Virus ?

Résolu
lk67 -  
Bonjour,
Depuis quelques temps,parfois, mes programmes se ferment "Par manque de mémoire vive" ou alors une erreur du genre "Application Win32 non valide.
Ou parfois, les programmes disparaissent ou "démarrer" disparait dans la barre des tâches.
Pensez vous que je suis victime d'une infection ?

Voici un rapport RSIT :

info.txt :

info.txt logfile of random's system information tool 1.06 2010-01-15 20:40:25

======Uninstall list======

-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe AIR-->c:\Program Files\Fichiers communs\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 9.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A92000000001}
Adobe Reader 9.2-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A92000000001}
Adobe Shockwave Player 11.5-->"C:\WINDOWS\system32\Adobe\Shockwave 11\uninstaller.exe"
Auslogics BoostSpeed-->"C:\Program Files\Auslogics\Auslogics BoostSpeed\unins000.exe"
Auslogics Disk Defrag-->"C:\Program Files\Auslogics\Auslogics Disk Defrag\unins000.exe"
Auslogics Registry Cleaner-->"C:\Program Files\Auslogics\Auslogics Registry Cleaner\unins000.exe"
BitDefender Internet Security 2010-->MsiExec.exe /X{F446A5CB-74F2-44F5-988C-0738E5613689}
Canon MP Navigator 2.0-->"C:\Program Files\Canon\MP Navigator 2.0\Maint.exe" /UninstallRemove C:\Program Files\Canon\MP Navigator 2.0\uninst.ini
Canon MP450-->"C:\WINDOWS\system32\CanonIJ Uninstaller Information\{CF23AFD7-3078-4134-8823-EBF6D1FE6FAD}\DelDrv.exe" /U:{CF23AFD7-3078-4134-8823-EBF6D1FE6FAD} /L0x000c
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
COMODO System - Cleaner-->MsiExec.exe /X{C7705C79-92DE-4B48-A64B-98C56E336191}
Defraggler-->"C:\Program Files\Defraggler\uninst.exe"
FileHippo.com Update Checker-->"C:\Program Files\FileHippo.com\uninstall.exe"
Galerie de photos Windows Live-->MsiExec.exe /X{B131E59D-202C-43C6-84C9-68F0C37541F1}
Glary Utilities 2.18.0.786-->"C:\Program Files\Glary Utilities\unins000.exe"
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.0 (KB932471)-->C:\WINDOWS\system32\msiexec.exe /promptrestart /uninstall {ECD292A0-0347-4244-8C24-5DBCE990FB40} /package {BAF78226-3200-4DB4-BE33-4D922A799840}
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
IZArc 4.1-->"C:\Program Files\IZArc\unins001.exe"
Java(TM) 6 Update 17-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216016FF}
Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Ma-Config.com-->MsiExec.exe /X{18754BA4-4F0C-4E6E-888B-9496AFA05F43}
Maison 3D-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5399B7A4-4381-46DA-9F32-C84A404F2E09}\Setup.exe"
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Marvell Miniport Driver-->C:\Program Files\Marvell\Miniport Driver\Uninst.exe
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Security Update (KB953297)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{72AD53CC-CCC0-3757-8480-9EE176866A7C}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{0BD83598-C2EF-3343-847B-7D2E84599128}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Silverlight-->MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
Microsoft Works-->MsiExec.exe /I{A059DE09-1B49-4450-B340-7AE097EC3F04}
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB976325)-->"C:\WINDOWS\ie8updates\KB976325-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB972270)-->"C:\WINDOWS\$NtUninstallKB972270$\spuninst\spuninst.exe"
Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
Mozilla Firefox (3.5.7)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
Mozilla Thunderbird (2.0.0.23)-->C:\Program Files\Mozilla Thunderbird\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
MSXML 6 Service Pack 2 (KB954459)-->MsiExec.exe /I{1A528690-6A2D-4BC5-B143-8C4AE8D19D96}
myEvadeo-->msiexec /qb /x {28C056BD-682B-2BB3-56EE-7D485DCCF218}
myEvadeo-->MsiExec.exe /I{28C056BD-682B-2BB3-56EE-7D485DCCF218}
Nero Suite-->C:\Program Files\Fichiers communs\Nero\Uninstall\Setupx.exe /uninstall ExtraUninstallID=""
NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI
NVIDIA nView Desktop Manager-->C:\Program Files\NVIDIA Corporation\nView\nViewSetup.exe -uninstall
O&O Defrag Professional-->MsiExec.exe /I{9BF0F3CE-4964-4E4E-9BF6-DEC77FE86DEA}
Oblivion-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{35CB6715-41F8-4F99-8881-6FC75BF054B0}\setup.exe" -l0x40c -removeonly
OmniPage SE 2.0-->MsiExec.exe /I{79D5997E-BF79-48BB-8B41-9BE59C15C2D7}
OpenOffice.org 3.1-->MsiExec.exe /I{0FA44E79-CD7D-4E8D-A2EE-26FE05F509B6}
Photo Viewer 2.3-->"C:\Program Files\Photo Viewer\uninstall.exe"
PhotoFiltre-->"C:\Program Files\PhotoFiltre\Uninst.exe"
Picasa 3-->"C:\Program Files\Google\Picasa3\Uninstall.exe"
PowerParts 5.4-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Parker\Uninst.isu" -c"C:\Program Files\Parker\PpUninst.dll" -L=F
QuickTime-->MsiExec.exe /I{A429C2AE-EBF1-4F81-A221-1C115CAADDAD}
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x40c -removeonly
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Spelling Dictionaries Support For Adobe Reader 9-->MsiExec.exe /I{AC76BA86-7AD7-5464-3428-900000000004}
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
ULi M5287 SATA Controller Driver-->C:\Program Files\InstallShield Installation Information\ULi M5287 SATA Controller Driver\setup.exe
UltraVNC v1.0.2 Fr-->"C:\Program Files\UltraVNC\unins000.exe"
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
VC 9.0 Runtime-->MsiExec.exe /I{02E89EFC-7B07-4D5A-AA03-9EC0902914EE}
Visual C++ 2008 x86 Runtime - (v9.0.30729)-->MsiExec.exe /X{F333A33D-125C-32A2-8DCE-5C5D14231E27}
Visual C++ 2008 x86 Runtime - v9.0.30729.01-->C:\WINDOWS\system32\msiexec.exe /x {F333A33D-125C-32A2-8DCE-5C5D14231E27} /qb+ REBOOTPROMPT=""
VLC media player 0.9.9-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}
Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
Windows Live Writer-->MsiExec.exe /X{4634B21A-CC07-4396-890C-2B8168661FEA}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Windows Support Tools-->MsiExec.exe /I{89B078C4-50B0-453E-BF53-3A7E6A0D85FA}
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"

======Hosts File======

127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com

======Security center information======

AV: BitDefender Antivirus
AV: Doctor Web Anti-Virus
FW: BitDefender Pare-feu

======System event log======

Computer Name: FIXE
Event Code: 7036
Message: Le service Service de la passerelle de la couche Application est entré dans l'état : en cours d'exécution.

Record Number: 2327
Source Name: Service Control Manager
Time Written: 20100106203216.000000+060
Event Type: Informations
User:

Computer Name: FIXE
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Service de la passerelle de la couche Application.

Record Number: 2326
Source Name: Service Control Manager
Time Written: 20100106203216.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: FIXE
Event Code: 7036
Message: Le service Service d'application d'assistance IPv6 est entré dans l'état : arrêté.

Record Number: 2325
Source Name: Service Control Manager
Time Written: 20100106203215.000000+060
Event Type: Informations
User:

Computer Name: FIXE
Event Code: 7036
Message: Le service Service de découvertes SSDP est entré dans l'état : en cours d'exécution.

Record Number: 2324
Source Name: Service Control Manager
Time Written: 20100106203215.000000+060
Event Type: Informations
User:

Computer Name: FIXE
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Gestionnaire de connexions d'accès distant.

Record Number: 2323
Source Name: Service Control Manager
Time Written: 20100106203215.000000+060
Event Type: Informations
User: FIXE\Utilisateur

=====Application event log=====

Computer Name: FIXE
Event Code: 3
Message:
11/1/2010 20:51 Client 192.168.1.11 disconnected

Record Number: 16413
Source Name: UltraVnc
Time Written: 20100111205102.000000+060
Event Type: Informations
User:

Computer Name: FIXE
Event Code: 1
Message:
11/1/2010 20:50 Connection received from 192.168.1.11

Record Number: 16412
Source Name: UltraVnc
Time Written: 20100111205037.000000+060
Event Type: Informations
User:

Computer Name: FIXE
Event Code: 3
Message:
11/1/2010 20:29 Client 192.168.1.11 disconnected

Record Number: 16411
Source Name: UltraVnc
Time Written: 20100111202935.000000+060
Event Type: Informations
User:

Computer Name: FIXE
Event Code: 1
Message:
11/1/2010 20:13 Connection received from 192.168.1.11

Record Number: 16410
Source Name: UltraVnc
Time Written: 20100111201339.000000+060
Event Type: Informations
User:

Computer Name: FIXE
Event Code: 4096
Message:
Record Number: 16409
Source Name: Avira AntiVir
Time Written: 20100111201205.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;C:\Program Files\Support Tools;C:\Program Files\QuickTime\QTSystem
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 6 Stepping 4, GenuineIntel
"PROCESSOR_REVISION"=0604
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip

-----------------EOF-----------------

log.txt

Logfile of random's system information tool 1.06 (written by random/random)
Run by Utilisateur at 2010-01-15 20:39:27
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 226 GB (82%) free of 276 GB
Total RAM: 1023 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:40:21, on 15/01/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe
C:\Program Files\ma-config.com\maconfservice.exe
C:\Program Files\OO Software\Defrag\oodag.exe
C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Utilisateur\Mes documents\Telecharge\RSIT.exe
C:\Program Files\trend micro\Utilisateur.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2010\IEToolbar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe"
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2010\IEShow.exe"
O8 - Extra context menu item: &Envoyer à OneNote - res://C:\PROGRA~1\MICROS~3\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office14\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://a248.e.akamai.net
O15 - Trusted Zone: http://*.bitdefender.com
O15 - Trusted Zone: http://ssl-hints.netflame.cc
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://losser67.spaces.live.com/PhotoUpload/MsnPUpld.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (Ma-Config control) - http://www.ma-config.com/activex/MaConfig_4_0_1_3.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B410D61D-0203-4695-8399-137B6F760EBE}: NameServer = 208.67.222.222,208.67.220.220
O18 - Protocol: skyline - {3A4F9195-65A8-11D5-85C1-0001023952C1} - (no file)
O23 - Service: BitDefender Serveur Arrakis (Arrakis3) - BitDefender S.R.L. https://www.bitdefender.fr/ - C:\Program Files\Fichiers communs\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender S.R.L. - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\Program Files\OO Software\Defrag\oodag.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe

--
End of file - 7343 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\COMODO System Cleaner Update.job
C:\WINDOWS\tasks\Defraggler Volume C Task.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{0072B144-4B3F-480E-AD3F-28066A4E617F}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-12-15 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
Locked
{381FFDE8-2394-4f90-B10D-FC6124A40F8C} - BitDefender Toolbar - C:\Program Files\BitDefender\BitDefender 2010\IEToolbar.dll [2009-10-20 128832]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-09-27 13918208]
"nwiz"=nwiz.exe /install []
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-12-25 18789408]
"BDAgent"=C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe [2009-12-04 1118144]
"BitDefender Antiphishing Helper"=C:\Program Files\BitDefender\BitDefender 2010\IEShow.exe [2009-10-19 71152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OODefragTray]
C:\Program Files\OO Software\Defrag\oodtray.exe [2009-09-26 2524416]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"WMPNetworkSvc"=3
"usnjsvc"=3
"iPod Service"=3
"Apple Mobile Device"=2
"Bonjour Service"=2
"YouupServiceWinService"=2
"maconfservice"=3
"Lavasoft Ad-Aware Service"=3
"JavaQuickStarterService"=2
"LightScribeService"=2
"gusvc"=3
"gupdate1c98c6b64622434"=2
"IDriverT"=3
"wlidsvc"=2
"osppsvc"=3
"ose"=3
"Microsoft SharePoint Workspace Audit Service"=3
"idsvc"=3

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoSMBalloonTip"=0
"NoDriveAutorun"=67108863
"HonorAutoRunSetting"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\ma-config.com\maconfservice.exe"="C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\UltraVNC\winvnc.exe"="C:\Program Files\UltraVNC\winvnc.exe:*:Enabled:Serveur VNC pour Win32"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

======List of files/folders created in the last 1 months======

2010-01-15 20:39:27 ----D---- C:\rsit
2010-01-15 20:39:27 ----D---- C:\Program Files\trend micro
2010-01-15 13:47:44 ----A---- C:\WINDOWS\ntbtlog.txt
2010-01-13 21:36:47 ----SD---- C:\cc
2010-01-13 21:11:36 ----A---- C:\WINDOWS\zip.exe
2010-01-13 21:11:36 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-01-13 21:11:36 ----A---- C:\WINDOWS\SWSC.exe
2010-01-13 21:11:36 ----A---- C:\WINDOWS\SWREG.exe
2010-01-13 21:11:36 ----A---- C:\WINDOWS\sed.exe
2010-01-13 21:11:36 ----A---- C:\WINDOWS\PEV.exe
2010-01-13 21:11:36 ----A---- C:\WINDOWS\NIRCMD.exe
2010-01-13 21:11:36 ----A---- C:\WINDOWS\MBR.exe
2010-01-13 21:11:36 ----A---- C:\WINDOWS\grep.exe
2010-01-13 21:11:27 ----D---- C:\WINDOWS\ERDNT
2010-01-13 21:09:36 ----D---- C:\Qoobox
2010-01-13 21:05:25 ----A---- C:\Log.txt
2010-01-13 21:04:47 ----D---- C:\FindyKill
2010-01-13 19:46:27 ----A---- C:\WINDOWS\system32\phversion.txt
2010-01-13 19:18:13 ----A---- C:\WINDOWS\bdagent.INI
2010-01-13 19:17:29 ----A---- C:\bdlog.txt
2010-01-13 19:09:53 ----D---- C:\Program Files\BitDefender
2010-01-13 19:09:53 ----D---- C:\Documents and Settings\Utilisateur\Application Data\BitDefender
2010-01-13 19:09:53 ----D---- C:\Documents and Settings\All Users\Application Data\BitDefender
2010-01-13 19:08:20 ----D---- C:\Program Files\Fichiers communs\BitDefender
2010-01-13 18:27:20 ----D---- C:\Program Files\Marvell
2010-01-13 09:20:23 ----D---- C:\WINDOWS\system32\oodag
2010-01-13 09:12:20 ----D---- C:\Documents and Settings\Utilisateur\Application Data\Auslogics
2010-01-13 09:11:57 ----D---- C:\Program Files\Auslogics
2010-01-13 09:08:50 ----D---- C:\Program Files\OO Software
2010-01-12 22:55:08 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-01-10 13:03:32 ----D---- C:\WINDOWS\ShellNew
2010-01-10 12:15:41 ----D---- C:\Documents and Settings\Utilisateur\Application Data\IObit
2010-01-10 12:12:26 ----D---- C:\Program Files\IObit
2010-01-10 12:11:37 ----D---- C:\Documents and Settings\Utilisateur\Application Data\ComodoGroup
2010-01-10 12:08:12 ----A---- C:\WINDOWS\system32\cnat.exe
2010-01-10 12:08:02 ----D---- C:\Program Files\COMODO
2010-01-06 17:38:01 ----A---- C:\WINDOWS\system32\TUKernel.exe
2010-01-06 16:55:39 ----D---- C:\Documents and Settings\Utilisateur\Application Data\TuneUp Software
2010-01-06 16:55:08 ----D---- C:\Documents and Settings\All Users\Application Data\TuneUp Software
2010-01-06 16:55:03 ----SHD---- C:\Documents and Settings\All Users\Application Data\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
2010-01-02 16:11:45 ----D---- C:\Documents and Settings\Utilisateur\Application Data\QuickScan
2010-01-02 14:16:28 ----A---- C:\WINDOWS\system32\vnchelp.dll
2010-01-02 14:16:28 ----A---- C:\WINDOWS\system32\vncdrv.dll
2010-01-02 14:16:27 ----D---- C:\Program Files\UltraVNC
2009-12-29 14:45:20 ----D---- C:\WINDOWS\BDOSCAN8
2009-12-29 10:42:54 ----RASHD---- C:\autorun.inf
2009-12-28 22:27:41 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-12-28 22:27:40 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2009-12-28 13:26:33 ----D---- C:\Documents and Settings\Utilisateur\Application Data\WinRAR
2009-12-27 11:56:57 ----D---- C:\355dd09ee58683a5810d1c534d3a
2009-12-26 21:04:25 ----A---- C:\WINDOWS\system32\sc.exe
2009-12-26 20:40:17 ----A---- C:\WINDOWS\system32\inetcomm.dll
2009-12-26 17:24:21 ----A---- C:\WINDOWS\system32\jscript.dll
2009-12-26 16:40:42 ----D---- C:\WINDOWS\Prefetch
2009-12-26 16:00:53 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2009-12-26 14:24:13 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2009-12-26 14:21:46 ----A---- C:\WINDOWS\system32\irmon.dll
2009-12-26 14:21:45 ----A---- C:\WINDOWS\system32\wshirda.dll
2009-12-26 14:21:45 ----A---- C:\WINDOWS\system32\irftp.exe
2009-12-26 13:52:58 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-12-26 13:52:58 ----A---- C:\WINDOWS\system32\irclass.dll
2009-12-26 13:52:41 ----RA---- C:\WINDOWS\SET74.tmp
2009-12-26 13:52:38 ----RA---- C:\WINDOWS\SET68.tmp
2009-12-26 13:52:36 ----RA---- C:\WINDOWS\SET65.tmp
2009-12-26 13:16:51 ----A---- C:\WINDOWS\system32\wucltui.dll
2009-12-26 13:16:50 ----A---- C:\WINDOWS\system32\wuaueng.dll
2009-12-26 13:16:50 ----A---- C:\WINDOWS\system32\wuauclt.exe
2009-12-26 13:16:50 ----A---- C:\WINDOWS\system32\wuapi.dll
2009-12-26 13:16:39 ----A---- C:\WINDOWS\system32\wuweb.dll
2009-12-26 12:04:05 ----A---- C:\WINDOWS\system32\wmserror.dll
2009-12-26 12:04:03 ----A---- C:\WINDOWS\system32\wpdtrace.dll
2009-12-26 12:04:03 ----A---- C:\WINDOWS\system32\wpdsp.dll
2009-12-26 12:04:03 ----A---- C:\WINDOWS\system32\wpdmtpus.dll
2009-12-26 12:04:03 ----A---- C:\WINDOWS\system32\wpdmtpdr.dll
2009-12-26 12:04:03 ----A---- C:\WINDOWS\system32\wpdmtp.dll
2009-12-26 12:04:03 ----A---- C:\WINDOWS\system32\wpdconns.dll
2009-12-26 12:04:02 ----A---- C:\WINDOWS\system32\wpd_ci.dll
2009-12-26 12:04:02 ----A---- C:\WINDOWS\system32\wdfmgr.exe
2009-12-26 12:04:02 ----A---- C:\WINDOWS\system32\wdfapi.dll
2009-12-26 12:04:02 ----A---- C:\WINDOWS\system32\uwdf.exe
2009-12-26 12:04:01 ----A---- C:\WINDOWS\system32\wmdrmdev.dll
2009-12-26 12:04:00 ----A---- C:\WINDOWS\system32\WMVADVE.DLL
2009-12-26 12:04:00 ----A---- C:\WINDOWS\system32\wmdrmnet.dll
2009-12-26 12:03:57 ----A---- C:\WINDOWS\system32\WMVADVD.dll
2009-12-26 12:03:51 ----A---- C:\WINDOWS\MAJ.CMD
2009-12-26 12:00:28 ----D---- C:\Program Files\ComPlus Applications
2009-12-26 11:59:35 ----A---- C:\WINDOWS\system32\calc.exe
2009-12-26 11:30:07 ----RA---- C:\WINDOWS\SETFF.tmp
2009-12-26 11:30:02 ----RA---- C:\WINDOWS\SETF3.tmp
2009-12-26 11:30:00 ----RA---- C:\WINDOWS\SETF0.tmp
2009-12-25 23:12:08 ----D---- C:\Program Files\Fichiers communs\Sony Shared
2009-12-24 16:22:32 ----RA---- C:\WINDOWS\system32\tmp39.tmp
2009-12-23 16:37:45 ----D---- C:\Program Files\PhotoCardMaker
2009-12-22 17:55:17 ----D---- C:\Documents and Settings\All Users\Application Data\DVD Shrink
2009-12-20 17:03:03 ----D---- C:\Documents and Settings\All Users\Application Data\ScanSoft
2009-12-20 17:02:29 ----A---- C:\WINDOWS\system32\sndvol32.exe
2009-12-20 13:08:13 ----D---- C:\Program Files\BitComet
2009-12-19 18:25:06 ----D---- C:\WINDOWS\SQL9_KB970892_ENU
2009-12-19 15:26:35 ----D---- C:\Program Files\Microsoft SQL Server
2009-12-18 21:44:42 ----A---- C:\WINDOWS\system32\javaws.exe
2009-12-18 21:44:42 ----A---- C:\WINDOWS\system32\javaw.exe
2009-12-18 21:44:42 ----A---- C:\WINDOWS\system32\java.exe

======List of files/folders modified in the last 1 months======

2010-01-15 20:39:29 ----D---- C:\WINDOWS\system32\CatRoot2
2010-01-15 20:39:27 ----D---- C:\Program Files
2010-01-15 20:36:49 ----D---- C:\WINDOWS\system32
2010-01-15 20:36:48 ----D---- C:\WINDOWS\Temp
2010-01-15 20:36:21 ----D---- C:\Program Files\Mozilla Firefox
2010-01-15 18:58:36 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-01-15 14:18:30 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2010-01-15 13:47:44 ----D---- C:\WINDOWS
2010-01-13 21:46:30 ----D---- C:\Program Files\Mozilla Thunderbird
2010-01-13 21:38:00 ----D---- C:\WINDOWS\system32\drivers
2010-01-13 19:11:09 ----SHD---- C:\WINDOWS\Installer
2010-01-13 19:11:09 ----SHD---- C:\Config.Msi
2010-01-13 19:10:37 ----HD---- C:\WINDOWS\inf
2010-01-13 19:09:31 ----D---- C:\WINDOWS\WinSxS
2010-01-13 19:08:20 ----D---- C:\Program Files\Fichiers communs
2010-01-13 18:52:27 ----SHD---- C:\System Volume Information
2010-01-13 18:52:27 ----D---- C:\WINDOWS\system32\Restore
2010-01-13 18:46:55 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-01-13 18:31:41 ----ASH---- C:\boot.ini
2010-01-13 18:29:20 ----D---- C:\WINDOWS\system32\RTCOM
2010-01-13 18:29:19 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-01-13 18:29:03 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-01-13 09:17:50 ----D---- C:\WINDOWS\Debug
2010-01-12 22:54:27 ----HD---- C:\WINDOWS\$hf_mig$
2010-01-11 21:32:07 ----SD---- C:\WINDOWS\Tasks
2010-01-11 20:57:52 ----D---- C:\WINDOWS\Minidump
2010-01-11 06:34:33 ----D---- C:\WINDOWS\Microsoft.NET
2010-01-10 14:04:16 ----D---- C:\WINDOWS\system32\config
2010-01-10 14:04:02 ----D---- C:\WINDOWS\system32\wbem
2010-01-10 14:04:02 ----D---- C:\WINDOWS\Registration
2010-01-10 14:03:48 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2010-01-10 13:05:23 ----D---- C:\WINDOWS\system
2010-01-10 13:05:23 ----D---- C:\WINDOWS\msapps
2010-01-10 13:05:23 ----D---- C:\Program Files\microsoft frontpage
2010-01-10 13:02:40 ----D---- C:\Program Files\Microsoft Office
2010-01-10 11:44:50 ----A---- C:\WINDOWS\win.ini
2010-01-10 11:44:50 ----A---- C:\WINDOWS\system.ini
2010-01-09 14:39:54 ----D---- C:\Documents and Settings\Utilisateur\Application Data\Skyline
2010-01-09 14:36:01 ----D---- C:\Documents and Settings\All Users\Application Data\Skyline
2010-01-09 07:54:42 ----RSD---- C:\WINDOWS\assembly
2010-01-09 07:54:42 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2010-01-09 07:53:27 ----RSD---- C:\WINDOWS\Fonts
2010-01-09 07:53:00 ----D---- C:\Program Files\MSBuild
2010-01-08 19:16:54 ----D---- C:\Program Files\Sony
2010-01-08 19:11:08 ----D---- C:\Program Files\Google
2010-01-08 19:07:47 ----D---- C:\WINDOWS\Help
2010-01-08 19:06:23 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-01-08 18:24:46 ----HD---- C:\Program Files\InstallShield Installation Information
2010-01-08 18:24:46 ----D---- C:\Program Files\Mindscape
2010-01-08 17:53:32 ----A---- C:\WINDOWS\NeroDigital.ini
2010-01-05 01:17:46 ----A---- C:\WINDOWS\system32\MRT.exe
2010-01-02 16:36:02 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-01-02 15:01:11 ----D---- C:\WINDOWS\twain_32
2010-01-01 20:52:06 ----D---- C:\Program Files\Pinnacle
2010-01-01 20:44:46 ----D---- C:\Program Files\eMule
2009-12-30 12:08:20 ----D---- C:\Program Files\Windows Live
2009-12-29 11:33:33 ----D---- C:\Program Files\Windows Media Player
2009-12-29 10:42:34 ----SHD---- C:\RECYCLER
2009-12-29 10:27:59 ----D---- C:\Program Files\Microsoft.NET
2009-12-29 10:26:03 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2009-12-28 22:41:00 ----D---- C:\WINDOWS\system32\CatRoot
2009-12-28 22:34:48 ----D---- C:\WINDOWS\AppPatch
2009-12-28 21:55:49 ----D---- C:\Program Files\Ubisoft
2009-12-28 21:55:38 ----D---- C:\Documents and Settings\Utilisateur\Application Data\YouUp
2009-12-28 21:30:05 ----D---- C:\Program Files\Messenger
2009-12-28 10:31:13 ----D---- C:\Program Files\Internet Explorer
2009-12-27 20:54:46 ----HD---- C:\WINDOWS\msdownld.tmp
2009-12-27 20:54:25 ----HDC---- C:\WINDOWS\ie8
2009-12-27 20:45:35 ----D---- C:\WINDOWS\system32\fr-fr
2009-12-27 11:46:21 ----D---- C:\Program Files\Defraggler
2009-12-27 11:16:49 ----D---- C:\Program Files\Outlook Express
2009-12-26 16:40:03 ----D---- C:\WINDOWS\system32\Setup
2009-12-26 16:39:32 ----D---- C:\WINDOWS\security
2009-12-26 16:08:42 ----D---- C:\WINDOWS\ime
2009-12-26 16:08:35 ----D---- C:\WINDOWS\PeerNet
2009-12-26 16:08:34 ----D---- C:\Program Files\Movie Maker
2009-12-26 16:06:59 ----D---- C:\WINDOWS\system32\npp
2009-12-26 16:06:58 ----D---- C:\WINDOWS\msagent
2009-12-26 16:06:57 ----D---- C:\WINDOWS\srchasst
2009-12-26 16:06:56 ----D---- C:\Program Files\NetMeeting
2009-12-26 16:06:55 ----D---- C:\WINDOWS\system32\Com
2009-12-26 16:06:53 ----D---- C:\Program Files\Windows NT
2009-12-26 16:06:50 ----D---- C:\Program Files\Fichiers communs\System
2009-12-26 16:06:34 ----D---- C:\WINDOWS\system32\usmt
2009-12-26 16:06:34 ----D---- C:\WINDOWS\system32\oobe
2009-12-26 16:00:51 ----D---- C:\WINDOWS\EHome
2009-12-26 14:47:45 ----D---- C:\WINDOWS\Media
2009-12-26 14:43:55 ----D---- C:\WINDOWS\system32\1036
2009-12-26 14:42:44 ----D---- C:\WINDOWS\system32\icsxml
2009-12-26 14:41:55 ----D---- C:\WINDOWS\system32\1033
2009-12-26 14:40:26 ----D---- C:\WINDOWS\Driver Cache
2009-12-26 14:31:15 ----D---- C:\WINDOWS\repair
2009-12-26 14:24:58 ----A---- C:\WINDOWS\ODBCINST.INI
2009-12-26 14:24:44 ----D---- C:\WINDOWS\system32\ias
2009-12-26 14:24:16 ----SD---- C:\WINDOWS\Web
2009-12-26 14:24:06 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2009-12-26 13:52:51 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2009-12-25 23:13:27 ----D---- C:\Documents and Settings\Utilisateur\Application Data\Canon
2009-12-25 22:59:49 ----D---- C:\Program Files\Canon
2009-12-25 22:59:43 ----D---- C:\Program Files\Java
2009-12-25 18:50:20 ----A---- C:\WINDOWS\SOUNDMAN.EXE
2009-12-25 18:50:14 ----A---- C:\WINDOWS\RtlUpd.exe
2009-12-25 18:50:14 ----A---- C:\WINDOWS\RTLCPL.EXE
2009-12-25 18:50:02 ----A---- C:\WINDOWS\RTHDCPL.EXE
2009-12-25 18:49:56 ----A---- C:\WINDOWS\MicCal.exe
2009-12-25 18:49:56 ----A---- C:\WINDOWS\ALCWZRD.EXE
2009-12-25 18:49:50 ----A---- C:\WINDOWS\ALCMTR.EXE
2009-12-20 17:01:57 ----D---- C:\WINDOWS\Cursors
2009-12-18 22:24:18 ----D---- C:\Documents and Settings\Utilisateur\Application Data\Apple Computer
2009-12-18 22:24:07 ----D---- C:\Documents and Settings\Utilisateur\Application Data\Atari
2009-12-18 21:58:14 ----D---- C:\Program Files\Glary Utilities
2009-12-18 21:45:59 ----D---- C:\Program Files\IZArc
2009-12-18 21:45:03 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-12-18 21:38:21 ----D---- C:\Program Files\ma-config.com
2009-12-18 21:38:20 ----D---- C:\Documents and Settings\All Users\Application Data\ma-config.com
2009-12-18 21:23:23 ----SD---- C:\Documents and Settings\Utilisateur\Application Data\Microsoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 bdftdif;bdftdif; \??\C:\Program Files\Fichiers communs\BitDefender\BitDefender Firewall\bdftdif.sys []
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 40576]
R1 Tcpip6;Pilote du protocole IPv6 Microsoft; C:\WINDOWS\system32\DRIVERS\tcpip6.sys [2008-06-20 225856]
R1 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-05 12032]
R2 BDVEDISK;BDVEDISK; \??\C:\Program Files\BitDefender\BitDefender 2010\bdvedisk.sys []
R2 irda;Protocole IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R2 vnccom;vnccom; C:\WINDOWS\System32\Drivers\vnccom.SYS [2004-06-26 6016]
R3 bdfm;BDFM; C:\WINDOWS\system32\drivers\bdfm.sys [2009-12-07 152456]
R3 Bdfndisf;BitDefender Firewall NDIS Filter Service; C:\WINDOWS\system32\DRIVERS\bdfndisf.sys [2009-10-19 110984]
R3 BDSelfPr;BDSelfPr; \??\C:\Program Files\BitDefender\BitDefender 2010\bdselfpr.sys []
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2009-05-18 26600]
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-12-25 6039584]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-09-27 7655872]
R3 Rasirda;Miniport réseau étendu (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 tunmp;Pilote de carte miniport Tun Microsoft; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-13 12288]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 vncdrv;vncdrv; C:\WINDOWS\system32\DRIVERS\vncdrv.sys [2004-06-26 4736]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2009-12-11 299008]
S2 VirtualCam;VirtualCamera; C:\WINDOWS\system32\DRIVERS\VirtualCam.sys [2007-02-21 192512]
S3 avshws;YouUp Simulated Hardware; C:\WINDOWS\system32\DRIVERS\youup.sys [2009-04-27 57472]
S3 catchme;catchme; \??\C:\DOCUME~1\UTILIS~1\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys []
S3 GVCplDrv;GVCplDrv; C:\WINDOWS\system32\drivers\GVCplDrv.sys [2004-05-02 23040]
S3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\HdAudio.sys [2005-01-07 145920]
S3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 irsir;Pilote série infrarouge Microsoft; C:\WINDOWS\system32\drivers\irsir.sys []
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 neokdss;neokdss; C:\WINDOWS\system32\drivers\neokdss.sys []
S3 nm;Pilote du Moniteur réseau; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2008-04-13 40320]
S3 Profos;Profos; \??\C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\profos.sys []
S3 se59bus;Sony Ericsson Device 089 driver (WDM); C:\WINDOWS\system32\DRIVERS\se59bus.sys [2006-09-05 61536]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SNCT511;PC Camera (6005 CIF); C:\WINDOWS\system32\DRIVERS\snct511.sys [2003-04-22 219264]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 Trufos;Trufos; \??\C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\trufos.sys []
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\system32\drivers\USBAAPL.sys []
S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbvideo;Périphérique vidéo USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp.sys [2009-11-10 95568]
S3 VBoxNetFlt;VBoxNetFlt Service; C:\WINDOWS\system32\drivers\VBoxNetFlt.sys []
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 LIVESRV;BitDefender Desktop Update Service; C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe [2009-11-30 309088]
R2 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2009-12-17 243056]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-09-27 172100]
R2 O&O Defrag;O&O Defrag; C:\Program Files\OO Software\Defrag\oodag.exe [2009-09-26 1488128]
R2 VSSERV;BitDefender Virus Shield; C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe [2009-11-11 1622320]
S2 6to4;Service d'application d'assistance IPv6; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]
S3 Arrakis3;BitDefender Serveur Arrakis; C:\Program Files\Fichiers communs\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe [2009-10-19 183880]
S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 scan;BitDefender Threat Scanner; C:\WINDOWS\System32\svchost.exe [2008-04-13 14336]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]
S4 gupdate1c98c6b64622434;Google Update Service (gupdate1c98c6b64622434); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-02-11 133104]
S4 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-04-19 137200]
S4 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S4 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S4 Irmon;Moniteur infrarouge; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]
S4 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe [2005-09-22 53248]
S4 NetTcpPortSharing;Service de partage de ports Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]

-----------------EOF-----------------

Merci d'avance pour vos réponses !
Configuration: Windows XP
Firefox 3.5.7

41 réponses

Résumé de la discussion

Plusieurs symptômes de stabilité sous Windows XP apparaissent: manque de mémoire vive, erreur 'Win32 non valide', disparition de programmes et dysfonctionnement de la barre des tâches. Le rapport RSIT joint liste de nombreuses applications à désinstaller et montre un fichier hosts modifié ainsi que des entrées de démarrage potentiellement indésirables, ce qui peut indiquer une compromission système. Des analyses complémentaires recommandées: exécuter un nettoyage antivirus avec BitDefender et Malwarebytes, vérifier les services et les programmes de démarrage, et envisager une restauration du système si les symptômes persistent. D'autres éléments notables du rapport signalent des connexions réseau via UltraVNC et des services de sécurité actifs, ce qui peut influencer le diagnostic et les mesures à adopter.

Bobot (l’IA à votre service)
  2. moment de grace Contributeur sécurité
    ok

    alors bonne continuation pour la suite sauf si tu as besoin...
    4. lk67 Auteur
      Finalement .. un bon formatage ! :S
      Tenpis et merci beaucoup pour votre aide !
      1. moment de grace Contributeur sécurité
        retentes MalwareByte's Anti-Malware (mode normal)
        mise à jour
        examen complet
        poster le rapport
        2. moment de grace Contributeur sécurité
          ok

          si tu as toujours findkill (MDG.exe)

          tu coupes tes protections
          et tu relances option 2
          en mode normal, voir si ca veut fonctionner
          1. lk67 Auteur
            J'ai enfin un rapport ComboFix (en MSE)

            ComboFix 10-01-18.03 - Utilisateur 20/01/2010 12:47:02.3.2 - x86 MINIMAL
            Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1023.696 [GMT 1:00]
            Lancé depuis: c:\documents and settings\Utilisateur\Bureau\doudoo.exe
            AV: Kaspersky Internet Security *On-access scanning enabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
            FW: Kaspersky Internet Security *enabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}
            .

            (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
            .

            c:\documents and settings\Utilisateur\Mes documents\avant nettoyage.reg
            C:\LOG.TXT
            c:\windows\EventSystem.log
            c:\windows\system32\tmp39.tmp

            .
            ((((((((((((((((((((((((((((( Fichiers créés du 2009-12-20 au 2010-01-20 ))))))))))))))))))))))))))))))))))))
            .

            2010-01-20 08:52 . 2010-01-20 08:54 -------- d-----w- C:\doudoo
            2010-01-18 17:28 . 2010-01-07 15:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
            2010-01-18 17:28 . 2010-01-18 17:28 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
            2010-01-18 17:28 . 2010-01-07 15:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
            2010-01-17 10:14 . 2009-12-14 06:57 213504 ----a-w- c:\documents and settings\Utilisateur\Application Data\Thunderbird\Profiles\250xvmjh.default\extensions\{e2fda1a4-762b-4020-b5ad-a41df1933103}\components\calbscmp.dll
            2010-01-16 14:07 . 2010-01-16 14:07 -------- d-----w- c:\program files\Marvell
            2010-01-16 13:13 . 2010-01-16 13:13 932368 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\profiles-1-6.dll
            2010-01-16 13:13 . 2010-01-16 13:13 678416 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\content_interpreter-1-1.dll
            2010-01-16 13:13 . 2010-01-16 13:13 604688 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\gsg-3-9.dll
            2010-01-16 13:13 . 2010-01-16 13:13 522768 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\database-1-5.dll
            2010-01-16 13:13 . 2010-01-16 13:13 1096208 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\filtration-4-6.dll
            2010-01-16 13:12 . 2010-01-16 13:12 80400 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav9exec\9.0.0.736\fssync.dll
            2010-01-16 13:12 . 2010-01-16 13:12 397328 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav9exec\9.0.0.736\oeas.dll
            2010-01-16 12:27 . 2010-01-16 12:27 -------- d-----w- c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files
            2010-01-16 12:21 . 2010-01-16 12:21 -------- d-----w- c:\documents and settings\Utilisateur\Application Data\Auslogics
            2010-01-15 19:39 . 2010-01-15 19:40 -------- d-----w- c:\program files\trend micro
            2010-01-13 20:04 . 2010-01-18 19:45 -------- d-----w- C:\FindyKill
            2010-01-13 19:02 . 2010-01-13 19:02 4 ----a-w- c:\windows\system32\aspdict-en.dat
            2010-01-13 19:02 . 2010-01-13 19:02 16 ----a-w- c:\windows\system32\asdict.dat
            2010-01-13 18:46 . 2010-01-13 18:46 0 ----a-w- c:\windows\system32\wsbl.dat
            2010-01-13 18:46 . 2010-01-13 18:46 0 ----a-w- c:\windows\system32\ph_white.dat
            2010-01-13 18:46 . 2010-01-13 18:46 0 ----a-w- c:\windows\system32\ph_summ.dat
            2010-01-13 18:46 . 2010-01-13 18:46 0 ----a-w- c:\windows\system32\ph_black.dat
            2010-01-13 18:46 . 2010-01-13 18:46 0 ----a-w- c:\windows\system32\pcwords2.dat
            2010-01-13 18:46 . 2010-01-13 18:46 0 ----a-w- c:\windows\system32\pcwords.dat
            2010-01-13 18:17 . 2010-01-13 20:47 132 ----a-w- c:\windows\system32\rezumatenoi.dat
            2010-01-13 18:09 . 2010-01-16 12:25 -------- d-----w- c:\documents and settings\All Users\Application Data\BitDefender
            2010-01-13 18:09 . 2010-01-13 18:09 -------- d-----w- c:\program files\BitDefender
            2010-01-13 18:08 . 2010-01-16 12:25 -------- d-----w- c:\program files\Fichiers communs\BitDefender
            2010-01-13 08:20 . 2010-01-13 12:35 -------- d-----w- c:\windows\system32\oodag
            2010-01-13 08:11 . 2010-01-16 12:21 -------- d-----w- c:\program files\Auslogics
            2010-01-13 08:09 . 2010-01-13 08:09 -------- d-----w- c:\documents and settings\Utilisateur\Local Settings\Application Data\O&O
            2010-01-13 08:08 . 2010-01-13 08:08 -------- d-----w- c:\program files\OO Software
            2010-01-10 13:04 . 2010-01-10 13:04 -------- d-----w- c:\windows\system32\wbem\Repository
            2010-01-10 12:03 . 2010-01-10 12:06 -------- d-----w- c:\windows\ShellNew
            2010-01-10 11:15 . 2010-01-10 11:15 -------- d-----w- c:\documents and settings\Utilisateur\Application Data\IObit
            2010-01-10 11:12 . 2010-01-10 11:15 -------- d-----w- c:\program files\IObit
            2010-01-10 11:11 . 2010-01-10 11:11 -------- d-----w- c:\documents and settings\Utilisateur\Application Data\ComodoGroup
            2010-01-10 11:11 . 2010-01-10 11:11 -------- d-----w- c:\documents and settings\Utilisateur\Application DataComodoGroup
            2010-01-10 11:08 . 2010-01-07 08:27 18184 ----a-w- c:\windows\system32\cnat.exe
            2010-01-10 11:08 . 2010-01-05 16:38 133448 ----a-w- c:\windows\system32\drivers\CFRMD.sys
            2010-01-10 11:08 . 2010-01-10 11:08 -------- d-----w- c:\program files\COMODO
            2010-01-07 22:03 . 2008-04-13 18:33 116736 -c--a-w- c:\windows\system32\dllcache\xrxwiadr.dll
            2010-01-07 22:03 . 2001-08-23 16:47 23040 -c--a-w- c:\windows\system32\dllcache\xrxwbtmp.dll
            2010-01-07 22:03 . 2008-04-13 18:33 18944 -c--a-w- c:\windows\system32\dllcache\xrxscnui.dll
            2010-01-07 22:03 . 2001-08-23 16:47 27648 -c--a-w- c:\windows\system32\dllcache\xrxftplt.exe
            2010-01-07 22:03 . 2001-08-23 16:47 4608 -c--a-w- c:\windows\system32\dllcache\xrxflnch.exe
            2010-01-07 22:03 . 2001-08-23 16:47 99865 -c--a-w- c:\windows\system32\dllcache\xlog.exe
            2010-01-07 22:03 . 2001-08-17 19:11 16970 -c--a-w- c:\windows\system32\dllcache\xem336n5.sys
            2010-01-07 22:03 . 2008-04-13 08:34 19455 -c--a-w- c:\windows\system32\dllcache\wvchntxx.sys
            2010-01-07 22:03 . 2008-04-13 08:34 12063 -c--a-w- c:\windows\system32\dllcache\wsiintxx.sys
            2010-01-07 22:02 . 2008-04-13 10:36 8832 -c--a-w- c:\windows\system32\dllcache\wmiacpi.sys
            2010-01-07 22:02 . 2008-04-13 08:35 154624 -c--a-w- c:\windows\system32\dllcache\wlluc48.sys
            2010-01-07 22:02 . 2001-08-23 16:05 35402 -c--a-w- c:\windows\system32\dllcache\wlandrv2.sys
            2010-01-07 22:02 . 2001-08-17 20:28 771581 -c--a-w- c:\windows\system32\dllcache\winacisa.sys
            2010-01-07 22:02 . 2001-08-23 16:47 54272 -c--a-w- c:\windows\system32\dllcache\wiamsmud.dll
            2010-01-07 22:02 . 2001-08-23 16:47 87040 -c--a-w- c:\windows\system32\dllcache\wiafbdrv.dll
            2010-01-07 22:02 . 2008-04-13 17:57 32128 -c--a-w- c:\windows\system32\dllcache\wceusbsh.sys
            2010-01-07 22:02 . 2008-04-13 08:34 23615 -c--a-w- c:\windows\system32\dllcache\wch7xxnt.sys
            2010-01-07 22:02 . 2001-08-17 20:28 701386 -c--a-w- c:\windows\system32\dllcache\wdhaalba.sys
            2010-01-07 22:02 . 2001-08-17 19:10 35871 -c--a-w- c:\windows\system32\dllcache\wbfirdma.sys
            2010-01-07 22:02 . 2008-04-13 08:34 33599 -c--a-w- c:\windows\system32\dllcache\watv04nt.sys
            2010-01-07 22:00 . 2001-08-17 20:28 794399 -c--a-w- c:\windows\system32\dllcache\usr1806v.sys
            2010-01-07 21:59 . 2001-08-17 19:51 166784 -c--a-w- c:\windows\system32\dllcache\tridxpm.sys
            2010-01-07 21:58 . 2001-08-17 19:13 17129 -c--a-w- c:\windows\system32\dllcache\tdkcd31.sys
            2010-01-07 21:57 . 2001-08-23 16:47 155648 -c--a-w- c:\windows\system32\dllcache\stlnprop.dll
            2010-01-07 21:56 . 2001-08-17 19:51 58368 -c--a-w- c:\windows\system32\dllcache\smiminib.sys
            2010-01-07 21:55 . 2001-08-17 19:50 68608 -c--a-w- c:\windows\system32\dllcache\sis6306p.sys
            2010-01-07 21:54 . 2001-08-17 20:51 23936 -c--a-w- c:\windows\system32\dllcache\sccmusbm.sys
            2010-01-07 21:53 . 2001-08-17 19:19 30720 -c--a-w- c:\windows\system32\dllcache\rthwcls.sys
            2010-01-07 21:52 . 2008-04-13 10:40 6016 -c--a-w- c:\windows\system32\dllcache\qic157.sys
            2010-01-07 21:51 . 2001-08-17 21:07 5504 -c--a-w- c:\windows\system32\dllcache\perc2hib.sys
            2010-01-07 21:50 . 2001-08-23 16:15 54954 -c--a-w- c:\windows\system32\dllcache\otcsercb.sys
            2010-01-07 21:49 . 2001-08-23 16:10 66302 -c--a-w- c:\windows\system32\dllcache\netflx3.sys
            2010-01-07 21:48 . 2008-04-13 10:46 49024 -c--a-w- c:\windows\system32\dllcache\mstape.sys
            2010-01-07 21:48 . 2001-08-17 20:48 12416 -c--a-w- c:\windows\system32\dllcache\msriffwv.sys
            2010-01-07 21:48 . 2001-08-17 21:00 2944 -c--a-w- c:\windows\system32\dllcache\msmpu401.sys
            2010-01-07 21:48 . 2008-04-13 10:54 22016 -c--a-w- c:\windows\system32\dllcache\msircomm.sys
            2010-01-07 21:48 . 2001-08-17 21:02 35200 -c--a-w- c:\windows\system32\dllcache\msgame.sys
            2010-01-07 21:48 . 2001-08-17 20:48 6016 -c--a-w- c:\windows\system32\dllcache\msfsio.sys
            2010-01-07 21:48 . 2008-04-13 10:46 51200 -c--a-w- c:\windows\system32\dllcache\msdv.sys
            2010-01-07 21:48 . 2001-08-17 20:52 17280 -c--a-w- c:\windows\system32\dllcache\mraid35x.sys
            2010-01-07 21:48 . 2008-04-13 10:46 15232 -c--a-w- c:\windows\system32\dllcache\mpe.sys
            2010-01-07 21:48 . 2001-08-23 16:04 12288 -c--a-w- c:\windows\system32\dllcache\mouhid.sys
            2010-01-07 21:48 . 2001-08-17 20:57 16128 -c--a-w- c:\windows\system32\dllcache\modemcsa.sys
            2010-01-07 21:48 . 2001-08-17 20:52 6528 -c--a-w- c:\windows\system32\dllcache\miniqic.sys
            2010-01-07 21:46 . 2001-08-17 19:11 25065 -c--a-w- c:\windows\system32\dllcache\lmndis3.sys
            2010-01-07 21:46 . 2001-08-23 16:00 16384 -c--a-w- c:\windows\system32\dllcache\lit220p.sys
            2010-01-07 21:46 . 2008-04-13 10:40 34688 -c--a-w- c:\windows\system32\dllcache\lbrtfdc.sys
            2010-01-07 21:46 . 2001-08-23 15:59 26922 -c--a-w- c:\windows\system32\dllcache\lanepic5.sys
            2010-01-07 21:46 . 2001-08-17 19:12 19016 -c--a-w- c:\windows\system32\dllcache\ktc111.sys
            2010-01-07 21:46 . 2001-08-23 16:47 37888 -c--a-w- c:\windows\system32\dllcache\kousd.dll
            2010-01-07 21:46 . 2008-04-13 18:33 254464 -c--a-w- c:\windows\system32\dllcache\kdsusd.dll
            2010-01-07 21:46 . 2008-04-13 18:33 49152 -c--a-w- c:\windows\system32\dllcache\kdsui.dll
            2010-01-07 21:46 . 2008-04-13 18:05 14720 -c--a-w- c:\windows\system32\dllcache\kbdhid.sys
            2010-01-07 21:46 . 2001-08-17 20:49 26624 -c--a-w- c:\windows\system32\dllcache\irstusb.sys
            2010-01-07 21:46 . 2001-08-17 20:51 18688 -c--a-w- c:\windows\system32\dllcache\irsir.sys
            2010-01-07 21:46 . 2001-08-17 20:49 23552 -c--a-w- c:\windows\system32\dllcache\irmk7.sys
            2010-01-07 21:46 . 2001-08-17 19:12 45632 -c--a-w- c:\windows\system32\dllcache\ip5515.sys
            2010-01-07 21:44 . 2001-08-17 19:12 100936 -c--a-w- c:\windows\system32\dllcache\ibmtok.sys
            2010-01-07 21:43 . 2001-08-17 20:28 115807 -c--a-w- c:\windows\system32\dllcache\hsf_fsks.sys
            2010-01-07 21:42 . 2001-08-23 16:18 17664 -c--a-w- c:\windows\system32\dllcache\gpr400.sys
            2010-01-07 21:41 . 2001-08-23 16:47 46080 -c--a-w- c:\windows\system32\dllcache\esuni.dll
            2010-01-07 21:40 . 2001-08-23 16:12 117760 -c--a-w- c:\windows\system32\dllcache\e100b325.sys
            2010-01-07 21:39 . 2001-08-23 16:47 112128 -c--a-w- c:\windows\system32\dllcache\dc260usd.dll
            2010-01-07 21:38 . 2001-08-23 16:04 272640 -c--a-w- c:\windows\system32\dllcache\cinemclc.sys
            2010-01-07 21:37 . 2001-08-17 19:11 31529 -c--a-w- c:\windows\system32\dllcache\brzwlan.sys
            2010-01-07 21:36 . 2001-08-17 20:49 26624 -c--a-w- c:\windows\system32\dllcache\alifir.sys
            2010-01-06 16:38 . 2010-01-06 16:38 2287104 ----a-w- c:\windows\system32\TUKernel.exe
            2010-01-06 15:55 . 2010-01-06 15:55 -------- d-----w- c:\documents and settings\Utilisateur\Application Data\TuneUp Software
            2010-01-06 15:55 . 2010-01-08 18:14 -------- d-----w- c:\documents and settings\All Users\Application Data\TuneUp Software
            2010-01-06 15:55 . 2010-01-06 15:55 -------- d-sh--w- c:\documents and settings\All Users\Application Data\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
            2010-01-02 15:11 . 2010-01-02 15:15 -------- d-----w- c:\documents and settings\Utilisateur\Application Data\QuickScan
            2010-01-02 13:16 . 2004-06-26 14:22 6016 ----a-w- c:\windows\system32\drivers\vnccom.SYS
            2010-01-02 13:16 . 2005-06-10 23:02 12800 ----a-w- c:\windows\system32\vncdrv.dll
            2010-01-02 13:16 . 2004-06-26 14:22 4736 ----a-w- c:\windows\system32\drivers\vncdrv.sys
            2010-01-02 13:16 . 2004-06-26 14:21 5760 ----a-w- c:\windows\system32\vnchelp.dll
            2010-01-02 13:16 . 2010-01-02 13:38 -------- d-----w- c:\program files\UltraVNC
            2009-12-29 13:45 . 2010-01-03 10:38 -------- d-----w- c:\windows\BDOSCAN8
            2009-12-28 21:00 . 2009-10-29 07:42 594432 -c----w- c:\windows\system32\dllcache\msfeeds.dll
            2009-12-28 21:00 . 2009-10-29 07:42 246272 -c----w- c:\windows\system32\dllcache\ieproxy.dll
            2009-12-28 21:00 . 2009-10-29 07:42 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
            2009-12-28 21:00 . 2009-10-29 07:42 1985536 -c----w- c:\windows\system32\dllcache\iertutil.dll
            2009-12-28 21:00 . 2009-10-29 07:42 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
            2009-12-28 21:00 . 2009-10-29 07:42 11069952 -c----w- c:\windows\system32\dllcache\ieframe.dll

            .
            (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
            .
            2010-01-20 11:19 . 2010-01-16 12:28 -------- d-----w- c:\documents and settings\All Users\Application Data\Kaspersky Lab
            2010-01-20 08:59 . 2008-03-14 09:07 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
            2010-01-19 17:46 . 2008-10-27 15:03 -------- d-----w- c:\program files\Mozilla Thunderbird
            2010-01-18 17:28 . 2008-07-29 09:17 -------- d-----w- c:\documents and settings\Utilisateur\Application Data\Malwarebytes
            2010-01-18 17:24 . 2008-07-29 09:17 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
            2010-01-16 18:18 . 2009-07-29 12:31 -------- d-----w- c:\program files\NVIDIA Corporation
            2010-01-16 13:12 . 2010-01-16 13:12 315408 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav9exec\9.0.0.736\sys\i386\5.1\klif.sys
            2010-01-16 13:12 . 2010-01-16 13:12 19472 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav9exec\9.0.0.736\kloehk.dll
            2010-01-16 13:12 . 2010-01-16 13:12 109072 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav9exec\9.0.0.736\mzvkbd3.dll
            2010-01-16 13:12 . 2010-01-16 13:12 397328 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav9exec\9.0.0.736\oeas.dll
            2010-01-16 13:12 . 2010-01-16 13:12 109072 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav9exec\9.0.0.736\mzvkbd3.dll
            2010-01-16 13:12 . 2010-01-16 13:12 17936 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav9exec\9.0.0.736\kloehk.dll
            2010-01-16 13:12 . 2010-01-16 13:12 80400 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav9exec\9.0.0.736\fssync.dll
            2010-01-16 13:12 . 2010-01-16 13:12 315408 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav9exec\9.0.0.736\sys\i386\5.1\klif.sys
            2010-01-16 12:29 . 2010-01-16 12:29 95259 ----a-w- c:\windows\system32\drivers\klick.dat
            2010-01-16 12:29 . 2010-01-16 12:29 108059 ----a-w- c:\windows\system32\drivers\klin.dat
            2010-01-16 12:28 . 2010-01-16 12:28 -------- d-----w- c:\program files\Kaspersky Lab
            2010-01-16 11:49 . 2008-10-17 19:04 1 ----a-w- c:\documents and settings\Utilisateur\Application Data\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
            2010-01-13 17:46 . 2006-03-02 12:00 84674 ----a-w- c:\windows\system32\perfc00C.dat
            2010-01-13 17:46 . 2006-03-02 12:00 510702 ----a-w- c:\windows\system32\perfh00C.dat
            2010-01-10 12:05 . 2008-03-13 15:25 -------- d-----w- c:\program files\microsoft frontpage
            2010-01-10 11:07 . 2008-03-13 17:58 92960 ----a-w- c:\documents and settings\Utilisateur\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
            2010-01-09 13:39 . 2008-04-06 10:05 -------- d-----w- c:\documents and settings\Utilisateur\Application Data\Skyline
            2010-01-09 13:36 . 2008-04-05 18:15 -------- d-----w- c:\documents and settings\All Users\Application Data\Skyline
            2010-01-09 06:54 . 2009-06-04 17:44 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
            2010-01-09 06:53 . 2008-11-19 13:15 -------- d-----w- c:\program files\MSBuild
            2010-01-08 18:16 . 2008-11-24 15:38 -------- d-----w- c:\program files\Sony
            2010-01-08 18:11 . 2008-04-19 07:38 -------- d-----w- c:\program files\Google
            2010-01-08 17:24 . 2008-12-25 11:07 -------- d-----w- c:\program files\Mindscape
            2010-01-08 17:24 . 2008-03-13 17:49 -------- d--h--w- c:\program files\InstallShield Installation Information
            2010-01-01 19:57 . 2009-12-20 12:08 -------- d-----w- c:\program files\BitComet
            2010-01-01 19:52 . 2009-03-03 16:26 -------- d-----w- c:\program files\Pinnacle
            2010-01-01 19:44 . 2008-03-21 12:58 -------- d-----w- c:\program files\eMule
            2009-12-30 11:08 . 2008-10-29 08:17 -------- d-----w- c:\program files\Windows Live
            2009-12-29 09:32 . 2009-12-19 14:26 -------- d-----w- c:\program files\Microsoft SQL Server
            2009-12-29 09:27 . 2009-11-22 08:32 -------- d-----w- c:\program files\Microsoft.NET
            2009-12-29 09:26 . 2009-09-01 19:14 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
            2009-12-28 20:55 . 2009-10-22 15:12 -------- d-----w- c:\program files\Ubisoft
            2009-12-28 20:55 . 2009-10-22 15:14 -------- d-----w- c:\documents and settings\Utilisateur\Application Data\YouUp
            2009-12-27 10:46 . 2009-12-10 21:08 -------- d-----w- c:\program files\Defraggler
            2009-12-26 13:23 . 2008-03-13 15:22 23644 ----a-w- c:\windows\system32\emptyregdb.dat
            2009-12-25 22:13 . 2008-05-08 09:22 -------- d-----w- c:\documents and settings\Utilisateur\Application Data\Canon
            2009-12-25 21:59 . 2008-03-21 07:55 -------- d-----w- c:\program files\Canon
            2009-12-25 21:59 . 2008-04-16 12:44 -------- d-----w- c:\program files\Java
            2009-12-25 17:50 . 2008-04-12 18:50 84512 ----a-w- c:\windows\SOUNDMAN.EXE
            2009-12-25 17:50 . 2008-04-12 18:50 9721888 ----a-w- c:\windows\RTLCPL.EXE
            2009-12-25 17:50 . 2008-04-12 18:50 1489440 ----a-w- c:\windows\RtlUpd.exe
            2009-12-25 17:50 . 2008-04-12 18:50 18789408 ----a-w- c:\windows\RTHDCPL.EXE
            2009-12-25 17:49 . 2008-04-12 18:50 2177568 ----a-w- c:\windows\MicCal.exe
            2009-12-25 17:49 . 2008-04-12 18:50 2815520 ----a-w- c:\windows\ALCWZRD.EXE
            2009-12-25 17:49 . 2008-04-12 18:50 64032 ----a-w- c:\windows\ALCMTR.EXE
            2009-12-25 17:26 . 2008-04-12 18:50 6039584 ----a-w- c:\windows\system32\drivers\RtkHDAud.sys
            2009-12-20 16:03 . 2009-12-20 16:03 -------- d-----w- c:\documents and settings\All Users\Application Data\ScanSoft
            2009-12-18 21:24 . 2008-03-21 12:53 -------- d-----w- c:\documents and settings\Utilisateur\Application Data\Apple Computer
            2009-12-18 21:24 . 2009-05-24 12:22 -------- d-----w- c:\documents and settings\Utilisateur\Application Data\Atari
            2009-12-18 20:58 . 2009-09-16 15:18 -------- d-----w- c:\program files\Glary Utilities
            2009-12-18 20:45 . 2008-12-26 22:20 -------- d-----w- c:\program files\IZArc
            2009-12-18 20:43 . 2009-12-18 20:43 152576 ----a-w- c:\documents and settings\Utilisateur\Application Data\Sun\Java\jre1.6.0_17\lzma.dll
            2009-12-18 20:43 . 2009-12-18 20:43 79488 ----a-w- c:\documents and settings\Utilisateur\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
            2009-12-18 20:38 . 2009-02-01 08:45 -------- d-----w- c:\program files\ma-config.com
            2009-12-18 20:38 . 2008-08-09 09:53 -------- d-----w- c:\documents and settings\All Users\Application Data\ma-config.com
            2009-12-14 19:15 . 2009-12-14 19:15 2146304 ----a-w- c:\windows\system32\GPhotos.scr
            2009-12-14 11:10 . 2009-04-01 15:35 4212 ---ha-w- c:\windows\system32\zllictbl.dat
            2009-12-12 13:03 . 2008-12-12 19:22 -------- d-----w- c:\program files\OpenAL
            2009-12-11 10:23 . 2009-12-11 10:23 364544 ----a-w- c:\windows\system32\yk51x86.dll
            2009-12-11 10:23 . 2009-12-11 10:23 299008 ----a-w- c:\windows\system32\drivers\yk51x86.sys
            2009-12-09 21:10 . 2009-12-09 21:10 -------- d-----w- c:\program files\Belarc
            2009-12-09 20:53 . 2009-05-08 16:14 -------- d-----w- c:\program files\Http explorer
            2009-12-09 20:51 . 2009-12-05 15:42 -------- d-----w- c:\program files\Fichiers communs\MAGIX Services
            2009-12-09 20:46 . 2008-11-24 15:41 -------- d-----w- c:\documents and settings\Utilisateur\Application Data\Sony
            2009-12-09 20:45 . 2009-12-03 17:44 -------- d-----w- c:\program files\Super macro
            2009-12-09 20:43 . 2008-04-18 09:27 -------- d-----w- c:\program files\Lavasoft
            2009-12-09 20:43 . 2008-04-18 09:27 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft
            2009-12-09 20:42 . 2008-08-15 09:34 -------- d-----w- c:\program files\Windows Live Safety Center
            2009-12-05 20:02 . 2009-12-05 15:06 -------- d-----w- c:\documents and settings\Utilisateur\Application Data\Audacity
            2009-12-05 19:49 . 2009-11-15 20:22 -------- d-----w- c:\program files\Fichiers communs\Atlence
            2009-12-02 18:24 . 2009-12-02 18:24 -------- d-----w- c:\program files\AVG
            2009-11-29 15:35 . 2008-10-27 15:04 -------- d-----w- c:\documents and settings\Utilisateur\Application Data\Thunderbird
            2009-11-25 14:10 . 2009-11-25 14:10 -------- d-----w- c:\program files\MSXML 4.0
            2009-11-25 12:40 . 2009-09-27 13:05 -------- d-----w- c:\program files\GEPath
            2009-11-24 16:40 . 2008-04-12 18:50 838176 ----a-w- c:\windows\RtlExUpd.dll
            2009-11-22 08:33 . 2009-11-22 08:33 -------- d-----w- c:\program files\Microsoft Synchronization Services
            2009-11-22 08:32 . 2009-11-22 08:32 -------- d-----w- c:\program files\Microsoft Sync Framework
            2009-11-22 08:30 . 2009-11-22 08:30 -------- d-----w- c:\program files\Microsoft Visual Studio 8
            2009-11-21 22:44 . 2009-11-21 22:44 -------- d-----w- c:\program files\Microsoft Analysis Services
            2009-11-21 15:58 . 2004-08-05 12:00 471552 ----a-w- c:\windows\AppPatch\aclayers.dll
            2009-11-21 02:34 . 2009-04-30 20:02 2293286 ----a-w- c:\windows\system32\nvdata.bin
            2009-11-21 02:34 . 2009-04-30 20:02 1989224 ----a-w- c:\windows\system32\nvcuvenc.dll
            2009-11-21 02:34 . 2009-02-09 12:18 2259560 ----a-w- c:\windows\system32\nvcuvid.dll
            2009-11-21 02:34 . 2008-03-13 18:30 592488 ----a-w- c:\windows\system32\nvudisp.exe
            2009-11-21 02:34 . 2007-12-05 00:41 4038656 ----a-w- c:\windows\system32\nvcuda.dll
            2009-11-21 02:34 . 2007-12-05 00:41 182888 ----a-w- c:\windows\system32\nvcodins.dll
            2009-11-21 02:34 . 2007-12-05 00:41 182888 ----a-w- c:\windows\system32\nvcod.dll
            2009-11-21 02:34 . 2007-12-05 00:41 13602816 ----a-w- c:\windows\system32\nvoglnt.dll
            2009-11-21 02:34 . 2007-12-05 00:41 1056768 ----a-w- c:\windows\system32\nvapi.dll
            2009-11-21 02:34 . 2006-06-01 09:22 6282752 ----a-w- c:\windows\system32\nv4_disp.dll
            2009-11-21 02:34 . 2006-06-01 09:22 10235968 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
            2009-11-19 20:42 . 2008-03-13 18:30 592488 ----a-w- c:\windows\system32\NVUNINST.EXE
            2009-11-17 19:30 . 2009-06-06 14:29 43520 ----a-w- c:\windows\system32\CmdLineExt03.dll
            2009-11-17 19:03 . 2009-05-15 14:47 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
            2009-10-19 17:59 . 2010-01-13 18:14 47104 ----a-w- c:\program files\mozilla firefox\components\FFComm.dll
            2009-01-27 15:39 . 2009-01-27 15:39 23 --sha-w- c:\windows\system32\dceaad7_z.dll
            .

            ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
            .
            .
            *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
            REGEDIT4

            [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
            "RTHDCPL"="RTHDCPL.EXE" [2009-12-25 18789408]
            "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-11-20 12669544]
            "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-11-20 110184]

            [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
            "HonorAutoRunSetting"= 0 (0x0)

            [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
            "NoSMBalloonTip"= 0 (0x0)
            "HonorAutoRunSetting"= 0 (0x0)

            [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
            BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS

            [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OODefragTray]
            2009-09-26 00:30 2524416 ----a-w- c:\program files\OO Software\Defrag\oodtray.exe

            [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
            "WMPNetworkSvc"=3 (0x3)
            "usnjsvc"=3 (0x3)
            "iPod Service"=3 (0x3)
            "Apple Mobile Device"=2 (0x2)
            "Bonjour Service"=2 (0x2)
            "YouupServiceWinService"=2 (0x2)
            "Lavasoft Ad-Aware Service"=3 (0x3)
            "JavaQuickStarterService"=2 (0x2)
            "LightScribeService"=2 (0x2)
            "gusvc"=3 (0x3)
            "gupdate1c98c6b64622434"=2 (0x2)
            "IDriverT"=3 (0x3)
            "wlidsvc"=2 (0x2)
            "osppsvc"=3 (0x3)
            "ose"=3 (0x3)
            "Microsoft SharePoint Workspace Audit Service"=3 (0x3)
            "idsvc"=3 (0x3)
            "O&O Defrag"=2 (0x2)
            "maconfservice"=2 (0x2)
            "AVP"=2 (0x2)

            [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
            "High Definition Audio Property Page Shortcut"=HDAShCut.exe
            "NvMediaCenter"=RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit

            [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
            "DisableMonitoring"=dword:00000001

            [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
            "EnableFirewall"= 0 (0x0)

            [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
            "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
            "%windir%\\system32\\sessmgr.exe"=
            "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
            "c:\\Program Files\\UltraVNC\\winvnc.exe"=

            [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
            "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

            R0 CFRMD;cfrmd;c:\windows\system32\drivers\CFRMD.sys [10/01/2010 12:08 133448]
            R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [14/10/2009 21:18 36880]
            R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [05/04/2009 12:45 64160]
            R0 m5287;m5287;c:\windows\system32\drivers\m5287.sys [13/03/2008 16:52 103680]
            S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [15/05/2009 15:47 691696]
            S2 vnccom;vnccom;c:\windows\system32\drivers\vnccom.SYS [02/01/2010 14:16 6016]
            S3 avshws;YouUp Simulated Hardware;c:\windows\system32\drivers\youup.sys [13/02/2009 10:45 57472]
            S3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [14/09/2009 14:42 32272]
            S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [02/10/2009 19:39 19472]
            S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [18/01/2010 18:28 38224]
            S3 SNCT511;PC Camera (6005 CIF);c:\windows\system32\drivers\snct511.sys [17/01/2009 14:58 219264]
            S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\drivers\VBoxNetAdp.sys [15/05/2009 16:52 95568]
            S3 VBoxNetFlt;VBoxNetFlt Service; [x]
            S4 gupdate1c98c6b64622434;Google Update Service (gupdate1c98c6b64622434);c:\program files\Google\Update\GoogleUpdate.exe [11/02/2009 18:08 133104]
            S4 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [17/12/2009 19:00 243056]
            .
            Contenu du dossier 'Tâches planifiées'

            2010-01-16 c:\windows\Tasks\COMODO System Cleaner Update.job
            - c:\program files\COMODO\COMODO System-Cleaner\UpdateApplications.exe [2010-01-07 15:37]

            2010-01-07 c:\windows\Tasks\Defraggler Volume C Task.job
            - c:\program files\Defraggler\df.exe [2009-12-02 17:37]

            2010-01-20 c:\windows\Tasks\User_Feed_Synchronization-{0072B144-4B3F-480E-AD3F-28066A4E617F}.job
            - c:\windows\system32\msfeedssync.exe [2007-08-13 02:31]
            .
            .
            ------- Examen supplémentaire -------
            .
            uStart Page = hxxp://www.google.com/
            uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
            uDefault_Search_URL = hxxp://www.google.com/ie
            uInternet Connection Wizard,ShellNext = iexplore
            uInternet Settings,ProxyOverride = local
            uInternet Settings,ProxyServer = 127.0.0.1:8080
            uSearchAssistant = hxxp://www.google.com/ie
            uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
            IE: &Envoyer à OneNote - c:\progra~1\MICROS~3\Office14\ONBttnIE.dll/105
            IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
            IE: Ajouter à l'Anti-bannière - c:\program files\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm
            IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office14\EXCEL.EXE/3000
            TCP: {B410D61D-0203-4695-8399-137B6F760EBE} = 208.67.222.222,208.67.220.220
            DPF: CabBuilder - hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
            FF - ProfilePath - c:\documents and settings\Utilisateur\Application Data\Mozilla\Firefox\Profiles\e5q8u1kg.default\
            FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
            FF - component: c:\program files\Mozilla Firefox\components\FFComm.dll
            FF - component: c:\program files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru\components\KavLinkFilter.dll
            FF - plugin: c:\documents and settings\Utilisateur\Local Settings\Application Data\Google\Update\1.2.141.5\npGoogleOneClick7.dll
            FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
            FF - plugin: c:\program files\Google\Update\1.2.145.5\npGoogleOneClick8.dll
            FF - plugin: c:\program files\Java\jre6\bin\npdeploytk.dll
            FF - plugin: c:\program files\Java\jre6\bin\npjpi160_17.dll
            FF - plugin: c:\program files\Java\jre6\bin\npoji610.dll
            FF - plugin: c:\program files\ma-config.com\nphardwaredetection.dll
            FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
            FF - plugin: c:\program files\OpenOffice.org 3\program\npsoplugin.dll
            FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
            FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

            ---- PARAMETRES FIREFOX ----
            FF - user.js: network.http.max-persistent-connections-per-server - 4
            FF - user.js: nglayout.initialpaint.delay - 600
            FF - user.js: content.notify.interval - 600000
            FF - user.js: content.max.tokenizing.time - 1800000
            FF - user.js: content.switch.threshold - 600000
            FF - user.js: yahoo.homepage.dontask - true.
            - - - - ORPHELINS SUPPRIMES - - - -

            Toolbar-Locked - (no file)
            HKLM-Run-nwiz - nwiz.exe

            **************************************************************************

            catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
            Rootkit scan 2010-01-20 12:57
            Windows 5.1.2600 Service Pack 3 NTFS

            Recherche de processus cachés ...

            Recherche d'éléments en démarrage automatique cachés ...

            Recherche de fichiers cachés ...

            Scan terminé avec succès
            Fichiers cachés: 0

            **************************************************************************
            .
            --------------------- CLES DE REGISTRE BLOQUEES ---------------------

            [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
            "OODEFRAG10.00.00.01WORKSTATION"="4AB566E5C77739D2C180253940CDAE61B121B5FB49A41984180585A73D21ED22F334977E66A835F8066F011FCBF54CD72BB8736514F937A7C696579670918344313774E49C8BBD23C4573242EBFEEDCFEE8659F96D6AB0AE5D29F5A98EA9529A2E5D3F7A68C08A493A2691B60267B6866963F7A535F1AFBC9AA3CC411C062D4C1A3DD9B38D9F3834273C9B263062AA890A9E87E51241C3C43E616AD05DF2CC53A55C4C1815B2C703CC6E714F6059B2BF4679E0CD6D3E5F1110B2815FDDF1CAFB08B843C3C6381C2A7306D702BCE51E5D962B8182F281D6BCFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CA6A0AC4980AC79335D575E7D6A3B9808FEBC9E127BECC74C5D575E7D6A3B9808FCD4BDAE19AF90C77329199C45682C0B98B688DAEA5BCB0C4E9022B472C4ABA0476DE84634B85BC79A5E13168BC54AE7ECE1E78C88E66C6D25BB2DAB34CC6AB13524982AD5ED67B3EC43E549D9ED529F657CE70C375245A7EF0FB6397882FDAE277A6B23C2A2DA3B7CC5E852F4B271486283B56E5A0AADD5013267836610065580E5211001DDBEE25BC893E46899BA4A49E4A3591FAFDE64AD420DC769D307B928CE1E605E5B7F01A42286470059A46384052A8871987B16524F94D631E1E7C28A926C1AE98B6F43741B01D34CDE0AA20139E3CB83CF05FE4C5C14153180F72B1782B85778114427E9F2EAF723CA286EB24D0F064D91E28BFD62C2F89E28E58041E1D3C422439682AADA4DB79EF223FE0C800FAE065061F650CC7B11F509462781EC32A2C22FE4FB5F7855A79ADDFEE088846A502EB0AED52C7C40FBF58591D4D2CD6D487B928E8FB56756723849A8F5A5834C8A878C5F8B7FC5B36E23332515B327C11D2F615B8D5CB346575DA46D70659483119870EA52BE6E9DB0425E3FC4A90D901F0644739889E0BDA732167E5B4B49032B2A202BB760B46A20E08406993C885FDE6D15E4A9F4637B49A5F574136424E2B3CA0F601F5D47A92B4C588199F51855839465200CDBA7E037E6CE4848BB9B5B9A4DE72FBC35CB0F57193F9D9D672B4044F0F5FADF7F897480EB635900649BCCE1C7089C9A6CD7F2BC9D55AAD5232812F0B7412F97A2DCDF456EA6E81272823B221480961786F95208F469DE4542E5DD686870D97C8EE4F1BD6BC21EAB8023CB0650176AE390314AF8FDFBD0C160335E9F4165FBAA11DF1A34221283CD2DC5CACC5EC5CC851871A0E2DD457C779BD06E22C5B0FB8F7A7770059A2887CD192426C9E4B9D457AFA2BDB078AE446319F3118C411C22719ED0AE241C467B54E86DEFE3CDD3FC876EA02CDB7C58EAD97F456A0F3CA39D67D6003118B4E6965D48C56198C72B26166F3C9C7656939901FA61C26F89F47DDB8010FBF93536F339644354F3C48713D8"
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
            .
            Heure de fin: 2010-01-20 13:02:21
            ComboFix-quarantined-files.txt 2010-01-20 12:02

            Avant-CF: 233 892 548 608 octets libres
            Après-CF: 234 000 510 976 octets libres

            Current=8 Default=8 Failed=7 LastKnownGood=9 Sets=1,2,3,4,5,6,7,8,9
            - - End Of File - - 247D93B6A88A80B60B66A1642D4E2C8D
            2. lk67 Auteur
              Comme je lai dis jai 14 ans
              je stresse beaucoup
              je vais essayer en mse
              pensez vous que mon pere doit contacter un pro pour formatter sinan ?
              4. moment de grace Contributeur sécurité
                tu vas utiliser combofix renommé en Doudou, pour contrer certaine infection , mais attention combofix est un outil relativement puissant, donc pas de place pour l'improvisation personnel,tu prends le temps de lire le tutoriel officiel avant de le lancer.
                tu déactives toutes protections résidente anti-virus anti-spyware et autre, tu fermes toutes connection internet et toutes fenêtre ouverte sauf celle de combo ou plutôt Doudou , tu ne touches pas au pc pendant qu'il travail sauf pour répondre quand il te le demande.
                si il te deamande d'installer la console de récupération accepte , cela permet à doudou ou plutôt combofix de réparrer certain fichier système qui aurait été endomagé par l'infection

                Tutoriel officiel prends le temps de le regarder : http://www.bleepingcomputer.com/combofix/fr/comment-utiliser­-combofix

                Supprimes éventuellement toute ancienne version de ComboFix de ton PC

                Télécharge Combofix.exe de sUBs renommé en Doudou sur ton Bureau:

                http://sd-1.archive-host.com/membres/up/89820622056365782/do­udou.exe

                Déconnectes toi d'internet et désactives ton antivirus et toutes protection résidente, pour que Combofix puisse s'exécuter normalement.

                Doubles clique sur Combofix.exe " Doudou "
                Mets le en langue française F
                Tape sur la touche 1 (Yes) pour démarrer le scan.

                tu Ne touches à rien tant que le scan n'est pas terminé.

                En fin de scan, il est possible que ComboFix ait besoin de redémarrer le PC pour finaliser la désinfection, laisse-le faire.

                Une fois le scan achevé, un rapport va s'afficher : Poste son contenu

                Réactives la protection en temps réel de ton Antivirus et de ton Anti-spywares, avant de te reconnecter à Internet.

                Note : Le rapport se trouve également là : C:\Combofix.txt
                1. moment de grace Contributeur sécurité
                  ok

                  (post modifié)

                  tu vas utiliser combofix renommé en Doudou, pour contrer certaine infection , mais attention combofix est un outil relativement puissant, donc pas de place pour l'improvisation personnel,tu prends le temps de lire le tutoriel officiel avant de le lancer.
                  tu déactives toutes protections résidente anti-virus anti-spyware et autre, tu fermes toutes connection internet et toutes fenêtre ouverte sauf celle de combo ou plutôt Doudou , tu ne touches pas au pc pendant qu'il travail sauf pour répondre quand il te le demande.
                  si il te deamande d'installer la console de récupération accepte , cela permet à doudou ou plutôt combofix de réparrer certain fichier système qui aurait été endomagé par l'infection

                  Tutoriel officiel prends le temps de le regarder : http://www.bleepingcomputer.com/combofix/fr/comment-utiliser­-combofix

                  Supprimes éventuellement toute ancienne version de ComboFix de ton PC

                  Télécharge Combofix.exe de sUBs renommé en Doudou sur ton Bureau:

                  http://sd-1.archive-host.com/membres/up/89820622056365782/do­udou.exe

                  Déconnectes toi d'internet et désactives ton antivirus et toutes protection résidente, pour que Combofix puisse s'exécuter normalement.

                  Doubles clique sur Combofix.exe " Doudou "
                  Mets le en langue française F
                  Tape sur la touche 1 (Yes) pour démarrer le scan.

                  tu Ne touches à rien tant que le scan n'est pas terminé.

                  En fin de scan, il est possible que ComboFix ait besoin de redémarrer le PC pour finaliser la désinfection, laisse-le faire.

                  Une fois le scan achevé, un rapport va s'afficher : Poste son contenu

                  Réactives la protection en temps réel de ton Antivirus et de ton Anti-spywares, avant de te reconnecter à Internet.

                  Note : Le rapport se trouve également là : C:\Combofix.txt
                  2. moment de grace Contributeur sécurité
                    MBAM a t il produit un rapport lors de son dernier examen ?

                    1. lk67 Auteur
                      FindyKill marque "Espace insuffisant pour exécuter cette comande" à 30% et Windows marque "Aucun programme n'est associé à ce type de fichiers pour exécuter cette action. Créez une association en utilisant Options des dossiers dans le Panneau de configuration." Je fais OK et FindyKill marque le système n'apas pu éxecuter le programme spécifié.
                      J'ai 14 ans je stresse a mort pensez-vous que je devrais dire à mon père d'appeler plutot un pro car moi jen peu plus...
                      1. moment de grace Contributeur sécurité
                        fais ceci ca va tout supprimer

                        Télécharge OTC de Old Timer.

                        http://www.geekstogo.com/forum/files/file/403-otc-oldtimers-clean-it/

                        Clique droit sur OTCleanIt et choisis Exécuter en tant qu'administrateur.
                        Clique sur le bouton "CleanUp!" .
                        Sélectionne Oui lorsque la demande " processus de nettoyage?" s'affiche.
                        Si tu es invité à redémarrer le PC au cours de l'assainissement, sélectionne Oui.
                        L'outil va se supprimer lui-même une fois la fin de l'opération.
                        Sinon supprime le manuellement.
                        • 1
                        • 2
                        • 3

                        Discussions similaires

                        Softonic,est-ce un virus ?
                        techmel1

                        6 réponses
                        Chrome://newtab
                        Nova

                        14 réponses
                        Désinstaller Softonic
                        Diguimette

                        5 réponses
                        Supprimer New Tab
                        tysaozon

                        8 réponses
                        Bouton pause/break
                        frans003

                        3 réponses