Win32/skimorph

Super boulot que tu as fais.tu m'as évité de le faire passer par la fenètre...Tu viens quand tu veux boire un coup a la maison.un grand merci toi.

Rapport de toolbar:

-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : Mobile AMD Sempron(tm) Processor 3000+ )
BIOS : Insyde Software MobilePRO BIOS Version 4.00.05
USER : BEAUVOIS ( Administrator )
BOOT : Normal boot
Antivirus : Norton AntiVirus 2004 (Activated)
Firewall : Norton Internet Security 2004 (Activated)
C:\ (Local Disk) - NTFS - Total:42 Go (Free:4 Go)
D:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
E:\ (USB) - FAT32 - Total:490 Mo (Free:0 Go)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 13/05/2009|16:31 )

-----------\\ SUPPRESSION

Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\1
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\a.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\amazon.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\an.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\arrow.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\arrowB.gif
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\arrowT.gif
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\arrow_down.gif
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\arrow_up.gif
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\autofill.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\b.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\bg_pub.gif
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\bg_ttl.gif
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\bn.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\bottom.png
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\bottom_left.png
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\bottom_right.png
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\btn_addstations.gif
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\btn_delete.gif
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\c.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\CAlogo.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\canalblog.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\cn.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\COMBOSEARCH.list
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\d.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\dictionary2.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\dn.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\DownloadCOM.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\dropdown.css
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\email_b.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\equalizer_loading.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\equalizer_off.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\equalizer_on.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\ErrorPageTemplate.css
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\ErrorPageTemplate_search.css
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\f.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\fn.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\g.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\gaming.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\gn.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\graphred0.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\graphred0_5.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\graphred1.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\graphred1_5.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\graphred2.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\graphred2_5.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\graphred3.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\graphred3_5.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\graphred4.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\graphred4_5.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\graphred5.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\h.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\help.gif
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\hideremove.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\highlight.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\hn.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\horoscope.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\h_aquarius.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\h_aries.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\h_cancer.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\h_capricorn.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\h_gemini.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\h_leo.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\h_libra.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\h_pisces.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\h_sagittarius.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\h_scorpio.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\h_taurus.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\h_virgo.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\i.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\IEtab2_1.zip
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\images01.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\in.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\j.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\jn.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\k.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\kn.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\l.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\left.png
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\ln.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\loading.gif
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\logo.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\logo_facebook.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\minus.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\minus_on.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\music2.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\n.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\New York_NY_weather.txt
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\New York_NY_weather.txt34976625
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\New York_NY_weather.txt6138234
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\NewCfg
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\news.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\news.html
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\newsb.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\nn.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\o.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\on.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\p.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\Paris_FR_weather.txt
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\Paris_FR_weather.txt32494437
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\Paris_FR_weather.txt34680734
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\Paris_FR_weather.txt351093
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\Paris_FR_weather.txt37342187
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\Paris_FR_weather.txt8348062
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\pixsy.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\play.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\play_on.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\plus.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\plus_on.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\pn.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\popup_off.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\popup_on.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\popup_ona.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\p_yahoo.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\p_yahoo_fr.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\q.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\qn.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\r.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\radiocfgdlg.html
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\RadioStations.list
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\radio_bg.gif
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\relatedlinks.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\report.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\right.png
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\rn.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\rss.xsl
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\rss1.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\rsslib.js
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\rssmenu1_7a.zip
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\s.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\search.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\search.gif
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\search_fr.gif
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\settings.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\shop2.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\sinfo.txt
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\sinfo.txt11831500
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\sinfo.txt1626531
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\sinfo.txt1966375
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\sinfo.txt21192078
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\sinfo.txt4000453
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\sinfo.txt4130703
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\sinfo.txt7438765
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\siteinfo.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\slider.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\sn.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\spacer.gif
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\stars-red1.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\stars-red2.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\stars-red3.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\stars-red4.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\stars-red5.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\stop.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\stop_on.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\t.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\tabdataV3.js
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\tabwelcome_en.html
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\tabwelcome_fr.html
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\tab_icon.png
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\technorati.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\tn.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\tools.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\top.png
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\top_left.png
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\top_right.png
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\translate.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\ttl_add.gif
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\u.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\un.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\UserStations.list
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\utf8.js
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\v.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\vmlib.js
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\vmntoolbartb1501.cfg
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\vn.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\w.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\web_en.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\web_fr.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\wikipedia.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\wn.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\x.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\xp_close_small.gif
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\yahoo_search.gif
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\YouTube.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\z.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\zn.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\zoom.bmp
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar\__slider.bmp
Supprime! - C:\Program Files\VMNToolbar\install.ico
Supprime! - C:\Program Files\VMNToolbar\tbuninstall.exe
Supprime! - C:\Program Files\VMNToolbar\toolbar.ini
Supprime! - C:\Program Files\VMNToolbar\uninstall.exe
Supprime! - C:\Program Files\VMNToolbar\vmntoolbar.dll
Supprime! - C:\DOCUME~1\BEAUVOIS\APPLIC~1\VMNToolbar
Supprime! - C:\Program Files\VMNToolbar

-----------\\ Recherche de Fichiers / Dossiers ...

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fhome.microsoft.com%2fintl%2fbr%2faccess%2fallinone.asp%3f"
"Search Bar"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_search_url"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Default_page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="https://www.msn.com/fr-fr/"
"Search bar"="http://www.bing.com/spresults.aspx"

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

1 - "C:\ToolBar SD\TB_1.txt" - 13/05/2009|16:33 - Option : [2]

-----------\\ Fin du rapport a 16:33:55,28

je fais la suite et je te bip en cas de soucis.et merci pour ta patience et ton aide...

je ne me sert pas de IE;dois je quand meme le mettre a jour?

vla le rapport de hijack
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:08:43, on 13/05/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Cyberlink\Shared files\RichVideo.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Internet Explorer\iexplore.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/sha1auth.srf?lc=1036
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: VMN Toolbar - {A057A204-BACC-4D26-8287-79A187E26987} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: VMN Toolbar - {A057A204-BACC-4D26-8287-79A187E26987} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [HdReg] C:\APPS\HDREG\HDREGAPP.EXE -r
O4 - HKLM\..\Run: [Monitor] C:\WINDOWS\PixArt\PAC7311\Monitor.exe
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Autoconfigurateur WiFi SFR] "C:\Program Files\SFR\Kit\WiFi\9wifi.exe"
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [VMCL] C:\Program Files\vodafone\vmclite\DongleEnumerator.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [360desktop] "C:\Program Files\360desktop\360desktop.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: WiFi Station.lnk = ?
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing)
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing)
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Jumpstart Wifi Protected Setup (jswpsapi) - Unknown owner - C:\Program Files\DartyBox_v3\Bewan\NetAgent\jswpsapi.exe (file missing)
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: MySqlInventime - Unknown owner - c:\mysql\bin\mysqld-max-nt.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

j'ai reçu aussi un otre rapport ou ou on peut cocher plein de lignes,koi j'en fais?

je clic ou dans le menu de hijack:do a system scan and save a loglife?/do a system scan only?/ou pen online hijackthis Quickstart?

je ne peux pas télécharger HijackThis.ça me dit:"Cette application n'a pas pu démarrer car MSVBVM60.DLL est introuvable.La réinstallation de cette application peut corriger ce problème."
j'ai essayé de la relancer mais ça ne marche pas.o s'couuuuuuuur!!

Bon bah voila de quoi bien digérer.mdr:

############################## [ UsbFix V3.018 # Cleaning ]

# User : BEAUVOIS (Administrateurs) # ANSO
# Update on 11/05/09 by Chiquitine29, C_XX & Chimay8
# WebSite : http://pagesperso-orange.fr/NosTools/usbfix.html
# Start at: 15:10:19 | 13/05/2009

# Mobile AMD Sempron(tm) Processor 3000+
# Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 2
# Internet Explorer 6.0.2900.2180
# Windows Firewall Status : Enabled
# AV : avast! antivirus 4.8.1335 [VPS 090512-0] 4.8.1335 [ Enabled | Updated ]
# AV : Norton AntiVirus 2004 [ Enabled | Updated ]
# FW : Norton Internet Security[ Enabled ]2004

# C:\ # Disque fixe local # 42,57 Go (4,07 Go free) [HDD] # NTFS
# D:\ # Disque CD-ROM # 152,99 Mo (0 Mo free) [QC_11_80] # CDFS
# E:\ # Disque amovible # 490,01 Mo (489,59 Mo free) # FAT32

############################## [ Processus actifs ]

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Cyberlink\Shared files\RichVideo.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Media Player\WMPNetwk.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe

################## [ Fichiers # Dossiers infectieux ]

(!) Not Deleted ! D:\Setup.exe
(!) Not Deleted ! D:\autorun.inf

################## [ Registre # Clés Run infectieuses ]

################## [ Registre # Mountpoints2 ]

# -> Not Found !

################## [ Listing des fichiers présent ]

[17/01/2008 08:05|--a--c---|11569] - C:\00020063101.csv
[13/05/2009 12:33|--a--c---|5057] - C:\Ad-Report-Clean-13.05.2009.log
[13/05/2009 10:57|--a--c---|4690] - C:\Ad-Report-Scan-13.05.2009.log
[25/11/2005 20:59|-rahsc---|215] - C:\BOOT.BAK
[06/04/2006 19:44|-rahsc---|296] - C:\BOOT.INI
[05/08/2004 15:00|-rahsc---|4952] - C:\Bootfont.bin
[12/05/2009 16:30|--a--c---|4043] - C:\cleannavi.txt
[05/08/2004 15:00|-rahs----|263488] - C:\cmldr
[25/11/2005 21:15|--a--c---|5507] - C:\DWNLOG.TXT
[12/05/2009 16:04|--a--c---|4576] - C:\fixnavi.txt
[22/04/2007 08:45|--a--c---|1119] - C:\INSTALL.LOG
[25/11/2005 21:05|-rahsc---|0] - C:\IO.SYS
[25/11/2005 21:08|--ah-c---|883] - C:\IPH.PH
[15/06/2007 15:22|--a--c---|167] - C:\JANUS.ERR
[25/11/2005 21:05|-rahsc---|0] - C:\MSDOS.SYS
[05/08/2004 15:00|-rahs----|47564] - C:\NTDETECT.COM
[05/08/2004 15:00|-rahs----|251712] - C:\ntldr
[19/12/2007 09:57|--a--c---|230432] - C:\PA7311.DAT
[?|?|?] - C:\pagefile.sys
[23/12/2004 12:25|--a--c---|97] - C:\SAUDIT.TXT
[19/04/2009 12:08|--ah-c---|232] - C:\sqmdata00.sqm
[19/04/2009 19:52|--ah-c---|232] - C:\sqmdata01.sqm
[22/03/2009 13:40|--ah-c---|232] - C:\sqmdata02.sqm
[22/03/2009 16:25|--ah-c---|232] - C:\sqmdata03.sqm
[22/03/2009 17:33|--ah-c---|232] - C:\sqmdata04.sqm
[22/03/2009 17:38|--ah-c---|232] - C:\sqmdata05.sqm
[22/03/2009 17:43|--ah-c---|232] - C:\sqmdata06.sqm
[22/03/2009 17:55|--ah-c---|232] - C:\sqmdata07.sqm
[22/03/2009 18:14|--ah-c---|232] - C:\sqmdata08.sqm
[22/03/2009 18:18|--ah-c---|232] - C:\sqmdata09.sqm
[22/03/2009 18:23|--ah-c---|232] - C:\sqmdata10.sqm
[22/03/2009 18:35|--ah-c---|232] - C:\sqmdata11.sqm
[28/03/2009 18:42|--ah-c---|232] - C:\sqmdata12.sqm
[28/03/2009 20:28|--ah-c---|304] - C:\sqmdata13.sqm
[31/03/2009 11:44|--ah-c---|232] - C:\sqmdata14.sqm
[31/03/2009 11:50|--ah-c---|304] - C:\sqmdata15.sqm
[18/04/2009 16:51|--ah-c---|232] - C:\sqmdata16.sqm
[18/04/2009 17:19|--ah-c---|232] - C:\sqmdata17.sqm
[18/04/2009 19:03|--ah-c---|232] - C:\sqmdata18.sqm
[19/04/2009 01:47|--ah-c---|232] - C:\sqmdata19.sqm
[19/04/2009 01:47|--ah-c---|244] - C:\sqmnoopt00.sqm
[19/04/2009 12:08|--ah-c---|244] - C:\sqmnoopt01.sqm
[19/04/2009 19:52|--ah-c---|244] - C:\sqmnoopt02.sqm
[22/03/2009 13:40|--ah-c---|244] - C:\sqmnoopt03.sqm
[22/03/2009 16:25|--ah-c---|244] - C:\sqmnoopt04.sqm
[22/03/2009 17:33|--ah-c---|244] - C:\sqmnoopt05.sqm
[22/03/2009 17:38|--ah-c---|244] - C:\sqmnoopt06.sqm
[22/03/2009 17:43|--ah-c---|244] - C:\sqmnoopt07.sqm
[22/03/2009 17:55|--ah-c---|244] - C:\sqmnoopt08.sqm
[22/03/2009 18:14|--ah-c---|244] - C:\sqmnoopt09.sqm
[22/03/2009 18:18|--ah-c---|244] - C:\sqmnoopt10.sqm
[22/03/2009 18:23|--ah-c---|244] - C:\sqmnoopt11.sqm
[22/03/2009 18:35|--ah-c---|244] - C:\sqmnoopt12.sqm
[28/03/2009 18:42|--ah-c---|244] - C:\sqmnoopt13.sqm
[28/03/2009 20:28|--ah-c---|244] - C:\sqmnoopt14.sqm
[31/03/2009 11:44|--ah-c---|244] - C:\sqmnoopt15.sqm
[31/03/2009 11:50|--ah-c---|244] - C:\sqmnoopt16.sqm
[18/04/2009 16:51|--ah-c---|244] - C:\sqmnoopt17.sqm
[18/04/2009 17:19|--ah-c---|244] - C:\sqmnoopt18.sqm
[18/04/2009 19:03|--ah-c---|244] - C:\sqmnoopt19.sqm
[24/05/2001 12:59|--a--c---|162304] - C:\UNWISE.EXE
[13/05/2009 15:12|--a--c---|5820] - C:\UsbFix.txt
[19/04/2009 13:17|--a--c---|0] - C:\WINDOWSU2cal.txt
[06/01/2008 12:09|--a--c---|10462920] - C:\XLVIEWER.EXE
[26/04/2007 19:37|-r-------|246] - D:\autorun.inf
[09/07/2004 12:03|-r-------|62976] - D:\dsetup.dll
[15/08/2008 02:14|-r-------|333072] - D:\Setup.exe
[12/07/2008 04:10|-r-------|44679] - D:\Setup.ini
[15/08/2008 02:14|-r-------|62736] - D:\UnstLgcy.exe
[12/05/2009 21:02|--a------|30493] - E:\mono bras.htm

################## [ Vaccination ]

# C:\autorun.inf -> Folder created by UsbFix.
# E:\autorun.inf -> Folder created by UsbFix.

################## [ Cracks / Keygens / Serials ]

# -> Nothing found !

################## [ ! Fin du rapport # UsbFix V3.018 ! ]

c'est ma clé USB.Je lance et je t'envoies le rapport

############################## [ UsbFix V3.018 # Scan ]

# User : BEAUVOIS (Administrateurs) # ANSO
# Update on 11/05/09 by Chiquitine29, C_XX & Chimay8
# WebSite : http://pagesperso-orange.fr/NosTools/usbfix.html
# Start at: 13:23:53 | 13/05/2009

# Mobile AMD Sempron(tm) Processor 3000+
# Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 2
# Internet Explorer 6.0.2900.2180
# Windows Firewall Status : Enabled
# AV : avast! antivirus 4.8.1335 [VPS 090512-0] 4.8.1335 [ Enabled | Updated ]
# AV : Norton AntiVirus 2004 [ Enabled | Updated ]
# FW : Norton Internet Security[ Enabled ]2004

# C:\ # Disque fixe local # 42,57 Go (4,07 Go free) [HDD] # NTFS
# D:\ # Disque CD-ROM # 152,99 Mo (0 Mo free) [QC_11_80] # CDFS
# E:\ # Disque amovible # 490,01 Mo (489,6 Mo free) # FAT32

############################## [ Processus actifs ]

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Cyberlink\Shared files\RichVideo.exe
C:\WINDOWS\PixArt\PAC7311\Monitor.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\slserv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\Windows Media Player\WMPNetwk.exe
C:\Program Files\SFR\Kit\WiFi\9wifi.exe
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Hercules\WiFi Station\WifiStation.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

################## [ Registre # Startup ]

HKCU_Main: "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
HKCU_Main: "Search Page"="https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fhome.microsoft.com%2fintl%2fbr%2faccess%2fallinone.asp%3f"
HKCU_Main: "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
HKCU_Main: "Window Title"=""
HKLM_logon: "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
HKLM_logon: "DefaultUserName"="BEAUVOIS"
HKLM_logon: "AltDefaultUserName"="BEAUVOIS"
HKLM_logon: "LegalNoticeCaption"=""
HKLM_logon: "LegalNoticeText"=""
HKLM_Run: IMJPMIG8.1="C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
HKLM_Run: PHIME2002ASync=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
HKLM_Run: PHIME2002A=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
HKLM_Run: SynTPLpr=C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
HKLM_Run: SynTPEnh=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
HKLM_Run: VTTimer=VTTimer.exe
HKLM_Run: VTTrayp=VTtrayp.exe
HKLM_Run: SoundMan=SOUNDMAN.EXE
HKLM_Run: HdReg=C:\APPS\HDREG\HDREGAPP.EXE -r
HKLM_Run: Monitor=C:\WINDOWS\PixArt\PAC7311\Monitor.exe
HKLM_Run: Synchronization Manager=%SystemRoot%\system32\mobsync.exe /logon
HKLM_Run: SunJavaUpdateSched="C:\Program Files\Java\jre6\bin\jusched.exe"
HKLM_Run: avast!=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
HKLM_Run: QuickTime Task="C:\Program Files\QuickTime\QTTask.exe" -atboottime
HKLM_Run: Autoconfigurateur WiFi SFR="C:\Program Files\SFR\Kit\WiFi\9wifi.exe"
HKLM_Run: LogitechCommunicationsManager="C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
HKLM_Run: LogitechQuickCamRibbon="C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
HKLM_Run: iTunesHelper="C:\Program Files\iTunes\iTunesHelper.exe"
HKLM_Run: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
HKCU_Run: VMCL=C:\Program Files\vodafone\vmclite\DongleEnumerator.exe
HKCU_Run: msnmsgr="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
HKCU_Run: WMPNSCFG=C:\Program Files\Windows Media Player\WMPNSCFG.exe
HKCU_Run: Skype="C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
HKCU_Run: 360desktop="C:\Program Files\360desktop\360desktop.exe"

################## [ Informations ]

################## [ Fichiers # Dossiers infectieux ]

Found ! D:\Setup.exe
Found ! D:\autorun.inf

################## [ Registre # Clés Run infectieuses ]

################## [ Registre # Mountpoints2 ]

HKCU\Software\Microsoft\....\MountPoints2\{08dcaa1c-915d-11dc-8621-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{1c5554db-913f-11dc-8620-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{1c987da5-9849-11dc-864a-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{27a33a50-726e-11dc-85b7-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{27a33a51-726e-11dc-85b7-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{2bb70f7a-73dd-11dc-85c7-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{2bb70f7b-73dd-11dc-85c7-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{572f8ddc-ac20-11dc-86c1-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{572f8ddd-ac20-11dc-86c1-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{572f8dde-ac20-11dc-86c1-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{572f8ddf-ac20-11dc-86c1-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{572f8de0-ac20-11dc-86c1-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{7ae15488-9c33-11dc-8659-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{7ae15489-9c33-11dc-8659-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{7ae1548a-9c33-11dc-8659-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{7ae1548b-9c33-11dc-8659-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{7ae1548c-9c33-11dc-8659-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{7ae1548d-9c33-11dc-8659-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{8051c3c2-87ba-11dc-85f9-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{8051c3c3-87ba-11dc-85f9-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{aa9746ba-787a-11dc-85d3-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{b11fb1cf-91c6-11dc-8624-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{c48414a0-b39d-11dc-86dd-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{d0b116ba-6ab8-11dd-88be-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{d0b116bb-6ab8-11dd-88be-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{d56557c4-9c38-11dc-865a-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{d56557c5-9c38-11dc-865a-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{d56557c6-9c38-11dc-865a-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{d56557c7-9c38-11dc-865a-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{d734433c-9c09-11dc-8657-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{d734433d-9c09-11dc-8657-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{d8125de8-79ae-11dc-85d5-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{d8125de9-79ae-11dc-85d5-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{d8125dea-79ae-11dc-85d5-00038a000015}\Shell\Auto\command
HKCU\Software\Microsoft\....\MountPoints2\{d8125dea-79ae-11dc-85d5-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{e6cf85f8-ab5f-11dc-86bc-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{e6cf85f9-ab5f-11dc-86bc-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{e77ab048-9117-11dc-861e-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{e77ab049-9117-11dc-861e-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{e77ab04a-9117-11dc-861e-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{e77ab04b-9117-11dc-861e-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{e77ab04c-9117-11dc-861e-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{e77ab04d-9117-11dc-861e-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{eb5a9e02-ab0d-11dc-86ba-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{eb5a9e03-ab0d-11dc-86ba-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{ee52bb2a-ac26-11dc-86c4-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{f040c1b0-ac27-11dc-86c5-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{f040c1b1-ac27-11dc-86c5-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{f0728b62-7344-11dc-85c3-00038a000015}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{f0728b63-7344-11dc-85c3-00038a000015}\Shell\AutoRun\command

################## [ ! Fin du rapport # UsbFix V3.018 ! ]

voici le rapport de Ad-Report-Cleaner:

------- LOGFILE OF AD-REMOVER 1.1.3.7 | ONLY XP/VISTA -------

Updated by C_XX on 11/05/2009 at 16:00
Contact: AdRemover.contact@gmail.com
Website: http://pagesperso-orange.fr/NosTools/ad_remover.html

**** LIMITED TO ****

Known Adwares
Eorezo
It's TV
Sweetim

********************

Start at: 11:49:48, 13/05/2009 | Boot mode: Normal Boot
Option: Clean | Executed from: C:\Program Files\Ad-remover\
Operating System: Microsoft® Windows XP™ Service Pack 2 (version 5.1.2600)
Computer Name: ANSO
Current User: BEAUVOIS - Administrator
Drive(s):
- C:\ (File System: NTFS)
- D:\ (File System: CDFS)
- E:\ (File System: FAT32)

(!) ---- C:\Documents and Settings\Administrateur\Ntuser.dat Loaded as: 'HKU\Administrateur'

(!) ---- IE start pages/Tabs reset

============ Known Adwares Deleted ============

.
HKLM\Software\Conduit
HKCR\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
.
C:\Program Files\Conduit
C:\WINDOWS\Prefetch\AU_.EXE-17347011.pf
C:\Documents and Settings\BEAUVOIS\Cookies\beauvois@atdmt[2].txt
C:\Documents and Settings\BEAUVOIS\Cookies\beauvois@bs.serving-sys[2].txt

+-----------------| Eorezo Elements Deleted :

.

+-----------------| It's TV Elements Deleted :

.

+-----------------| Sweetim Elements Deleted :

HKCU\Software\Microsoft\Internet Explorer\UrlSearchHooks\\{BC4FFE41-DE9F-46FA-B455-AAD49B9F9938}
HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{BC4FFE41-DE9F-46FA-B455-AAD49B9F9938}
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{BC4FFE41-DE9F-46FA-B455-AAD49B9F9938}
HKCR\CLSID\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}
HKCR\SWEETIE.IEToolbar
HKCR\SWEETIE.IEToolbar.1
HKCR\SWEETIE.SWEETIE
HKCR\SWEETIE.SWEETIE.1
HKCR\ToolBand.SWEETIE
HKCR\ToolBand.SWEETIE.1
HKCR\Typelib\{58906392-79C4-497C-ACC6-6942B59F1A08}
HKCU\Software\SWEETIE
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A0AADCD-3A72-4B5F-900F-E3BB5A838E2A}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}
HKLM\Software\Macrogaming
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F6D63A65-BD23-46F3-B9A3-87F442423481}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A}
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
.
C:\WINDOWS\Installer\a6d64c.msi

(!) ---- Temp files deleted.
(!) ---- Recycle bin emptied in all drives.

+-----------------| Added Scan:

---- Mozilla FireFox Version 3.0.10 ----

ProfilePath: 1n9z298v.default (BEAUVOIS)
.
(Prefs.js) user_pref("browser.search.defaultenginename", "Web Search");
(Prefs.js) user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1105889&SearchSource=3&q=");
(Prefs.js) user_pref("browser.startup.homepage", "hxxp://www.google.fr/");
(Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.0.10");
.
(Prefs.js) Removed: user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1105889&SearchSource=3&q=");

---- Internet Explorer Version 6.0.2900.2180 ----

[HKEY_CURRENT_USER\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://home.microsoft.com/access/allinone.asp
Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

[HKEY_USERS\S-1-5-21-3036302071-1036407502-3911417167-1006\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://home.microsoft.com/access/allinone.asp
Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/

[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

Tabs: hxxp://ieframe.dll/tabswelcome.htm

=========== Suspicious ==========

+---------------------------------------------------------------------------+

4789 Byte(s) - C:\Ad-Report-Clean-13.05.2009.log
4690 Byte(s) - C:\Ad-Report-Scan-13.05.2009.log

19 File(s) - C:\Program Files\Ad-remover\BACKUP
4 File(s) - C:\Program Files\Ad-remover\QUARANTINE

End at: 12:33:46 | 13/05/2009
.
+-----------------| E.O.F
.

Bonjour,voici le scan et puis je remettre mon antivirus en marche maintenant?

------- LOGFILE OF AD-REMOVER 1.1.3.7 | ONLY XP/VISTA -------

Updated by C_XX on 11/05/2009 at 16:00
Contact: AdRemover.contact@gmail.com
Website: http://pagesperso-orange.fr/NosTools/ad_remover.html

Start at: 10:31:39, 13/05/2009 | Boot mode: Normal Boot
Option: Scan | Executed from: C:\Program Files\Ad-remover\
Operating System: Microsoft® Windows XP™ Service Pack 2 (version 5.1.2600)
Computer Name: ANSO
Current User: BEAUVOIS - Administrator
Drive(s):
- C:\ (File System: NTFS)
- D:\ (File System: CDFS)

(!) ---- C:\Documents and Settings\Administrateur\Ntuser.dat Loaded as: 'HKU\Administrateur'

============ Known Adwares Found ============

.
HKLM\Software\Conduit
HKCR\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
HKLM\Software\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
.
C:\Program Files\Conduit
C:\WINDOWS\Prefetch\AU_.EXE-17347011.pf
C:\Documents and Settings\BEAUVOIS\Cookies\beauvois@atdmt[2].txt
C:\Documents and Settings\BEAUVOIS\Cookies\beauvois@bs.serving-sys[2].txt

+-----------------| Eorezo Elements Found:

.

+-----------------| It's TV Elements Found:

.

+-----------------| Sweetim Elements Found:

HKCR\CLSID\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}
HKCR\SWEETIE.IEToolbar
HKCR\SWEETIE.IEToolbar.1
HKCR\SWEETIE.SWEETIE
HKCR\SWEETIE.SWEETIE.1
HKCR\ToolBand.SWEETIE
HKCR\ToolBand.SWEETIE.1
HKCR\Typelib\{58906392-79C4-497C-ACC6-6942B59F1A08}
HKCU\Software\SWEETIE
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A0AADCD-3A72-4B5F-900F-E3BB5A838E2A}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}
HKLM\Software\Classes\SWEETIE.IEToolbar
HKLM\Software\Classes\SWEETIE.IEToolbar.1
HKLM\Software\Classes\SWEETIE.SWEETIE
HKLM\Software\Classes\SWEETIE.SWEETIE.1
HKLM\Software\Classes\ToolBand.SWEETIE
HKLM\Software\Classes\ToolBand.SWEETIE.1
HKLM\Software\Classes\TypeLib\{58906392-79C4-497C-ACC6-6942B59F1A08}
HKLM\Software\Classes\CLSID\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}
HKLM\Software\Macrogaming
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F6D63A65-BD23-46F3-B9A3-87F442423481}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A}
HKCU\Software\Microsoft\Internet Explorer\UrlSearchHooks\\{BC4FFE41-DE9F-46FA-B455-AAD49B9F9938}
HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{BC4FFE41-DE9F-46FA-B455-AAD49B9F9938}
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{BC4FFE41-DE9F-46FA-B455-AAD49B9F9938}
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
.

+-----------------| Added Scan:

---- Mozilla FireFox Version 3.0.10 ----

ProfilePath: 1n9z298v.default (BEAUVOIS)
.
(Prefs.js) user_pref("browser.search.defaultenginename", "Web Search");
(Prefs.js) user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1105889&SearchSource=3&q=");
(Prefs.js) user_pref("browser.startup.homepage", "hxxp://www.google.fr/");
(Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.0.10");
.
(Prefs.js) Found: user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1105889&SearchSource=3&q=");

---- Internet Explorer Version 6.0.2900.2180 ----

[HKEY_CURRENT_USER\..\Internet Explorer\Main]

Search bar: hxxp://g.msn.fr/0SEFRFR/SAOS02
Search Page: hxxp://home.microsoft.com/access/allinone.asp
Start Page: hxxp://www.xeoo.com/?p=h&a=f

[HKEY_USERS\S-1-5-21-3036302071-1036407502-3911417167-1006\..\Internet Explorer\Main]

Search bar: hxxp://g.msn.fr/0SEFRFR/SAOS02
Search Page: hxxp://home.microsoft.com/access/allinone.asp
Start Page: hxxp://www.xeoo.com/?p=h&a=f

[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

Default_Page_URL: hxxp://C
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://home.sweetim.com

[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

Tabs: hxxp:\Documents and Settings\BEAUVOIS\Application Data\vmntoolbar\tabwelcome_fr.html

=========== Suspicious ==========

+---------------------------------------------------------------------------+

4473 Byte(s) - C:\Ad-Report-Scan-13.05.2009.log

0 File(s) - C:\Program Files\Ad-remover\BACKUP
0 File(s) - C:\Program Files\Ad-remover\QUARANTINE

End at: 10:57:12 | 13/05/2009
.
+-----------------| E.O.F
.

ok,vla les bestioles:Logfile of random's system information tool 1.06 (written by random/random)
Run by BEAUVOIS at 2009-05-12 21:15:47
Microsoft Windows XP Édition familiale Service Pack 2
System drive C: has 4 GB (10%) free of 44 GB
Total RAM: 447 MB (11% free)

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\Low Battery Alarm Program.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A}]
SWEETIE Class - C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2009-01-14 92504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A057A204-BACC-4D26-8287-79A187E26987}]
VMN Toolbar - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL [2007-09-24 1966080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-06 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-03-06 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{4982D40A-C53B-4615-B15B-B5B5E98D167C} - AOL Toolbar - C:\Program Files\AOL Toolbar\toolbar.dll []
{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - SweetIM For Internet Explorer - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll []
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
{A057A204-BACC-4D26-8287-79A187E26987} - VMN Toolbar - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL [2007-09-24 1966080]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-05 208952]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-05 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-05 455168]
"SynTPLpr"=C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [2004-08-12 102400]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2004-08-12 684032]
"VTTimer"=C:\WINDOWS\system32\VTTimer.exe [2005-03-08 53248]
"VTTrayp"=C:\WINDOWS\system32\VTtrayp.exe [2005-01-11 143360]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2005-04-15 77824]
"HdReg"=C:\APPS\HDREG\HDREGAPP.EXE -r []
"Monitor"=C:\WINDOWS\PixArt\PAC7311\Monitor.exe [2006-11-03 319488]
"Synchronization Manager"=C:\WINDOWS\system32\mobsync.exe [2004-08-05 144384]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-06 148888]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-02-05 81000]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-01-05 413696]
"Autoconfigurateur WiFi SFR"=C:\Program Files\SFR\Kit\WiFi\9wifi.exe [2008-11-18 304448]
"LogitechCommunicationsManager"=C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe [2008-08-14 565008]
"LogitechQuickCamRibbon"=C:\Program Files\Logitech\QuickCam\Quickcam.exe [2008-08-14 2407184]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-04-02 342312]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"VMCL"=C:\Program Files\vodafone\vmclite\DongleEnumerator.exe []
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2006-11-03 204288]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-04-21 24264488]
"360desktop"=C:\Program Files\360desktop\360desktop.exe []

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
WiFi Station.lnk - C:\Program Files\Hercules\WiFi Station\WifiStation.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\UBISOFT\Splinter Cell Pandora Tomorrow\pandora.exe"="C:\Program Files\UBISOFT\Splinter Cell Pandora Tomorrow\pandora.exe:*:Disabled:PANDORA"
"C:\Program Files\UBISOFT\Splinter Cell Pandora Tomorrow\logo_ubi.exe"="C:\Program Files\UBISOFT\Splinter Cell Pandora Tomorrow\logo_ubi.exe:*:Disabled:SPLINTER CELL PANDORA"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Disabled:µTorrent"
"C:\Program Files\AOL 9.0\aol.exe"="C:\Program Files\AOL 9.0\aol.exe:*:Disabled:AOL"
"C:\Program Files\AOL 9.0\waol.exe"="C:\Program Files\AOL 9.0\waol.exe:*:Disabled:AOL 9.0"
"C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Disabled:Bonjour"
"C:\Program Files\Cyberlink\PowerCinema\PowerCinema.exe"="C:\Program Files\Cyberlink\PowerCinema\PowerCinema.exe:*:Disabled:CyberLink PowerCinema"
"C:\Program Files\Cyberlink\PowerCinema\PCMService.exe"="C:\Program Files\Cyberlink\PowerCinema\PCMService.exe:*:Disabled:CyberLink PowerCinema Resident Program"
"C:\APPS\Inventime\my.exe"="C:\APPS\Inventime\my.exe:*:Disabled:INVENTIME"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Disabled:LimeWire"
"C:\Program Files\Lphant\eLePhantClient.exe"="C:\Program Files\Lphant\eLePhantClient.exe:*:Disabled:Lphant"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Disabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Disabled:Windows Live Messenger"
"C:\Program Files\MSN Messenger\msncall.exe"="C:\Program Files\MSN Messenger\msncall.exe:*:Disabled:Windows Live Messenger 8.0 (Phone)"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Disabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Disabled:Windows Live Sync"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Disabled:Windows Messenger"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\AOL 9.0\waol.exe"="C:\Program Files\AOL 9.0\waol.exe:*:Enabled:AOL 9.0"
"C:\Program Files\MSN Messenger\msncall.exe"="C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{08dcaa1c-915d-11dc-8621-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1c5554db-913f-11dc-8620-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1c987da5-9849-11dc-864a-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{27a33a50-726e-11dc-85b7-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{27a33a51-726e-11dc-85b7-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2bb70f7a-73dd-11dc-85c7-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2bb70f7b-73dd-11dc-85c7-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3352cd15-c592-11da-833e-806d6172696f}]
shell\AutoRun\command - D:\setup.exe
shell\LVIPCAP\command - D:\techsupt\CaptureTest\Amcap8.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{572f8ddc-ac20-11dc-86c1-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{572f8ddd-ac20-11dc-86c1-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{572f8dde-ac20-11dc-86c1-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{572f8ddf-ac20-11dc-86c1-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{572f8de0-ac20-11dc-86c1-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7ae15488-9c33-11dc-8659-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7ae15489-9c33-11dc-8659-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7ae1548a-9c33-11dc-8659-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7ae1548b-9c33-11dc-8659-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7ae1548c-9c33-11dc-8659-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7ae1548d-9c33-11dc-8659-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8051c3c2-87ba-11dc-85f9-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8051c3c3-87ba-11dc-85f9-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{aa9746ba-787a-11dc-85d3-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b11fb1cf-91c6-11dc-8624-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c48414a0-b39d-11dc-86dd-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d0b116ba-6ab8-11dd-88be-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d0b116bb-6ab8-11dd-88be-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d56557c4-9c38-11dc-865a-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d56557c5-9c38-11dc-865a-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d56557c6-9c38-11dc-865a-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d56557c7-9c38-11dc-865a-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d734433c-9c09-11dc-8657-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d734433d-9c09-11dc-8657-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d8125de8-79ae-11dc-85d5-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d8125de9-79ae-11dc-85d5-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d8125dea-79ae-11dc-85d5-00038a000015}]
shell\Auto\command - fplaigbza.exe
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL fplaigbza.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e6cf85f8-ab5f-11dc-86bc-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e6cf85f9-ab5f-11dc-86bc-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e77ab048-9117-11dc-861e-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e77ab049-9117-11dc-861e-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e77ab04a-9117-11dc-861e-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e77ab04b-9117-11dc-861e-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e77ab04c-9117-11dc-861e-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e77ab04d-9117-11dc-861e-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{eb5a9e02-ab0d-11dc-86ba-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{eb5a9e03-ab0d-11dc-86ba-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ee52bb2a-ac26-11dc-86c4-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f040c1b0-ac27-11dc-86c5-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f040c1b1-ac27-11dc-86c5-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f0728b62-7344-11dc-85c3-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f0728b63-7344-11dc-85c3-00038a000015}]
shell\AutoRun\command - E:\VMC_PBStarter.exe

======List of files/folders created in the last 1 months======

2009-05-12 21:15:47 ----DC---- C:\rsit
2009-05-12 16:18:03 ----AC---- C:\cleannavi.txt
2009-05-12 14:44:57 ----AC---- C:\fixnavi.txt
2009-05-12 14:41:52 ----D---- C:\Program Files\Navilog1
2009-05-12 14:22:28 ----D---- C:\Program Files\Trend Micro
2009-05-09 03:03:03 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$
2009-05-09 03:01:47 ----D---- C:\Program Files\Microsoft Silverlight
2009-05-08 21:54:14 ----D---- C:\Documents and Settings\BEAUVOIS\Application Data\Malwarebytes
2009-05-08 21:53:45 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-05-06 23:28:36 ----D---- C:\Program Files\iPod
2009-05-06 23:27:51 ----D---- C:\Program Files\iTunes
2009-05-06 23:26:27 ----D---- C:\Program Files\Bonjour
2009-05-06 23:25:58 ----D---- C:\Program Files\Apple Software Update
2009-05-06 23:24:57 ----D---- C:\Program Files\Fichiers communs\Apple
2009-05-06 23:24:57 ----D---- C:\Documents and Settings\All Users\Application Data\Apple
2009-05-06 13:15:30 ----D---- C:\Documents and Settings\BEAUVOIS\Application Data\Dynamique
2009-05-06 13:15:18 ----D---- C:\Documents and Settings\BEAUVOIS\Application Data\Sites
2009-05-06 13:15:18 ----D---- C:\Documents and Settings\BEAUVOIS\Application Data\Classes de site
2009-05-06 13:15:09 ----D---- C:\Program Files\CA VMN Anti-Spyware
2009-05-06 13:15:04 ----D---- C:\Documents and Settings\BEAUVOIS\Application Data\EmailNotifier
2009-05-06 13:15:04 ----D---- C:\Documents and Settings\All Users\Application Data\EmailNotifier
2009-05-06 13:15:02 ----D---- C:\Program Files\vmntoolbar
2009-05-06 13:15:00 ----D---- C:\Documents and Settings\BEAUVOIS\Application Data\vmntoolbar
2009-05-06 13:14:53 ----D---- C:\Program Files\Visicom Media
2009-05-03 22:14:48 ----D---- C:\Program Files\Microsoft Sync Framework
2009-05-03 22:11:02 ----D---- C:\Program Files\Microsoft
2009-05-03 22:02:18 ----D---- C:\Program Files\Fichiers communs\Windows Live
2009-05-02 17:43:50 ----D---- C:\Documents and Settings\BEAUVOIS\Application Data\MSNInstaller
2009-05-01 10:58:14 ----D---- C:\Program Files\Fichiers communs\Logitech
2009-04-30 22:37:54 ----D---- C:\Documents and Settings\BEAUVOIS\Application Data\360desktop
2009-04-30 22:22:40 ----D---- C:\Documents and Settings\All Users\Application Data\Google
2009-04-30 22:07:27 ----D---- C:\Documents and Settings\BEAUVOIS\Application Data\Bump Technologies, Inc
2009-04-29 20:14:45 ----D---- C:\Program Files\adslTV
2009-04-27 22:19:02 ----D---- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2009-04-27 20:36:44 ----D---- C:\Documents and Settings\All Users\Application Data\Logishrd
2009-04-27 19:57:57 ----D---- C:\Documents and Settings\BEAUVOIS\Application Data\skypePM
2009-04-27 19:55:47 ----D---- C:\Documents and Settings\BEAUVOIS\Application Data\Skype
2009-04-27 19:54:27 ----D---- C:\Program Files\Fichiers communs\Skype
2009-04-27 19:54:15 ----RD---- C:\Program Files\Skype
2009-04-27 19:53:51 ----D---- C:\Documents and Settings\All Users\Application Data\Skype
2009-04-27 14:59:49 ----RA---- C:\WINDOWS\system32\LVUI2RC.dll
2009-04-27 14:59:49 ----RA---- C:\WINDOWS\system32\lvcoinst.ini
2009-04-27 14:59:49 ----RA---- C:\WINDOWS\system32\lvci11801048.dll
2009-04-27 14:59:48 ----RA---- C:\WINDOWS\system32\LVUI2.dll
2009-04-27 14:59:48 ----RA---- C:\WINDOWS\system32\lvcodec2.dll
2009-04-27 14:51:20 ----R---- C:\WINDOWS\bwUnin-8.1.1.50-8876480SL.exe
2009-04-27 14:47:13 ----D---- C:\Program Files\Fichiers communs\LogiShrd
2009-04-27 14:46:58 ----D---- C:\Documents and Settings\All Users\Application Data\Logitech
2009-04-27 14:46:57 ----D---- C:\Program Files\Logitech
2009-04-26 09:54:08 ----D---- C:\Program Files\SFR
2009-04-25 22:27:43 ----D---- C:\Documents and Settings\All Users\Application Data\WinZip
2009-04-24 00:08:54 ----D---- C:\Documents and Settings\BEAUVOIS\Application Data\WinRAR
2009-04-24 00:08:16 ----D---- C:\Program Files\WinRAR
2009-04-20 17:47:59 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-04-20 17:47:45 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$
2009-04-20 17:44:29 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-04-20 17:43:59 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-04-20 17:43:27 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-04-20 17:42:47 ----HDC---- C:\WINDOWS\$NtUninstallKB963027$
2009-04-20 17:42:07 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2009-04-19 12:16:20 ----AC---- C:\WINDOWSU2cal.txt
2009-04-19 07:43:51 ----D---- C:\Documents and Settings\BEAUVOIS\Application Data\dvdcss
2009-04-19 07:38:19 ----A---- C:\WINDOWS\U2 - SLANE (Red).exe
2009-04-19 07:38:19 ----A---- C:\WINDOWS\U2 - SLANE (Red).dll
2009-04-19 07:37:57 ----A---- C:\WINDOWS\U2 - SLANE (Blue).exe
2009-04-19 07:37:57 ----A---- C:\WINDOWS\U2 - SLANE (Blue).dll

======List of files/folders modified in the last 1 months======

2009-05-12 21:15:35 ----D---- C:\WINDOWS\PREFETCH
2009-05-12 21:07:17 ----D---- C:\Program Files\Mozilla Firefox
2009-05-12 20:39:45 ----D---- C:\WINDOWS\Temp
2009-05-12 19:39:26 ----D---- C:\Program Files\DivX
2009-05-12 17:24:23 ----D---- C:\WINDOWS\system32\CatRoot_bak
2009-05-12 17:24:23 ----D---- C:\WINDOWS\system32\CatRoot
2009-05-12 17:24:22 ----D---- C:\WINDOWS\system32\CatRoot2
2009-05-12 17:24:10 ----HD---- C:\WINDOWS\inf
2009-05-12 16:30:54 ----D---- C:\WINDOWS\system32
2009-05-12 16:27:56 ----D---- C:\WINDOWS
2009-05-12 16:24:36 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-05-12 14:41:52 ----RD---- C:\Program Files
2009-05-12 02:51:19 ----D---- C:\Documents and Settings\BEAUVOIS\Application Data\vlc
2009-05-11 13:35:49 ----SHD---- C:\WINDOWS\Installer
2009-05-11 13:34:51 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-05-11 13:34:51 ----D---- C:\WINDOWS\system32\drivers
2009-05-11 13:28:36 ----D---- C:\Program Files\eMule
2009-05-11 04:00:36 ----RSHD---- C:\WINDOWS\system32\dllcache
2009-05-10 20:35:00 ----D---- C:\WINDOWS\Minidump
2009-05-07 20:27:19 ----AC---- C:\WINDOWS\WORDPAD.INI
2009-05-06 23:26:12 ----SD---- C:\WINDOWS\Tasks
2009-05-06 23:24:57 ----D---- C:\Program Files\Fichiers communs
2009-05-05 10:59:02 ----D---- C:\Program Files\Google
2009-05-04 16:37:27 ----HD---- C:\WINDOWS\$hf_mig$
2009-05-04 01:02:04 ----D---- C:\WINDOWS\Microsoft.NET
2009-05-04 01:01:55 ----RSD---- C:\WINDOWS\assembly
2009-05-03 23:40:06 ----D---- C:\WINDOWS\SxsCaPendDel
2009-05-03 23:30:54 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-05-03 23:29:23 ----D---- C:\WINDOWS\WinSxS
2009-05-03 22:44:16 ----SD---- C:\Documents and Settings\BEAUVOIS\Application Data\Microsoft
2009-05-03 22:24:37 ----D---- C:\Program Files\Windows Live
2009-05-03 22:17:11 ----D---- C:\WINDOWS\system32\mui
2009-05-03 22:17:11 ----D---- C:\Program Files\Internet Explorer
2009-05-03 22:14:34 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-05-03 22:13:27 ----D---- C:\WINDOWS\system32\DirectX
2009-05-03 22:10:40 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-05-03 22:10:10 ----RSD---- C:\WINDOWS\Fonts
2009-05-03 01:47:01 ----A---- C:\WINDOWS\ModemLog_Smart Link 56K Modem.txt
2009-05-02 17:43:54 ----D---- C:\Program Files\MSN
2009-05-01 13:31:29 ----D---- C:\WINDOWS\system32\Restore
2009-04-30 22:46:09 ----A---- C:\WINDOWS\imsins.BAK
2009-04-27 14:59:48 ----D---- C:\WINDOWS\twain_32
2009-04-27 14:51:08 ----HD---- C:\Program Files\InstallShield Installation Information
2009-04-26 00:45:46 ----D---- C:\Program Files\Fichiers communs\Real
2009-04-26 00:45:43 ----D---- C:\Documents and Settings\BEAUVOIS\Application Data\Real
2009-04-25 22:40:01 ----D---- C:\Documents and Settings\BEAUVOIS\Application Data\Apple Computer
2009-04-20 17:49:55 ----D---- C:\WINDOWS\system32\wbem
2009-04-20 17:49:53 ----D---- C:\WINDOWS\AppPatch
2009-04-18 18:15:26 ----D---- C:\APPS
2009-04-18 18:09:55 ----D---- C:\WINDOWS\Debug

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-02-05 26944]
R1 AmdK8;Pilote de processeur AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2004-08-11 43520]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-02-05 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-02-05 51376]
R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2006-07-24 5632]
R1 Tcpip6;Pilote du protocole IPv6 Microsoft; C:\WINDOWS\system32\DRIVERS\tcpip6.sys [2008-06-20 225920]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.5.3.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2008-09-03 21419]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-02-05 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-02-05 94032]
R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2009-02-06 55152]
R2 NwlnkIpx;Protocole de transport compatible NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2004-08-05 88448]
R2 NwlnkNb;NetBIOS NWLink; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2004-08-05 63232]
R2 NwlnkSpx;Protocole NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2004-08-05 55936]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-04-19 2317504]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-02-05 23152]
R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2004-08-04 14080]
R3 FETNDISB;VIA Rhine Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\system32\DRIVERS\fetnd5b.sys [2004-10-18 42496]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-03-19 23400]
R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys [2008-07-26 25624]
R3 Mtlmnt5;Mtlmnt5; C:\WINDOWS\system32\DRIVERS\Mtlmnt5.sys [2004-08-25 229720]
R3 PCASp50;PCASp50 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\PCASp50.sys [2005-11-19 20096]
R3 RT2500;RT2500 Wireless Driver; C:\WINDOWS\system32\DRIVERS\RT2500.sys [2005-02-23 228992]
R3 RT73;Hercules Wireless USB Dongle Driver ; C:\WINDOWS\system32\DRIVERS\rt73.sys [2006-12-21 429440]
R3 Slntamr;SmartLink AMR_PCI Driver; C:\WINDOWS\system32\DRIVERS\slntamr.sys [2004-08-25 653600]
R3 SlWdmSup;SlWdmSup; C:\WINDOWS\system32\DRIVERS\SlWdmSup.sys [2004-08-25 13216]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2004-08-12 185664]
R3 tunmp;Pilote de carte miniport Tun Microsoft; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2004-08-05 12416]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-04 26624]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-05 57600]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-04 20480]
R3 viagfx;viagfx; C:\WINDOWS\system32\DRIVERS\vtmini.sys [2005-03-08 172544]
R3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys [2003-01-10 33588]
S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-04 14848]
S3 catchme;catchme; \??\C:\DOCUME~1\BEAUVOIS\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 GcKernel;Pilote de filtre Microsoft SideWinder Value Add; C:\WINDOWS\system32\DRIVERS\GcKernel.sys [2004-08-03 59136]
S3 HIDSwvd;Minipilote de périphérique Microsoft SideWinder HID virtuel; C:\WINDOWS\system32\DRIVERS\HIDSwvd.sys [2001-08-17 2688]
S3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys [2007-05-21 100736]
S3 LVRS;Logitech RightSound Filter Driver; C:\WINDOWS\system32\DRIVERS\lvrs.sys [2008-07-26 627864]
S3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\LVUSBSta.sys [2008-07-26 41752]
S3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
S3 MPE;Filtre BDA MPE; C:\WINDOWS\system32\DRIVERS\MPE.sys [2004-08-03 15360]
S3 ms_mpu401;Pilote UART MIDI MPU-401 Microsoft; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 Mtlstrm;Mtlstrm; C:\WINDOWS\system32\DRIVERS\Mtlstrm.sys [2004-08-25 1395376]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 nm;Pilote du Moniteur réseau; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2004-08-05 40320]
S3 PAC7311;VGA USB Camera; C:\WINDOWS\system32\DRIVERS\PA707UCM.SYS [2006-11-08 530304]
S3 pepifilter;Volume Adapter; C:\WINDOWS\system32\DRIVERS\lv302af.sys [2008-07-26 13848]
S3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\WINDOWS\system32\DRIVERS\LV302V32.SYS [2008-07-26 2570520]
S3 ser2plms;Microsoft USB GPS driver; C:\WINDOWS\system32\DRIVERS\ser2plms.sys [2006-08-17 42240]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 SlNtHal;SlNtHal; C:\WINDOWS\system32\DRIVERS\Slnthal.sys [2004-08-25 100240]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 TV_551805_Sp50;TV_551805_Sp50 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\TV_551805_Sp50.sys [2008-09-13 27072]
S3 USB28xxBGA;PD781 Device; C:\WINDOWS\system32\DRIVERS\emBDA.sys [2006-02-08 217216]
S3 USB28xxOEM;USB 28xx OEM Filter; C:\WINDOWS\system32\DRIVERS\emOEM.sys [2006-02-08 17792]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys []
S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-03 59264]
S3 usbbus;LGE Mobile Composite USB Device; C:\WINDOWS\system32\DRIVERS\lgusbbus.sys []
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-04 31616]
S3 USBModem;LGE Mobile USB Modem; C:\WINDOWS\system32\DRIVERS\lgusbmodem.sys []
S3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2004-08-05 17024]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 UsbSagCom;SAGEM Full USB Driver; C:\WINDOWS\system32\DRIVERS\UsbSagCom.sys [2006-04-07 51200]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 6to4;Service d'application d'assistance IPv6; C:\WINDOWS\system32\svchost.exe [2004-08-05 14336]
R2 AOL ACS;AOL Connectivity Service; C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe [2004-04-08 1135728]
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-02-05 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-02-05 138680]
R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-03-06 152984]
R2 LVCOMSer;LVCOMSer; C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe [2008-07-26 186904]
R2 LVPrcSrv;Process Monitor; C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe [2008-07-26 150040]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\Cyberlink\Shared files\RichVideo.exe [2006-02-20 167936]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]
R2 SLService;SmartLinkService; C:\WINDOWS\system32\slserv.exe [2004-08-25 57344]
R2 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-02-05 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-02-05 352920]
R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2009-04-02 656168]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-04-13 33632]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-04-13 68952]
S3 fsssvc;Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 jswpsapi;Jumpstart Wifi Protected Setup; C:\Program Files\DartyBox_v3\Bewan\NetAgent\jswpsapi.exe []
S3 MySqlInventime;MySqlInventime; c:\mysql\bin\mysqld-max-nt MySqlInventime []
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

-----------------EOF-----------------
info.txt logfile of random's system information tool 1.06 2009-05-12 21:16:36

======Uninstall list======

-->"C:\Program Files\AOL Toolbar\UNWISE.EXE" /u "C:\Program Files\AOL Toolbar\INSTALL.LOG"
-->"C:\Program Files\Fichiers communs\aolshare\Coach\AolCInUn.exe" -lang="fr-fr"
-->C:\PROGRA~1\FICHIE~1\AOL\ACS\AcsUninstall.exe /c
-->C:\Program Files\Fichiers communs\AOL\Screensaver\uninst_ygpss.exe
-->C:\Program Files\Fichiers communs\aolshare\Aolunins_fr.exe
-->C:\Program Files\Learn2.com\StRunner\stuninst.exe
-->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" REMOVE
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C151CE54-E7EA-4804-854B-F515368B0798}\setup.exe" -l0x40c
-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
-->Rundll32.exe vuins32.dll,vuins32Ex $Rhine $VIA
Adobe Flash Player 10 Plugin-->MsiExec.exe /X{ECA1A3B6-898F-4DCE-9F04-714CF3BA126B}
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 7.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70000000000}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
CA VMN Anti-Spyware (remove only)-->"C:\Program Files\CA VMN Anti-Spyware\uninstall.exe"
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Coffret de pilotes Logitech QuickCam-->"C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\lvdrivers\11.80.1048\LgDrvInst.exe" -remove -instdir"C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\lvdrivers\" -enumdelay=2000 -enabledifx -forcedelete -usbhubsfirst -forceremove -cumulativeremove -promptuninstall -arpregkey"lvdrivers_11.80" /clone_wait /hide_progress
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Correctif Windows XP - KB873333-->C:\WINDOWS\$NtUninstallKB873333$\spuninst\spuninst.exe
Correctif Windows XP - KB873339-->C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
Correctif Windows XP - KB885250-->C:\WINDOWS\$NtUninstallKB885250$\spuninst\spuninst.exe
Correctif Windows XP - KB885835-->C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
Correctif Windows XP - KB885836-->C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
Correctif Windows XP - KB886185-->C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe
Correctif Windows XP - KB887472-->C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe
Correctif Windows XP - KB888113-->C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe
Correctif Windows XP - KB888302-->C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
Correctif Windows XP - KB890047-->C:\WINDOWS\$NtUninstallKB890047$\spuninst\spuninst.exe
Correctif Windows XP - KB890175-->C:\WINDOWS\$NtUninstallKB890175$\spuninst\spuninst.exe
Correctif Windows XP - KB890859-->"C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
Correctif Windows XP - KB890923-->"C:\WINDOWS\$NtUninstallKB890923$\spuninst\spuninst.exe"
Correctif Windows XP - KB891781-->C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
Correctif Windows XP - KB893066-->"C:\WINDOWS\$NtUninstallKB893066$\spuninst\spuninst.exe"
Correctif Windows XP - KB893086-->"C:\WINDOWS\$NtUninstallKB893086$\spuninst\spuninst.exe"
Favorit-->"c:\documents and settings\beauvois\local settings\application data\wyigumc.exe" -uninstall
Galerie de photos Windows Live-->MsiExec.exe /X{44E54A81-9D91-4AA1-9417-80AFF134F5FF}
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB926239)-->"C:\WINDOWS\$NtUninstallKB926239$\spuninst\spuninst.exe"
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
iTunes-->MsiExec.exe /I{5EFCBB42-36AB-4FF9-B90C-E78C7B9EE7B3}
Java 2 Runtime Environment, SE v1.4.2_05-->MsiExec.exe /I{7148F0A8-6813-11D6-A77B-00B0D0142050}
Java(TM) 6 Update 12-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216012FF}
Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Logitech Desktop Messenger-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}\Setup.exe" -l0x40c UNINSTALL
Logitech QuickCam-->MsiExec.exe /X{3AF8FCCD-F51A-4014-9002-F195E1CBC876}
Logitech Updater-->MsiExec.exe /I{53735ECE-E461-4FD0-B742-23A352436D3A}
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft AutoRoute 2007 avec récepteur GPS-->MsiExec.exe /I{C82185E8-C27B-4EF4-2007-3333BC2C2B6D}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Office Excel Viewer 2003-->MsiExec.exe /I{9084040C-6000-11D3-8CFE-0150048383C9}
Microsoft Office PowerPoint Viewer 2003-->MsiExec.exe /X{90AF040C-6000-11D3-8CFE-0150048383C9}
Microsoft Search Enhancement Pack-->MsiExec.exe /I{9C9CEB9D-53FD-49A7-85D2-FE674F72F24E}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
Microsoft User-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWudf01005$\spuninst\spuninst.exe"
Microsoft WinUsb 1.0-->"C:\WINDOWS\$NtUninstallwinusb0100$\spuninst\spuninst.exe"
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB911564)-->"C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398)-->"C:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 9 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB890046)-->"C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB893756)-->"C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896358)-->"C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896423)-->"C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896428)-->"C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB899587)-->"C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB899591)-->"C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB900725)-->"C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB901017)-->"C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB901190)-->"C:\WINDOWS\$NtUninstallKB901190$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB901214)-->"C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB902400)-->"C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB904706)-->"C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB905414)-->"C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB905749)-->"C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB908519)-->"C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB911562)-->"C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB911927)-->"C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB913580)-->"C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB914388)-->"C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB914389)-->"C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB917344)-->"C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB917953)-->"C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB918118)-->"C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB918439)-->"C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB919007)-->"C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920213)-->"C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920670)-->"C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920683)-->"C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920685)-->"C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB921503)-->"C:\WINDOWS\$NtUninstallKB921503$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB922819)-->"C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923191)-->"C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923414)-->"C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923689)-->"C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Mise à jour de sécurité pour Windows XP (KB923980)-->"C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924270)-->"C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924496)-->"C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924667)-->"C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB925902)-->"C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB926255)-->"C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB926436)-->"C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB927779)-->"C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB927802)-->"C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB928255)-->"C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB928843)-->"C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB929123)-->"C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB930178)-->"C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB931261)-->"C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB931784)-->"C:\WINDOWS\$NtUninstallKB931784$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB932168)-->"C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB933729)-->"C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB935839)-->"C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB935840)-->"C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB936021)-->"C:\WINDOWS\$NtUninstallKB936021$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938127)-->"C:\WINDOWS\$NtUninstallKB938127$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938829)-->"C:\WINDOWS\$NtUninstallKB938829$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB939653)-->"C:\WINDOWS\$NtUninstallKB939653$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941202)-->"C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941568)-->"C:\WINDOWS\$NtUninstallKB941568$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941644)-->"C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941693)-->"C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB942615)-->"C:\WINDOWS\$NtUninstallKB942615$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB943055)-->"C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB943460)-->"C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB943485)-->"C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB944338)-->"C:\WINDOWS\$NtUninstallKB944338$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB944653)-->"C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB945553)-->"C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946026)-->"C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB947864)-->"C:\WINDOWS\$NtUninstallKB947864$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB948590)-->"C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB948881)-->"C:\WINDOWS\$NtUninstallKB948881$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950749)-->"C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956390)-->"C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958215)-->"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960714)-->"C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB963027)-->"C:\WINDOWS\$NtUninstallKB963027$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB894391)-->"C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB900485)-->"C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB908531)-->"C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB910437)-->"C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB911280)-->"C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB916595)-->"C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB920872)-->"C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB922582)-->"C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB927891)-->"C:\WINDOWS\$NtUninstallKB927891$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB930916)-->"C:\WINDOWS\$NtUninstallKB930916$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB933360)-->"C:\WINDOWS\$NtUninstallKB933360$\spuninst\spuninst.exe"
Mise à jour p

Re,
j'ai lancé Navilog il y a une bonne demi heure,or il me dit que que le scan peut durer une dizaine de minutes...Tu crois pas qu'il ne se serait pas arrété dans un bistrot en cours de route?

@lebugCela arrive attends un peu

@jlpjlpre re,
je viens de terminer mon scan Avast et la,il ne m'a plus retrouvé skimorph(je l'avais supprimé au scan précédent,mais tu m'as dis qu'il le retrouvera car il ne vire pas ce rootkit).je ne vais pas m'en plaindre mais ne crois tu pas qu'il ai rejoins navilog au troquet et qu'ils vont revenir main dans la main?lol

@jlpjlpre,re,re
ah bah nan,vla Navilog.voila ce qu'il me dit:

Search Navipromo version 3.7.6 commencé le 12/05/2009 à 15:35:16,45

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 14.03.2009 à 18h00 par IL-MAFIOSO

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : Mobile AMD Sempron(tm) Processor 3000+ )
BIOS : Insyde Software MobilePRO BIOS Version 4.00.05
USER : BEAUVOIS ( Administrator )
BOOT : Normal boot

Antivirus : Norton AntiVirus 2004 (Activated)
Firewall : Norton Internet Security 2004 (Activated)

C:\ (Local Disk) - NTFS - Total:42 Go (Free:4 Go)
D:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)

Recherche executé en mode normal

*** Recherche dossiers dans "C:\WINDOWS" ***

*** Recherche dossiers dans "C:\Program Files" ***

*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***

*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\BEAUVOIS\applic~1" ***

...\MessengerSkinner trouvé !

*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\BEAUVOIS\locals~1\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\BEAUVOIS\menudm~1\progra~1" ***

...\MessengerSkinner trouvé !

*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\menudm~1\progra~1" ***

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\BEAUVOIS\locals~1\applic~1" *

* Recherche dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *

*** Recherche fichiers ***

C:\WINDOWS\dialerexe.ini trouvé !

*** Recherche clés spécifiques dans le Registre ***
!! Les clés trouvées ne sont pas forcément infectées !!

HKEY_CURRENT_USER\Software\Lanconfig

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"bobivqdkxd"="c:\\documents and settings\\beauvois\\local settings\\application data\\bobivqdkxd.exe bobivqdkxd"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"cexigyb"="c:\\windows\\system32\\cexigyb.exe cexigyb"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"bkdxraw"="c:\\windows\\system32\\bkdxraw.exe bkdxraw"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"bnovuqe"="c:\\windows\\system32\\bnovuqe.exe bnovuqe"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ljdswmcpn"="c:\\windows\\system32\\ljdswmcpn.exe ljdswmcpn"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"yhuktoop"="c:\\windows\\system32\\yhuktoop.exe yhuktoop"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"cdyrbpu"="c:\\windows\\system32\\cdyrbpu.exe cdyrbpu"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"akzemmf"="c:\\windows\\system32\\akzemmf.exe akzemmf"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"fstgr"="c:\\documents and settings\\beauvois\\local settings\\application data\\fstgr.exe fstgr"

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :

2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :

akzemmf.dat trouvé !
bkdxraw.dat trouvé !
bnovuqe.dat trouvé !
cdyrbpu.dat trouvé !
cdyrbpu_navfx.dat trouvé !
cexigyb.dat trouvé !
ljdswmcpn.dat trouvé !
yhuktoop.dat trouvé !

* Dans "C:\Documents and Settings\BEAUVOIS\locals~1\applic~1" :

* Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" :

3)Recherche Certificats :

Certificat Egroup trouvé !
Certificat Electronic-Group trouvé !
Certificat Montorgueil absent !
Certificat OOO-Favorit trouvé !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche autres dossiers et fichiers connus :

*** Analyse terminée le 12/05/2009 à 16:04:09,14 ***

@lebugOk parfait. Navilog l'a trouvé . Cela vient de messenger skinner . Tu dois en avoir des pubs! Refais navilog choisi l'option 2 et colle le rapport