:49] C:\Program Files\Windows Live SkyDrive
[13/09/2007|15:32] C:\Program Files\Windows Live Toolbar
[03/08/2006|12:12] C:\Program Files\Windows Media Components
[08/02/2007|19:51] C:\Program Files\Windows Media Connect 2
[04/08/2008|20:10] C:\Program Files\Windows Media Player
[04/08/2008|20:01] C:\Program Files\Windows NT
[16/08/2004|18:11] C:\Program Files\xerox
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[07/11/2008|12:00] C:\Program Files\Fichiers communs\Adobe
[02/09/2006|15:07] C:\Program Files\Fichiers communs\Borland Shared
[26/11/2008|11:12] C:\Program Files\Fichiers communs\DirectX
[03/08/2006|12:14] C:\Program Files\Fichiers communs\InstallShield
[03/08/2006|11:58] C:\Program Files\Fichiers communs\Java
[14/05/2009|17:53] C:\Program Files\Fichiers communs\Microsoft Shared
[13/10/2008|22:24] C:\Program Files\Fichiers communs\Motive
[16/08/2004|18:06] C:\Program Files\Fichiers communs\MSSoap
[25/11/2006|23:53] C:\Program Files\Fichiers communs\muvee Technologies
[26/11/2006|00:02] C:\Program Files\Fichiers communs\Nikon
[03/08/2006|12:03] C:\Program Files\Fichiers communs\Nullsoft
[03/08/2006|12:03] C:\Program Files\Fichiers communs\Real
[16/11/2006|16:37] C:\Program Files\Fichiers communs\Scanner
[27/01/2007|22:41] C:\Program Files\Fichiers communs\ScanSoft Shared
[16/08/2004|18:06] C:\Program Files\Fichiers communs\Services
[22/02/2009|19:58] C:\Program Files\Fichiers communs\Skype
[03/08/2006|12:04] C:\Program Files\Fichiers communs\Sonic Shared
[16/08/2004|17:56] C:\Program Files\Fichiers communs\SpeechEngines
[03/08/2006|12:04] C:\Program Files\Fichiers communs\SureThing Shared
[15/04/2007|08:40] C:\Program Files\Fichiers communs\SWF Studio
[16/11/2006|10:00] C:\Program Files\Fichiers communs\Symantec Shared
[04/08/2008|20:01] C:\Program Files\Fichiers communs\System
[03/08/2006|12:05] C:\Program Files\Fichiers communs\TiVo Shared
[03/08/2006|12:13] C:\Program Files\Fichiers communs\Ulead Systems
[17/03/2009|22:03] C:\Program Files\Fichiers communs\Windows Live
[28/02/2008|08:31] C:\Program Files\Fichiers communs\WindowsLiveInstaller
--------------------\\ Process
( 68 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts MODIFIE
127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD
-> 10563 [ 70 ## added by CiD ]
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-14 22:13:49
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0
--------------------\\ Recherche d'autres infections
Aucune autre infection trouvée !
[F:7][D:4]-> D:\DOCUME~1\xp\LOCALS~1\Temp
[F:29][D:0]-> D:\DOCUME~1\xp\Cookies
[F:700][D:6]-> D:\DOCUME~1\xp\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 14/05/2009|22:14 - Option : [1]
--------------------\\ Fin du rapport a 22:14:38
-
-
Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.
! Déconnecte toi et ferme toutes tes applications en cours !
Double-clique sur " RSIT.exe " pour le lancer .
-> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .
* Devant l'option "List files/folders created ..." , tu choisis : 2 months
* clique ensuite sur " Continue " pour lancer l'analyse ...
-> laisse faire le scan et ne touche pas au PC ...
Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-note).
Poste le contenu de " log.txt " (c'est celui qui apparait à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...
Important : poste un rapport, puis l'autre dans la réponse suivante
Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum
( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )
-
Logfile of random's system information tool 1.06 (written by random/random)
Run by xp at 2009-05-14 21:34:50
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 12 GB (40%) free of 31 GB
Total RAM: 1022 MB (29% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:35:03, on 14/05/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Motive\McciCMService.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Apps\Softex\OmniPass\Omniserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
C:\WINDOWS\system32\SearchIndexer.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Apps\Softex\OmniPass\OPXPApp.exe
C:\Program Files\Microsoft LifeCam\LifeTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\APPS\Powercinema\PCMService.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
C:\Program Files\USB Disk Win98 Driver\Res.EXE
C:\Program Files\Orange\LiveAssistant.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\vVX1000.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\APPS\SMP\SmpSys.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
C:\program files\orange\media player\Media Player.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\OFFICE One6.5\OFFICE One Clock\ooneclockv65.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\APC\APC PowerChute Personal Edition\apcsystray.exe
C:\Program Files\Micro Application\Les 4 Dictionnaires Utiles\MediaDICO4Ut.EXE
C:\Program Files\Micro Application\Les 4 Dictionnaires Utiles\Rac4Ut.EXE
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
D:\Documents and Settings\xp\Mes documents\Mes images\photosfirefox\RSIT(2).exe
C:\Program Files\trend micro\xp.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://config.aolbox/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
O2 - BHO: (no name) - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
O4 - HKLM\..\Run: [DetectorApp] C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [OmniPass] C:\Apps\Softex\OmniPass\scureapp.exe
O4 - HKLM\..\Run: [PCMService] "c:\APPS\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32"
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [BOOT] C:\Program Files\ISSENDIS\ISSENDIS WebUpdate v6\issendiswebupdatev6.exe /BOOT
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
O4 - HKLM\..\Run: [USB Storage Toolbox] C:\Program Files\USB Disk Win98 Driver\Res.EXE
O4 - HKLM\..\Run: [Orange_McciTrayApp] C:\Program Files\Orange\LiveAssistant.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [SmpcSys] C:\APPS\SMP\SmpSys.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKCU\..\Run: [MediaDICO4Ut] C:\Program Files\Micro Application\Les 4 Dictionnaires Utiles\LanceMediaDICO4Ut.exe Lancement
O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
O4 - HKCU\..\Run: [OrangePlayer] c:\program files\orange\media player\Media Player.exe /systray
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [OrangePlayer] c:\program files\orange\media player\Media Player.exe /systray (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: APC UPS Status.lnk = ?
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O4 - Global Startup: OFFICE One Clock v6.5.lnk = C:\Program Files\OFFICE One6.5\OFFICE One Clock\ooneclockv65.exe
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll (file missing)
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O15 - Trusted Zone: http://pfttbc.ft.motive.com
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Plugin Control) - http://appldnld.apple.com/QuickTime/qtactivex/qtplugin.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.av.fr.aol.com/molbin/shared/mcinsctl/fr/4,0,0,84/mcinsctl.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {745395C8-D0E1-4227-8586-624CA9A10A8D} (AxisMediaControl Class) - http://admyvorne.dyndns.org:8888/activex/AMC.cab
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://asprettes.spaces.live.com/PhotoUpload/MsnPUpld.cab
O16 - DPF: {9DF1C00D-8426-4337-972C-DC042D19A916} (FTMediaPlayer Class) - http://webtv.guidetv.orange.fr/resources/OCS_8884.cab
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.extrafilm.fr/NET/Import/ImageUploader3.cab
O16 - DPF: {BA3BAF69-72B1-4BCE-BE96-A4D304EAFBB4} (PhotoBox uploader) - http://assets.photobox.com/assets/aurigma/ImageUploader4.cab?20080930140356
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.av.fr.aol.com/molbin/shared/mcgdmgr/fr/1,0,0,21/mcgdmgr.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://a532.g.akamai.net/...
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: APC UPS Service - American Power Conversion Corporation - C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: McciCMService - Motive Communications, Inc. - C:\Program Files\Fichiers communs\Motive\McciCMService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Softex OmniPass Service (omniserv) - Softex Inc. - C:\Apps\Softex\OmniPass\Omniserv.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
-
@novice48info.txt logfile of random's system information tool 1.06 2009-05-14 21:31:47
======Uninstall list======
-->"C:\Program Files\AOL\AOL Toolbar 4.0\uninstall.exe"
-->C:\PROGRA~1\GOTOSO~1\VADERE~1\UNWISE.EXE C:\PROGRA~1\GOTOSO~1\VADERE~1\INSTALL.LOG
-->C:\Program Files\Fichiers communs\Real\Update\\rnuninst.exe RealNetworks|RealPlayer|6.0
-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205}
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382}
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629}
-->msiexec.exe /I {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
-->MsiExec.exe /I{8B543A39-9401-44F4-B572-069E64C15189}
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.exe" -uninstall
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F9CFBD8-8F77-4DCD-8CB5-CDD5F653C872}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5AFA4872-16B2-419E-ADCA-8E96E739115D}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F4E57F49-84B4-4CF2-B0A1-8CA1752BDF7E}\setup.exe" -l0x40c
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
A la maison-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D490655A-E8A1-4B4A-BB31-5A92E584B394}\setup.exe" -l0x40c
Adibou et l'Ombre Verte V.1.00 on D-->"D:\coktel\Adibou et l'Ombre Verte\Uninst.exe"
Adibou V.3.10 (C:)-->"C:\coktel\Adibou3\Uninst.exe"
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 8.1.3 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81300000003}
Adobe Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
APC PowerChute Personal Edition-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5A0C892E-FD1C-4203-941E-0956AED20A6A}\Setup.exe" -l0x40c
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
ArcSoft Panorama Maker 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A5F68DC8-0278-4AD8-B413-861509B5F25B}\Setup.exe" -l0x40c
ArcSoft PhotoStudio 5.5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{85309D89-7BE9-4094-BB17-24999C6118FC}\SETUP.EXE" -l0x40c
Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
Avanquest update-->C:\Program Files\InstallShield Installation Information\{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}\Setup.exe -runfromtemp -l0x0009 -removeonly
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
AXIS Media Control-->rundll32 "C:\Program Files\Axis Communications\AXIS Media Control\AxisMediaControl.dll",UninstallMe
Canon MP Navigator 3.0-->"C:\Program Files\Canon\MP Navigator 3.0\Maint.exe" /UninstallRemove C:\Program Files\Canon\MP Navigator 3.0\uninst.ini
Canon MP160-->"C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP160\DelDrv.exe" /U:{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP160 /L0x000c
Canon Utilities Easy-PhotoPrint-->C:\Program Files\Canon\Easy-PhotoPrint\uninst.exe uninst.ini
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Codeur Windows Media Série 9-->MsiExec.exe /I{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
Easy-WebPrint-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Canon\Easy-WebPrint\Uninst.isu"
Enregistrement utilisateur de Canon MP160-->C:\Program Files\Canon\IJEREG\MP160\UNINST.EXE
Fort Boyard - le Jeu-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CD4C3C09-6EE6-4BFB-A0CA-AD80CE71A6D7}\setup.exe" -l0x40c -removeonly
Google Earth-->MsiExec.exe /I{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}
High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB915800-v4)-->"C:\WINDOWS\$NtUninstallKB915800-v4$\spuninst\spuninst.exe"
Imaginons-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{076CCECB-D2F0-4F9E-B92A-CB6A6E4421CD}\setup.exe" -l0x40c
ISSENDIS WebUpdate v6-->"C:\Program Files\ISSENDIS\ISSENDIS WebUpdate v6\unins000.exe"
J2SE Runtime Environment 5.0 Update 10-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150100}
J2SE Runtime Environment 5.0 Update 16-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150160}
J2SE Runtime Environment 5.0 Update 4-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150040}
J2SE Runtime Environment 5.0 Update 9-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150090}
Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Java(TM) 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
Java(TM) 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
Java(TM) 6 Update 4-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160040}
Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Java(TM) SE Runtime Environment 6 Update 1-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
L'Age de Glace 2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{47F0F784-96DD-4213-A0AB-85AF5C4A2E60}\setup.exe" -l0x40c -removeonly
Language pack for Ad-Aware SE-->C:\PROGRA~1\Lavasoft\AD-AWA~2\Plugins\Langs\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~2\Plugins\Langs\INSTALL.LOG
Learn2 Player (Uninstall Only)-->C:\Program Files\Learn2.com\StRunner\stuninst.exe
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
live assistant-->C:\WINDOWS\LiveAssistantUninstaller.exe
Ma-Config.com plugin-->MsiExec.exe /I{6F06A42D-525C-49ED-8622-E16790956CD8}
Macromedia Shockwave Player-->MsiExec.exe /X{7D1D6A24-65D4-454C-8815-4F08A5FFF12C}
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Media Player-->"C:\Program Files\Orange\Media Player\uninstall.exe"
mes données 1.0.0.7-->C:\Program Files\mes données\uninst.exe
Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Micro Application - MediaDICO Les 4 Dictionnaires Utiles-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Micro Application\Les 4 Dictionnaires Utiles\Uninst.isu"
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{72AD53CC-CCC0-3757-8480-9EE176866A7C}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{0BD83598-C2EF-3343-847B-7D2E84599128}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft LifeCam-->MsiExec.exe /X{968D41C3-25BB-4632-A6DF-2E1C8F0143A4}
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office PowerPoint Viewer 2003-->MsiExec.exe /X{90AF040C-6000-11D3-8CFE-0150048383C9}
Microsoft Silverlight-->MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour le Codeur Windows Media (KB954156)-->"C:\WINDOWS\$NtUninstallKB954156_WM9L$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB928090)-->"C:\WINDOWS\ie7updates\KB928090-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB929969)-->"C:\WINDOWS\ie7updates\KB929969\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB931768)-->"C:\WINDOWS\ie7updates\KB931768-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB933566)-->"C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB937143)-->"C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB969497)-->"C:\WINDOWS\ie8updates\KB969497-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
Mon Aventure au Pays des Jouets-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D4CA516B-5A75-11D5-9C48-00105AE19B66}\Setup.exe"
Mozilla Firefox (3.0.10)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 Parser and SDK-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
New Friends-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AA445EC6-79DD-466E-B5BD-A5F5CFD440B8}\setup.exe" -l0x40c -removeonly
Nikon FotoShare-->C:\Program Files\Nikon\FotoShare\Uninstal.exe C:\PROGRA~1\Nikon\FOTOSH~1\INSTALL.LOG
Nikon Message Center-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D2FCC1AE-6311-47C5-8130-C6C66D77DD71}\Setup.exe" -l0x40c UNINSTALL
NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI
OFFICE One 6.5 Bureautique désinstallation complète 6.5-->"C:\Program Files\OFFICE One6.5\Uninstall All\SETUP\setup.exe" /u
OFFICE One 6.5-->C:\Program Files\OFFICE ONE6.5\program\setup.exe -deinstall
OFFICE One Clock 6.5-->"C:\Program Files\OFFICE ONE6.5\OFFICE One Clock\SETUP\setup.exe" /u
OFFICE One Color Picker 6.5-->"C:\Program Files\OFFICE ONE6.5\OFFICE One Color Picker\SETUP\setup.exe" /u
OmniPage SE 2.0-->MsiExec.exe /I{79D5997E-BF79-48BB-8B41-9BE59C15C2D7}
OpenOffice.org 3.0-->MsiExec.exe /I{6860B340-530D-46B3-91F8-1AE1F70F7C33}
Orange WebTV Player 1.28884-->"C:\Program Files\Orange\Orange WebTV Player\unins000.exe"
Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
PictureProject-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FF3999BE-1A7B-4738-88AA-97BF14094A4A}\Setup.exe" -l0x40c UNINSTALL
Premiers Pas-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8E7D3F6B-E9AB-4CD1-AFC3-49CCC9EA95CA}\setup.exe" -l0x40c -removeonly
REALTEK GbE & FE Ethernet PCI NIC Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}\SETUP.exe" -l0x40c -removeonly
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x40c -removeonly
ScanSoft OmniPage SE 4.0-->MsiExec.exe /I{29D851C2-048C-4B5E-8D1F-25D473342BB5}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Skype™ 4.0-->MsiExec.exe /X{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}
SmartSound Quicktracks Plugin-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}
Sonic Express Labeler-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
Sonic MyDVD LE-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
Sonic RecordNow Audio-->MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382}
Sonic RecordNow Copy-->MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629}
Sonic RecordNow Data-->MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205}
Sony Ericsson PC Suite 4.010.00-->C:\Program Files\InstallShield Installation Information\{2FFE93F0-BB72-4E52-8761-354D1AAA9387}\Setup.exe -runfromtemp -l0x040c -removeonly
Spybot - Search & Destroy 1.4-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins001.exe"
Ulead PhotoImpact 10 SE-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5A065EA0-0EEC-4E94-A2A0-40812576C122}\setup.exe" -l0x40c
Ulead VideoStudio 9.0 SE DVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8EAB2384-C794-40ED-A9DD-3270A0D2BB76}\setup.exe" -l0x40c
USB Disk Win98 Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4E79A62F-7A2D-4058-BCE0-94E6B9E2F162}\Setup.exe"
VideoLAN VLC media player 0.8.6f-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Viewpoint Media Player-->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
Visual C++ 2008 x86 Runtime - (v9.0.30729)-->MsiExec.exe /X{F333A33D-125C-32A2-8DCE-5C5D14231E27}
Visual C++ 2008 x86 Runtime - v9.0.30729.01-->C:\WINDOWS\system32\msiexec.exe /x {F333A33D-125C-32A2-8DCE-5C5D14231E27} /qb+ REBOOTPROMPT=""
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
Windows Search 4.0-->"C:\WINDOWS\$NtUninstallKB940157$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
World of Colors-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{92E0D23E-7093-4DDD-82BA-F4C5260EE27C}\setup.exe" -l0x40c -removeonly
XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"
======Hosts File======
127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
======Security center information======
AV: AntiVir Desktop
FW: Norton Internet Worm Protection (disabled)
======System event log======
Computer Name: SN117652700315
Event Code: 7036
Message: Le service HTTP SSL est entré dans l'état : en cours d'exécution.
Record Number: 110371
Source Name: Service Control Manager
Time Written: 20090417153059.000000+120
Event Type: Informations
User:
Computer Name: SN117652700315
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service HTTP SSL.
Record Number: 110370
Source Name: Service Control Manager
Time Written: 20090417153059.000000+120
Event Type: Informations
User: AUTORITE NT\SERVICE LOCAL
Computer Name: SN117652700315
Event Code: 7036
Message: Le service Service de découvertes SSDP est entré dans l'état : en cours d'exécution.
Record Number: 110369
Source Name: Service Control Manager
Time Written: 20090417153057.000000+120
Event Type: Informations
User:
Computer Name: SN117652700315
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Service de découvertes SSDP.
Record Number: 110368
Source Name: Service Control Manager
Time Written: 20090417153056.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM
Computer Name: SN117652700315
Event Code: 7036
Message: Le service Compatibilité avec le Changement rapide d'utilisateur est entré dans l'état : en cours d'exécution.
Record Number: 110367
Source Name: Service Control Manager
Time Written: 20090417153048.000000+120
Event Type: Informations
User:
=====Application event log=====
Computer Name: SN117652700315
Event Code: 0
Message:
Record Number: 13655
Source Name: gusvc
Time Written: 20090302171157.000000+060
Event Type: Informations
User:
Computer Name: SN117652700315
Event Code: 1003
Message: Le service Windows Search a été démarré.
Record Number: 13654
Source Name: Windows Search Service
Time Written: 20090302171110.000000+060
Event Type: Informations
User:
Computer Name: SN117652700315
Event Code: 102
Message: Windows (1452) Windows: Le moteur de base de données a démarré une nouvelle instance (0).
Record Number: 13653
Source Name: ESENT
Time Written: 20090302171102.000000+060
Event Type: Informations
User:
Computer Name: SN117652700315
Event Code: 100
Message: SearchIndexer (1452) Le moteur de base de données 5.01.2600.5512 est démarré.
Record Number: 13652
Source Name: ESENT
Time Written: 20090302171102.000000+060
Event Type: Informations
User:
Computer Name: SN117652700315
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.
Record Number: 13651
Source Name: SecurityCenter
Time Written: 20090302171102.000000+060
Event Type: Informations
User:
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Apps\Softex\OmniPass;C:\Program Files\Fichiers communs\Ulead Systems\MPEG
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 7, GenuineIntel
"PROCESSOR_REVISION"=0407
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"SonicCentral"=C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\
-----------------EOF-----------------
-
-
c:\TB.txt
-
voilà le rapport :
-----------\\ ToolBar S&D 1.2.8 XP/Vista
Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) D CPU 2.80GHz )
BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
USER : xp ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1335 [VPS 090510-0] 4.8.1335 (Activated)
Firewall : Norton Internet Worm Protection 2006 (Not Activated)
C:\ (Local Disk) - NTFS - Total:29 Go (Free:11 Go)
D:\ (Local Disk) - NTFS - Total:195 Go (Free:181 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 11/05/2009|20:50 )
D:\DOCUME~1\xp\LOCALS~1\Temp\ICD1.tmp
-----------\\ SUPPRESSION
Supprime! - D:\DOCUME~1\xp\LOCALS~1\Temp\ICD1.tmp
-----------\\ Recherche de Fichiers / Dossiers ...
-----------\\ [..\Internet Explorer\Main]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Bar"="https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC"
"Start Page"="https://www.google.com"
"Url"="http://www.microsoft.com/athome/community/rss.xml"
"Url"="http://rss.msn.com/en-us/?feedoutput=rss&ocid=iehrs&unsub=true"
"Url"="http://www.microsoft.com/atwork/community/rss.xml"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="https://www.msn.com/fr-fr/"
--------------------\\ Recherche d'autres infections
Aucune autre infection trouvée !
1 - "C:\ToolBar SD\TB_1.txt" - 11/05/2009|20:52 - Option : [2]
-----------\\ Fin du rapport a 20:52:33,14
-
-
Bonsoir,
où dois-je aller pour récupérer ce rapport?
Merci
- 1
- 2
Suivant
