Virus introuvable

Question

Bonjour,
Je ne suis pas très calé dans les ordinateurs et je n'ai que 13 ans donc réponses pas tros compliquées SVP.
Depuis près d'un mois, je pense que j'ai attrapé un virus car tout allais très bien et un jour je surfais sur le net puis j'ai voulu jouer à un jeu et il ne fonctionnait plus et cela avec +- 10 jeux. J'ai lancée une recherche complète de l'ordi avec l'antivirus F-secure cela n'a rien donné.

jlpjlp · Answer

slt,


scan avec malwarebyte , fais un scan minutieux et colle le rapport obtenu et vire ce qui est trouvé:


https://www.malekal.com/tutoriel-malwarebyte-anti-malware/­

______________________

Télécharge ici :

http://images.malwareremoval.com/random/RSIT.exe

random's system information tool (RSIT) par andom/random et sauvegarde-le sur le Bureau.

Double-clique sur RSIT.exe afin de lancer RSIT.

Clique Continue à l'écran Disclaimer.

Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront.

Poste le contenu de log.txt (<<qui sera affiché)
ainsi que de info.txt (<<qui sera réduit dans la Barre des Tâches).

NB : Les rapports sont sauvegardés dans le dossier C:\rsit

Utilisateur anonyme · Answer

Voilà j'ai effectué l'analyse je dois faire quoi maintenant ??
Voila le dossier info.txt
info.txt logfile of random's system information tool 1.06 2009-07-23 10:42:26

======Uninstall list======

"Faces of War" (Supprimer Seulement)-->"C:\Program Files\Ubisoft\Faces of War\unins000.exe"
-->"C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Spyware Scanner"
-->"C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Spyware"
-->"C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Virus Client Security Installer"
-->"C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure DAAS"
-->"C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Diagnostics"
-->"C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure FWES"
-->"C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure GUI"
-->"C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Help"
-->"C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Management Agent"
-->"C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Policy Manager Support"
-->"C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure TNB"
-->C:\Program Files\Nero\Nero 7
ero\uninstall\UNNERO.exe /UNINSTALL
-->C:\WINDOWS\BWUnin-6.3.2.116-7681197L.exe -AppId 7681197
-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
-->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
-->C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
-->C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->C:\WINDOWS\UNRecode.exe /UNINSTALL
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0015-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0019-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {5A2F65A4-808F-4A1E-973E-92E17824982D}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {430971B1-C31E-45DA-81E0-72C095BAB72C}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {B3F4DC34-7F60-4B7C-A79F-1C13012D99D4}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {F7A31780-33C4-4E39-951A-5EC9B91D7BF1}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0044-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
Adobe Acrobat 5.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll"
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->MsiExec.exe /X{ECA1A3B6-898F-4DCE-9F04-714CF3BA126B}
Adobe Reader 7.0.8-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A70800000002}
Adobe® Photoshop® Album Edition Découverte 3.0-->MsiExec.exe /I{4BDFD2CE-6329-42E4-9801-9B3D1F10D79B}
ANNO 1503-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EBBB1DEF-8878-4CB8-BC0D-1196B30E7527}\Setup.exe" -l0x40c 
Apple Software Update-->MsiExec.exe /I{74EC78BC-B379-4E29-9006-8F161DCAABA6}
ArcSoft PhotoStudio 5.5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{85309D89-7BE9-4094-BB17-24999C6118FC}\SETUP.EXE" -l0x40c 
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
ASUS Gamer OSD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{315ACD04-BCEB-478B-9B1D-5431D0E6CB11}\setup.exe" -l0x9  -removeonly
ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Catalyst Control Center-->MsiExec.exe /I{27575922-AF37-4BB3-8DEA-B2E1EB25A403}
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
ATI Parental Control & Encoder-->MsiExec.exe /I{9862B19F-4CAD-4EED-920F-2F378D84393F}
AVIVO Codecs-->MsiExec.exe /X{C941F1F1-25B3-4DF5-83E6-888C51A1AAB6}
Canon MP Navigator 2.0-->"C:\Program Files\Canon\MP Navigator 2.0\Maint.exe" /UninstallRemove C:\Program Files\Canon\MP Navigator 2.0\uninst.ini
Canon MP500-->"C:\WINDOWS\system32\CanonMP Uninstaller Information\{BA4DF4C3-196E-4128-969A-00996B5A46F8}\DelDrv.exe" /U:{BA4DF4C3-196E-4128-969A-00996B5A46F8} /L0x000c
Canon Utilities Easy-PhotoPrint-->C:\Program Files\Canon\Easy-PhotoPrint\uninst.exe uninst.ini
CD-LabelPrint-->"C:\Program Files\Canon\CD-LabelPrint\Uninstal.exe" Canon.CDLabelPrint.Application
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}



Et le fichier log :
Logfile of random's system information tool 1.06 (written by random/random)
Run by Jérémy at 2009-07-23 10:41:13
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 42 GB (35%) free of 120 GB
Total RAM: 1022 MB (8% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:42:23, on 23/07/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\ATKKBService.exe
C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsrw.exe
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\F-Secure\FSGUI\fsguidll.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\program files\steam\steam.exe

jlpjlp · Answer

le rapport malwarebyte?

le rapport rsit complet svp et pas que la moitiée...

Utilisateur anonyme · Answer

Désolé j'ai été trop vite
le fichier info 
info.txt logfile of random's system information tool 1.06 2009-07-23 10:42:26

======Uninstall list======

"Faces of War" (Supprimer Seulement)-->"C:\Program Files\Ubisoft\Faces of War\unins000.exe"
-->"C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Spyware Scanner"
-->"C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Spyware"
-->"C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Virus Client Security Installer"
-->"C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure DAAS"
-->"C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Diagnostics"
-->"C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure FWES"
-->"C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure GUI"
-->"C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Help"
-->"C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Management Agent"
-->"C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Policy Manager Support"
-->"C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure TNB"
-->C:\Program Files\Nero\Nero 7
ero\uninstall\UNNERO.exe /UNINSTALL
-->C:\WINDOWS\BWUnin-6.3.2.116-7681197L.exe -AppId 7681197
-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
-->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
-->C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
-->C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->C:\WINDOWS\UNRecode.exe /UNINSTALL
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0015-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0019-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {5A2F65A4-808F-4A1E-973E-92E17824982D}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {430971B1-C31E-45DA-81E0-72C095BAB72C}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {B3F4DC34-7F60-4B7C-A79F-1C13012D99D4}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {F7A31780-33C4-4E39-951A-5EC9B91D7BF1}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0044-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
Adobe Acrobat 5.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll"
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->MsiExec.exe /X{ECA1A3B6-898F-4DCE-9F04-714CF3BA126B}
Adobe Reader 7.0.8-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A70800000002}
Adobe® Photoshop® Album Edition Découverte 3.0-->MsiExec.exe /I{4BDFD2CE-6329-42E4-9801-9B3D1F10D79B}
ANNO 1503-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EBBB1DEF-8878-4CB8-BC0D-1196B30E7527}\Setup.exe" -l0x40c 
Apple Software Update-->MsiExec.exe /I{74EC78BC-B379-4E29-9006-8F161DCAABA6}
ArcSoft PhotoStudio 5.5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{85309D89-7BE9-4094-BB17-24999C6118FC}\SETUP.EXE" -l0x40c 
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
ASUS Gamer OSD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{315ACD04-BCEB-478B-9B1D-5431D0E6CB11}\setup.exe" -l0x9  -removeonly
ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Catalyst Control Center-->MsiExec.exe /I{27575922-AF37-4BB3-8DEA-B2E1EB25A403}
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
ATI Parental Control & Encoder-->MsiExec.exe /I{9862B19F-4CAD-4EED-920F-2F378D84393F}
AVIVO Codecs-->MsiExec.exe /X{C941F1F1-25B3-4DF5-83E6-888C51A1AAB6}
Canon MP Navigator 2.0-->"C:\Program Files\Canon\MP Navigator 2.0\Maint.exe" /UninstallRemove C:\Program Files\Canon\MP Navigator 2.0\uninst.ini
Canon MP500-->"C:\WINDOWS\system32\CanonMP Uninstaller Information\{BA4DF4C3-196E-4128-969A-00996B5A46F8}\DelDrv.exe" /U:{BA4DF4C3-196E-4128-969A-00996B5A46F8} /L0x000c
Canon Utilities Easy-PhotoPrint-->C:\Program Files\Canon\Easy-PhotoPrint\uninst.exe uninst.ini
CD-LabelPrint-->"C:\Program Files\Canon\CD-LabelPrint\Uninstal.exe" Canon.CDLabelPrint.Application
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Commandos Strike Force-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{544DB849-AB59-4C12-A333-2F214E24870F}\Setup.exe" -l0x40c  -removeonly
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Delta Force 2-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\NovaLogic\Delta Force 2\Uninst.isu"
Easy-WebPrint-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Canon\Easy-WebPrint\Uninst.isu"
EAX4 Unified Redist-->MsiExec.exe /X{89661B04-C646-4412-B6D3-5E19F02F1F37}
Electronic Arts Product Registration-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{D7D50E0C-27DD-4999-BC05-E026B580F93A} /l1036 
Empire Earth - The Art of Conquest-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B49C924C-A651-4378-94F6-5D9BF44A959F}\Setup.exe" -l0x40c 
Empire Earth-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2447500B-22D7-47BD-9B13-1A927F43A267}\Setup.exe" -l0x40c 
Encyclopédie Bordas multimédia V6-->C:\WINDOWS\unin040c.exe -f"C:\Program Files\Encyclopédies Bordas 2000\Encyclopédie Bordas multimédia V6\DeIsL1.isu"  -c"C:\Program Files\Encyclopédies Bordas 2000\Encyclopédie Bordas multimédia V6\_ISREG32.DLL"
F-Secure Anti-Virus Client Security - Agent de mise à jour automatique-->"C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Backweb"
F-Secure Anti-Virus Client Security - Analyse du courrier électronique-->"C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure E-mail Scanning"
F-Secure Anti-Virus Client Security - Analyse du trafic Web-->"C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Protocol Scanner"
F-Secure Anti-Virus Client Security - Protection antivirus et antispyware-->"C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Virus"
F-Secure Anti-Virus Client Security - Protection Internet-->"C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Internet Shield"
GameShadow-->MsiExec.exe /I{141FBF87-4FB4-41E1-80B4-E1389268D541}
GameSpy Arcade-->C:\PROGRA~1\GAMESP~1\UNWISE.EXE C:\PROGRA~1\GAMESP~1\INSTALL.LOG
Gang de requins-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{A2C21F60-523D-4FC7-90AF-AE2707E45AFE} 
GeoGebra-->"C:\Program Files\GeoGebra\UninstallerData\Uninstaller.exe"
Heroes of the Pacific-->C:\Program Files\Codemasters\Heroes of the Pacific\uninst.exe
HijackThis 2.0.2-->"C:\Program Files	rend micro\HijackThis.exe" /uninstall
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216012FF}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Les Sims 2 Académie-->C:\Program Files\EA GAMES\Les Sims 2 Académie\EAUninstall.exe
Les Sims 2 : La bonne affaire-->C:\Program Files\EA GAMES\Les Sims 2  La bonne affaire\EAUninstall.exe
Les Sims™ 2 Animaux & Cie-->C:\Program Files\EA GAMES\Les Sims 2 Animaux & Cie\EAUninstall.exe
Les Sims™ 2 Double Deluxe-->C:\Program Files\EA GAMES\Les Sims 2 Double Deluxe\EAUninstall.exe
Les Sims™ 2 H&M® Fashion Kit-->C:\Program Files\EA GAMES\Les Sims 2 H&M® Fashion Kit\EAUninstall.exe
Les Sims™ 2 Quartier Libre-->C:\Program Files\EA GAMES\Les Sims 2 Quartier Libre\EAUninstall.exe
Les Sims™ 2 Tout pour les ados Kit-->C:\Program Files\EA GAMES\Les Sims 2 Tout pour les ados Kit\EAUninstall.exe
Les Sims™ 2 Au fil des saisons-->C:\Program Files\EA GAMES\Les Sims 2 Au fil des saisons\EAUninstall.exe
Les Sims™ 2 Bon Voyage-->C:\Program Files\EA GAMES\Les Sims 2 Bon Voyage\EAUninstall.exe
Madagascar-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\10\INTEL3~1\IDriver.exe /M{0FB261F3-6F16-43FD-A404-F377C169B937} 
Mare Nostrum-->"C:\Program Files\Steam\steam.exe" steam://uninstall/1230
Medal of Honor débarquement allié-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0DEA94ED-915A-4834-A87E-388D012C8E02}\Setup.exe" -l0x40c 
Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft Flight Simulator 2004 Un siècle d'aviation-->"C:\Program Files\Microsoft Games\Flight Simulator 9\UNINSTAL.EXE" /runtemp /addremove
Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}
Microsoft Office Language Pack 2007 Service Pack 1 (SP1)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {EC50B538-CBE1-42E6-B7FE-87AA540AADFB}
Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
Microsoft Office Outlook Connector-->MsiExec.exe /I{95120000-0120-040C-0000-0000000FF1CE}
Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office Professional Plus 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft Search Enhancement Pack-->MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Mirar-->mshta.exe http://remove.getmirar.com/ 
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB969897)-->"C:\WINDOWS\ie8updates\KB969897-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923689)-->"C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956390)-->"C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958215)-->"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960714)-->"C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB963027)-->"C:\WINDOWS\$NtUninstallKB963027$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB968220)-->"C:\WINDOWS\ie8updates\KB968220-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML4 Parser-->MsiExec.exe /I{01501EBA-EC35-4F9F-8889-3BE346E5DA13}
Nero 7 Essentials-->MsiExec.exe /X{6AFFBA7A-F063-44F2-ADA0-65C67E071036}
NETGEAR WG111v3 wireless USB 2.0 adapter-->C:\Program Files\InstallShield Installation Information\{5396FBD8-8BD7-47F9-92AE-F62F13D5A11D}\setup.exe -runfromtemp -l0x0409
Nokia Connectivity Cable Driver-->MsiExec.exe /X{972B1D9B-0EAD-49E8-B7D6-3B83FD5665B1}
Nokia PC Suite-->C:\Documents and Settings\All Users\Application Data\Installations\{57A48477-92F0-4C1F-ADF9-4806C4EC3CF2}\Nokia_PC_Suite_683_rel_14_1_EA.exe /LANG="1036"
Nokia PC Suite-->MsiExec.exe /I{57A48477-92F0-4C1F-ADF9-4806C4EC3CF2}
Nos voisins, les hommes(TM)-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1150\INTEL3~1\IDriver.exe /M{47388B97-4DCF-406F-B863-DC498C0D5E42} 
NVIDIA Drivers-->C:\WINDOWS\system32
vunrm.exe UninstallGUI
OGA Notifier 1.7.0105.35.0-->MsiExec.exe /I{25E98ECB-5727-408E-B30A-2CAF86F5B310}
OmniPage SE-->MsiExec.exe /I{79D5997E-BF79-48BB-8B41-9BE59C15C2D7}
OpenOffice.org 3.0-->MsiExec.exe /I{6860B340-530D-46B3-91F8-1AE1F70F7C33}
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Package de pilotes Windows - Nokia Modem  (11/03/2006 6.82.0.1)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE
okbtmdm_4EFFAAE27A08EDFDE145390033D8EF099DA65567
okbtmdm.inf
PC Connectivity Solution-->MsiExec.exe /I{066D65EA-ED53-44E4-A96A-F81B6E409D2E}
PlayMP3z-->C:\Program Files\PlayMP3z\uninstall.exe uninstall=playmp3z
PremiereAdvertisingPlatform-->C:\Program Files\PremiereAdvertisingPlatform\uninstall.exe uninstall=premiereadvertisingplatform
QuickTime 3.0-->C:\WINDOWS\unin040c.exe -f"C:\Program Files\QuickTime\DeIsL1.isu"
QuickTime-->MsiExec.exe /I{95A890AA-B3B1-44B6-9C18-A8F7AB3EE7FC}
RCT3 Soaked-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EA926717-CE5A-4CB4-AB21-9E6E9565A458}\Setup.exe" -l0x40c 
Realtek AC'97 Audio-->Alcrmv.exe -r -m
Red Orchestra-->"C:\Program Files\Steam\steam.exe" steam://uninstall/1200
Red Orchestra-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{69997863-7239-4E5C-833C-EAC2F0116EB3}\setup.exe" -l0x9  -removeonly
Rise of Nations-->"C:\Program Files\Microsoft Games\Rise of Nations\Uninstal.exe" /runtemp /uninstall
Roland Garros 2003-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1B29C0BE-AEB2-408C-BAA6-A4EE6CC8577C}\Setup.exe" -l0x40c 
RollerCoaster Tycoon 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{907B4640-266B-4A21-92FB-CD1A86CD0F63}\Setup.exe" -l0x40c 
Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
Security Update for 2007 Microsoft Office System (KB969679)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {C66E4A6C-6E07-4C63-8CCD-2493B5087C73}
Security Update for Microsoft Office Excel 2007 (KB969682)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {C03803BD-745A-46F8-8557-817DED578780}
Security Update for Microsoft Office PowerPoint 2007 (KB957789)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
Security Update for Microsoft Office Publisher 2007 (KB969693)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {7BE67088-1EB3-4569-8E75-DDAFBF61BC4E}
Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
Security Update for Microsoft Office system 2007 (KB969613)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
Security Update for Microsoft Office Word 2007 (KB969604)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {CF3D6499-709C-43D0-8908-BC5652656050}
SEGA Rally-->"C:\Program Files\InstallShield Installation Information\{4A05FF52-4AA8-4681-BC06-5EE7F812A441}\setup.exe" -runfromtemp -l0x040c -removeonly
SEGA Rally-->MsiExec.exe /I{4A05FF52-4AA8-4681-BC06-5EE7F812A441}
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Services Off-line de Home'Bank 4.53-->"C:\Program Files\ING\Off-line\unins000.exe"
Shrek 2-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{7774A6A9-CE0D-4544-9A29-84351BAE184A} 
Sid Meier's Civilization 4-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CFBCE791-2D53-4FCE-B3FB-D6E01F4112E8}\setup.exe" -l0x40c  -removeonly
Sierra Utilities-->C:\Program Files\Sierra On-Line\sutil32.exe uninstall
Steam(TM)-->C:\PROGRA~1\Steam\UNWISE.EXE C:\PROGRA~1\Steam\INSTALL.LOG
Tom Clancy's Rainbow Six: Lockdown-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3BB33584-3860-4772-AEE9-D8E61F552896}\Setup.exe" -l0x40c 
Tom Clancy's Splinter Cell Double Agent-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CAD1691A-FA24-4B95-9009-3257B8440ECC}\setup.exe" -l0x40c  -removeonly
Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for Microsoft Office Outlook 2007 (KB969907)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {74F98B24-AFBD-4800-9BD6-87D349B5C462}
Update for Outlook 2007 Junk Email Filter (kb971933)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {53C200F4-3B4B-49A5-8539-2C61F1A88CA2}
Windows Driver Package - Nokia (WUDFRd) WPD  (03/19/2007 6.83.31.1)-->C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccswpddri_039E7E24575DBAE6A389611AF28F4EB97729D33E\pccswpddriver.inf
Windows Driver Package - Nokia Modem  (02/15/2007 3.1)-->C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccs_bluet_8B37DC72918CCD58A6EC20373AF6242B037A293B\pccs_bluetooth.inf
Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Contrôle parental-->MsiExec.exe /X{D6A2DDE3-9D7C-412C-932A-756580D29919}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Live Sync-->MsiExec.exe /X{9C5EB781-0D37-44B8-9A58-77B3E4BF5F5E}
Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
Windows Live Writer-->MsiExec.exe /X{2231CE39-B963-4B9D-823A-F412ECA637B1}
Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"

======Security center information======

AV: F-Secure Anti-Virus Client Security 6.01
FW: F-Secure Anti-Virus Client Security 6.01

======System event log======

Computer Name: BUREAU
Event Code: 7036
Message: Le service NMIndexingService est entré dans l'état : en cours d'exécution.

Record Number: 21760
Source Name: Service Control Manager
Time Written: 20090624085937.000000+120
Event Type: Informations
User: 

Computer Name: BUREAU
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service NMIndexingService.

Record Number: 21759
Source Name: Service Control Manager
Time Written: 20090624085937.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: BUREAU
Event Code: 7036
Message: Le service ServiceLayer est entré dans l'état : en cours d'exécution.

Record Number: 21758
Source Name: Service Control Manager
Time Written: 20090624085929.000000+120
Event Type: Informations
User: 

Computer Name: BUREAU
Event Code: 4201
Message: Le système a détecté que la carte réseau \DEVICE\TCPIP_{46C31C79-AB04-4F29-B63E-3895F3515438} était connectée au réseau,
et a lancé une opération normale sur la carte réseau.

Record Number: 21757
Source Name: Tcpip
Time Written: 20090624085927.000000+120
Event Type: Informations
User: 

Computer Name: BUREAU
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service ServiceLayer.

Record Number: 21756
Source Name: Service Control Manager
Time Written: 20090624085909.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

=====Application event log=====

Computer Name: BUREAU
Event Code: 0
Message: Service started

Record Number: 5050
Source Name: SeaPort
Time Written: 20090412095228.000000+120
Event Type: Informations
User: 

Computer Name: BUREAU
Event Code: 2
Message: No logged in user, launching client as SYSTEM

Record Number: 5049
Source Name: BackWeb Plug-in - 7681197
Time Written: 20090412095227.000000+120
Event Type: Informations
User: 

Computer Name: BUREAU
Event Code: 2
Message: Service started

Record Number: 5048
Source Name: BackWeb Plug-in - 7681197
Time Written: 20090412095226.000000+120
Event Type: Informations
User: 

Computer Name: BUREAU
Event Code: 103
Message: 3  2009-04-11  19:11:23+02:00  bureau  SYSTEM  F-Secure Anti-Virus
 Scanning of C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\DIASYMREADER.DLL was aborted due to exceeded scanning time limit. The file may be in use or reading it was too slow (e.g. network connection was under stress).


Record Number: 5047
Source Name: F-Secure Anti-Virus
Time Written: 20090411191123.000000+120
Event Type: erreur
User: 

Computer Name: BUREAU
Event Code: 5000
Message: 
Record Number: 5046
Source Name: Windows Live Messenger
Time Written: 20090411181923.000000+120
Event Type: erreur
User: 

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=C:\Program Files\PC Connectivity Solution\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 75 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=4b02
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\QuickTime\QTSystem\QTJava.zip
"QTJAVA"=C:\Program Files\QuickTime\QTSystem\QTJava.zip

-----------------EOF-----------------


et le log

Logfile of random's system information tool 1.06 (written by random/random)
Run by Jérémy at 2009-07-23 10:41:13
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 42 GB (35%) free of 120 GB
Total RAM: 1022 MB (8% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:42:23, on 23/07/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\ATKKBService.exe
C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsrw.exe
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\F-Secure\FSGUI\fsguidll.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\program files\steam\steam.exe
C:\Documents and Settings\Jérémy\Application Data\Save\Save.exe
C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
C:\WINDOWS\System32\svchost.exe
D:\RSIT.exe
C:\Program Files	rend micro\Jérémy.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.mirarsearch.com/?useie5=1&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.mirarsearch.com/?useie5=1&q=
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: PremiereAdvertisingPlatform - {547395D9-934A-CED6-B851-F238C86079E5} - C:\Program Files\PremiereAdvertisingPlatform\PremiereAdvertisingPlatform.dll
O2 - BHO: Mirar - {58A30FC1-EFC6-43E2-A62E-F06F8E122D9F} - C:\WINDOWS\system32\win7078.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Mirar - {58A30FC0-EFC6-43E2-A62E-F06F8E122D9F} - C:\WINDOWS\system32\win7078.dll
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [OPSE reminder] "C:\Program Files\ScanSoft\OmniPageSE2.0\EregFre\Ereg.exe" -r "C:\Program Files\ScanSoft\OmniPageSE2.0\EregFre\ereg.ini"
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [Windows UDP Control Center] fxsteller.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Save] C:\Documents and Settings\Jérémy\Application Data\Save\Save.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-1177238915-329068152-725345543-1004\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Laetitia')
O4 - HKUS\S-1-5-21-1177238915-329068152-725345543-1005\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Parents')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-21-1177238915-329068152-725345543-1005 Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe (User 'Parents')
O4 - S-1-5-21-1177238915-329068152-725345543-1005 User Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe (User 'Parents')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: F-Secure Automatic Update.lnk = C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
O4 - Global Startup: NETGEAR WG111v3 Smart Wizard.lnk = C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
O8 - Extra context menu item: &Block this popup - C:\Program Files\F-Secure\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-BE/a-UNO1/GAME_UNO1.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

Utilisateur anonyme · Answer

J'ai encore oublé qqch dans le log

Logfile of random's system information tool 1.06 (written by random/random)
Run by Jérémy at 2009-07-23 10:41:13
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 42 GB (35%) free of 120 GB
Total RAM: 1022 MB (8% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:42:23, on 23/07/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\ATKKBService.exe
C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsrw.exe
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\F-Secure\FSGUI\fsguidll.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\program files\steam\steam.exe
C:\Documents and Settings\Jérémy\Application Data\Save\Save.exe
C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
C:\WINDOWS\System32\svchost.exe
D:\RSIT.exe
C:\Program Files	rend micro\Jérémy.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.mirarsearch.com/?useie5=1&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.mirarsearch.com/?useie5=1&q=
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: PremiereAdvertisingPlatform - {547395D9-934A-CED6-B851-F238C86079E5} - C:\Program Files\PremiereAdvertisingPlatform\PremiereAdvertisingPlatform.dll
O2 - BHO: Mirar - {58A30FC1-EFC6-43E2-A62E-F06F8E122D9F} - C:\WINDOWS\system32\win7078.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Mirar - {58A30FC0-EFC6-43E2-A62E-F06F8E122D9F} - C:\WINDOWS\system32\win7078.dll
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [OPSE reminder] "C:\Program Files\ScanSoft\OmniPageSE2.0\EregFre\Ereg.exe" -r "C:\Program Files\ScanSoft\OmniPageSE2.0\EregFre\ereg.ini"
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [Windows UDP Control Center] fxsteller.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Save] C:\Documents and Settings\Jérémy\Application Data\Save\Save.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-1177238915-329068152-725345543-1004\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Laetitia')
O4 - HKUS\S-1-5-21-1177238915-329068152-725345543-1005\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Parents')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-21-1177238915-329068152-725345543-1005 Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe (User 'Parents')
O4 - S-1-5-21-1177238915-329068152-725345543-1005 User Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe (User 'Parents')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: F-Secure Automatic Update.lnk = C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
O4 - Global Startup: NETGEAR WG111v3 Smart Wizard.lnk = C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
O8 - Extra context menu item: &Block this popup - C:\Program Files\F-Secure\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-BE/a-UNO1/GAME_UNO1.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

jlpjlp · Answer

le rapport malwarebyte encore???




Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

* Lance l'installation du programme en exécutant le fichier téléchargé.
* Double-clique maintenant sur le raccourci de Toolbar-S&D.
* Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
* Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
* Poste le rapport généré. (C:\TB.txt) 


________________


2009-07-22 15:21:05 ----D---- C:\Documents and Settings\Jérémy\Application Data\Save
2009-07-22 15:20:48 ----A---- C:\WINDOWS\system32\win70.exe
2009-07-22 15:20:47 ----A---- C:\WINDOWS\system32\win7078.dll
2009-07-22 15:18:13 ----HD---- C:\WINDOWS\PIF
2009-07-22 15:18:12 ----D---- C:\Program Files\PremiereAdvertisingPlatform
2009-07-22 15:18:12 ----D---- C:\Program Files\PlayMP3z

Utilisateur anonyme · Answer

Je suis en train de l'effectuer

jlpjlp · Answer

ok fais malwarebyte puis toolbar sd

a plus

Utilisateur anonyme · Answer

Voila j'ai la liste je suppprime les virus ??

jlpjlp · Answer

oui vire
et colle les rapports demandés

Utilisateur anonyme · Answer

Je te demande qqch les virus ont été mis en quarantaine automatiquement je les vire de la quarantaine en les supprimant ?

Voici le rapport:



Malwarebytes' Anti-Malware 1.39
Version de la base de données: 2486
Windows 5.1.2600 Service Pack 3

23/07/2009 12:42:52
mbam-log-2009-07-23 (12-42-52).txt

Type de recherche: Examen complet (C:\|D:\|E:\|F:\|)
Eléments examinés: 335333
Temps écoulé: 1 hour(s), 30 minute(s), 58 second(s)

Processus mémoire infecté(s): 1
Module(s) mémoire infecté(s): 1
Clé(s) du Registre infectée(s): 11
Valeur(s) du Registre infectée(s): 4
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 3
Fichier(s) infecté(s): 13

Processus mémoire infecté(s):
C:\Documents and Settings\Jérémy\Application Data\Save\Save.exe (Adware.Agent) -> Unloaded process successfully.

Module(s) mémoire infecté(s):
C:\WINDOWS\system32\win7078.dll (Adware.Mirar) -> Delete on reboot.

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\{58a30fc0-efc6-43e2-a62e-f06f8e122d9f} (Adware.Mirar) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{58a30fc0-efc6-43e2-a62e-f06f8e122d9f} (Adware.Mirar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{58a30fc0-efc6-43e2-a62e-f06f8e122d9f} (Adware.Mirar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{58a30fc1-efc6-43e2-a62e-f06f8e122d9f} (Adware.Mirar) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{58a30fc1-efc6-43e2-a62e-f06f8e122d9f} (Adware.Mirar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{58a30fc1-efc6-43e2-a62e-f06f8e122d9f} (Adware.Mirar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\{418d86be-7386-4f1a-83e0-53604adbda74} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PlayMP3 (Rogue.PlayMp3) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\MediaHoldings (Adware.PlayMP3Z) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\PlayMP3 (Adware.PlayMP3Z) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\save (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{58a30fc0-efc6-43e2-a62e-f06f8e122d9f} (Adware.Mirar) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{58a30fc0-efc6-43e2-a62e-f06f8e122d9f} (Adware.Mirar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows UDP Control Center (Backdoor.Bot) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Program Files\Save (Adware.WhenUSave) -> Quarantined and deleted successfully.
C:\Program Files\PlayMP3z (Adware.PlayMP3Z) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jérémy\Menu Démarrer\Programmes\PlayMP3z (Adware.PlayMP3Z) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\Documents and Settings\Jérémy\Application Data\Save\Save.exe (Adware.Agent) -> Delete on reboot.
C:\WINDOWS\system32\win7078.dll (Adware.Mirar) -> Delete on reboot.
c:\documents and settings\Jérémy\application data\Save\SaveUninst.exe (Adware.Agent) -> Quarantined and deleted successfully.
c:\documents and settings\Jérémy\local settings\Temp\SaveInstaller.exe (Adware.Agent) -> Quarantined and deleted successfully.
c:\documents and settings\Jérémy\local settings\Temp\NN_MirarBar78_Installer_876992.exe (Adware.Mirar) -> Quarantined and deleted successfully.
c:\program files\PlayMP3z\PlayMP3.exe (Adware.PlayMP3z) -> Quarantined and deleted successfully.
c:\program files\Save\SaveUninst.exe (Adware.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\win70.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
e:	emporary internet files\Content.IE5\292OLG7I\SaveInstaller[1].exe (Adware.Agent) -> Quarantined and deleted successfully.
e:	emporary internet files\Content.IE5\QN1VD0L4\SaveUninst.prod.v1000000.03mar2009.exe[1].1a9c17b6238cf818114ddd74b61de9cf (Adware.Agent) -> Quarantined and deleted successfully.
e:	emporary internet files\Content.IE5\URP0TPY0\Save.prod.v4030002.19mar2009.exe[1].c9f51174ad97b82aa78f58b2830c8493 (Adware.Agent) -> Quarantined and deleted successfully.
c:\program files\PlayMP3z\uninstall.exe (Adware.PlayMP3Z) -> Quarantined and deleted successfully.
c:\documents and settings\Jérémy\menu démarrer\programmes\PlayMP3z\Run PlayMP3z.pif (Adware.PlayMP3Z) -> Quarantined and deleted successfully.


et l'autre


   -----------\  ToolBar S&D 1.2.8   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4200+ )
   BIOS : Phoenix - AwardBIOS v6.00PG
   USER : Jérémy ( Administrator )
   BOOT : Normal boot
   Antivirus : F-Secure Anti-Virus Client Security 6.01 6.01 (Activated)
   Firewall  : F-Secure Anti-Virus Client Security 6.01 6.01 (Activated)
   A:\ (USB)
   C:\ (Local Disk) - NTFS - Total:117 Go (Free:41 Go)
   D:\ (Local Disk) - NTFS - Total:107 Go (Free:99 Go)
   E:\ (Local Disk) - NTFS - Total:4 Go (Free:3 Go)
   F:\ (Local Disk) - NTFS - Total:4 Go (Free:4 Go)
   G:\ (CD or DVD)

   "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
   Option : [1] ( jeu. 23/07/2009|15:08 )

   -----------\  Recherche de Fichiers / Dossiers ...

   C:\DOCUME~1\JRMY~1\LOCALS~1\Temp
sf9.tmp
   C:\DOCUME~1\JRMY~1\LOCALS~1\Temp
sp7.tmp

   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Search Bar"="http://www.mirarsearch.com/?useie5=1&q="

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
   "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"
   "Search Bar"="http://www.mirarsearch.com/?useie5=1&q="


   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 4 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip
   C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 5 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip
   C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 6 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip
   C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 7 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip
   C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 4 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip\Fort Boyard Le Jeu  crack NoCD multilanguage activation - test‚ par www.PC-jeux.com
   C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 5 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip\Fort Boyard Le Jeu  crack NoCD multilanguage activation - test‚ par www.PC-jeux.com
   C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 6 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip\Fort Boyard Le Jeu  crack NoCD multilanguage activation - test‚ par www.PC-jeux.com
   C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 7 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip\Fort Boyard Le Jeu  crack NoCD multilanguage activation - test‚ par www.PC-jeux.com
   C:\DOCUME~1\JRMY~1\Recent\civ4crack.lnk
   C:\DOCUME~1\JRMY~1\Recent\crack & serial.lnk
   C:\DOCUME~1\JRMY~1\Recent\Crack.lnk



   1 - "C:\ToolBar SD\TB_1.txt" - jeu. 23/07/2009|15:09 - Option : [1]

   -----------\  Fin du rapport a 15:09:18,31

Krapsman · Answer

Ouh les vilains crack no-cd tous vérolés...
Sinon malwarebyte's a l'air d'avoir fait un bon ménage...
Attends les prochaines instructions de jlpjlp!!

jlpjlp · Answer

oui les cracks...


______________


refis toolbar sd option 2 et colle le rapport


______________


colle un scan en ligne de chez kaspersky
https://www.informatruc.com


a plus

Utilisateur anonyme · Answer

Voila le rapport de toolbar :



   -----------\  ToolBar S&D 1.2.8   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4200+ )
   BIOS : Phoenix - AwardBIOS v6.00PG
   USER : Jérémy ( Administrator )
   BOOT : Normal boot
   Antivirus : F-Secure Anti-Virus Client Security 6.01 6.01 (Activated)
   Firewall  : F-Secure Anti-Virus Client Security 6.01 6.01 (Activated)
   A:\ (USB)
   C:\ (Local Disk) - NTFS - Total:117 Go (Free:40 Go)
   D:\ (Local Disk) - NTFS - Total:107 Go (Free:99 Go)
   E:\ (Local Disk) - NTFS - Total:4 Go (Free:3 Go)
   F:\ (Local Disk) - NTFS - Total:4 Go (Free:4 Go)
   G:\ (CD or DVD)

   "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
   Option : [2] ( jeu. 23/07/2009|17:39 )

   -----------\ SUPPRESSION

   Supprime! - C:\DOCUME~1\JRMY~1\LOCALS~1\Temp
sf9.tmp
   Supprime! - C:\DOCUME~1\JRMY~1\LOCALS~1\Temp
sp7.tmp

   -----------\  Recherche de Fichiers / Dossiers ...


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Search Bar"="http://www.mirarsearch.com/?useie5=1&q="

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
   "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"
   "Search Bar"="http://www.mirarsearch.com/?useie5=1&q="


   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 4 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip
   C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 5 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip
   C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 6 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip
   C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 7 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip
   C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 4 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip\Fort Boyard Le Jeu  crack NoCD multilanguage activation - test‚ par www.PC-jeux.com
   C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 5 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip\Fort Boyard Le Jeu  crack NoCD multilanguage activation - test‚ par www.PC-jeux.com
   C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 6 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip\Fort Boyard Le Jeu  crack NoCD multilanguage activation - test‚ par www.PC-jeux.com
   C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 7 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip\Fort Boyard Le Jeu  crack NoCD multilanguage activation - test‚ par www.PC-jeux.com
   C:\DOCUME~1\JRMY~1\Recent\civ4crack.lnk
   C:\DOCUME~1\JRMY~1\Recent\crack & serial.lnk
   C:\DOCUME~1\JRMY~1\Recent\Crack.lnk



   1 - "C:\ToolBar SD\TB_1.txt" - jeu. 23/07/2009|15:09 - Option : [1]
   2 - "C:\ToolBar SD\TB_2.txt" - jeu. 23/07/2009|17:40 - Option : [2]

   -----------\  Fin du rapport a 17:40:14,95


et celui de chez kaspersky : il prend énormément de temps donc j'ai pas encore fini loin de la

jlpjlp · Answer

ok je verrai ce soir ou demain

Utilisateur anonyme · Answer

Est ce vraiment nécessaire l'analyse de chez kaspersky pcq il était en route pdt 4 h et il a buggé et j'ai pas le temps de recommencer.
Et aussi c'est quoi ce que tu m'a envoyé ci-dessous je dois faire qqch avec :

2009-07-22 15:21:05 ----D---- C:\Documents and Settings\Jérémy\Application Data\Save 
2009-07-22 15:20:48 ----A---- C:\WINDOWS\system32\win70.exe 
2009-07-22 15:20:47 ----A---- C:\WINDOWS\system32\win7078.dll 
2009-07-22 15:18:13 ----HD---- C:\WINDOWS\PIF 
2009-07-22 15:18:12 ----D---- C:\Program Files\PremiereAdvertisingPlatform 
2009-07-22 15:18:12 ----D---- C:\Program Files\PlayM



Merci et désolé de te déranger je sais que je demande bcp !!

jlpjlp · Answer

ce que j'avais mis été des dossiers supects que malwarebyte a viré



remets un rapport rsit et dis si encore des soucis

Utilisateur anonyme · Answer

Voila le dossier::

Logfile of random's system information tool 1.06 (written by random/random)
Run by Jérémy at 2009-07-24 11:57:29
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 42 GB (35%) free of 120 GB
Total RAM: 1022 MB (36% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:57:44, on 24/07/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\ATKKBService.exe
C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsrw.exe
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe
C:\Program Files\F-Secure\FSGUI\fsguidll.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\program files\steam\steam.exe
C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
E:\Temporary Internet Files\Content.IE5\X1PKW228\RSIT[1].exe
C:\Program Files	rend micro\Jérémy.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.mirarsearch.com/?useie5=1&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.mirarsearch.com/?useie5=1&q=
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: PremiereAdvertisingPlatform - {547395D9-934A-CED6-B851-F238C86079E5} - C:\Program Files\PremiereAdvertisingPlatform\PremiereAdvertisingPlatform.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [OPSE reminder] "C:\Program Files\ScanSoft\OmniPageSE2.0\EregFre\Ereg.exe" -r "C:\Program Files\ScanSoft\OmniPageSE2.0\EregFre\ereg.ini"
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-1177238915-329068152-725345543-1005\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Parents')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-21-1177238915-329068152-725345543-1005 Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe (User 'Parents')
O4 - S-1-5-21-1177238915-329068152-725345543-1005 User Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe (User 'Parents')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: F-Secure Automatic Update.lnk = C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
O4 - Global Startup: NETGEAR WG111v3 Smart Wizard.lnk = C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
O8 - Extra context menu item: &Block this popup - C:\Program Files\F-Secure\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-BE/a-UNO1/GAME_UNO1.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

jlpjlp · Answer

mets a jour adobe reader avec la version 9


sinon ton pc a encore des soucis???



à la place de kaseprsky sinon pour etre sûr:

colle un scan en ligne

bitdefender en ligne :
http://www.bitdefender.fr/scan_fr/scan8/ie.html

Kaspersky en ligne
https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr

Utilisateur anonyme · Answer

Comme je suis un petit curieux et pas pour t'embêter loin de la pk je dois mettre à jour adobe reader ??
Merci.

jlpjlp · Answer

voilà

http://www.secuser.com/vulnerabilite/2009/090723-flash-reader.htm

Utilisateur anonyme · Answer

BitDefender Online Scanner - Rapport virus en temps réel
  
  
 
Généré à: Fri, Jul 24, 2009 - 18:09:38
 

--------------------------------------------------------------------------------

 
  
  
 
Info d'analyse
  
  
 
Fichiers scannés
 243192
 
Infectés Fichiers
 0
 
  
  
 
 
  
  
 
Virus Détectés
  
  
 
Aucun virus trouvé.
 
 
  
  
 
 
  
  
 
 

--------------------------------------------------------------------------------
  
  
 
Ce sommaire du processus d'analyse sera utilisé par les laboratoires Antivirus BitDefender pour créer des statistiques agréguées sur l'activité des virus dans le monde.

Utilisateur anonyme · Answer

Je vais t'expliquer. tu assez avec ce que j'ai mis ? car pour le premier que tu m'avais donné et qui était super long au fait c'est celui que tu m'as donné en deuxième mais un lien m'avait redirigé sur le deuxième en disant:
Erreur 404:impossible d'afficher la page
Donc j'èspère que c'est suffisant les scan que je t'ai mis 

Merci

jlpjlp · Answer

ok parfait:

ton pc a encore des soucis???

Utilisateur anonyme · Answer

Les jeux ne fonctionnent tjrs po !!!!
:(     :(      :(

Utilisateur anonyme · Answer

C'est peut-être autre chose qu'un virus mais je sais pas moi aidez moi please !!!

jlpjlp · Answer

depuis quand les jeux marchent pas?
c'est quoi exactement le souci???


tente de mettre à jour le pilote de ta carte video (c'est quoi ta carte ?)

Utilisateur anonyme · Answer

Au fait quand je le lance au début tout se passe bien ensuite il y a je pense que ça s'appelle l'interface où il y a jouer désinstaller, etc... puis quand j'appuie sur jouer l'ordi commence à charger puis il arrête soudainement sans afficher de message d'erreur. Voilà

jlpjlp · Answer

essaie de reinstaller le jeu : tu le vire puis tu le remets


et


tente de mettre à jour le pilote de ta carte video (c'est quoi ta carte ?)

Utilisateur anonyme · Answer

- j'ai déjà tenté de réinstaller 2 fois.
- ya pas un programme à télécharger pour savoir c'est quoi le matériel installé sur mon pc pour savoir et te le dire ?

Merci

jlpjlp · Answer

si pour voir le matos utilise everest home edition

Utilisateur anonyme · Answer

Tu veux bien me retranscrire ce qui est important pour par ex acheter un jeu et me dire si qqch cloche pcq moi je comprends rien lol
Merci


EVEREST Home Edition © 2003-2005 Lavalys, Inc. 

--------------------------------------------------------------------------------
 
     
  Version   EVEREST v2.20.405/fr  
  Site web   http://www.lavalys.com/  
  Type de rapport   Générateur de rapports  
  Ordinateur   BUREAU  
  Générateur   Jérémy  
  Système d'exploitation   Microsoft Windows XP Professional 5.1.2600 (WinXP Retail)  
  Date   2009-07-25  
  Heure   10:31  


Résumé 

--------------------------------------------------------------------------------
 
      
  Ordinateur:  
   Système d'exploitation   Microsoft Windows XP Professional  
   Service Pack du système   Service Pack 3  
   DirectX   4.09.00.0904 (DirectX 9.0c)  
   Nom du système   BUREAU  
   Nom de l'utilisateur   Jérémy  
   
  Carte mère:  
   Type de processeur   Unknown, 2200 MHz  
   Nom de la carte mère   Inconnu  
   Chipset de la carte mère   nVIDIA nForce4, AMD Hammer  
   Mémoire système   1024 Mo (Registered DDR SDRAM)  
   Type de BIOS   Award (07/14/06)  
   Port de communication   Port de communication (COM1)  
   Port de communication   Port imprimante (LPT1)  
   
  Moniteur:  
   Carte vidéo   ASUS X1600 Series Secondary (512 Mo)  
   Carte vidéo   ASUS X1600 Series (512 Mo)  
   Moniteur   Écran Plug-and-Play [NoDB] (HS2P401914)  
   
  Multimédia:  
   Carte audio   nVIDIA MCP04 - Audio Codec Interface  
   
  Stockage:  
   Contrôleur IDE   Contrôleur IDE standard double canal PCI  
   Contrôleur IDE   Contrôleur IDE standard double canal PCI  
   Contrôleur IDE   Contrôleur IDE standard double canal PCI  
   Lecteur de disquettes   Lecteur de disquettes  
   Disque dur   Maxtor 6L250R0 (250 Go, 7200 RPM, Ultra-ATA/133)  
   Lecteur optique   LITE-ON DVD+RW LDW-401S (DVD:4x/4x/12x, CD:40x/24x/40x DVD+RW)  
   État des disques durs SMART   OK  
   
  Partitions:  
   C: (NTFS)   120001 Mo (41591 Mo libre)  
   D: (NTFS)   109999 Mo (102127 Mo libre)  
   E: (NTFS)   4996 Mo (3148 Mo libre)  
   F: (NTFS)   4361 Mo (4336 Mo libre)  
   Taille totale   233.7 Go (147.7 Go libre)  
   
  Entrée:  
   Clavier   Clavier standard 101/102 touches ou clavier Microsoft Natural Keyboard PS/2  
   Souris   Souris compatible PS/2  
   
  Réseau:  
   Carte réseau   NETGEAR WG111v3 54Mbps Wireless USB 2.0 Adapter (192.168.1.2)  
   Carte réseau   NVIDIA nForce Networking Controller  
   
  Périphériques:  
   Imprimante   Canon MP500 Series Printer  
   Contrôleur USB1   nVIDIA MCP04 - OHCI USB Controller  
   Contrôleur USB2   nVIDIA MCP04 - EHCI USB 2.0 Controller  
   Périphérique USB   Concentrateur USB générique  
   Périphérique USB   NETGEAR WG111v3 54Mbps Wireless USB 2.0 Adapter  


Debug - PCI 

--------------------------------------------------------------------------------
 
     
  B00 D00 F00:   nVIDIA nForce4 - HyperTransport Bridge  
      
  Offset 00:   DE 10 5E 00 06 00 B0 00 A3 00 80 05 00 00 00 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 43 10 5A 81  
  Offset 30:   00 00 00 00 44 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   43 10 5A 81 08 E0 E0 01 22 00 11 11 D0 00 00 00  
  Offset 50:   23 06 7F 80 03 00 00 00 00 00 03 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 06 36 00 00  
  Offset 70:   44 44 00 00 D0 09 00 00 00 00 00 00 88 00 00 00  
  Offset 80:   13 FF 88 00 FA 00 00 00 03 00 00 00 61 00 00 00  
  Offset 90:   0E 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 01 01 01 01 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   08 00 01 A8 00 00 E0 FE 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B00 D01 F00:   nVIDIA MCP04 - LPC Bridge  
      
  Offset 00:   DE 10 50 00 0F 00 A0 00 F3 00 01 06 00 00 80 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 43 10 5A 81  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 FF 00 00 00  
  Offset 40:   43 10 5A 81 00 F0 FF FE FA 3E FF 00 FA 3E FF 00  
  Offset 50:   FA 3E FF 00 00 5A 62 02 00 00 00 01 00 00 FF FF  
  Offset 60:   01 40 00 00 01 44 00 00 01 48 00 00 00 00 F9 FF  
  Offset 70:   10 00 FF FF C5 00 00 00 00 00 44 19 00 02 20 0D  
  Offset 80:   09 80 00 D2 01 02 0D 00 C0 00 00 01 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 21 64 87 A9 DE BC 00 00  
  Offset A0:   00 00 10 C1 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   90 02 EF 02 00 08 5F 08 00 00 00 00 00 00 00 00  
  Offset C0:   35 82 80 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   14 14 01 00 00 00 D0 00 80 20 00 20 61 44 44 11  
  Offset F0:   5A FF 5F BF 00 00 00 C0 10 FF FF FF 00 00 30 07  
   
  B00 D01 F01:   nVIDIA MCP04 - SMBus Controller  
      
  Offset 00:   DE 10 52 00 01 00 B0 00 A2 00 05 0C 00 00 80 00  
  Offset 10:   01 FC 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   01 4C 00 00 41 4C 00 00 00 00 00 00 43 10 5A 81  
  Offset 30:   00 00 00 00 44 00 00 00 00 00 00 00 03 01 03 01  
  Offset 40:   43 10 5A 81 01 00 02 C0 00 00 00 00 00 00 00 00  
  Offset 50:   01 4C 00 00 41 4C 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B00 D02 F00:   nVIDIA MCP04 - OHCI USB Controller  
      
  Offset 00:   DE 10 5A 00 07 00 B0 00 A2 10 03 0C 00 00 80 00  
  Offset 10:   00 F0 02 FE 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 43 10 5A 81  
  Offset 30:   00 00 00 00 44 00 00 00 00 00 00 00 17 01 03 01  
  Offset 40:   43 10 5A 81 01 00 02 FE 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 1D 47 40 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 FF FF FF 03 07 30 07  
   
  B00 D02 F01:   nVIDIA MCP04 - EHCI USB 2.0 Controller  
      
  Offset 00:   DE 10 5B 00 06 00 B0 00 A3 20 03 0C 00 00 80 00  
  Offset 10:   00 00 B0 FE 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 43 10 5A 81  
  Offset 30:   00 00 00 00 44 00 00 00 00 00 00 00 14 02 03 01  
  Offset 40:   43 10 5A 81 0A 80 98 20 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   20 20 01 00 00 60 18 85 03 3C 3F 01 00 00 00 00  
  Offset 70:   00 00 08 05 00 10 20 80 89 3D B6 22 77 25 D4 00  
  Offset 80:   01 00 02 FE 00 00 00 00 00 00 00 00 15 16 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   01 00 00 00 00 00 00 C0 00 00 00 00 00 00 00 00  
  Offset B0:   33 00 11 22 44 00 00 00 FF 03 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 10 FF FF FF 04 0F 30 07  
   
  B00 D04 F00:   nVIDIA MCP04 - Audio Codec Interface  
      
  Offset 00:   DE 10 59 00 07 00 B0 00 A2 00 01 04 00 00 00 00  
  Offset 10:   01 F0 00 00 01 EC 00 00 00 D0 02 FE 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 43 10 2C 82  
  Offset 30:   00 00 00 00 44 00 00 00 00 00 00 00 15 01 02 05  
  Offset 40:   43 10 2C 82 01 00 02 06 00 00 00 00 06 01 00 21  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 FF FF FF 06 0A 30 07  
   
  B00 D06 F00:   nVIDIA MCP04 - Parallel ATA Controller  
      
  Offset 00:   DE 10 53 00 05 00 B0 00 F2 8A 01 01 00 00 00 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   01 E8 00 00 00 00 00 00 00 00 00 00 43 10 5A 81  
  Offset 30:   00 00 00 00 44 00 00 00 00 00 00 00 00 00 03 01  
  Offset 40:   43 10 5A 81 01 00 02 00 00 00 00 00 00 00 00 00  
  Offset 50:   03 F0 01 00 00 00 00 00 20 20 20 20 66 00 20 20  
  Offset 60:   00 C0 00 C7 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 20 EB 04 00 00 C0 37 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 10 FF FF FF 07 13 30 07  
   
  B00 D07 F00:   nVIDIA MCP04 - SATA Controller  
      
  Offset 00:   DE 10 54 00 07 00 B0 00 F3 85 01 01 00 00 00 00  
  Offset 10:   F1 09 00 00 F1 0B 00 00 71 09 00 00 71 0B 00 00  
  Offset 20:   01 D4 00 00 00 C0 02 FE 00 00 00 00 43 10 5A 81  
  Offset 30:   00 00 00 00 44 00 00 00 00 00 00 00 15 01 03 01  
  Offset 40:   43 10 5A 81 01 00 02 00 00 00 00 00 00 00 00 00  
  Offset 50:   13 00 00 15 00 00 00 00 A8 20 A8 20 66 00 20 20  
  Offset 60:   00 C0 00 C7 51 0C 00 00 08 0F 06 42 00 00 00 00  
  Offset 70:   2C 78 C4 40 01 10 00 00 01 10 00 00 20 00 20 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 06 00 06 10 00 00 01 01  
  Offset A0:   50 01 00 00 00 00 00 00 00 00 00 00 33 BB AA 02  
  Offset B0:   05 CC 84 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 0A 00 0A 00 08 00 02 A8  
  Offset D0:   01 00 02 66 42 00 00 00 00 00 00 00 0F 00 00 00  
  Offset E0:   01 00 02 66 42 00 00 00 00 00 00 00 00 00 60 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 FF FF FF 00 00 30 07  
   
  B00 D08 F00:   nVIDIA MCP04 - SATA Controller  
      
  Offset 00:   DE 10 55 00 07 00 B0 00 F3 85 01 01 00 00 00 00  
  Offset 10:   E1 09 00 00 E1 0B 00 00 61 09 00 00 61 0B 00 00  
  Offset 20:   01 C0 00 00 00 B0 02 FE 00 00 00 00 43 10 5A 81  
  Offset 30:   00 00 00 00 44 00 00 00 00 00 00 00 16 01 03 01  
  Offset 40:   43 10 5A 81 01 00 02 00 00 00 00 00 00 00 00 00  
  Offset 50:   13 00 00 15 00 00 00 00 A8 20 A8 20 66 00 20 20  
  Offset 60:   00 C0 00 C7 51 0C 00 00 08 0F 06 42 00 00 00 00  
  Offset 70:   2C 78 C4 40 01 10 00 00 01 10 00 00 20 00 20 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 06 00 06 10 00 00 01 01  
  Offset A0:   50 01 00 00 00 00 00 00 00 00 00 00 33 BB AA 02  
  Offset B0:   05 CC 84 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 0A 00 0A 00 08 00 02 A8  
  Offset D0:   01 00 02 66 42 00 00 00 00 00 00 00 00 00 F0 07  
  Offset E0:   01 00 02 66 42 00 00 00 00 00 00 00 00 00 F0 07  
  Offset F0:   00 00 00 00 00 00 00 00 00 FF FF FF 00 00 30 07  
   
  B00 D09 F00:   nVIDIA MCP04 - PCI-PCI Bridge  
      
  Offset 00:   DE 10 5C 00 07 00 A0 00 F2 01 04 06 00 00 01 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 01 01 80 F0 00 80 22  
  Offset 20:   F0 FF 00 00 F0 FF 00 00 00 00 00 00 00 00 00 00  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 FF 00 04 02  
  Offset 40:   00 00 07 00 01 00 02 00 07 00 00 00 00 00 44 01  
  Offset 50:   00 00 FE 3F 00 00 00 00 FF 1F FF 1F 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 06 00 00 00 47 00 FE 00 00 00 00 08 00 00 A8  
  Offset 90:   00 00 E0 FE 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B00 D0A F00:   nVIDIA MCP04 - LAN Controller  
      
  Offset 00:   DE 10 57 00 07 00 B8 00 F3 00 80 06 00 00 00 00  
  Offset 10:   00 A0 02 FE 01 BC 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 43 10 2A 81  
  Offset 30:   00 00 00 00 44 00 00 00 00 00 00 00 16 01 01 14  
  Offset 40:   43 10 2A 81 01 00 02 FE 00 00 00 00 0A 00 00 10  
  Offset 50:   05 64 84 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   0F 00 00 00 08 00 02 A8 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 11 00 00 00 40 FF FF FF 00 04 30 07  
   
  B00 D0B F00:   nVIDIA nForce4 - PCI Express Root Port  
      
  Offset 00:   DE 10 5D 00 07 00 10 00 F3 00 04 06 08 00 01 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 02 02 00 F1 01 00 00  
  Offset 20:   F0 FF 00 00 F1 FF 01 00 00 00 00 00 00 00 00 00  
  Offset 30:   00 00 00 00 40 00 00 00 00 00 00 00 FF 00 04 00  
  Offset 40:   01 48 02 F8 00 00 00 00 05 58 82 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 08 80 00 A8 00 00 E0 FE  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   10 00 41 01 C0 04 00 00 10 28 00 00 21 34 01 03  
  Offset 90:   00 00 41 10 80 0C 40 00 C0 01 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B00 D0C F00:   nVIDIA nForce4 - PCI Express Root Port  
      
  Offset 00:   DE 10 5D 00 07 00 10 00 F3 00 04 06 08 00 01 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 03 03 00 F1 01 00 00  
  Offset 20:   F0 FF 00 00 F1 FF 01 00 00 00 00 00 00 00 00 00  
  Offset 30:   00 00 00 00 40 00 00 00 00 00 00 00 FF 00 04 00  
  Offset 40:   01 48 02 F8 00 00 00 00 05 58 82 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 08 80 00 A8 00 00 E0 FE  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   10 00 41 01 C0 04 00 00 10 28 00 00 21 34 01 02  
  Offset 90:   00 00 41 10 80 0C 20 00 C0 01 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B00 D0D F00:   nVIDIA nForce4 - PCI Express Root Port  
      
  Offset 00:   DE 10 5D 00 07 00 10 00 F3 00 04 06 08 00 01 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 04 04 00 F1 01 00 00  
  Offset 20:   F0 FF 00 00 F1 FF 01 00 00 00 00 00 00 00 00 00  
  Offset 30:   00 00 00 00 40 00 00 00 00 00 00 00 FF 00 04 00  
  Offset 40:   01 48 02 F8 00 00 00 00 05 58 82 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 08 80 00 A8 00 00 E0 FE  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   10 00 41 01 C0 04 00 00 10 28 00 00 81 34 01 01  
  Offset 90:   00 00 81 10 80 0C 10 00 C0 01 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B00 D0E F00:   nVIDIA nForce4 - PCI Express Root Port  
      
  Offset 00:   DE 10 5D 00 07 00 10 00 A3 00 04 06 08 00 01 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 05 05 00 A1 A1 00 20  
  Offset 20:   F0 FD F0 FD 01 D0 F1 DF 00 00 00 00 00 00 00 00  
  Offset 30:   00 00 00 00 40 00 00 00 00 00 00 00 FF 00 0C 00  
  Offset 40:   01 48 02 F8 00 00 00 00 05 58 82 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 08 80 00 A8 00 00 E0 FE  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   10 00 41 01 C0 04 00 00 10 28 01 00 81 34 01 00  
  Offset 90:   00 00 81 10 80 0C 08 00 C0 01 40 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B00 D18 F00:   AMD Hammer - HyperTransport Technology Configuration  
      
  Offset 00:   22 10 00 11 00 00 10 00 00 00 00 06 00 00 80 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 30:   00 00 00 00 80 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   01 01 01 00 01 01 01 00 01 01 01 00 01 01 01 00  
  Offset 50:   01 01 01 00 01 01 01 00 01 01 01 00 01 01 01 00  
  Offset 60:   00 00 01 00 E4 00 00 00 20 C8 00 0F 0C 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   08 00 01 21 20 00 11 11 22 06 75 80 02 00 00 00  
  Offset 90:   56 04 51 02 00 00 05 00 07 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B00 D18 F01:   AMD Hammer - Address Map  
      
  Offset 00:   22 10 01 11 00 00 00 00 00 00 00 06 00 00 80 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   03 00 00 00 00 00 3F 00 00 00 00 00 01 00 00 00  
  Offset 50:   00 00 00 00 02 00 00 00 00 00 00 00 03 00 00 00  
  Offset 60:   00 00 00 00 04 00 00 00 00 00 00 00 05 00 00 00  
  Offset 70:   00 00 00 00 06 00 00 00 00 00 00 00 07 00 00 00  
  Offset 80:   03 0A 00 00 00 0B 00 00 03 B0 FE 00 80 C0 FE 00  
  Offset 90:   03 00 40 00 00 FF DF 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 03 00 F0 00 00 02 FE 00  
  Offset B0:   03 00 E0 00 80 5F E0 00 00 00 00 00 00 00 00 00  
  Offset C0:   13 A0 00 00 00 F0 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   03 00 00 05 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B00 D18 F02:   AMD Hammer - DRAM Controller  
      
  Offset 00:   22 10 02 11 00 00 00 00 00 00 00 06 00 00 80 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   01 00 00 00 81 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   60 3F 38 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 46 00 00 00 00 00 00 00  
  Offset 80:   02 00 00 00 00 00 00 00 13 91 16 0C 20 12 13 00  
  Offset 90:   10 00 01 00 59 80 10 34 24 00 00 80 57 21 A0 F0  
  Offset A0:   E9 02 00 0C 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   34 1C 66 B6 80 00 00 00 01 C4 81 48 DE 34 07 17  
  Offset C0:   00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   10 84 29 90 2C B6 8C A1 EA C2 18 D8 0C 7D 2B A3  
  Offset E0:   80 46 36 F0 1D 1D EE B8 8E DC AC 82 18 F1 4B 81  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B00 D18 F03:   AMD Hammer - Miscellaneous Control  
      
  Offset 00:   22 10 03 11 00 00 10 00 00 00 00 06 00 00 80 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 30:   00 00 00 00 F0 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   FF 3B 04 00 44 00 10 0A 00 00 00 00 00 00 00 00  
  Offset 50:   40 C0 8A 51 00 00 00 00 00 00 00 00 00 28 94 A4  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   11 01 02 51 11 80 00 50 00 2A 00 08 2A 22 00 00  
  Offset 80:   00 00 07 23 13 21 13 21 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 73 00 00 00 80 4B B9 44 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 01 A7 0D 00 00 00 A0 00 25 25 25 00  
  Offset E0:   00 00 00 00 20 1A 59 00 19 17 00 00 00 00 00 00  
  Offset F0:   0F 00 10 00 00 00 00 00 00 00 00 00 B2 0F 04 00  
   
  B05 D00 F00:   ASUS X1600 Series [NoDB]  
      
  Offset 00:   02 10 C3 71 07 00 10 00 9E 00 00 03 08 00 80 00  
  Offset 10:   0C 00 00 D0 00 00 00 00 04 00 FF FD 00 00 00 00  
  Offset 20:   01 AC 00 00 00 00 00 00 00 00 00 00 43 10 AC 01  
  Offset 30:   00 00 00 00 50 00 00 00 00 00 00 00 12 01 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 43 10 AC 01  
  Offset 50:   01 58 02 06 00 00 00 00 10 80 01 00 A0 0F 64 00  
  Offset 60:   10 08 00 00 01 0D 00 00 02 00 81 10 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   05 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B05 D00 F01:   ASUS X1600 Series Secondary [NoDB]  
      
  Offset 00:   02 10 E3 71 07 00 10 00 9E 00 80 03 08 00 00 00  
  Offset 10:   04 00 FE FD 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 43 10 AD 01  
  Offset 30:   00 00 00 00 50 00 00 00 00 00 00 00 FF 00 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   01 58 02 06 00 00 00 00 10 00 01 00 80 0F 00 00  
  Offset 60:   00 00 00 00 01 0D 00 00 00 00 81 10 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  


Debug - Video BIOS 

--------------------------------------------------------------------------------
 
     
  C000:0000   U...w...................8.....IBM?.............. 761295520......  
  C000:0040   ??..............12/04/06 17:28..8....$...7.........lAhC....q....  
  C000:0080   113-AA81702-117.8\S.RV535.PCI_EXPRESS.DDR2...71C3.9.13.1.20.AS07  
  C000:00C0   .....YO  
  C000:0100   U HAVE NOT CONNECTED THE POWER CABLE TO YOUR VIDEO CARD.PLEASE R  
  C000:0140   EFER TO THE 'GETTING STARTED GUIDE' FOR PROPER HARDWARE INSTALLA  
  C000:0180   TION....(C) 1988-2005, ATI Technologies Inc. .ATOMBIOSBK-ATI VER  
  C000:01C0   009.013.001.020.023014.SR23108.bin .306756 .23108 .SAHU .A  
  C000:0200   67639\config.h....$...ATOM......]...R.....C...8...J.....PCIR...q  
  C000:0240   ................ATI ATOMBIOS....@.............#..IW.(..........&  
  C000:0280   .......a...fPfQfRfSfUfVfW...h..&.f........f.2...(......$.|%.z%.V  
  C000:02C0   %.o......f......2..4.t.f.\.f.L.;.u...f.^.f.N........6...<Xu..F..  
  C000:0300   ...0.............f......9..b......$..$..$.w...`..`.2..4.t..LP...  
  C000:0340   ..'.f.....&&...fP...&.. .....fXt.. f.....<.f_f^f]f[fZfYfX......U  
  C000:0380   ......F.f3..F....F..R......;Z....]..>...u.............f....e....  
  C000:03C0   .@.R...B.....R.......|..i..~......m.........c.............c..c..  


Debug - Unknown 

--------------------------------------------------------------------------------
 
     
  Monitor   SAM0274: Écran Plug-and-Play [NoDB]  
  Motherboard   07/14/2006-NFORCE4-SLI-M2N4-SLI-00  
  Motherboard   ASUS M2N4-SLI ACPI BIOS Revision 0301  
  Motherboard   DMIMOBO: ASUSTeK Computer INC. M2N4-SLI  
  Motherboard   DMISYS: System manufacturer System Product Name  
  PCI/AGP   1002-71C3: ASUS X1600 Series [NoDB]  
  PCI/AGP   1002-71E3: ASUS X1600 Series Secondary [NoDB]  



--------------------------------------------------------------------------------

The names of actual companies and products mentioned herein may be the trademarks of their respective owners.

jlpjlp · Answer

lance GPUZ et donne les references de la carte video

https://www.commentcamarche.net/telecharger/utilitaires/11367-gpu-z/

Utilisateur anonyme · Answer

C'est une carte Asus X1600 Series

jlpjlp · Answer

donc ATI : pilote de la carte graphique ici:  http://support.amd.com/fr/gpudownload/Pages/index.aspx

Utilisateur anonyme · Answer

Je dois tout télécharger sur cette page

http://support.amd.com/fr/gpudownload/windows/Legacy/Pages/radeonaiw_xp.aspx?type=2.4.1&product=2.4.1.3.9&lang=French


PS j'ai pas réussi à mettre le lien fait du copier coller
Déso

jlpjlp · Answer

non que le pilote de ta carte vidéo

Utilisateur anonyme · Answer

C'est lequel je comprends rien déso??

jlpjlp · Answer

ici

http://a248.e.akamai.net/...

Utilisateur anonyme · Answer

Ca ne va tjrs po  :'(

jlpjlp · Answer

télécharge combofix (par sUBs) ici : 

http://download.bleepingcomputer.com/sUBs/ComboFix.exe 

et enregistre le sur le bureau. 


déconnecte toi d'internet et ferme toutes tes applications. 

désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware) 


double-clique sur combofix.exe et suis les instructions 

à la fin, il va produire un rapport C:\ComboFix.txt 

réactive ton parefeu, ton antivirus, la garde de ton antispyware 

copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse. 

Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi. 

Tu as un tutoriel complet ici : 

https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

Utilisateur anonyme · Answer

Voilà le rapport

ComboFix 09-07-26.01 - Jérémy 27/07/2009 10:43.1.2 - NTFSx86
Microsoft Windows XP Professionnel  5.1.2600.3.1252.33.1036.18.1022.414 [GMT 2:00]
Running from: D:\ComboFix.exe
AV: F-Secure Anti-Virus Client Security 6.01 *On-access scanning disabled* (Updated) {E7512ED5-4245-4B4D-AF3A-382D3F313F15}
FW: F-Secure Anti-Virus Client Security 6.01 *disabled* {D4747503-0346-49EB-9262-997542F79BF4}
 * Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\docume~1\JRMY~1\LOCALS~1\Temp\IadHide5.dll
c:\documents and settings\Jérémy\Local Settings\Temp\IadHide5.dll
c:\windows\Installer\167146.msi
c:\windows\Installer\1dcf161.msp
c:\windows\Installer\1dcf178.msp
c:\windows\Installer\1dcf18f.msp
c:\windows\Installer\1dcf1a8.msp
c:\windows\Installer\1dcf1c0.msp
c:\windows\Installer\1dcf1d8.msp
c:\windows\Installer\24b05b1.msp
c:\windows\TEMP\IadHide5.dll

.
(((((((((((((((((((((((((   Files Created from 2009-06-27 to 2009-07-27  )))))))))))))))))))))))))))))))
.

2009-07-26 07:28 . 2009-07-26 07:28	0	----a-w-	c:\windows\ativpsrm.bin
2009-07-25 20:49 . 2009-04-27 19:20	593920	------w-	c:\windows\system32\ati2sgag.exe
2009-07-25 20:46 . 2009-07-25 20:46	--------	d-----w-	C:\ATI
2009-07-25 16:00 . 2009-07-25 16:00	--------	d-----r-	c:\documents and settings\LocalService\Favoris
2009-07-25 07:38 . 2009-07-25 07:38	--------	d-----w-	c:\program files\Lavalys
2009-07-24 14:10 . 2009-07-24 16:09	--------	d-----w-	c:\windows\BDOSCAN8
2009-07-23 10:55 . 2009-07-23 15:40	--------	d-----w-	C:\ToolBar SD
2009-07-23 08:56 . 2009-07-13 11:36	38160	----a-w-	c:\windows\system32\drivers\mbamswissarmy.sys
2009-07-23 08:56 . 2009-07-23 08:56	--------	d-----w-	c:\documents and settings\All Users\Application Data\Malwarebytes
2009-07-23 08:56 . 2009-07-13 11:36	19096	----a-w-	c:\windows\system32\drivers\mbam.sys
2009-07-23 08:55 . 2009-07-23 10:42	--------	d-----w-	c:\program files\Malwarebytes' Anti-Malware
2009-07-23 08:41 . 2009-07-24 09:57	--------	d-----w-	c:\program files	rend micro
2009-07-23 08:41 . 2009-07-23 08:42	--------	d-----w-	C:sit
2009-07-22 13:18 . 2009-07-22 13:18	--------	d--h--w-	c:\windows\PIF
2009-07-22 13:18 . 2009-07-22 13:18	--------	d-----w-	c:\program files\PremiereAdvertisingPlatform
2009-07-18 16:39 . 2009-07-18 16:39	--------	d-----w-	c:\windows\system32\wbem\Repository
2009-07-18 16:26 . 2009-07-18 16:38	--------	d-----w-	c:\program files\Windows Media Connect 2
2009-07-18 16:24 . 2009-07-18 16:38	--------	d-----w-	c:\windows\system32\drivers\UMDF
2009-07-02 08:33 . 2009-07-02 08:33	--------	d-----w-	c:\documents and settings\Parents\Local Settings\Application Data\Microsoft Help

.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-27 06:38 . 2009-05-16 09:47	--------	d-----w-	c:\program files\Steam
2009-07-24 13:30 . 2008-11-06 18:09	--------	d-----w-	c:\program files\Fichiers communs\Adobe
2009-07-23 07:32 . 2009-03-21 11:34	--------	d-----w-	c:\program files\Microsoft Silverlight
2009-07-22 13:23 . 2009-02-15 15:06	--------	d-----w-	c:\program files\LimeWire
2009-07-20 10:12 . 2009-01-18 17:39	--------	d-----w-	c:\documents and settings\Laetitia\Application Data\PC Suite
2009-07-15 18:42 . 2008-11-04 20:26	--------	d-----w-	c:\documents and settings\All Users\Application Data\Microsoft Help
2009-07-15 12:10 . 2009-02-25 10:35	--------	d-----w-	c:\program files\Messenger Plus! Live
2009-07-13 14:19 . 2009-02-12 16:15	--------	d-----w-	c:\documents and settings\Laetitia\Application Data\Canon
2009-07-07 15:22 . 2008-11-06 18:24	--------	d-----w-	c:\program files\GameSpy Arcade
2009-06-22 10:49 . 2008-11-27 15:29	--------	d-----w-	c:\documents and settings\Parents\Application Data\Canon
2009-06-22 10:48 . 2009-06-17 17:32	--------	d-----w-	c:\program files\Google
2009-06-22 10:47 . 2008-11-05 18:42	--------	d-----w-	c:\program files\Activision
2009-06-22 10:47 . 2008-11-04 07:23	--------	d--h--w-	c:\program files\InstallShield Installation Information
2009-06-20 11:17 . 2008-11-04 07:28	196608	----a-w-	c:\windows\system32\drivers\aStandard.bin
2009-06-16 14:40 . 2004-08-19 15:09	119808	----a-w-	c:\windows\system32	2embed.dll
2009-06-16 14:40 . 2001-10-03 12:16	81920	----a-w-	c:\windows\system32\fontsub.dll
2009-06-03 19:10 . 2004-08-19 15:09	1297408	----a-w-	c:\windows\system32\quartz.dll
2009-05-13 05:04 . 2004-08-19 15:09	915456	----a-w-	c:\windows\system32\wininet.dll
2009-05-07 15:33 . 2004-08-19 15:09	348672	----a-w-	c:\windows\system32\localspl.dll
2009-05-02 10:22 . 2008-11-05 17:18	107888	----a-w-	c:\windows\system32\CmdLineExt.dll
.

(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown 
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" [2006-12-23 143360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"F-Secure Manager"="c:\program files\F-Secure\Common\FSM32.EXE" [2005-10-26 122929]
"F-Secure TNB"="c:\program files\F-Secure\TNB\TNBUtil.exe" [2004-05-27 684032]
"NeroFilterCheck"="c:\program files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"OPSE reminder"="c:\program files\ScanSoft\OmniPageSE2.0\EregFre\Ereg.exe" [2003-07-07 729088]
"OpwareSE2"="c:\program files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe" [2003-05-08 49152]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2007-06-29 286720]
"Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe" [2005-06-23 57344]
"PCSuiteTrayApplication"="c:\program files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2007-03-23 227328]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"SoundMan"="SOUNDMAN.EXE" - c:\windows\SOUNDMAN.EXE [2006-06-20 577536]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-13 15360]
"Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-03-27 1744896]

c:\documents and settings\J‚r‚my\Menu D‚marrer\Programmes\D‚marrage\
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-12-15 384000]

c:\documents and settings\Parents\Menu D‚marrer\Programmes\D‚marrage\
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-12-15 384000]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
F-Secure Automatic Update.lnk - c:\program files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe [2008-11-4 32807]
NETGEAR WG111v3 Smart Wizard.lnk - c:\program files\NETGEAR\WG111v3\WG111v3.exe [2008-4-17 2326528]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe"=
"%windir%\Network Diagnostic\xpnetdiag.exe"=
"c:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe"=
"c:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"=
"c:\Program Files\Microsoft Games\Rise of Nations\thrones.exe"=
"c:\WINDOWS\system32\dpnsvr.exe"=
"c:\Program Files\Messenger\msmsgs.exe"=
"c:\Program Files\EA GAMES\MOHDA\MOHAA.exe"=
"c:\Program Files\SEGA\SEGA Rally\SEGA Rally_SSE1.exe"=
"c:\Program Files\Ubisoft\Faces of War\facesofwar.exe"=
"c:\Program Files\Microsoft Games\Rise of Nations\patriots.exe"=
"c:\Program Files\Windows Live\Messenger\wlcsdk.exe"=
"c:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"=
"c:\Program Files\Windows Live\Messenger\msnmsgr.exe"=
"c:\Program Files\IncrediMail\bin\ImApp.exe"=
"c:\Program Files\Firaxis Games\Sid Meier's Civilization 4\Civilization4.exe"=
"c:\Program Files\Steam\SteamApps\common\red orchestra\System\RedOrchestra.exe"=
"c:\Program Files\GameSpy Arcade\Aphex.exe"=

R0 FSFW;F-Secure Firewall Driver;c:\windows\system32\drivers\fsdfw.sys [04/11/2008 20:54 70896]
R2 BackWeb Plug-in - 7681197;F-Secure Automatic Update;c:\progra~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE [04/11/2008 20:54 32807]
R2 EAPPkt;Realtek EAPPkt Protocol;c:\windows\system32\drivers\EAPPkt.sys [09/10/2007 14:13 38144]
R2 F-Secure Filter;F-Secure File System Filter;c:\program files\F-Secure\Anti-Virus\win2k\FSfilter.sys [04/11/2008 20:53 48816]
R2 F-Secure Gatekeeper;F-Secure Gatekeeper;c:\program files\F-Secure\Anti-Virus\win2k\fsgk.sys [04/11/2008 20:53 48256]
R2 F-Secure Recognizer;F-Secure File System Recognizer;c:\program files\F-Secure\Anti-Virus\win2k\FSrec.sys [04/11/2008 20:53 16720]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [21/03/2009 13:34 55152]
R2 litsgt;litsgt;c:\windows\system32\drivers\litsgt.sys [12/11/2008 18:38 137344]
R2 tansgt;tansgt;c:\windows\system32\drivers	ansgt.sys [12/11/2008 18:38 12032]
R3 RTL8187B;NETGEAR WG111v3 54Mbps Wireless USB 2.0 Adapter Vista Driver;c:\windows\system32\drivers\wg111v3.sys [28/12/2007 16:02 287232]
R3 Tetris;Tetris driver;c:\windows\system32\drivers\Tetris.sys [12/11/2008 18:33 48928]
R4 atidgllk;atidgllk;c:\windows\atidgllk.sys [04/11/2008 09:28 5376]
S3 fsssvc;Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [06/02/2009 19:08 533360]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32undll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Contents of the 'Scheduled Tasks' folder

2009-07-06 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-06-03 12:42]

2009-07-24 c:\windows\Tasks\OGADaily.job
- c:\windows\system32\OGAVerify.exe [2008-12-31 16:04]

2009-07-27 c:\windows\Tasks\OGALogon.job
- c:\windows\system32\OGAVerify.exe [2008-12-31 16:04]

2009-07-27 c:\windows\Tasks\Scheduled scanning task.job
- c:\progra~1\F-Secure\ANTI-V~1\fsav.exe [2008-11-04 14:42]

2009-07-27 c:\windows\Tasks\User_Feed_Synchronization-{859FE859-8B37-4F46-B799-4E2602726DD0}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]

2009-07-27 c:\windows\Tasks\User_Feed_Synchronization-{88B9C4D2-8528-49FF-84EE-C81FAF0064B8}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]

2009-07-27 c:\windows\Tasks\WGASetup.job
- c:\windows\system32\KB905474\wgasetup.exe [2009-04-28 20:18]
.
- - - - ORPHANS REMOVED - - - -

URLSearchHooks-{0BC6E3FA-78EF-4886-842C-5A1258C4455A} - (no file)
WebBrowser-{6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - (no file)
WebBrowser-{58A30FC0-EFC6-43E2-A62E-F06F8E122D9F} - (no file)
HKCU-Run-IncrediMail - c:\program files\IncrediMail\bin\IncMail.exe


.
------- Supplementary Scan -------
.
mSearch Bar = hxxp://www.mirarsearch.com/?useie5=1&q=
mWindow Title = 
uInternet Connection Wizard,ShellNext = iexplore
IE: &Block this popup - c:\program files\F-Secure\Anti-Spyware\blockpopups.htm
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Easy-WebPrint Ajouter à la liste d'impressions - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
IE: Easy-WebPrint Impression rapide - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
IE: Easy-WebPrint Imprimer - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
IE: Easy-WebPrint Prévisualiser - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
LSP: c:\program files\F-Secure\FSPS\program\FSLSP.DLL
DPF: CabBuilder - hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} - hxxps://secure.gopetslive.com/dev/GoPetsWeb.cab
.

**************************************************************************

driver loading error catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-27 10:56
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...  

scanning hidden autostart entries ... 

scanning hidden files ...  

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(828)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'lsass.exe'(884)
c:\program files\F-Secure\FSPS\program\FSLSP.DLL

- - - - - - - > 'explorer.exe'(2396)
c:\program files\ScanSoft\OmniPageSE2.0\ophookSE2.dll
c:\program files\Fichiers communs\Ahead\Lib\NeroSearchBar.dll
c:\program files\Fichiers communs\Ahead\Lib\MFC71U.DLL
c:\program files\Fichiers communs\Ahead\Lib\BCGCBPRO800u.dll
c:\windows\system32\eappprxy.dll
c:\windows\system32\webcheck.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\ati2evxx.exe
c:\windows\system32\ati2evxx.exe
c:\windows\ATKKBService.exe
c:\program files\F-Secure\Anti-Virus\fsgk32st.exe
c:\program files\F-Secure\Anti-Virus\fsgk32.exe
c:\program files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
c:\program files\F-Secure\Anti-Virus\fssm32.exe
c:\program files\F-Secure\common\FSMA32.EXE
c:\program files\F-Secure\common\FSMB32.EXE
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\windows\system32\wdfmgr.exe
c:\program files\F-Secure\common\FCH32.EXE
c:\program files\F-Secure\common\FAMEH32.EXE
c:\program files\F-Secure\Anti-Virus\fsqh.exe
c:\program files\F-Secure\Anti-Virus\FSRW.exe
c:\program files\F-Secure\common\FNRB32.exe
c:\program files\F-Secure\FWES\program\fsdfwd.exe
c:\program files\F-Secure\common\FIH32.exe
c:\program files\F-Secure\Anti-Virus\FSAV32.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\system32\WgaTray.exe
c:\windows\system32\wscntfy.exe
c:\progra~1\F-Secure\ANTI-S~1\FSAW.exe
c:\program files\F-Secure\FSGUI\fsguidll.exe
c:\program files\PC Connectivity Solution\ServiceLayer.exe
c:\program files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
c:\program files\OpenOffice.org 3\program\soffice.exe
c:\program files\OpenOffice.org 3\program\soffice.bin
c:\program files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
.
**************************************************************************
.
Completion time: 2009-07-27 10:59 - machine was rebooted [Parents]
ComboFix-quarantined-files.txt  2009-07-27 08:59

Pre-Run: 43.287.977.984 octets libres
Post-Run: 47 651 643 392 octets libres

235	--- E O F ---	2009-07-22 17:31

jlpjlp · Answer

ok mets a jour windows

et dis si encore des soucis

Utilisateur anonyme · Answer

Je saurais pas pcq windows m'embete en disant que mon ordi n'est pas une version originale je dois faire quoi ?

jlpjlp · Answer

mais il est ou pas légal ton windows?

sinon tout va bien?

Utilisateur anonyme · Answer

Voilà

jlpjlp · Answer

Télécharge OTM
http://www.geekstogo.com/forum/files/file/402-otm-oldtimers-move-it/
http://oldtimer.geekstogo.com/OTMoveIt3.exe (de Old_Timer) sur ton Bureau.

double-clique sur OTM.exe pour le lancer.
copie la liste qui se trouve en citation ci-dessous,
et colle-la dans le cadre de gauche de OTM :Paste instruction for items to be moved.
(attention bien mettre :files)


:processes
explorer.exe
:files

C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 4 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip
C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 5 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip
C:\DOCUME~1\JRMY~1\Local Setting
C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 4 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip 
C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 7 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip
C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 4 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip\Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com
C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 5 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip\Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com
C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 6 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip\Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com
C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 7 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip\Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com
C:\DOCUME~1\JRMY~1\Recent\civ4crack.lnk
C:\DOCUME~1\JRMY~1\Recent\crack & serial.lnk
C:\DOCUME~1\JRMY~1\Recent\Crack.lnk 
C:\WINDOWS	asks\WGASetup.job 
:commands
[purity]
[emptytemp]
[start explorer]

clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTM\MovedFiles.

il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.


______________________


utilise pour supprimer tes traces regulièrement

CCLEANER: (lance un nettoyage et répare 3 fois le registre) sans installer la barre yahoo
(dans les options puis avancé :désactive la case: effacer les fichiers de plus de 48 heures)
https://www.malekal.com/tutoriel-ccleaner/
https://www.01net.com/

______________________

scan avec super antispyware et colle le rapport

https://www.malekal.com/?s=SUPERAntiSpyware

________________________

lance tool cleaner et vire tout ce qui a été utilisé:
https://www.commentcamarche.net/telecharger/securite/22061-toolscleaner/

jlpjlp · Answer

En faisant ça je supprime quoi ? 


ces fichiers là:

C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 4 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip
C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 5 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip
C:\DOCUME~1\JRMY~1\Local Setting
C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 4 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip
C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 7 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip
C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 4 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip\Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com
C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 5 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip\Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com
C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 6 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip\Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com
C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 7 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip\Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com
C:\DOCUME~1\JRMY~1\Recent\civ4crack.lnk
C:\DOCUME~1\JRMY~1\Recent\crack & serial.lnk
C:\DOCUME~1\JRMY~1\Recent\Crack.lnk
C:\WINDOWS	asks\WGASetup.job


_____________________
ccleaner tout est indiqué ici: https://www.malekal.com/tutoriel-ccleaner/

____________________
pour la derniere question , il suffit de lancer tool cleaner et il se chargera de tout virer

Utilisateur anonyme · Answer

Quand j'utilise le programme il me fait planter mon pc (OTM)

jlpjlp · Answer

alors vire manuellement les fichiers laissés que devait virer otm.( si tu y arrives pas tu diras)  Et fais le reste . À plus

Utilisateur anonyme · Answer

comment je fais pour virer manuellement ??

jlpjlp · Answer

bon ...
fais ceci:




Pour fusionner:

http://img.photobucket.com/albums/v666/sUBs/CFScript.gif

_______________

telecharge combofix:

http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Sauvegarde le sur ton bureau et pas ailleurs !

_________________

Ferme tous tes navigateurs (donc copie ou imprime les instructions avant)

Crée un nouveau document texte : clic droit de souris sur le bureau > Nouveau > Document Texte, et copie dedans les lignes suivantes :





File::
C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 4 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip
C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 5 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip
C:\DOCUME~1\JRMY~1\Local Setting
C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 4 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip
C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 7 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip
C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 4 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip\Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com
C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 5 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip\Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com
C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 6 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip\Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com
C:\DOCUME~1\JRMY~1\Local Settings\Temp\R‚pertoire temporaire 7 pour Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com.zip\Fort Boyard Le Jeu crack NoCD multilanguage activation - test‚ par www.PC-jeux.com
C:\DOCUME~1\JRMY~1\Recent\civ4crack.lnk
C:\DOCUME~1\JRMY~1\Recent\crack & serial.lnk
C:\DOCUME~1\JRMY~1\Recent\Crack.lnk
C:\WINDOWS	asks\WGASetup.job



Enregistre ce fichier sous le nom CFscript


Fait un glisser/déposer de ce fichier CFscrïpt sur le fichier ComboFix.exe

Clique sur le fichier CFScript, maintient le doigt enfoncé et glisse la souris pour que l'icône du CFScript vienne recouvrir l'icône de Combofix. Relache la souris. Combofix va démarrer.

Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.

Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!

Ne touche à rien tant que le scan n'est pas terminé.

Une fois le scan achevé, un rapport va s'afficher: poste son contenu.


Si le fichier ne s'ouvre pas, il se trouve ici > C:\ComboFix.txt



_____________________
ccleaner tout est indiqué ici: https://www.malekal.com/tutoriel-ccleaner/

____________________
pour la derniere question , il suffit de lancer tool cleaner et il se chargera de tout virer

Virus introuvable

52 réponses

Discussions similaires

Newsletters