Surabaya

Bonjour,

non, je n'ai pas tout.

voila , ca marche la !!!!!

Re,

bon, moi je vais me coucher.

Je ne te réponds pas tant que je n'ai pas ici tout ce que j'ai demandé.

Le topic sur zeb a été fermé parce que j'en ai parlé avec Falkra.

color=orange]========== Files/Folders - Created Within 30 Days ==========[/color]

[4 C:\WINDOWS\*.tmp files]
[2009/05/29 18:40:03 | 00,000,000 | ---D | C] -- C:\Documents and Settings\hp\Local Settings\temp
[2009/05/29 18:19:36 | 00,154,624 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2009/05/29 18:12:16 | 03,202,624 | R--- | C] () -- C:\Documents and Settings\hp\Bureau\antitruc.exe
[2009/05/28 00:29:38 | 00,501,760 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\hp\Bureau\OTL.exe
[2009/05/28 00:25:56 | 00,000,345 | ---- | C] () -- C:\Raccourci vers _OTL.lnk
[2009/05/27 19:43:51 | 00,152,934 | ---- | C] (changelog.fr ) -- C:\Documents and Settings\hp\Bureau\OAD.exe
[2009/05/27 08:25:56 | 00,000,000 | R--D | C] -- C:\Documents and Settings\hp\Mes documents\Mes vidéos
[2009/05/26 23:15:46 | 00,001,336 | ---- | C] () -- C:\Documents and Settings\hp\Bureau\UsbFix V3.026.lnk
[2009/05/26 23:15:40 | 00,000,000 | ---D | C] -- C:\UsbFix
[2009/05/26 21:46:33 | 00,001,734 | ---- | C] () -- C:\Documents and Settings\hp\Bureau\HijackThis.lnk
[2009/05/26 20:07:16 | 00,000,000 | ---D | C] -- C:\Documents and Settings\hp\Application Data\Malwarebytes
[2009/05/26 20:06:58 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2009/05/25 21:48:10 | 00,114,688 | R--- | C] () -- C:\Documents and Settings\hp\Bureau\SOIT TRANSMIS .scr
[2009/05/25 21:47:44 | 00,000,000 | ---D | C] -- C:\Documents and Settings\hp\Bureau\الضرب و الجرح و العنف
** - C:\Documents and Settings\hp\Bureau\????? ? ????? ? ?????
[2009/05/24 20:46:06 | 00,000,000 | ---D | C] -- C:\WINDOWS\temp
[2009/05/22 22:45:24 | 00,000,212 | ---- | C] () -- C:\Boot.bak
[2009/05/22 22:45:20 | 00,263,488 | ---- | C] () -- C:\cmldr
[2009/05/22 22:45:17 | 00,000,000 | RHSD | C] -- C:\cmdcons
[2009/05/22 22:31:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2009/05/22 01:46:42 | 00,250,304 | ---- | C] () -- C:\Documents and Settings\hp\Mes documents\cc_20090522_014630.reg
[2009/05/22 00:25:13 | 00,000,000 | ---D | C] -- C:\Documents and Settings\hp\Application Data\Auslogics
[2009/05/22 00:25:05 | 00,000,801 | ---- | C] () -- C:\Documents and Settings\hp\Bureau\AusLogics Disk Defrag.lnk
[2009/05/22 00:25:04 | 00,000,000 | ---D | C] -- C:\Program Files\Auslogics
[2009/05/21 19:28:06 | 00,000,630 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Navilog1.lnk
[2009/05/21 19:28:05 | 00,000,000 | ---D | C] -- C:\Program Files\Navilog1
[2009/05/21 18:30:00 | 00,000,000 | -H-D | C] -- C:\ToolBar SD
[2009/05/20 04:17:12 | 00,054,156 | -H-- | C] () -- C:\WINDOWS\QTFont.qfn
[2009/05/20 04:17:12 | 00,001,409 | ---- | C] () -- C:\WINDOWS\QTFont.for
[2009/05/20 02:19:41 | 00,000,000 | ---D | C] -- C:\Program Files\a-squared Free
[2009/05/20 01:39:36 | 00,000,000 | ---D | C] -- C:\Documents and Settings\hp\Application Data\Windows Search
[2009/05/20 01:38:55 | 00,000,000 | ---D | C] -- C:\Documents and Settings\hp\Application Data\Windows Desktop Search
[2009/05/20 01:02:40 | 00,001,837 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Windows Search.lnk
[2009/05/20 01:01:51 | 00,000,000 | ---D | C] -- C:\Program Files\Windows Desktop Search
[2009/05/20 00:58:45 | 00,192,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\offfilt.dll
[2009/05/20 00:58:45 | 00,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nlhtml.dll
[2009/05/20 00:58:45 | 00,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mimefilt.dll
[2009/05/19 23:30:04 | 00,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2009/05/18 16:13:43 | 00,026,624 | ---- | C] () -- C:\Documents and Settings\hp\Mes documents\Nouveau Document Microsoft Word.doc
[2009/05/18 12:30:32 | 00,000,000 | ---D | C] -- C:\Program Files\AMT
[2009/05/17 18:35:35 | 00,000,141 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Real.com Guide.url
[2009/05/17 18:32:32 | 00,000,000 | ---D | C] -- C:\Program Files\WS_FTP
[2009/05/17 17:53:18 | 00,253,008 | ---- | C] () -- C:\WINDOWS\adirasx64.exe
[2009/05/17 17:53:18 | 00,169,496 | ---- | C] (Analog Devices Inc.) -- C:\WINDOWS\System32\drivers\adiusbawx64.sys
[2009/05/17 17:53:18 | 00,146,968 | ---- | C] (Analog Devices Inc.) -- C:\WINDOWS\System32\drivers\e4usbawx64.sys
[2009/05/17 17:53:18 | 00,118,552 | ---- | C] (Analog Devices Inc.) -- C:\WINDOWS\System32\drivers\adiusbaw.sys
[2009/05/17 17:53:18 | 00,016,254 | ---- | C] () -- C:\WINDOWS\System32\drivers\adiusbawx64.cat
[2009/05/17 17:53:18 | 00,016,254 | ---- | C] () -- C:\WINDOWS\System32\drivers\adiusbaw.cat
[2009/05/17 17:53:18 | 00,013,981 | ---- | C] () -- C:\WINDOWS\System32\drivers\e4usbawx64.cat
[2009/05/17 17:53:18 | 00,013,981 | ---- | C] () -- C:\WINDOWS\System32\drivers\e4usbaw.cat
[2009/05/17 17:53:11 | 00,176,128 | ---- | C] () -- C:\WINDOWS\autoclk.exe
[2009/05/17 17:53:10 | 00,071,832 | ---- | C] (Analog Deivces) -- C:\WINDOWS\System32\drivers\e4ldrx64.sys
[2009/05/17 17:53:10 | 00,024,576 | ---- | C] () -- C:\WINDOWS\enddisk32.exe
[2009/05/17 17:53:10 | 00,011,399 | ---- | C] () -- C:\WINDOWS\System32\drivers\e4ldrx64.cat
[2009/05/17 17:53:10 | 00,011,399 | ---- | C] () -- C:\WINDOWS\System32\drivers\e4ldr.cat
[2009/05/17 17:53:09 | 00,316,416 | ---- | C] (Analog Devices.) -- C:\WINDOWS\System32\unaddrv.x64.exe
[2009/05/17 17:53:09 | 00,058,264 | ---- | C] (Analog Deivces) -- C:\WINDOWS\System32\drivers\adildrx64.sys
[2009/05/17 17:53:09 | 00,056,088 | ---- | C] (Analog Deivces) -- C:\WINDOWS\System32\drivers\adildr.sys
[2009/05/17 17:53:09 | 00,012,403 | ---- | C] () -- C:\WINDOWS\System32\drivers\adildrx64.cat
[2009/05/17 17:53:09 | 00,012,403 | ---- | C] () -- C:\WINDOWS\System32\drivers\adildr.cat
[2009/05/17 17:52:28 | 00,000,000 | ---D | C] -- C:\Program Files\SAGEM
[2009/05/17 17:52:25 | 00,000,000 | ---D | C] -- C:\Documents and Settings\hp\Application Data\InstallShield
[2009/05/16 21:33:43 | 00,142,848 | ---- | C] () -- C:\Documents and Settings\hp\Mes documents\UN MICRI DANS 15 ANS.doc
[2009/05/10 23:15:59 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
[2009/05/10 22:28:14 | 00,000,000 | ---D | C] -- C:\Documents and Settings\hp\Mes documents\Mes Historiques de Conversation
[2009/05/10 22:26:28 | 00,000,000 | ---D | C] -- C:\Program Files\Messenger Plus! Live
[2009/05/08 20:28:25 | 00,000,000 | ---D | C] -- C:\WINDOWS\pss
[2009/05/08 15:10:19 | 00,000,000 | ---D | C] -- C:\Program Files\Eraser
[2009/05/07 23:41:06 | 00,000,000 | ---D | C] -- C:\Program Files\HP
[2009/05/01 22:39:49 | 00,000,000 | ---D | C] -- C:\Program Files\ToniArts
[2009/04/28 17:27:29 | 00,339,968 | ---- | C] () -- C:\WINDOWS\System32\pythoncom25.dll
[2009/04/28 17:27:29 | 00,114,688 | ---- | C] () -- C:\WINDOWS\System32\pywintypes25.dll
[2009/04/25 20:59:26 | 00,000,183 | ---- | C] () -- C:\WINDOWS\aimpr.ini
[2009/04/18 21:04:44 | 00,524,288 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009/04/18 21:04:44 | 00,139,264 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009/04/11 23:31:09 | 00,005,376 | ---- | C] () -- C:\WINDOWS\System32\drivers\MS1000.sys
[2009/02/11 02:48:02 | 00,002,638 | ---- | C] () -- C:\WINDOWS\System32\assuntos.dll
[2009/02/11 02:47:38 | 00,000,004 | ---- | C] () -- C:\WINDOWS\System32\total.dll
[2009/02/11 02:47:23 | 00,000,517 | ---- | C] () -- C:\WINDOWS\System32\links.dll
[2009/02/11 02:47:19 | 00,020,543 | ---- | C] () -- C:\WINDOWS\System32\frases.dll
[2009/02/11 02:47:17 | 00,045,121 | ---- | C] () -- C:\WINDOWS\System32\logs.dll
[2009/02/11 02:47:16 | 00,000,029 | ---- | C] () -- C:\WINDOWS\System32\config.dll
[2009/02/11 02:47:11 | 00,000,033 | ---- | C] () -- C:\WINDOWS\System32\errox32.dll
[2008/10/14 19:44:53 | 00,000,050 | ---- | C] () -- C:\WINDOWS\Winamp.ini
[2008/10/14 19:44:46 | 00,000,041 | ---- | C] () -- C:\WINDOWS\winampa.ini
[2008/10/12 17:03:05 | 00,126,976 | ---- | C] () -- C:\WINDOWS\System32\coclassfast.dll
[2008/10/12 17:03:03 | 00,046,892 | ---- | C] () -- C:\WINDOWS\System32\adadix16.dll
[2008/10/12 17:03:00 | 00,000,989 | ---- | C] () -- C:\WINDOWS\adiras.ini
[2008/10/12 17:02:59 | 00,000,169 | ---- | C] () -- C:\WINDOWS\adidsl.ini
[2008/10/12 17:02:59 | 00,000,021 | ---- | C] () -- C:\WINDOWS\Fast800.ini
[2008/10/12 16:15:12 | 00,000,385 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2008/05/26 22:23:32 | 00,016,698 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2008/05/26 22:23:30 | 00,021,596 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2008/05/26 22:23:28 | 00,016,036 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2008/01/14 16:47:06 | 00,099,712 | ---- | C] () -- C:\WINDOWS\HPBroker.dll
[2005/08/02 21:24:01 | 00,053,299 | ---- | C] () -- C:\WINDOWS\System32\pthreadVC.dll
[2003/04/01 10:58:02 | 00,005,260 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[2002/09/07 01:00:00 | 00,001,091 | ---- | C] () -- C:\WINDOWS\win.ini
[2002/09/07 01:00:00 | 00,000,282 | ---- | C] () -- C:\WINDOWS\system.ini

[color=orange]========== Files - Modified Within 30 Days ==========[/color]

[4 C:\WINDOWS\*.tmp files]
[2009/05/30 00:31:28 | 00,000,426 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{4DF9536E-79E9-41D1-B7BA-D4BB961EFCBD}.job
[2009/05/29 18:54:05 | 00,000,260 | ---- | M] () -- C:\WINDOWS\tasks\WGASetup.job
[2009/05/29 18:53:29 | 00,000,062 | -HS- | M] () -- C:\Documents and Settings\hp\Local Settings\desktop.ini
[2009/05/29 18:53:10 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2009/05/29 18:53:08 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2009/05/29 18:35:43 | 00,000,282 | ---- | M] () -- C:\WINDOWS\system.ini
[2009/05/29 18:12:16 | 03,202,624 | R--- | M] () -- C:\Documents and Settings\hp\Bureau\antitruc.exe
[2009/05/28 00:29:39 | 00,501,760 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\hp\Bureau\OTL.exe
[2009/05/28 00:25:56 | 00,000,345 | ---- | M] () -- C:\Raccourci vers _OTL.lnk
[2009/05/27 19:43:51 | 00,152,934 | ---- | M] (changelog.fr ) -- C:\Documents and Settings\hp\Bureau\OAD.exe
[2009/05/27 08:20:40 | 00,259,048 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009/05/26 23:15:46 | 00,001,336 | ---- | M] () -- C:\Documents and Settings\hp\Bureau\UsbFix V3.026.lnk
[2009/05/26 21:48:28 | 00,001,734 | ---- | M] () -- C:\Documents and Settings\hp\Bureau\HijackThis.lnk
[2009/05/26 21:26:25 | 00,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2009/05/24 20:47:59 | 00,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2009/05/24 16:01:49 | 00,154,624 | ---- | M] () -- C:\WINDOWS\PEV.exe
[2009/05/23 22:16:55 | 00,002,573 | ---- | M] () -- C:\Documents and Settings\hp\Bureau\Microsoft Office Word 2003.lnk
[2009/05/22 22:45:24 | 00,000,282 | RHS- | M] () -- C:\boot.ini
[2009/05/22 01:47:04 | 00,250,304 | ---- | M] () -- C:\Documents and Settings\hp\Mes documents\cc_20090522_014630.reg
[2009/05/22 00:25:06 | 00,000,801 | ---- | M] () -- C:\Documents and Settings\hp\Bureau\AusLogics Disk Defrag.lnk
[2009/05/21 19:28:06 | 00,000,630 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Navilog1.lnk
[2009/05/20 22:09:36 | 00,142,848 | ---- | M] () -- C:\Documents and Settings\hp\Mes documents\UN MICRI DANS 15 ANS.doc
[2009/05/20 04:17:12 | 00,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn
[2009/05/20 04:17:12 | 00,001,409 | ---- | M] () -- C:\WINDOWS\QTFont.for
[2009/05/20 01:02:40 | 00,001,837 | ---- | M] () -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Windows Search.lnk
[2009/05/20 01:02:13 | 01,026,092 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2009/05/20 01:02:13 | 00,484,240 | ---- | M] () -- C:\WINDOWS\System32\perfh00C.dat
[2009/05/20 01:02:13 | 00,081,596 | ---- | M] () -- C:\WINDOWS\System32\perfc00C.dat
[2009/05/18 16:29:11 | 00,026,624 | ---- | M] () -- C:\Documents and Settings\hp\Mes documents\Nouveau Document Microsoft Word.doc
[2009/05/18 12:54:42 | 00,001,091 | ---- | M] () -- C:\WINDOWS\win.ini
[2009/05/17 20:15:36 | 00,001,422 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Menara ADSL.lnk
[2009/05/17 20:15:33 | 00,001,524 | ---- | M] () -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\DSLMON.lnk
[2009/05/17 20:15:31 | 00,002,292 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Messagerie avec Menara.lnk
[2009/05/17 20:15:29 | 00,001,533 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Internet avec Menara.lnk
[2009/05/17 20:15:27 | 00,001,592 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Configurateur de messagerie.lnk
[2009/05/17 18:35:35 | 00,000,727 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\RealPlayer Basic.lnk
[2009/05/17 18:35:35 | 00,000,141 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Real.com Guide.url
[2009/05/17 18:35:17 | 00,278,528 | ---- | M] (Real Networks, Inc) -- C:\WINDOWS\System32\pncrt.dll
[2009/05/17 18:29:04 | 00,000,169 | ---- | M] () -- C:\WINDOWS\adidsl.ini
[2009/05/10 16:19:50 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2009/05/08 20:45:57 | 00,000,212 | ---- | M] () -- C:\Boot.bak
[2009/05/07 07:16:29 | 24,699,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\MRT.exe
[2009/05/03 01:37:42 | 00,003,072 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2009/05/02 02:52:57 | 00,395,650 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2009/05/02 02:52:57 | 00,059,890 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat

[color=orange]========== LOP Check ==========[/color]

[2009/05/26 20:06:58 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\All Users\Application Data
[2008/10/12 16:01:19 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Adobe
[2009/04/28 17:29:09 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\agi
[2009/04/23 20:57:26 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Apple Computer
[2009/04/18 21:06:59 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVS4YOU
[2009/01/17 22:29:24 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\FreeHotBabesScreensaver
[2009/04/12 19:47:50 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Google
[2009/02/20 17:50:47 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Grisoft
[2009/05/26 20:06:58 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2009/05/10 23:15:59 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
[2009/05/27 01:27:05 | 00,000,000 | --SD | M] -- C:\Documents and Settings\All Users\Application Data\Microsoft
[2008/10/14 19:33:18 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\QuickTime
[2008/10/12 16:29:57 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Skype
[2009/02/22 22:52:34 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2009/01/27 01:04:00 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2008/10/16 16:04:37 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Windows Live Toolbar
[2008/10/12 16:30:21 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Yahoo!
[2008/10/12 03:21:32 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Default User\Application Data
[2008/10/12 01:39:27 | 00,000,000 | --SD | M] -- C:\Documents and Settings\Default User\Application Data\Microsoft
[2009/05/26 20:07:16 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\hp\Application Data
[2008/11/10 16:38:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\hp\Application Data\Adobe
[2009/04/28 17:34:53 | 00,000,000 | ---D | M] -- C:\Documents and Settings\hp\Application Data\agi
[2009/04/23 21:01:35 | 00,000,000 | ---D | M] -- C:\Documents and Settings\hp\Application Data\Apple Computer
[2009/05/22 00:25:13 | 00,000,000 | ---D | M] -- C:\Documents and Settings\hp\Application Data\Auslogics
[2009/02/26 23:34:12 | 00,000,000 | ---D | M] -- C:\Documents and Settings\hp\Application Data\Copernic
[2009/04/20 21:54:35 | 00,000,000 | ---D | M] -- C:\Documents and Settings\hp\Application Data\dvdcss
[2009/01/17 22:29:27 | 00,000,000 | ---D | M] -- C:\Documents and Settings\hp\Application Data\FreeHotBabesScreensaver
[2008/10/15 18:27:05 | 00,000,000 | ---D | M] -- C:\Documents and Settings\hp\Application Data\Globe7
[2009/02/20 23:20:57 | 00,000,000 | ---D | M] -- C:\Documents and Settings\hp\Application Data\Google
[2008/10/15 18:07:14 | 00,000,000 | ---D | M] -- C:\Documents and Settings\hp\Application Data\Help
[2008/10/12 01:47:09 | 00,000,000 | ---D | M] -- C:\Documents and Settings\hp\Application Data\Identities
[2009/05/17 17:52:25 | 00,000,000 | ---D | M] -- C:\Documents and Settings\hp\Application Data\InstallShield
[2009/04/11 20:38:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\hp\Application Data\InternetCalls
[2008/10/14 19:46:45 | 00,000,000 | ---D | M] -- C:\Documents and Settings\hp\Application Data\InterTrust
[2009/02/22 21:13:19 | 00,000,000 | ---D | M] -- C:\Documents and Settings\hp\Application Data\LimeWire
[2008/10/13 01:43:52 | 00,000,000 | ---D | M] -- C:\Documents and Settings\hp\Application Data\Macromedia
[2009/05/26 20:07:16 | 00,000,000 | ---D | M] -- C:\Documents and Settings\hp\Application Data\Malwarebytes
[2009/05/19 15:33:05 | 00,000,000 | --SD | M] -- C:\Documents and Settings\hp\Application Data\Microsoft
[2009/04/25 23:15:31 | 00,000,000 | ---D | M] -- C:\Documents and Settings\hp\Application Data\Mozilla
[2009/03/08 22:39:22 | 00,000,000 | ---D | M] -- C:\Documents and Settings\hp\Application Data\MSNInstaller
[2009/04/11 20:18:28 | 00,000,000 | ---D | M] -- C:\Documents and Settings\hp\Application Data\NetAppel
[2008/10/14 19:39:55 | 00,000,000 | ---D | M] -- C:\Documents and Settings\hp\Application Data\Real
[2009/02/24 01:15:26 | 00,000,000 | ---D | M] -- C:\Documents and Settings\hp\Application Data\Skype
[2009/04/12 01:14:01 | 00,000,000 | ---D | M] -- C:\Documents and Settings\hp\Application Data\Smart PC Solutions
[2008/11/09 18:18:31 | 00,000,000 | ---D | M] -- C:\Documents and Settings\hp\Application Data\Sun
[2008/10/18 21:31:45 | 00,000,000 | ---D | M] -- C:\Documents and Settings\hp\Application Data\teamspeak2
[2009/04/11 20:52:22 | 00,000,000 | ---D | M] -- C:\Documents and Settings\hp\Application Data\VoipBuster
[2009/05/20 01:38:57 | 00,000,000 | ---D | M] -- C:\Documents and Settings\hp\Application Data\Windows Desktop Search
[2009/05/20 01:39:36 | 00,000,000 | ---D | M] -- C:\Documents and Settings\hp\Application Data\Windows Search
[2008/10/12 01:46:10 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data
[2009/04/28 17:32:20 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data\agi
[2009/02/24 20:31:53 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Application Data\Microsoft
[2008/10/12 01:45:50 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Application Data
[2009/02/24 20:31:53 | 00,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2002/09/07 01:00:00 | 00,000,065 | RH-- | M] () -- C:\WINDOWS\Tasks\desktop.ini
[2009/05/29 18:53:10 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\Tasks\SA.DAT
[2009/05/30 00:31:28 | 00,000,426 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{4DF9536E-79E9-41D1-B7BA-D4BB961EFCBD}.job
[2009/05/29 18:54:05 | 00,000,260 | ---- | M] () -- C:\WINDOWS\Tasks\WGASetup.job

[color=orange]========== Purity Check ==========[/color]

[color=orange]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D1B5B4F1
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7E95B6FD
< End of report >

O2 - BHO: (Aide pour le lien d'Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - Reg Error: Key error. File not found
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - Reg Error: Key error. File not found
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Programme d'aide de l'Assistant de connexion Windows Live) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.)
O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll (Google Inc.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKU\S-1-5-21-343818398-1960408961-839522115-1003\..\Toolbar\ShellBrowser: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - Reg Error: Key error. File not found
O3 - HKU\S-1-5-21-343818398-1960408961-839522115-1003\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKU\S-1-5-21-343818398-1960408961-839522115-1003\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O3 - HKU\S-1-5-21-343818398-1960408961-839522115-1003\..\Toolbar\WebBrowser: (no name) - {4A1C6093-14F9-44D7-860E-5D265CFCA9D9} - Reg Error: Key error. File not found
O3 - HKU\S-1-5-21-343818398-1960408961-839522115-1003\..\Toolbar\WebBrowser: (no name) - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - Reg Error: Key error. File not found
O3 - HKU\S-1-5-21-343818398-1960408961-839522115-1003\..\Toolbar\WebBrowser: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - Reg Error: Key error. File not found
O3 - HKU\S-1-5-21-343818398-1960408961-839522115-1003\..\Toolbar\WebBrowser: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - Reg Error: Key error. File not found
O4 - HKLM..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime (Apple Computer, Inc.)
O4 - HKLM..\Run: [RealTray] C:\Program Files\Real\RealOne Player\realplay.exe SYSTEMBOOTHIDEPLAYER (RealNetworks, Inc.)
O4 - HKU\S-1-5-21-343818398-1960408961-839522115-1003..\Run: [Eraser] C:\Program Files\Eraser\eraser.exe -hide (-)
O4 - HKU\S-1-5-21-343818398-1960408961-839522115-1003..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (Microsoft Corporation)
O4 - HKU\S-1-5-21-343818398-1960408961-839522115-1003..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (Microsoft Corporation)
O4 - HKU\S-1-5-21-343818398-1960408961-839522115-1003..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\DSLMON.lnk = C:\Program Files\Menara\dslmon.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\hp\Menu Démarrer\Programmes\Démarrage\Notification de cadeaux MSN.lnk = C:\Documents and Settings\hp\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-343818398-1960408961-839522115-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-343818398-1960408961-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-343818398-1960408961-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMBalloonTip = 0
O7 - HKU\S-1-5-21-343818398-1960408961-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-343818398-1960408961-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-343818398-1960408961-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O7 - HKU\S-1-5-21-343818398-1960408961-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
O7 - HKU\S-1-5-21-343818398-1960408961-839522115-1003_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites File not found
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 (Microsoft Corporation)
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?8f4ca0d0e1e64f9880ca97f50b1810a0 (Microsoft Corporation)
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?8f4ca0d0e1e64f9880ca97f50b1810a0 (Microsoft Corporation)
O9 - Extra Button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - File not found
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [Protocole de transport compatible NWLink IPX/SPX/NetBIOS] - C:\WINDOWS\System32\nwprovau.dll (Microsoft Corporation)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {1851174C-97BD-4217-A0CC-E908F60D5B7A} http://h50203.www5.hp.com/HPISWeb/Customer/cabs/HPISDataManager.CAB (Hewlett-Packard Online Support Services)
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} http://download.divx.com/player/DivXBrowserPlugin.cab (Reg Error: Key error.)
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab (GMNRev Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} https://sdlc-esd.oracle.com/ESD5/JSCDL/jre/6u10-b92-b/jinstall-6u10-windows-i586-jc.cab?GroupName=JSC&FilePath=/ESD5/JSCDL/jre/6u10-b92-b/jinstall-6u10-windows-i586-jc.cab&BHost=javadl.sun.com&File=jinstall-6u10-windows-i586-jc.cab&AuthParam=1580987764_a5235be86e79daca0cfb05ddc36bfbcd&ext=.cab (Java Plug-in 1.6.0_10)
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} https://www.f-secure.com/en/home/support (F-Secure Online Scanner 3.3)
O16 - DPF: {C237A80A-4C55-4C68-BAA9-CBE4408D12B2} http://download.sp.f-secure.com/ols/f-secure-rtm/resources/fslauncher.cab (F-Secure Online Scanner 4.0 Launcher)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cab (Java Plug-in 1.6.0_10)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cab (Java Plug-in 1.6.0_10)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab (Shockwave Flash Object)
O16 - DPF: CabBuilder http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab (Reg Error: Key error.)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Fichiers communs\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Filter: - text/xml - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O18 - Protocol\Filter: - x-sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll (Google Inc.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\WgaLogon: DllName - WgaLogon.dll - File not found
O24 - Desktop Components:0 (Ma page d'accueil) - About:Home
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (nwprovau) - C:\WINDOWS\System32\nwprovau.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/10/12 01:39:36 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009/05/25 21:53:00 | 00,000,378 | RHS- | M] () - F:\Autorun.inf -- [ FAT ]
O33 - MountPoints2\{87f7e4c1-ebd2-11dd-a7d2-4d6564696130}\Shell\AutoPlaY\command - "" = F:\naat.pif -- [2009/05/26 23:14:56 | 00,222,207 | RHS- | M] (Microsoft Corporation)
O33 - MountPoints2\{87f7e4c1-ebd2-11dd-a7d2-4d6564696130}\Shell\AutoRun\command - "" = F:\naat.pif -- [2009/05/26 23:14:56 | 00,222,207 | RHS- | M] (Microsoft Corporation)
O33 - MountPoints2\{87f7e4c1-ebd2-11dd-a7d2-4d6564696130}\Shell\Explore\commAnd - "" = F:\naat.pif -- [2009/05/26 23:14:56 | 00,222,207 | RHS- | M] (Microsoft Corporation)
O33 - MountPoints2\{87f7e4c1-ebd2-11dd-a7d2-4d6564696130}\Shell\opEN\COmmANd - "" = F:\naat.pif -- [2009/05/26 23:14:56 | 00,222,207 | RHS- | M] (Microsoft Corporation)
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - * [2009/05/30 03:24:27 | 00,000,000 | ---D | M]

[color=orange]========== Processes (SafeList) ==========[/color]

PRC - [2008/11/09 18:26:59 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe
PRC - [2009/05/19 11:36:18 | 00,240,512 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
PRC - [2008/04/14 02:34:03 | 01,037,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE
PRC - [2009/04/23 21:00:55 | 00,229,376 | ---- | M] (Apple Computer, Inc.) -- C:\Program Files\QuickTime\qttask.exe
PRC - [2009/05/17 18:35:21 | 00,181,760 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Real\RealOne Player\realplay.exe
PRC - [2009/02/06 18:51:28 | 03,987,808 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
PRC - [2003/07/25 11:15:48 | 00,679,936 | ---- | M] (-) -- C:\Program Files\Eraser\eraser.exe
PRC - [2006/06/13 11:34:54 | 00,909,312 | ---- | M] () -- C:\Program Files\Menara\dslmon.exe
PRC - [2008/05/26 22:19:14 | 00,123,904 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Desktop Search\WindowsSearch.exe
PRC - [2009/03/08 14:09:26 | 00,638,816 | ---- | M] (Microsoft Corporation) -- C:\Program Files\internet explorer\iexplore.exe
PRC - [2009/03/08 14:09:26 | 00,638,816 | ---- | M] (Microsoft Corporation) -- C:\Program Files\internet explorer\iexplore.exe
PRC - [2009/02/06 18:21:00 | 00,224,632 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Toolbar\wltuser.exe
PRC - [2009/05/29 23:02:41 | 00,011,264 | ---- | M] () -- C:\Documents and Settings\hp\Local Settings\temp\winfkdpes.exe
PRC - [2009/05/29 23:02:44 | 00,019,968 | ---- | M] () -- C:\Documents and Settings\hp\Local Settings\temp\winsowdc.exe
PRC - [2002/08/21 05:13:12 | 00,189,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\WISPTIS.EXE
PRC - [2009/05/29 23:38:07 | 00,019,968 | ---- | M] () -- C:\Documents and Settings\hp\Local Settings\temp\ldhd.exe
PRC - [2009/05/30 00:48:33 | 00,019,968 | ---- | M] () -- C:\Documents and Settings\hp\Local Settings\temp\wingtxh.exe
PRC - [2009/05/30 01:24:05 | 00,019,968 | ---- | M] () -- C:\Documents and Settings\hp\Local Settings\temp\winpqiay.exe
PRC - [2009/05/30 01:59:19 | 00,019,968 | ---- | M] () -- C:\Documents and Settings\hp\Local Settings\temp\nikkra.exe
PRC - [2009/05/30 02:34:27 | 00,019,968 | ---- | M] () -- C:\Documents and Settings\hp\Local Settings\temp\winbctyr.exe
PRC - [2009/05/30 03:09:42 | 00,019,968 | ---- | M] () -- C:\Documents and Settings\hp\Local Settings\temp\bolrf.exe
PRC - [2009/05/28 00:29:39 | 00,501,760 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\hp\Bureau\OTL.exe

[color=orange]========== Win32 Services (SafeList) ==========[/color]

SRV - File not found -- -- (AGWinService [Auto | Stopped])
SRV - [2005/09/23 07:28:32 | 00,029,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped])
SRV - [2005/09/23 07:28:56 | 00,066,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped])
SRV - [2009/02/06 18:08:58 | 00,533,360 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Family Safety\fsssvc.exe -- (fsssvc [On_Demand | Stopped])
SRV - [2009/04/17 01:42:08 | 00,264,688 | ---- | M] (Google) -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc [On_Demand | Stopped])
SRV - [2008/04/14 02:33:38 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running])
SRV - [2005/04/04 00:41:10 | 00,143,360 | ---- | M] (Macrovision Corporation) -- C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT [On_Demand | Stopped])
SRV - File not found -- -- (iPodService [Disabled | Stopped])
SRV - [2008/11/09 18:26:59 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Auto | Running])
SRV - [2003/07/28 20:28:22 | 00,162,864 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped])
SRV - [2005/08/02 21:18:49 | 00,159,744 | ---- | M] (CACE Technologies) -- C:\Program Files\WinPcap\rpcapd.exe -- (rpcapd [On_Demand | Stopped])
SRV - [2009/05/19 11:36:18 | 00,240,512 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe -- (SeaPort [Auto | Running])
SRV - File not found -- -- (winvnc [Auto | Stopped])
SRV - [2006/11/03 09:59:14 | 00,918,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\WMPNetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped])

[color=orange]========== Driver Services (SafeList) ==========[/color]

DRV - File not found -- -- (abp470n5 [Disabled | Running])
DRV - [2006/04/01 12:30:46 | 00,100,224 | R--- | M] (Andrea Electronics Corporation) -- C:\WINDOWS\system32\drivers\aeaudio.sys -- (aeaudio [On_Demand | Running])
DRV - [2009/05/17 18:35:35 | 00,008,552 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\WINDOWS\System32\drivers\asctrm.sys -- (ASCTRM [Auto | Running])
DRV - [2006/04/01 12:33:16 | 00,134,272 | R--- | M] (Broadcom Corporation) -- C:\WINDOWS\system32\DRIVERS\b57xp32.sys -- (b57w2k [On_Demand | Stopped])
DRV - [2006/05/04 17:20:20 | 00,114,616 | R--- | M] (Analog Devices Inc.) -- C:\WINDOWS\system32\DRIVERS\e4usbaw.sys -- (e4usbaw [On_Demand | Running])
DRV - [2009/02/06 18:08:42 | 00,055,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys -- (fssfltr [Auto | Running])
DRV - [2005/02/02 01:21:04 | 00,014,408 | ---- | M] (GEAR Software Inc.) -- C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys -- (GEARAspiWDM [On_Demand | Running])
DRV - [2006/03/02 17:55:04 | 00,063,555 | R--- | M] (Analog Deivces) -- C:\WINDOWS\System32\Drivers\e4ldr.sys -- (IKANLOADER2 [Auto | Stopped])
DRV - [2008/04/13 18:53:09 | 00,040,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\DRIVERS\NMnt.sys -- (nm [On_Demand | Stopped])
DRV - [2005/08/02 21:10:13 | 00,032,512 | ---- | M] (CACE Technologies) -- C:\WINDOWS\system32\drivers\npf.sys -- (NPF [On_Demand | Stopped])
DRV - [2008/04/13 18:56:06 | 00,088,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys -- (NwlnkIpx [Auto | Running])
DRV - [2002/09/07 01:00:00 | 00,063,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\DRIVERS\nwlnknb.sys -- (NwlnkNb [Auto | Running])
DRV - [2002/09/07 01:00:00 | 00,055,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys -- (NwlnkSpx [Auto | Running])
DRV - [2008/04/13 18:34:12 | 00,163,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\DRIVERS\nwrdr.sys -- (NWRDR [On_Demand | Stopped])
DRV - [2002/09/07 01:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\system32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running])
DRV - [2008/04/13 16:39:15 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\system32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped])
DRV - [2006/04/01 12:30:48 | 00,578,304 | R--- | M] (Analog Devices, Inc.) -- C:\WINDOWS\system32\drivers\smwdm.sys -- (smwdm [On_Demand | Running])

[color=orange]========== Standard Registry (SafeList) ==========[/color]

[color=orange]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\windows\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm

IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-343818398-1960408961-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\S-1-5-21-343818398-1960408961-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\windows\system32\blank.htm
IE - HKU\S-1-5-21-343818398-1960408961-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\S-1-5-21-343818398-1960408961-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bladinet.net/
IE - HKU\S-1-5-21-343818398-1960408961-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = https://www.msn.com/fr-fr?ocid=iehp
IE - HKU\S-1-5-21-343818398-1960408961-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr
IE - HKU\S-1-5-21-343818398-1960408961-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 78 3E DE 1D 6C C0 C9 01 [binary data]
IE - HKU\S-1-5-21-343818398-1960408961-839522115-1003\S-1-5-21-343818398-1960408961-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

O1 HOSTS File: (27 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost

OTL logfile created on: 30/05/2009 03:24:40 - Run 4
OTL by OldTimer - Version 2.1.1.0 Folder = C:\Documents and Settings\hp\Bureau
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

247,48 Mb Total Physical Memory | 83,66 Mb Available Physical Memory | 33,81% Memory free
653,60 Mb Paging File | 177,46 Mb Available in Paging File | 27,15% Paging File free
Paging file location(s): C:\pagefile.sys 372 744 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 19,53 Gb Total Space | 11,88 Gb Free Space | 60,85% Space Free | Partition Type: NTFS
Drive D: | 18,75 Gb Total Space | 18,31 Gb Free Space | 97,67% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
Drive F: | 953,73 Mb Total Space | 951,34 Mb Free Space | 99,75% Space Free | Partition Type: FAT
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: HP-7E00783F7641
Current User Name: hp
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Output = Standard
File Age = 30 Days
Company Name Whitelist: On

[color=orange]========== Processes (SafeList) ==========[/color]

PRC - [2008/11/09 18:26:59 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe
PRC - [2009/05/19 11:36:18 | 00,240,512 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
PRC - [2008/04/14 02:34:03 | 01,037,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE
PRC - [2009/04/23 21:00:55 | 00,229,376 | ---- | M] (Apple Computer, Inc.) -- C:\Program Files\QuickTime\qttask.exe
PRC - [2009/05/17 18:35:21 | 00,181,760 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Real\RealOne Player\realplay.exe
PRC - [2009/02/06 18:51:28 | 03,987,808 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
PRC - [2003/07/25 11:15:48 | 00,679,936 | ---- | M] (-) -- C:\Program Files\Eraser\eraser.exe
PRC - [2006/06/13 11:34:54 | 00,909,312 | ---- | M] () -- C:\Program Files\Menara\dslmon.exe
PRC - [2008/05/26 22:19:14 | 00,123,904 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Desktop Search\WindowsSearch.exe
PRC - [2009/03/08 14:09:26 | 00,638,816 | ---- | M] (Microsoft Corporation) -- C:\Program Files\internet explorer\iexplore.exe
PRC - [2009/03/08 14:09:26 | 00,638,816 | ---- | M] (Microsoft Corporation) -- C:\Program Files\internet explorer\iexplore.exe
PRC - [2009/02/06 18:21:00 | 00,224,632 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Toolbar\wltuser.exe
PRC - [2009/05/29 23:02:41 | 00,011,264 | ---- | M] () -- C:\Documents and Settings\hp\Local Settings\temp\winfkdpes.exe
PRC - [2009/05/29 23:02:44 | 00,019,968 | ---- | M] () -- C:\Documents and Settings\hp\Local Settings\temp\winsowdc.exe
PRC - [2002/08/21 05:13:12 | 00,189,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\WISPTIS.EXE
PRC - [2009/05/29 23:38:07 | 00,019,968 | ---- | M] () -- C:\Documents and Settings\hp\Local Settings\temp\ldhd.exe
PRC - [2009/05/30 00:48:33 | 00,019,968 | ---- | M] () -- C:\Documents and Settings\hp\Local Settings\temp\wingtxh.exe
PRC - [2009/05/30 01:24:05 | 00,019,968 | ---- | M] () -- C:\Documents and Settings\hp\Local Settings\temp\winpqiay.exe
PRC - [2009/05/30 01:59:19 | 00,019,968 | ---- | M] () -- C:\Documents and Settings\hp\Local Settings\temp\nikkra.exe
PRC - [2009/05/30 02:34:27 | 00,019,968 | ---- | M] () -- C:\Documents and Settings\hp\Local Settings\temp\winbctyr.exe
PRC - [2009/05/30 03:09:42 | 00,019,968 | ---- | M] () -- C:\Documents and Settings\hp\Local Settings\temp\bolrf.exe
PRC - [2009/05/28 00:29:39 | 00,501,760 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\hp\Bureau\OTL.exe

[color=orange]========== Win32 Services (SafeList) ==========[/color]

SRV - File not found -- -- (AGWinService [Auto | Stopped])
SRV - [2005/09/23 07:28:32 | 00,029,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped])
SRV - [2005/09/23 07:28:56 | 00,066,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped])
SRV - [2009/02/06 18:08:58 | 00,533,360 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Family Safety\fsssvc.exe -- (fsssvc [On_Demand | Stopped])
SRV - [2009/04/17 01:42:08 | 00,264,688 | ---- | M] (Google) -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc [On_Demand | Stopped])
SRV - [2008/04/14 02:33:38 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running])
SRV - [2005/04/04 00:41:10 | 00,143,360 | ---- | M] (Macrovision Corporation) -- C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT [On_Demand | Stopped])
SRV - File not found -- -- (iPodService [Disabled | Stopped])
SRV - [2008/11/09 18:26:59 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Auto | Running])
SRV - [2003/07/28 20:28:22 | 00,162,864 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped])
SRV - [2005/08/02 21:18:49 | 00,159,744 | ---- | M] (CACE Technologies) -- C:\Program Files\WinPcap\rpcapd.exe -- (rpcapd [On_Demand | Stopped])
SRV - [2009/05/19 11:36:18 | 00,240,512 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe -- (SeaPort [Auto | Running])
SRV - File not found -- -- (winvnc [Auto | Stopped])
SRV - [2006/11/03 09:59:14 | 00,918,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\WMPNetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped])

En passant
https://forum.zebulon.fr/profile/210467-abdel__/
https://forum.zebulon.fr/topic/163550-impossible-de-telecharger-combofix#entry1386103

Re,

tu te moques de moi !!!!!!!!!!!!!!

Je les veux ici.

Bonsoir,

merci de ton intervention ^^Marie^^.

abdel__ comme tu dois pouvoir le voir, il n'y a pas de rapport dans ta réponse.

Bonjour,

si tu continues à faire n'importe quoi, in va pas avancer.

Fais ce que je demande.

Je ne te répondrai désormais que quand j'aurais eu exactement ce que j'ai demandé.

Donc rapport combofix
rapport OTL
diagnostic de EyeChart

Re,

pour vérifier l'idée de Gen-Hackman, ouvre ce lien :

http://www.confickerworkinggroup.org/infection_test/cfeyechart.html

Disr-moi dans quel cas tu te trouves (tu compares les cases du haut, les plus grandes, aux autres).

lignes concernées :

File not found -- C:\DOCUME~1\hp\LOCALS~1\Temp\winrlxd.exe:*:Enabled:ipsec
File not found -- C:\DOCUME~1\hp\LOCALS~1\Temp\jeiynh.exe:*:Enabled:ipsec
File not found -- C:\DOCUME~1\hp\LOCALS~1\Temp\winesucgg.exe:*:Enabled:ipsec
File not found -- C:\DOCUME~1\hp\LOCALS~1\Temp\gchcu.exe:*:Enabled:ipsec
File not found -- C:\DOCUME~1\hp\LOCALS~1\Temp\winepdnd.exe:*:Enabled:ipsec
File not found -- C:\DOCUME~1\hp\LOCALS~1\Temp\winmvpq.exe:*:Enabled:ipsec
File not found -- C:\DOCUME~1\hp\LOCALS~1\Temp\winrqkhjn.exe:*:Enabled:ipsec
File not found -- C:\DOCUME~1\hp\LOCALS~1\Temp\winnpbwh.exe:*:Enabled:ipsec
File not found -- C:\DOCUME~1\hp\LOCALS~1\Temp\xebsw.exe:*:Enabled:ipsec
File not found -- C:\DOCUME~1\hp\LOCALS~1\Temp\winejqdff.exe:*:Enabled:ipsec
File not found -- C:\DOCUME~1\hp\LOCALS~1\Temp\winbbbx.exe:*:Enabled:ipsec
File not found -- C:\DOCUME~1\hp\LOCALS~1\Temp\winktucb.exe:*:Enabled:ipsec
File not found -- C:\DOCUME~1\hp\LOCALS~1\Temp\ojkc.exe:*:Enabled:ipsec
File not found -- C:\DOCUME~1\hp\LOCALS~1\Temp\oyknyy.exe:*:Enabled:ipsec
File not found -- C:\DOCUME~1\hp\LOCALS~1\Temp\snssj.exe:*:Enabled:ipsec
File not found -- C:\DOCUME~1\hp\LOCALS~1\Temp\winuqhjym.exe:*:Enabled:ipsec
File not found -- C:\DOCUME~1\hp\LOCALS~1\Temp\winskpoop.exe:*:Enabled:ipsec
File not found -- C:\DOCUME~1\hp\LOCALS~1\Temp\wingvoie.exe:*:Enabled:ipsec
File not found -- C:\DOCUME~1\hp\LOCALS~1\Temp\winegtbcl.exe:*:Enabled:ipsec
File not found -- C:\DOCUME~1\hp\LOCALS~1\Temp\nfscna.exe:*:Enabled:ipsec
File not found -- C:\DOCUME~1\hp\LOCALS~1\Temp\winskdmg.exe:*:Enabled:ipsec
File not found -- C:\DOCUME~1\hp\LOCALS~1\Temp\rcgbkq.exe:*:Enabled:ipsec
File not found -- C:\DOCUME~1\hp\LOCALS~1\Temp\winovrdk.exe:*:Enabled:ipsec
File not found -- C:\DOCUME~1\hp\LOCALS~1\Temp\winrugi.exe:*:Enabled:ipsec
File not found -- C:\DOCUME~1\hp\LOCALS~1\Temp\gjnuj.exe:*:Enabled:ipsec

j'ai retiré Combofix du lien :

http://www.commentcamarche.net/forum/affich 12529924 surabaya?page=3#79

salut Lyonnais je crois que c'est Conficker

je retire Combofix du lien

Re,

Copie ou imprime les instructions avant

Déconnecte toi d'internet et ferme toutes tes applications.

Désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)

Crée un nouveau document texte : clic droit de souris sur le bureau > Nouveau > Document Texte, et copie dedans les lignes suivantes :

Driver::
abp470n5

Rootkit::

C:\Program Files .scr
c:\windows\system32\drivers\gmepnn.sys

Registry::
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableTaskMgr"=dword:0
"DisableRegistryTools"=dword:0

Enregistre ce fichier sous le nom CFscript

Fait un glisser/déposer de ce fichier CFscript sur le fichier ComboFix.exe

Clique sur le fichier CFscript, maintient le doigt enfoncé et glisse la souris pour que l'icône du CFscrïpt vienne recouvrir l'icône de Combofix. Relache la souris. Combofix va démarrer.

Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!

Ne touche à rien tant que le scan n'est pas terminé.

Réactive ton parefeu, ton antivirus, la garde de ton antispyware

Une fois le scan achevé, un rapport va s'afficher: poste son contenu.

Remets aussi un rapport Hijackthis

Si le fichier ne s'ouvre pas, il se trouve ici > C:\ComboFix.txt

Attention : cette manip a été fait pour cet ordi. Tout réutilisation peut endommager sévèrement le système d'exploitation.

=============

Refais tourner OTL et poste le rapport.

Bonjour,

Je voudrais aussi que tu me dises ce qui s'est passé lors du dernier passage d'OTL.

Tu as dis "ça bloque". Ca veut dire quoi ?

Tu es tellement infecté que ça peut être très long.

Bonjour,

je savais très bien que tu ne pouvais pas télécharger combofix par la procédure normale.

je ne crois pas que tu ais fais ce que j'ai demandé.

j'ai demandé à ce que tu renommes combofix.exe en antitruc.exe au moment de l'enregistrement (donc avant qu'il soit enregistré sur le disque dur).

==============

Je voudrais aussi que tu me dises ce qui s'est passé lors du dernier passage d'OTL.

Tu as dis "ça bloque". Ca veut dire quoi ?

Tu es tellement infecté que ça peut être très long.

salut essaie celui-ci (combofix renommé)

Re,

bien bloqué.

On réessaye comme ça :

Rends toi sur cette page web pour obtenir les liens de téléchargement, ainsi que des instructions pour exécuter l'outil:

https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

Au moment où on te demandera d'enregistrer le fichier téléchargé, choisis bien le Bureau mais nomme le fichier antitruc.exe

* Vérifie que tu as fermé/désactivé tous les programmes anti-virus, anti-malware ou anti-spyware afin qu'ils n'interfèrent pas avec le travail de ComboFix.

Envoie le contenu de C:\ComboFix.txt dans ta prochaine réponse afin que je l'examine.