Virus impossible d'installer un anti-virus

Oscar5 -  
Bonjour, il m'est mpossible d'installer un anti-virus à chaque fois que j'essaye d'en installer un il se désinstalle tout seul à l'aide mon ordi va très mal ...

23 réponses

  1. Oscar5 Auteur
    Signaler dmmaker7 20Messages postés

    25 mai 2010Date d'inscription

    2 septembre 2010Dernière intervention
    2 sep 2010 à 20:08
    Tu dois redémarrer ton pc en SafeMode et ensuite télécharger Kaspersky, voici le lien: http://www.qksrv.net/media/offers/?AID=10575714&PID=3923717&campaign=tcid_cj_10575714_3923717_9c0009e0493b11ea815400b00a18050c_x5&CJ_CID=2981520&CJ_PID=3923717&CJ_CID_NAME=Daniel+Oancea&utm_source=CJ&utm_medium=affiliate&CJEVENT=9c0009e0493b11ea815400b00a18050c , je l'utilise depuis des année, jamais eu de probleme
    Je m'excuse mais lorsque tu me demandes d'aller en safemode qu'est-ce que c.est ?Moi je croyais que c'était en mode sans échec
    0
  2. Utilisateur anonyme
    Re

    Comme à priori tu n'en fait qu'a ta tête ;je te laisse faire...

    @+
    0
    1. Oscar5 Auteur
      http://www.cijoint.fr/cjlink.php?file=cj201009/cijEj0hvaN.txt voici le lien ZXPDIAG merci parcontre je suis allé en mode sans échec pour installer kapersky pure ou 2011 impossible de l'installer il me dit que je suis probablement infecté il me demande d'installer avptool et la aussi impossible de l'installer merci
      0
      1. Utilisateur anonyme
        Re

        Voila une explication:
        * 1/ Redémarrez l'ordinateur. L'ordinateur commence le traitement d'instructions connues sous le nom Basic Input/Output System (BIOS). L'affichage dépend du fabricant du BIOS. Certains ordinateurs affichent une barre de progression faisant référence à BIOS, d'autres peuvent ne pas indiquer le processus en cours de réalisation.
        * 2/ À la fin du chargement du BIOS, commencez à appuyer sur la touche F8 de votre clavier ( ou F5 si F8 ne fonctionne pas). Procédez ainsi jusqu'à ce que le menu des options avancées de Windows apparaisse. Si vous commencez à appuyer sur la touche F8 trop tôt, il est possible que certains ordinateurs affichent le message "Erreur clavier". Pour résoudre ce problème, redémarrez l'ordinateur et réessayez de nouveau.
        * 3/ En utilisant les flèches de votre clavier, sélectionnez "Mode sans échec avec prise en charge réseau" dans le menu puis appuyez sur Entrée.

        Poste moi un nouveau rapport ZHPDiag;merci.(en mode normal)

        @+
        0
        2. Oscar5 Auteur
          désolé alors explique moi par ou passer pour le mode sans échec?
          0
          1. Oscar5 Auteur
            voici le rapport
            www.malwarebytes.org

            Version de la base de données: 4535

            Windows 5.1.2600 Service Pack 3
            Internet Explorer 8.0.6001.18702

            2010-09-03 12:20:17
            mbam-log-2010-09-03 (12-20-17).txt

            Type d'examen: Examen complet (A:\|C:\|D:\|)
            Elément(s) analysé(s): 295028
            Temps écoulé: 1 heure(s), 29 minute(s), 50 seconde(s)

            Processus mémoire infecté(s): 0
            Module(s) mémoire infecté(s): 0
            Clé(s) du Registre infectée(s): 0
            Valeur(s) du Registre infectée(s): 0
            Elément(s) de données du Registre infecté(s): 0
            Dossier(s) infecté(s): 0
            Fichier(s) infecté(s): 0

            Processus mémoire infecté(s):
            (Aucun élément nuisible détecté)

            Module(s) mémoire infecté(s):
            (Aucun élément nuisible détecté)

            Clé(s) du Registre infectée(s):
            (Aucun élément nuisible détecté)

            Valeur(s) du Registre infectée(s):
            (Aucun élément nuisible détecté)

            Elément(s) de données du Registre infecté(s):
            (Aucun élément nuisible détecté)

            Dossier(s) infecté(s):
            (Aucun élément nuisible détecté)

            Fichier(s) infecté(s):
            (Aucun élément nuisible détecté)
            0
            1. Utilisateur anonyme
              Re

              Fait ce qu'il t'est demandé et rien d'autre.
              Pour le mode sans echec on ne passe jamais par "msconfig";
              car si effectivement tu n'as plus de mode sans echec ,ton PC redémarre en boucle.
              Qui t'a demandé de procéder dans ce mode?

              @+
              0
              1. Oscar5 Auteur
                dans lutilitaire de config dans l onglet boot.ini << c:\cmdcons\bootsect.dat=''microsoft windows recovery consde''/cmdcons>> est en surbriance et je ne peux cocher safeboot. je dois mettre en surbriance<<multi(0)disk(0)parition(1)windows=microsoft windows xp il y a a cet endroit un petit carré suivi par dition familiale''/noexecute=optin/fastdetect>> pour cocher safeboot du coup en mode sans échec je ne peux pas acceder a internet. j ai une connexion sans fil que j ai débrancher pour connecter directe a l ordi. En mode normal sa marche mais toujour pas en mode sans échec???
                0
                1. Utilisateur anonyme
                  Bonjour

                  Le faire en tant que administrateur ne veut pas dire de choisir la session "Administrateur".
                  Toi sous Xp tu cliques pour lancer l'application;sous Vista on le fait avec le clic droit et on exécute en tant que administrateur.

                  Passons à Malwaresbytes;
                  Télécharge Malwaresbytes anti malware ici
                  http://www.malwarebytes.org/mbam.php

                  * Installe le (choisis bien "français" ; ne modifie pas les paramètres d'installe ) et mets le à jour .

                  (NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : https://www.malekal.com/tutorial-aboutbuster/

                  * Potasse le tuto pour te familiariser avec le prg :

                  https://forum.pcastuces.com/sujet.asp?f=31&s=3

                  (cela dis, il est très simple d'utilisation).

                  relance Malwaresbytes en suivant scrupuleusement ces consignes :

                  ! Déconnecte toi et ferme toutes applications en cours !

                  * Lance Malwarebyte's.

                  Fais un examen dit "Complet"

                  --> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
                  --> à la fin tu cliques sur "Afficher les résultats" " .
                  --> Vérifie que tous les objets infectés soient validés, puis clique sur " supprimer la sélection " .

                  Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !

                  Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwaresbytes, le dernier en date)

                  @+
                  0
                  1. Oscar5 Auteur
                    Je n'ai pas été capable de le faire en tant que administrateur le nom et le mot de passe ne fonctionne pas pour le RAPPORT D'AD-REMOVER
                    0
                    1. Oscar5 Auteur
                      voici le rapport ======= RAPPORT D'AD-REMOVER 2.0.0.1,E | UNIQUEMENT XP/VISTA/7 =======

                      Mis à jour par C_XX le 01/09/10 à 16:00
                      Contact: AdRemover.contact[AT]gmail.com
                      Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html

                      C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 08:34:17 le 03/09/2010, Mode normal

                      Microsoft Windows XP Édition familiale Service Pack 3 (X86)
                      Richard@PCRICHARD ( )

                      ============== ACTION(S) ==============

                      0,Fichier supprimé: C:\Program Files\Mozilla FireFox\searchplugins\iMeshWebSearch.xml
                      0,Fichier supprimé: C:\Documents and Settings\Richard\Application Data\Mozilla\FireFox\Profiles\kuthl9wl.default\searchplugins\iMeshWebSearch.xml
                      0,Dossier supprimé: C:\Documents and Settings\Richard\Mes documents\888poker
                      0,Dossier supprimé: C:\Documents and Settings\Richard\Mes documents\PacificPoker
                      0,Dossier supprimé: C:\Documents and Settings\Richard\Local Settings\Application Data\Conduit
                      0,Dossier supprimé: C:\Program Files\Conduit
                      0,Dossier supprimé: C:\Program Files\Family Toolbar
                      0,Dossier supprimé: C:\Documents and Settings\Richard\Application Data\PacificPoker
                      0,Dossier supprimé: C:\Program Files\PacificPoker
                      3,Fichier supprimé: C:\Documents and Settings\Richard\Bureau\Ebay.lnk
                      0,Fichier supprimé: C:\Documents and Settings\All Users\Bureau\Play iWin Games.lnk

                      (!) -- Fichiers temporaires supprimés.

                      -- Fichier ouvert: C:\Documents and Settings\Richard\Application Data\Mozilla\FireFox\Profiles\kuthl9wl.default\Prefs.js --
                      Ligne supprimée: user_pref("browser.search.defaultenginename", "iMesh Web Search");
                      Ligne supprimée: user_pref("browser.search.order.1", "iMesh Web Search");
                      -- Fichier Fermé --

                      1,Clé supprimée: HKLM\Software\Classes\CLSID\{27BF8F8D-58B8-D41C-F913-B7EEB57EF6F6}
                      3,Clé supprimée: HKLM\Software\Classes\AppID\{A7DDCBDE-5C86-415c-8A37-763AE183E7E4}
                      1,Clé supprimée: HKLM\Software\Classes\CLSID\{4260e0cc-0f75-462e-88a3-1e05c248bf4c}
                      3,Clé supprimée: HKLM\Software\Classes\AppID\{E142D053-7023-4B33-AF22-91F14202142D}
                      1,Clé supprimée: HKLM\Software\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}
                      1,Clé supprimée: HKLM\Software\Classes\Interface\{3D8478AA-7B88-48A9-8BCB-B85D594411EC}
                      1,Clé supprimée: HKLM\Software\Classes\Interface\{93FF076F-ACC9-4D39-B07D-E9A4D6D1F4C7}
                      1,Clé supprimée: HKLM\Software\Classes\Interface\{E3ED53C5-7AD5-4DF5-9734-AFB6E7E5D9DB}
                      1,Clé supprimée: HKLM\Software\Classes\TypeLib\{96F7FABC-5789-EFA4-B6ED-1272F4C1D27B}
                      0,Clé supprimée: HKLM\Software\Classes\ComObject.DeskbarEnabler.1
                      0,Clé supprimée: HKLM\Software\Classes\Toolbar.CT2269050
                      0,Clé supprimée: HKLM\Software\Classes\URLSearchHook.MHURLSearchHook
                      0,Clé supprimée: HKLM\Software\Classes\URLSearchHook.MHURLSearchHook.1
                      0,Clé supprimée: HKLM\Software\Conduit
                      0,Clé supprimée: HKLM\Software\PopCap
                      0,Clé supprimée: HKCU\Software\Binary Noise\mPlayer\kiwee_toolbar_installer.exe
                      0,Clé supprimée: HKCU\Software\casinoonnet
                      0,Clé supprimée: HKCU\Software\Conduit
                      0,Clé supprimée: HKCU\Software\iMesh
                      0,Clé supprimée: HKCU\Software\pacificpoker
                      0,Clé supprimée: HKCU\Software\pokerinstaller
                      0,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\Casino-On-Net
                      0,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\Everest Poker
                      0,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\iMesh
                      0,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\Pacific Poker
                      0,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Kiwee Toolbar
                      3,Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59}
                      3,Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
                      0,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pacific Poker
                      0,Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\BHO iMesh
                      0,Clé supprimée: HKLM\Software\Classes\iwin

                      ============== SCAN ADDITIONNEL ==============

                      ** Mozilla Firefox Version [2.0 (fr)] **

                      -- C:\Documents and Settings\Richard\Application Data\Mozilla\FireFox\Profiles\kuthl9wl.default\Prefs.js --
                      browser.startup.homepage, hxxp://search.myheritage.com/
                      browser.startup.homepage_override.mstone, rv:1.9.0.10
                      keyword.URL, hxxp://search.myheritage.com/?orig=ds&q=
                      browser.search.selectedEngine, Chercher

                      ========================================

                      ** Internet Explorer Version [8.0.6001.18702] **

                      [HKCU\Software\Microsoft\Internet Explorer\Main]
                      AutoHide: no
                      Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                      Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                      Do404Search: 0x01000000
                      Local Page: C:\WINDOWS\system32\blank.htm
                      Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
                      Show_ToolBar: yes
                      Start Page: hxxp://fr.msn.com/
                      Use Custom Search URL: 0
                      Use Search Asst: no

                      [HKLM\Software\Microsoft\Internet Explorer\Main]
                      Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
                      Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                      Delete_Temp_Files_On_Exit: yes
                      Local Page: C:\WINDOWS\system32\blank.htm
                      Search bar: hxxp://search.msn.com/spbasic.htm
                      Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                      Start Page: hxxp://fr.msn.com/
                      Use Custom Search URL: 0
                      Use Search Asst: no

                      [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
                      Tabs: res://ieframe.dll/tabswelcome.htm
                      Blank: res://mshtml.dll/blank.htm

                      ========================================

                      C:\Program Files\Ad-Remover\Quarantine: 11974 Fichier(s)
                      C:\Program Files\Ad-Remover\Backup: 14 Fichier(s)

                      C:\Ad-Report-CLEAN[1].txt - 03/09/2010 (5761 Octet(s))

                      Fin à: 08:41:32, 03/09/2010

                      ============== E.O.F ==============
                      0
                      1. Oscar5 Auteur
                        Salut voici le rapport

                        Utilisateur: Richard (Administrateur) # PCRICHARD [ ]
                        Mis à jour le 02/09/10 par El Desaparecido / C_XX
                        Lancé à 17:37:52 | 02/09/2010
                        Site Web: http://pagesperso-orange.fr/NosTools/index.html
                        Contact: FindyKill.Contact@gmail.com

                        CPU: Intel(R) Pentium(R) 4 CPU 3.00GHz
                        CPU 2: Intel(R) Pentium(R) 4 CPU 3.00GHz
                        Microsoft Windows XP Édition familiale (5.1.2600 32-Bit) # Service Pack 3
                        Internet Explorer 8.0.6001.18702

                        Pare-feu Windows: Activé
                        Antivirus: AntiVir Desktop 9.0.1.32 [Enabled | Updated]
                        RAM -> 1015 Mo
                        C:\ (%systemdrive%) -> Disque fixe # 75 Go (20 Go libre(s) - 26%) [] # NTFS
                        D:\ -> CD-ROM

                        ################## | Éléments infectieux |

                        ################## | Registre |

                        Supprimé! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools
                        Supprimé! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
                        Supprimé! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives

                        ################## | Mountpoints2 |

                        ################## | Listing |

                        [14/10/2009 - 19:59:56 | D ] C:\530972412f5b91b98b8ef8b5
                        [20/02/2009 - 16:46:14 | D ] C:\92af29ec75d6a6c73d99ff
                        [01/11/2009 - 10:58:07 | A | 78901] C:\aaw7boot.log
                        [10/02/2009 - 11:57:03 | A | 50] C:\AUTOEXEC.BAT
                        [30/08/2009 - 10:57:47 | D ] C:\Backup
                        [09/02/2009 - 10:36:42 | A | 216] C:\Boot.bak
                        [31/08/2010 - 19:13:44 | RASH | 332] C:\boot.ini
                        [09/01/2009 - 07:05:23 | RASH | 4952] C:\Bootfont.bin
                        [31/08/2010 - 19:13:43 | RASHD ] C:\cmdcons
                        [03/08/2004 - 23:00:08 | RASH | 263488] C:\cmldr
                        [31/08/2010 - 19:29:36 | A | 33488] C:\ComboFix.txt
                        [02/09/2010 - 17:29:25 | D ] C:\Config.Msi
                        [06/02/2009 - 17:16:48 | A | 0] C:\CONFIG.SYS
                        [06/09/2009 - 08:58:10 | D ] C:\Documents and Settings
                        [08/09/2009 - 16:42:14 | A | 184] C:\drwtsn32.log
                        [02/07/2009 - 09:21:36 | A | 55] C:\DVDPATH.TXT
                        [07/11/2007 - 08:00:40 | A | 17734] C:\eula.1028.txt
                        [07/11/2007 - 08:00:40 | A | 17734] C:\eula.1031.txt
                        [07/11/2007 - 08:00:40 | A | 10134] C:\eula.1033.txt
                        [07/11/2007 - 08:00:40 | A | 17734] C:\eula.1036.txt
                        [07/11/2007 - 08:00:40 | A | 17734] C:\eula.1040.txt
                        [07/11/2007 - 08:00:40 | A | 118] C:\eula.1041.txt
                        [07/11/2007 - 08:00:40 | A | 17734] C:\eula.1042.txt
                        [07/11/2007 - 08:00:40 | A | 17734] C:\eula.2052.txt
                        [07/11/2007 - 08:00:40 | A | 17734] C:\eula.3082.txt
                        [09/01/2009 - 07:05:23 | A | 3350] C:\findcd.com
                        [31/03/2010 - 13:29:48 | D ] C:\games
                        [03/03/2010 - 16:41:02 | A | 96264] C:\GameuxInstallHelper.dll
                        [07/11/2007 - 08:00:40 | A | 1110] C:\globdata.ini
                        [07/11/2007 - 08:00:40 | A | 843] C:\install.ini
                        [07/11/2007 - 08:03:18 | A | 76304] C:\install.res.1028.dll
                        [07/11/2007 - 08:03:18 | A | 96272] C:\install.res.1031.dll
                        [07/11/2007 - 08:03:18 | A | 91152] C:\install.res.1033.dll
                        [07/11/2007 - 08:03:18 | A | 97296] C:\install.res.1036.dll
                        [07/11/2007 - 08:03:18 | A | 95248] C:\install.res.1040.dll
                        [07/11/2007 - 08:03:18 | A | 81424] C:\install.res.1041.dll
                        [07/11/2007 - 08:03:18 | A | 79888] C:\install.res.1042.dll
                        [07/11/2007 - 08:03:18 | A | 75792] C:\install.res.2052.dll
                        [07/11/2007 - 08:03:18 | A | 96272] C:\install.res.3082.dll
                        [06/02/2009 - 17:16:48 | RASH | 0] C:\IO.SYS
                        [10/02/2009 - 12:12:58 | D ] C:\Live! Cam
                        [06/02/2009 - 17:16:48 | RASH | 0] C:\MSDOS.SYS
                        [24/08/2010 - 10:00:58 | RD ] C:\MSOCache
                        [04/07/2009 - 17:38:23 | D ] C:\MyWorks
                        [09/01/2009 - 07:05:23 | RASH | 47564] C:\NTDETECT.COM
                        [09/01/2009 - 07:05:23 | RASH | 252240] C:\ntldr
                        [02/09/2010 - 15:55:40 | ASH | 1598029824] C:\pagefile.sys
                        [06/02/2009 - 17:40:09 | A | 91] C:\Powerdvd7.log
                        [02/09/2010 - 17:29:04 | RD ] C:\Program Files
                        [31/08/2010 - 19:29:38 | D ] C:\Qoobox
                        [02/09/2010 - 17:41:27 | SHD ] C:\RECYCLER
                        [10/02/2009 - 11:54:45 | A | 174] C:\Setup.log
                        [09/02/2009 - 18:38:05 | AH | 232] C:\sqmdata00.sqm
                        [09/02/2009 - 19:53:24 | AH | 232] C:\sqmdata01.sqm
                        [10/02/2009 - 08:30:31 | AH | 232] C:\sqmdata02.sqm
                        [24/02/2009 - 15:54:50 | AH | 232] C:\sqmdata03.sqm
                        [25/02/2009 - 00:50:55 | AH | 268] C:\sqmdata04.sqm
                        [25/02/2009 - 08:19:04 | AH | 268] C:\sqmdata05.sqm
                        [25/02/2009 - 19:18:42 | AH | 232] C:\sqmdata06.sqm
                        [09/02/2009 - 18:38:05 | AH | 244] C:\sqmnoopt00.sqm
                        [09/02/2009 - 19:53:24 | AH | 244] C:\sqmnoopt01.sqm
                        [10/02/2009 - 08:30:31 | AH | 244] C:\sqmnoopt02.sqm
                        [24/02/2009 - 15:54:50 | AH | 244] C:\sqmnoopt03.sqm
                        [25/02/2009 - 00:50:55 | AH | 244] C:\sqmnoopt04.sqm
                        [25/02/2009 - 08:19:04 | AH | 244] C:\sqmnoopt05.sqm
                        [25/02/2009 - 08:19:04 | AH | 244] C:\sqmnoopt06.sqm
                        [25/02/2009 - 19:18:42 | AH | 244] C:\sqmnoopt07.sqm
                        [27/08/2010 - 11:19:38 | SHD ] C:\System Volume Information
                        [07/06/2010 - 23:31:28 | D ] C:\temp
                        [05/11/2009 - 13:42:09 | A | 1167] C:\updatedatfix.log
                        [02/09/2010 - 17:41:28 | D ] C:\UsbFix
                        [02/09/2010 - 17:41:33 | A | 1038] C:\UsbFix.txt
                        [07/11/2007 - 08:00:40 | A | 5686] C:\vcredist.bmp
                        [07/11/2007 - 08:09:22 | A | 1442522] C:\VC_RED.cab
                        [07/11/2007 - 08:12:28 | A | 232960] C:\VC_RED.MSI
                        [02/09/2010 - 16:39:47 | D ] C:\WINDOWS

                        ################## | Vaccin |

                        C:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)

                        ################## | E.O.F |
                        0
                        2. Utilisateur anonyme
                          Bonsoir

                          1) # Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
                          Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
                          Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

                          Télécharge et install UsbFix de El Desaparecido , C_XX & Chimay8
                          Ici : http://pagesperso-orange.fr/NosTools/Chiquitine29/UsbFix.exe

                          Tutorial de Malekal_Morte si besoin, merci à lui : https://www.malekal.com/usbfix-supprimer-virus-usb/

                          Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d avoir été infectés sans les ouvrir

                          # Double clic sur le raccourci UsbFix présent sur ton bureau.

                          # Choisi Suppression

                          # Laisse travailler l outil.

                          # Ensuite post le rapport UsbFix.txt qui apparaîtra.

                          # Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. (C:\UsbFix.txt)

                          (CTRL+A Pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

                          2)* Télécharge Ad-remover ( de C_XX ) sur ton bureau :

                          http://pagesperso-orange.fr/NosTools/C_XX/AD-R.exe

                          ! Déconnecte toi et ferme toutes applications en cours !

                          * Double clique ou clic droit (exécuter en tant que admin...sur Vista et Windows7) sur "Ad-R.exe" pour lancer l'installation et laisse les paramètres d'installation par défaut.

                          * Double-clique ou clic droit (exécuter en tant que admin...sur Vista et Windows 7) sur le raccourci Ad-remover qui est sur ton bureau pour lancer l'outil .

                          * Au menu principal choisis l'option "Nettoyer"
                          et sur [entrée] .

                          * Laisse travailler l'outil et ne touche à rien ...

                          --> Poste le rapport qui apparaît à la fin , sur le forum ...

                          ( Le rapport est sauvegardé aussi sous C:\Ad-report.log )
                          ( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

                          Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
                          Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
                          Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

                          Aides en images (Installation) : http://pagesperso-orange.fr/NosTools/ad_remover.html images (Recherche): http://pagesperso-orange.fr/NosTools/tuto_adr_2.html

                          Poste les rapports au fur et à mesure;merci.

                          @+
                          0
                          1. Oscar5 Auteur
                            j ai fais les mises a jour microsoft up . Mise à jour pour Microsoft .NET Framework version 3.5 SP1 et .NET Framework version 2.0 SP2 pour Windows Server 2003 et Windows XP x86 (KB982524)
                            Mise à jour de sécurité pour .NET Framework versions 2.0 SP2 et 3.5 SP1 sous Windows Server 2003 and Windows XP x86 (KB983583)
                            Mise à jour de Microsoft Silverlight (KB2164913)
                            date. mais elles non pas été instaler?
                            0
                            1. Oscar5 Auteur
                              j ai enfin réussi a installer un antivirus ( avira antivir perso ) Aurait-tu une autre suggestion?
                              0
                              1. Oscar5 Auteur
                                SUPERAntiSpyware Scan Log
                                https://www.superantispyware.com/

                                Generated 09/01/2010 at 03:19 PM

                                Application Version : 4.42.1000

                                Core Rules Database Version : 5441
                                Trace Rules Database Version: 3253

                                Scan type : Complete Scan
                                Total Scan Time : 01:10:23

                                Memory items scanned : 415
                                Memory threats detected : 0
                                Registry items scanned : 8514
                                Registry threats detected : 0
                                File items scanned : 52005
                                File threats detected : 20

                                Adware.Tracking Cookie
                                C:\Documents and Settings\Richard\Cookies\richard@networldmedia[1].txt
                                C:\Documents and Settings\Richard\Cookies\richard@pointroll[2].txt
                                C:\Documents and Settings\Richard\Cookies\richard@serving-sys[1].txt
                                C:\Documents and Settings\Richard\Cookies\richard@bellcan.adbureau[2].txt
                                C:\Documents and Settings\Richard\Cookies\richard@msnportal.112.2o7[1].txt
                                C:\Documents and Settings\Richard\Cookies\richard@247realmedia[1].txt
                                C:\Documents and Settings\Richard\Cookies\richard@ads.networldmedia[3].txt
                                C:\Documents and Settings\Richard\Cookies\richard@xiti[2].txt
                                C:\Documents and Settings\Richard\Cookies\richard@ads.pointroll[1].txt
                                C:\Documents and Settings\Richard\Cookies\richard@bs.serving-sys[1].txt
                                C:\Documents and Settings\Richard\Cookies\richard@ads.networldmedia[1].txt
                                C:\Documents and Settings\Richard\Cookies\richard@vitamine.networldmedia[2].txt
                                C:\Documents and Settings\Richard\Cookies\richard@specificclick[2].txt
                                C:\Documents and Settings\Richard\Cookies\richard@atdmt[3].txt
                                vitamine.networldmedia.net [ C:\Documents and Settings\Richard\Application Data\Macromedia\Flash Player\#SharedObjects\VKQ9XCCN ]
                                C:\Documents and Settings\Richard\Cookies\richard@ads.networldmedia[2].txt
                                C:\Documents and Settings\Richard\Cookies\richard@atdmt[2].txt
                                C:\Documents and Settings\Richard\Cookies\richard@networldmedia[2].txt
                                C:\Documents and Settings\Richard\Cookies\richard@xiti[1].txt
                                C:\Documents and Settings\Richard\Cookies\richard@vitamine.networldmedia[1].txt
                                0
                                1. Utilisateur anonyme
                                  Bonsoir

                                  Tu disposes de Super Anti spywares;mets le à jour et lance une analyse complète et poste moi le rapport à l'issue;merci.

                                  @+
                                  0
                                  1. Oscar5 Auteur
                                    Salut j'aimerais savoir si tu es prêt a toujours m'aider ? Merci Bye
                                    0
                                    1. Oscar5 Auteur
                                      Salut voici mon rapport de combofix
                                      Lancé depuis: c:\documents and settings\Richard\Mes documents\asdehi.exe
                                      AV: AntiVir Desktop *On-access scanning enabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
                                      AV: StopSign Antivirus FREE TRIAL diagnostic version *On-access scanning disabled* (Updated) {3E1D4556-3240-40c8-BBED-64A8690A3FB4}
                                      .

                                      (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
                                      .

                                      c:\documents and settings\Richard\Application Data\Desktopicon
                                      c:\documents and settings\Richard\Application Data\PriceGong
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\1.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\a.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\b.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\c.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\d.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\e.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\f.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\g.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\h.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\i.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\J.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\k.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\l.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\m.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\mru.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\n.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\o.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\p.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\q.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\r.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\s.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\t.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\u.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\v.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\w.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\x.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\y.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\z.xml
                                      C:\Install.exe
                                      c:\windows\system32\scrrnfr.dll
                                      c:\windows\system32\service
                                      c:\windows\system32\service\08092009_TIS17_SfFniAU.log

                                      .
                                      ((((((((((((((((((((((((((((( Fichiers créés du 2010-07-28 au 2010-08-31 ))))))))))))))))))))))))))))))))))))
                                      .

                                      2010-08-31 18:51 . 2010-08-31 19:34 -------- d-----w- c:\program files\ZHPDiag
                                      2010-08-31 16:47 . 2010-08-31 17:24 32 --sha-w- c:\windows\system32\drivers\fidbox2.dat
                                      2010-08-31 16:47 . 2010-08-31 17:24 32 --sha-w- c:\windows\system32\drivers\fidbox.dat
                                      2010-08-31 14:42 . 2009-12-14 16:44 39352 ----a-w- c:\windows\system32\drivers\CSVirtualDiskDrv.sys
                                      2010-08-31 14:42 . 2009-12-14 16:44 88632 ----a-w- c:\windows\system32\drivers\CSCrySec.sys
                                      2010-08-31 12:37 . 2010-04-29 19:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
                                      2010-08-31 12:37 . 2010-04-29 19:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
                                      2010-08-31 02:21 . 2010-08-31 02:22 -------- d-----w- c:\documents and settings\Richard\Application Data\eAcceleration
                                      2010-08-31 02:21 . 2010-08-31 02:21 -------- d-----w- c:\program files\Acceleration Software
                                      2010-08-31 02:20 . 2010-08-31 02:22 -------- d-----w- c:\documents and settings\All Users\Application Data\eAcceleration
                                      2010-08-31 02:20 . 2010-08-31 02:21 -------- d-----w- c:\program files\Fichiers communs\eAcceleration
                                      2010-08-31 02:20 . 2010-08-31 02:22 -------- d-----w- c:\program files\eAcceleration
                                      2010-08-31 02:20 . 2010-08-31 02:21 -------- d-----w- c:\program files\StopSign
                                      2010-08-31 00:33 . 2010-08-31 00:33 -------- d-----w- c:\documents and settings\All Users\Application Data\Alwil Software
                                      2010-08-30 20:40 . 2008-04-13 23:33 4255 ------w- c:\windows\system32\drivers\adv01nt5.dll
                                      2010-08-30 20:39 . 2010-08-30 20:39 -------- d-----w- c:\windows\EHome
                                      2010-08-30 15:09 . 2010-08-30 15:09 -------- d-----w- c:\program files\ESET
                                      2010-08-29 16:13 . 2010-08-29 16:13 -------- d-----w- c:\documents and settings\Richard\Application Data\SUPERAntiSpyware.com
                                      2010-08-29 16:13 . 2010-08-29 16:13 -------- d-----w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
                                      2010-08-29 13:23 . 2010-08-29 13:23 -------- d-----w- c:\windows\system32\wbem\Repository
                                      2010-08-29 13:23 . 2010-08-29 13:49 -------- d-----w- c:\documents and settings\Richard\Local Settings\Application Data\DVDVideoSoftTB
                                      2010-08-29 13:23 . 2010-08-29 13:23 -------- d-----w- c:\program files\DVDVideoSoftTB
                                      2010-08-29 13:23 . 2010-08-29 13:23 -------- d-----w- c:\program files\Sony Online Entertainment
                                      2010-08-29 13:22 . 2010-08-29 13:22 -------- d-----w- c:\program files\MP3 Player Product Tools 4.22
                                      2010-08-29 13:22 . 2010-08-29 13:22 -------- d-----w- c:\documents and settings\All Users\Application Data\Yahoo! Companion
                                      2010-08-29 13:22 . 2010-08-29 13:22 -------- d-----w- c:\program files\Microsoft Games
                                      2010-08-29 13:22 . 2010-08-29 13:22 -------- d-----w- c:\program files\Fichiers communs\ParallelGraphics
                                      2010-08-29 13:22 . 2010-08-29 13:22 -------- d-----w- c:\program files\Conduit
                                      2010-08-29 13:22 . 2010-08-29 13:22 -------- d-----w- c:\documents and settings\Richard\Local Settings\Application Data\Microsoft Help
                                      2010-08-29 13:21 . 2010-08-29 13:21 -------- d-----w- c:\program files\Fichiers communs\DVDVideoSoft
                                      2010-08-29 13:21 . 2010-08-29 13:21 -------- d-----w- c:\program files\DVDVideoSoft
                                      2010-08-29 13:21 . 2010-08-29 13:21 -------- d-----w- c:\documents and settings\Richard\Application Data\Avira
                                      2010-08-29 13:20 . 2010-08-29 13:20 -------- d-----w- c:\documents and settings\All Users\Application Data\rionix
                                      2010-08-29 13:20 . 2010-08-29 13:20 -------- d-----w- c:\documents and settings\All Users\Application Data\Intenium
                                      2010-08-29 13:20 . 2010-08-29 13:20 -------- d-----w- c:\documents and settings\All Users\Application Data\EyePowerGames
                                      2010-08-29 13:20 . 2010-08-29 13:20 -------- d-----w- c:\documents and settings\All Users\Application Data\NortonInstaller
                                      2010-08-29 13:20 . 2010-08-29 13:20 -------- d-----w- c:\documents and settings\All Users\Application Data\Norton
                                      2010-08-29 13:20 . 2010-08-29 13:20 -------- d-----w- c:\documents and settings\All Users\Application Data\iWin Games
                                      2010-08-29 13:20 . 2010-08-29 13:20 -------- d-----w- c:\documents and settings\All Users\Application Data\Absolutist
                                      2010-08-24 16:18 . 2010-08-29 13:17 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
                                      2010-08-24 14:00 . 2010-08-24 14:00 -------- d-----r- C:\MSOCache
                                      2010-08-23 00:28 . 2010-08-23 00:28 -------- d-----w- c:\documents and settings\Richard\Application Data\FissaSearch
                                      2010-08-17 16:50 . 2010-08-17 16:51 -------- d-----w- c:\documents and settings\Richard\Application Data\GARMIN
                                      2010-08-16 23:01 . 2010-08-27 17:27 -------- d-----w- c:\documents and settings\Richard\Local Settings\Application Data\moovida Air
                                      2010-08-16 23:01 . 2010-08-27 17:21 -------- d-----w- c:\documents and settings\Richard\Application Data\moovida-1
                                      2010-08-16 22:58 . 2010-08-28 14:10 -------- d-----w- c:\program files\Fluendo
                                      2010-08-14 01:02 . 2010-08-14 01:02 17 ----a-w- c:\windows\system32\shortcut_ex.dat
                                      2010-08-13 20:58 . 2010-08-13 20:58 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\DVDVideoSoftTB
                                      2010-08-11 12:56 . 2010-08-11 12:56 -------- d-----w- c:\documents and settings\Richard\Application Data\Skinux
                                      2010-08-11 12:56 . 2010-08-28 15:33 -------- d-----w- c:\documents and settings\Richard\Application Data\SoftGrid Client
                                      2010-08-10 13:17 . 2010-08-31 10:50 -------- d-----w- c:\program files\eMule
                                      2010-08-05 13:16 . 2010-08-31 00:33 -------- d-----w- c:\program files\Alwil Software

                                      .
                                      (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
                                      .
                                      2010-08-31 17:24 . 2010-08-31 16:47 32 --sha-w- c:\windows\system32\drivers\fidbox2.idx
                                      2010-08-31 17:24 . 2010-08-31 16:47 32 --sha-w- c:\windows\system32\drivers\fidbox.idx
                                      2010-08-31 16:58 . 2010-03-31 11:15 -------- d-----w- c:\documents and settings\All Users\Application Data\SecTaskMan
                                      2010-08-31 12:37 . 2009-10-12 13:48 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
                                      2010-08-30 20:15 . 2009-02-06 21:22 -------- d-----w- c:\program files\Windows Media Connect 2
                                      2010-08-30 18:13 . 2010-06-21 01:30 -------- d-----w- c:\documents and settings\Richard\Application Data\vlc
                                      2010-08-29 16:14 . 2010-08-29 16:14 63488 ----a-w- c:\documents and settings\Richard\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll
                                      2010-08-29 16:14 . 2010-08-29 16:14 52224 ----a-w- c:\documents and settings\Richard\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
                                      2010-08-29 16:14 . 2010-08-29 16:14 117760 ----a-w- c:\documents and settings\Richard\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
                                      2010-08-29 16:13 . 2009-09-29 16:43 -------- d-----w- c:\program files\SUPERAntiSpyware
                                      2010-08-29 15:45 . 2009-08-25 01:08 -------- d-----w- c:\program files\Lavasoft
                                      2010-08-29 13:32 . 2010-07-26 11:25 -------- d-----w- c:\program files\Microsoft Application Virtualization Client
                                      2010-08-29 13:31 . 2010-07-18 20:55 -------- d-----w- c:\program files\QuickTime
                                      2010-08-29 13:31 . 2010-05-18 17:21 -------- d-----w- c:\program files\iTunes
                                      2010-08-29 13:31 . 2009-12-25 21:36 720 ----a-w- c:\documents and settings\All Users\Application Data\ArcSoft\kodak-printcreations-22-080812-oem\acforall.dll
                                      2010-08-29 13:23 . 2010-07-26 11:24 -------- d-----w- c:\documents and settings\Richard\Application Data\TP
                                      2010-08-29 13:22 . 2010-06-30 01:35 -------- d-----w- c:\documents and settings\Richard\Application Data\Microsoft Games
                                      2010-08-29 13:22 . 2009-03-23 00:45 -------- d-----w- c:\program files\Yahoo!
                                      2010-08-29 13:17 . 2009-09-15 23:18 -------- d-----w- c:\program files\PacificPoker
                                      2010-08-28 15:45 . 2009-01-09 11:05 546724 ----a-w- c:\windows\system32\perfh00C.dat
                                      2010-08-28 15:45 . 2009-01-09 11:05 101154 ----a-w- c:\windows\system32\perfc00C.dat
                                      2010-08-28 15:35 . 2010-07-26 11:27 -------- d-----w- c:\windows\system32\config\systemprofile\Application Data\SoftGrid Client
                                      2010-08-28 14:33 . 2010-06-30 01:35 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Games
                                      2010-08-28 14:32 . 2010-03-06 15:21 -------- d-----w- c:\program files\iWin.com
                                      2010-08-27 22:12 . 2009-02-09 22:08 -------- d-----w- c:\program files\Fichiers communs\Adobe
                                      2010-08-27 17:41 . 2009-02-06 21:20 -------- d--h--w- c:\program files\InstallShield Installation Information
                                      2010-08-27 17:28 . 2010-05-29 22:19 -------- d-----w- c:\documents and settings\Richard\Application Data\Sony Online Entertainment
                                      2010-08-26 10:56 . 2009-02-06 21:41 -------- d-----w- c:\program files\Java
                                      2010-08-23 22:04 . 2009-09-15 23:18 -------- d-----w- c:\documents and settings\Richard\Application Data\PacificPoker
                                      2010-08-23 17:10 . 2010-04-18 14:10 -------- d-----w- c:\program files\iWin Games
                                      2010-08-16 22:58 . 2010-08-16 22:58 110592 ----a-r- c:\documents and settings\Richard\Application Data\Microsoft\Installer\{6084C211-01A1-464E-97A0-09772E122B50}\ARPPRODUCTICON.exe
                                      2010-08-16 22:58 . 2010-08-16 22:58 102400 ----a-r- c:\documents and settings\Richard\Application Data\Microsoft\Installer\{6084C211-01A1-464E-97A0-09772E122B50}\NewShortcut6_206049A8CD534D8B87D5F66190F05AB3.exe
                                      2010-08-16 22:58 . 2010-08-16 22:58 102400 ----a-r- c:\documents and settings\Richard\Application Data\Microsoft\Installer\{6084C211-01A1-464E-97A0-09772E122B50}\NewShortcut5_F4EE65F1A6CD4124B059E9FA9A98EBF7.exe
                                      2010-08-16 22:58 . 2010-08-16 22:58 102400 ----a-r- c:\documents and settings\Richard\Application Data\Microsoft\Installer\{6084C211-01A1-464E-97A0-09772E122B50}\NewShortcut4_A414E067513C43BA8786F3DC788BC961.exe
                                      2010-08-16 22:58 . 2010-08-16 22:58 102400 ----a-r- c:\documents and settings\Richard\Application Data\Microsoft\Installer\{6084C211-01A1-464E-97A0-09772E122B50}\NewShortcut3_BCB4A930B9F04A2480525A437423D92B.exe
                                      2010-08-16 22:58 . 2010-08-16 22:58 102400 ----a-r- c:\documents and settings\Richard\Application Data\Microsoft\Installer\{6084C211-01A1-464E-97A0-09772E122B50}\NewShortcut2_B4703F8364D440ADB60E472AD5422128.exe
                                      2010-08-15 22:52 . 2010-07-29 21:34 -------- d-----w- c:\program files\Widestream6
                                      2010-08-12 06:28 . 2010-07-26 13:40 -------- d-----w- c:\documents and settings\All Users\Application Data\VirtualizedApplications
                                      2010-08-11 20:08 . 2010-08-11 20:08 52224 ----a-w- c:\documents and settings\Richard\Application Data\Mozilla\Firefox\Profiles\kuthl9wl.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components\FFExternalAlert.dll
                                      2010-08-11 20:08 . 2010-08-11 20:08 101376 ----a-w- c:\documents and settings\Richard\Application Data\Mozilla\Firefox\Profiles\kuthl9wl.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components\RadioWMPCore.dll
                                      2010-08-11 18:26 . 2009-02-12 19:22 -------- d-----w- c:\documents and settings\Richard\Application Data\Image Zone Express
                                      2010-08-10 22:02 . 2009-10-16 12:58 -------- d-----w- c:\documents and settings\Richard\Application Data\ZoomBrowser EX
                                      2010-08-10 21:37 . 2009-10-16 12:51 -------- d-----w- c:\documents and settings\All Users\Application Data\ZoomBrowser
                                      2010-08-10 00:20 . 2009-02-23 00:32 -------- d-----w- c:\documents and settings\Richard\Application Data\dvdcss
                                      2010-08-08 17:56 . 2010-08-08 17:56 503808 ----a-w- c:\documents and settings\Richard\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-29f39144-n\msvcp71.dll
                                      2010-08-08 17:56 . 2010-08-08 17:56 499712 ----a-w- c:\documents and settings\Richard\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-29f39144-n\jmc.dll
                                      2010-08-08 17:56 . 2010-08-08 17:56 348160 ----a-w- c:\documents and settings\Richard\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-29f39144-n\msvcr71.dll
                                      2010-08-08 17:56 . 2010-08-08 17:56 61440 ----a-w- c:\documents and settings\Richard\Application Data\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-1ac28e3e-n\decora-sse.dll
                                      2010-08-08 17:56 . 2010-08-08 17:56 12800 ----a-w- c:\documents and settings\Richard\Application Data\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-1ac28e3e-n\decora-d3d.dll
                                      2010-07-29 21:35 . 2010-07-29 21:35 -------- d-----w- c:\documents and settings\Richard\Application Data\widestream
                                      2010-07-29 21:34 . 2010-07-29 21:34 -------- d-----w- c:\program files\OfferBox
                                      2010-07-26 11:28 . 2010-07-26 11:28 -------- d-----w- c:\windows\system32\config\systemprofile\Application Data\{90140011-0061-040C-0000-0000000FF1CE}
                                      2010-07-25 19:06 . 2010-03-01 22:50 -------- d-----w- c:\program files\iPod
                                      2010-07-25 19:06 . 2009-04-20 02:13 -------- d-----w- c:\program files\Fichiers communs\Apple
                                      2010-07-25 18:57 . 2010-07-25 18:57 73000 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 9.2.1.5\SetupAdmin.exe
                                      2010-07-25 18:56 . 2010-04-18 15:23 -------- d-----w- c:\program files\Safari
                                      2010-07-25 18:53 . 2010-07-25 18:53 71992 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\Safari 5.33.16.0\SetupAdmin.exe
                                      2010-07-18 20:53 . 2010-07-18 20:53 -------- d-----w- c:\program files\Apple Software Update
                                      2010-07-18 19:57 . 2009-10-13 16:15 -------- d-----w- c:\program files\CCleaner
                                      2010-06-30 12:32 . 2009-01-09 11:05 149504 ----a-w- c:\windows\system32\schannel.dll
                                      2010-06-24 12:25 . 2009-01-09 11:05 916480 ----a-w- c:\windows\system32\wininet.dll
                                      2010-06-24 09:02 . 2009-01-09 11:05 1852032 ----a-w- c:\windows\system32\win32k.sys
                                      2010-06-21 15:27 . 2009-01-09 11:05 354304 ----a-w- c:\windows\system32\drivers\srv.sys
                                      2010-06-17 14:03 . 2009-01-09 11:05 80384 ----a-w- c:\windows\system32\iccvid.dll
                                      2010-06-14 14:31 . 2009-02-06 21:14 744448 ----a-w- c:\windows\pchealth\helpctr\binaries\helpsvc.exe
                                      2010-06-14 07:42 . 2009-01-09 11:05 1172480 ----a-w- c:\windows\system32\msxml3.dll
                                      2009-01-09 11:05 . 2009-02-06 21:40 66408 ----a-w- c:\program files\mozilla firefox\components\jar50.dll
                                      2009-01-09 11:05 . 2009-02-06 21:40 54112 ----a-w- c:\program files\mozilla firefox\components\jsd3250.dll
                                      2009-01-09 11:05 . 2009-02-06 21:40 34688 ----a-w- c:\program files\mozilla firefox\components\myspell.dll
                                      2009-01-09 11:05 . 2009-02-06 21:40 46456 ----a-w- c:\program files\mozilla firefox\components\spellchk.dll
                                      2009-01-09 11:05 . 2009-02-06 21:40 171880 ----a-w- c:\program files\mozilla firefox\components\xpinstal.dll
                                      2006-06-16 01:33 . 2009-02-10 15:54 233472 ----a-w- c:\program files\mozilla firefox\plugins\CrazyTalk4Native.dll
                                      2006-05-25 23:43 . 2009-02-10 15:54 204895 ----a-w- c:\program files\mozilla firefox\plugins\ctdomemhelper.dll
                                      2005-09-29 19:41 . 2009-02-10 15:54 77824 ----a-w- c:\program files\mozilla firefox\plugins\ctframeplayerobject.dll
                                      2006-06-19 18:10 . 2009-02-10 15:54 426081 ----a-w- c:\program files\mozilla firefox\plugins\ctplayerobject.dll
                                      2005-02-02 17:19 . 2009-02-10 15:54 458752 ----a-w- c:\program files\mozilla firefox\plugins\imagickrt.dll
                                      2006-04-10 23:35 . 2009-02-10 15:54 139264 ----a-w- c:\program files\mozilla firefox\plugins\rlcontentclass.dll
                                      2005-11-09 16:10 . 2009-02-10 15:54 204800 ----a-w- c:\program files\mozilla firefox\plugins\RLMusicPacker.dll
                                      2005-11-09 16:42 . 2009-02-10 15:54 106496 ----a-w- c:\program files\mozilla firefox\plugins\RLMusicUnpacker.dll
                                      2006-01-04 16:22 . 2009-02-10 15:54 212992 ----a-w- c:\program files\mozilla firefox\plugins\RLVoicePacker.dll
                                      2006-01-04 16:21 . 2009-02-10 15:54 167936 ----a-w- c:\program files\mozilla firefox\plugins\RLVoiceUnpacker.dll
                                      2009-02-10 15:54 . 2009-02-10 15:54 75 --sh--r- c:\windows\CT4CET.bin
                                      .

                                      ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
                                      .
                                      .
                                      *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
                                      REGEDIT4

                                      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
                                      "{872b5b88-9db5-4310-bdd0-ac189557e5f5}"= "c:\program files\DVDVideoSoftTB\tbDVD1.dll" [2010-08-11 2736736]

                                      [HKEY_CLASSES_ROOT\clsid\{872b5b88-9db5-4310-bdd0-ac189557e5f5}]

                                      [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{2BEFBCCE-46A6-4950-BCB5-7062EAC6C9C9}]
                                      2010-07-05 16:43 134816 ----a-w- c:\program files\Widestream6\spointer\extensions\widestream6_air_ie.dll

                                      [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{872b5b88-9db5-4310-bdd0-ac189557e5f5}]
                                      2010-08-11 20:31 2736736 ----a-w- c:\program files\DVDVideoSoftTB\tbDVD1.dll

                                      [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E2A7BD67-0EAF-497f-B05B-748D7BF3C421}]
                                      2010-07-15 09:32 135840 ----a-w- c:\program files\Fluendo\Moovida\spointer\extensions\moovida_air_ie.dll

                                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
                                      "{872b5b88-9db5-4310-bdd0-ac189557e5f5}"= "c:\program files\DVDVideoSoftTB\tbDVD1.dll" [2010-08-11 2736736]

                                      [HKEY_CLASSES_ROOT\clsid\{872b5b88-9db5-4310-bdd0-ac189557e5f5}]

                                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                                      "igfxtray"="c:\windows\system32\igfxtray.exe" [2006-02-07 94208]
                                      "igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2006-02-07 77824]
                                      "igfxpers"="c:\windows\system32\igfxpers.exe" [2006-02-07 118784]
                                      "SoundMan"="SOUNDMAN.EXE" [2006-07-21 86016]
                                      "AlcWzrd"="ALCWZRD.EXE" [2006-05-04 2808832]
                                      "V0380Mon.exe"="c:\windows\V0380Mon.exe" [2007-08-30 28672]
                                      "webscan"="c:\program files\Acceleration Software\Anti-Virus\stopsignav.exe" [2010-08-24 1443168]
                                      "SoftwareStation"="c:\program files\eAcceleration\Station\station.exe" [2010-06-22 140624]
                                      "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760]
                                      "Adobe ARM"="c:\program files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]

                                      [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
                                      "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2009-01-09 15360]

                                      c:\documents and settings\Richard\Menu D'marrer\Programmes\D'marrage\
                                      OneNote 2010 - Capture d''cran et lancement.lnk - c:\program files\Fichiers communs\Microsoft Shared\Virtualization Handler\CVH.EXE [2010-2-28 3207072]

                                      c:\documents and settings\All Users\Menu D'marrer\Programmes\D'marrage\
                                      HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2005-5-12 282624]
                                      Logiciel Kodak EasyShare.lnk - c:\program files\Kodak\Kodak EasyShare software\bin\EasyShare.exe [2009-7-10 323584]

                                      [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
                                      "ForceClassicControlPanel"= 1 (0x1)

                                      [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
                                      "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

                                      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
                                      2009-09-03 22:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL

                                      [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
                                      BootExecute REG_MULTI_SZ PDBoot.exe\0autocheck autochk *

                                      [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
                                      "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
                                      "%windir%\\system32\\sessmgr.exe"=
                                      "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
                                      "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
                                      "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
                                      "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
                                      "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
                                      "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
                                      "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
                                      "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
                                      "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
                                      "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
                                      "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
                                      "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
                                      "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
                                      "c:\\Program Files\\Messenger\\msmsgs.exe"=
                                      "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
                                      "c:\\Program Files\\Sony\\Media Manager for PSP\\MediaManager.exe"=
                                      "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
                                      "c:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"=
                                      "c:\\Program Files\\iWin Games\\iWinGames.exe"=
                                      "c:\\Program Files\\iWin Games\\WebUpdater.exe"=
                                      "c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
                                      "c:\\Program Files\\Microsoft Games\\Zoo Tycoon 2 Trial Version\\zt2demoretail.exe"=
                                      "c:\\Program Files\\Microsoft Games\\Zoo Tycoon 2 Endangered Species Trial Version\\zt.exe"=
                                      "c:\\Program Files\\iTunes\\iTunes.exe"=
                                      "c:\\Program Files\\Fluendo\\Moovida\\Moovida.exe"=
                                      "c:\\WINDOWS\\system32\\mmc.exe"=

                                      [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
                                      "67:UDP"= 67:UDP:0.0.0.0/255.255.255.255:Enabled:DHCP Discovery Service

                                      R0 iteraid;ITERAID_Service_Install;c:\windows\system32\drivers\iteraid.sys [2009-02-06 26112]
                                      R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [2010-02-17 12872]
                                      R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2010-05-10 67656]
                                      R2 eac_notifysvc;eAcceleration Notification Service;c:\progra~1\EACCEL~1\FRAMEW~1\eac_svc.exe [2010-08-30 111672]
                                      R2 eac_productsvc;eAcceleration Product Manager Service;c:\progra~1\EACCEL~1\FRAMEW~1\eac_productsvc.exe [2010-08-30 263504]
                                      R2 sstsmonsvc;StopSign Antivirus Security Center Provider;c:\progra~1\EACCEL~1\FRAMEW~1\eac_svc.exe [2010-08-30 111672]
                                      R3 RLDesignVirtualAudioCableWdm;Live! Cam Virtual;c:\windows\system32\drivers\livecamv.sys [2009-02-10 31616]
                                      R3 V0380Afx;Creative Camera VF0380 Audio Effects Driver;c:\windows\system32\drivers\V0380Afx.sys [2009-02-10 142656]
                                      R3 V0380Aud;Creative Camera VF0380 Noise Cancellation APO;c:\windows\system32\drivers\V0380Aud.sys [2009-02-10 94976]
                                      R3 V0380Dev;Creative Camera VF0380 Driver;c:\windows\system32\drivers\V0380Vid.sys [2009-02-10 274400]
                                      R3 V0380Vfx;Creative Camera VF0380 Video VFX Driver;c:\windows\system32\drivers\V0380Vfx.sys [2009-02-10 7168]
                                      S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys --> c:\windows\system32\DRIVERS\Lbd.sys [?]
                                      S1 Ext2Fsd;Ext2Fsd; [x]
                                      S2 cvhsvc;Client Virtualization Handler;"c:\program files\Fichiers communs\Microsoft Shared\Virtualization Handler\CVHSVC.EXE" --> c:\program files\Fichiers communs\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [?]
                                      S2 gupdate1c9e3c8f159768a;Service Google Update (gupdate1c9e3c8f159768a);"c:\program files\Google\Update\GoogleUpdate.exe" /svc --> c:\program files\Google\Update\GoogleUpdate.exe [?]
                                      S2 sftlist;Application Virtualization Client;"c:\program files\Microsoft Application Virtualization Client\sftlist.exe" --> c:\program files\Microsoft Application Virtualization Client\sftlist.exe [?]
                                      S3 osppsvc;Office Software Protection Platform;"c:\program files\Fichiers communs\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE" --> c:\program files\Fichiers communs\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [?]
                                      S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfsxp.sys --> c:\windows\system32\DRIVERS\Sftfsxp.sys [?]
                                      S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplayxp.sys --> c:\windows\system32\DRIVERS\Sftplayxp.sys [?]
                                      S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirxp.sys --> c:\windows\system32\DRIVERS\Sftredirxp.sys [?]
                                      S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvolxp.sys --> c:\windows\system32\DRIVERS\Sftvolxp.sys [?]
                                      S3 sftvsa;Application Virtualization Service Agent;"c:\program files\Microsoft Application Virtualization Client\sftvsa.exe" --> c:\program files\Microsoft Application Virtualization Client\sftvsa.exe [?]

                                      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
                                      getPlusHelper REG_MULTI_SZ getPlusHelper
                                      .
                                      Contenu du dossier 'Tâches planifiées'

                                      2010-08-27 c:\windows\Tasks\AppleSoftwareUpdate.job
                                      - c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 15:50]

                                      2010-08-31 c:\windows\Tasks\User_Feed_Synchronization-{BAB26D2C-E239-4195-A4E3-A4670487BB46}.job
                                      - c:\windows\system32\msfeedssync.exe [2007-08-13 08:31]
                                      .
                                      .
                                      ------- Examen supplémentaire -------
                                      .
                                      uStart Page = hxxp://www.google.ca/
                                      mStart Page = hxxp://home.sweetim.com
                                      IE: Free YouTube Download - c:\documents and settings\Richard\Application Data\DVDVideoSoftIEHelpers\youtubedownload.htm
                                      IE: Free YouTube to Mp3 Converter - c:\documents and settings\Richard\Application Data\DVDVideoSoftIEHelpers\youtubetomp3.htm
                                      Trusted Zone: ketsujin.com\fighterace
                                      Trusted Zone: ketsujin.com\primary
                                      Trusted Zone: ketsujin.com\update
                                      Trusted Zone: ketsujin.com\www
                                      Trusted Zone: stormofaces.com\www
                                      DPF: Garmin Communicator Plug-In - hxxps://static.garmincdn.com/gcp/ie/2.9.2.0/GarminAxControl.CAB
                                      DPF: {6218F7B5-0D3A-48BA-AE4C-49DCFA63D400} - hxxp://www.myheritage.com/Genoogle/Components/ActiveX/SearchEngineQuery.dll
                                      FF - ProfilePath - c:\documents and settings\Richard\Application Data\Mozilla\Firefox\Profiles\kuthl9wl.default\
                                      FF - prefs.js: browser.startup.homepage - hxxp://search.myheritage.com/
                                      FF - prefs.js: keyword.URL - hxxp://search.myheritage.com/?orig=ds&q=
                                      FF - prefs.js: browser.search.selectedEngine - Chercher
                                      FF - prefs.js: keyword.enabled - true
                                      FF - plugin: c:\program files\Mozilla Firefox\plugins\npRLCT4Player.dll
                                      FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
                                      FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
                                      .
                                      - - - - ORPHELINS SUPPRIMES - - - -

                                      Toolbar-{FD2FD708-1F6F-4B68-B141-C5778F0C19BB} - c:\program files\Family Toolbar\tbcore3.dll
                                      WebBrowser-{6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - (no file)
                                      WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
                                      WebBrowser-{FD2FD708-1F6F-4B68-B141-C5778F0C19BB} - c:\program files\Family Toolbar\tbcore3.dll
                                      WebBrowser-{E9911EC6-1BCC-40B0-9993-E0EEA7F6953F} - (no file)
                                      HKLM-Run-DWQueuedReporting - c:\progra~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe
                                      AddRemove-Free Audio Dub_is1 - c:\program files\DVDVideoSoft\Free Audio Dub\unins000.exe
                                      AddRemove-Free Video Dub_is1 - c:\program files\DVDVideoSoft\Free Video Dub\unins000.exe
                                      AddRemove-iWinArcade - c:\program files\iWin Games\Uninstall.exe
                                      AddRemove-Security Task Manager - c:\program files\Security Task Manager\Uninstal.exe
                                      AddRemove-uTorrent - c:\program files\uTorrent\uTorrent.exe
                                      AddRemove-{CF40ACC5-E1BB-4aff-AC72-04C2F616BCA7} - c:\program files\NOS\bin\getPlus_HelperSvc.exe
                                      AddRemove-MétéoÉclair - c:\documents and settings\Richard\Local Settings\Application Data\MétéoMédia\MétéoÉclair\WeatherEye.exe

                                      **************************************************************************

                                      catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                                      Rootkit scan 2010-08-31 19:22
                                      Windows 5.1.2600 Service Pack 3 NTFS

                                      Recherche de processus cachés ...

                                      Recherche d'éléments en démarrage automatique cachés ...

                                      Recherche de fichiers cachés ...

                                      Scan terminé avec succès
                                      Fichiers cachés: 0

                                      **************************************************************************
                                      .
                                      --------------------- CLES DE REGISTRE BLOQUEES ---------------------

                                      [HKEY_USERS\S-1-5-21-995999656-3178953706-1520924960-1006\Software\Microsoft\SystemCertificates\AddressBook*]
                                      @Allowed: (Read) (RestrictedCode)
                                      @Allowed: (Read) (RestrictedCode)

                                      [HKEY_USERS\S-1-5-21-995999656-3178953706-1520924960-1006\Software\Sony Creative Software\M*e*d*i*a* *M*a*n*a*g*e*r* *f*o*r* *P*S*P*"!\3.0]
                                      "FRT"="a4giveKEQusYACCcRWXSi3aVgeSzuU1cuFXzzekooGQfXDw7pdKgkA=="
                                      "PLCK"="nHo+UzC16KEC1/R77WEpBsnANwv9fK3q"
                                      "Percents"="0.0009 0.2045 0.4081 0.7126 0.8964 0.9466 0.9567 "
                                      "Increment"=".001783"
                                      "PHSH"=""

                                      [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
                                      @Denied: (A 2) (Everyone)
                                      @="FlashBroker"
                                      "LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe,-101"

                                      [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
                                      "Enabled"=dword:00000001

                                      [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
                                      @="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe"

                                      [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
                                      @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

                                      [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
                                      @Denied: (A 2) (Everyone)
                                      @="IFlashBroker4"

                                      [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
                                      @="{00020424-0000-0000-C000-000000000046}"

                                      [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
                                      @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
                                      "Version"="1.0"
                                      .
                                      --------------------- DLLs chargées dans les processus actifs ---------------------

                                      - - - - - - - > 'winlogon.exe'(768)
                                      c:\program files\SUPERAntiSpyware\SASWINLO.DLL
                                      c:\documents and settings\Richard\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
                                      c:\documents and settings\Richard\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
                                      c:\documents and settings\Richard\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll

                                      - - - - - - - > 'explorer.exe'(4028)
                                      c:\windows\system32\webcheck.dll
                                      c:\windows\system32\WPDShServiceObj.dll
                                      c:\windows\system32\PortableDeviceTypes.dll
                                      c:\windows\system32\PortableDeviceApi.dll
                                      c:\windows\system32\eappprxy.dll
                                      .
                                      ------------------------ Autres processus actifs ------------------------
                                      .
                                      c:\windows\SOUNDMAN.EXE
                                      c:\windows\ALCWZRD.EXE
                                      c:\program files\eAcceleration\Station\station_bk.exe
                                      .
                                      **************************************************************************
                                      .
                                      Heure de fin: 2010-08-31 19:29:35 - La machine a redémarré
                                      ComboFix-quarantined-files.txt 2010-08-31 23:29

                                      Avant-CF: 17 655 324 672 octets libres
                                      Après-CF: 18 643 484 672 octets libres

                                      WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
                                      [boot loader]
                                      timeout=2
                                      default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
                                      [operating systems]
                                      c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
                                      UnsupportedDebug="do not select this" /debug
                                      multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect

                                      Current=3 Default=3 Failed=1 LastKnownGood=4 Sets=1,2,3,4
                                      - - End Of File - - 49FDA7E1396B7B547E003ACFB540DE33

                                      Lancé depuis: c:\documents and settings\Richard\Mes documents\asdehi.exe
                                      AV: AntiVir Desktop *On-access scanning enabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
                                      AV: StopSign Antivirus FREE TRIAL diagnostic version *On-access scanning disabled* (Updated) {3E1D4556-3240-40c8-BBED-64A8690A3FB4}
                                      .

                                      (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
                                      .

                                      c:\documents and settings\Richard\Application Data\Desktopicon
                                      c:\documents and settings\Richard\Application Data\PriceGong
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\1.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\a.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\b.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\c.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\d.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\e.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\f.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\g.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\h.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\i.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\J.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\k.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\l.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\m.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\mru.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\n.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\o.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\p.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\q.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\r.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\s.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\t.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\u.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\v.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\w.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\x.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\y.xml
                                      c:\documents and settings\Richard\Application Data\PriceGong\Data\z.xml
                                      C:\Install.exe
                                      c:\windows\system32\scrrnfr.dll
                                      c:\windows\system32\service
                                      c:\windows\system32\service\08092009_TIS17_SfFniAU.log

                                      .
                                      ((((((((((((((((((((((((((((( Fichiers créés du 2010-07-28 au 2010-08-31 ))))))))))))))))))))))))))))))))))))
                                      .

                                      2010-08-31 18:51 . 2010-08-31 19:34 -------- d-----w- c:\program files\ZHPDiag
                                      2010-08-31 16:47 . 2010-08-31 17:24 32 --sha-w- c:\windows\system32\drivers\fidbox2.dat
                                      2010-08-31 16:47 . 2010-08-31 17:24 32 --sha-w- c:\windows\system32\drivers\fidbox.dat
                                      2010-08-31 14:42 . 2009-12-14 16:44 39352 ----a-w- c:\windows\system32\drivers\CSVirtualDiskDrv.sys
                                      2010-08-31 14:42 . 2009-12-14 16:44 88632 ----a-w- c:\windows\system32\drivers\CSCrySec.sys
                                      2010-08-31 12:37 . 2010-04-29 19:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
                                      2010-08-31 12:37 . 2010-04-29 19:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
                                      2010-08-31 02:21 . 2010-08-31 02:22 -------- d-----w- c:\documents and settings\Richard\Application Data\eAcceleration
                                      2010-08-31 02:21 . 2010-08-31 02:21 -------- d-----w- c:\program files\Acceleration Software
                                      2010-08-31 02:20 . 2010-08-31 02:22 -------- d-----w- c:\documents and settings\All Users\Application Data\eAcceleration
                                      2010-08-31 02:20 . 2010-08-31 02:21 -------- d-----w- c:\program files\Fichiers communs\eAcceleration
                                      2010-08-31 02:20 . 2010-08-31 02:22 -------- d-----w- c:\program files\eAcceleration
                                      2010-08-31 02:20 . 2010-08-31 02:21 -------- d-----w- c:\program files\StopSign
                                      2010-08-31 00:33 . 2010-08-31 00:33 -------- d-----w- c:\documents and settings\All Users\Application Data\Alwil Software
                                      2010-08-30 20:40 . 2008-04-13 23:33 4255 ------w- c:\windows\system32\drivers\adv01nt5.dll
                                      2010-08-30 20:39 . 2010-08-30 20:39 -------- d-----w- c:\windows\EHome
                                      2010-08-30 15:09 . 2010-08-30 15:09 -------- d-----w- c:\program files\ESET
                                      2010-08-29 16:13 . 2010-08-29 16:13 -------- d-----w- c:\documents and settings\Richard\Application Data\SUPERAntiSpyware.com
                                      2010-08-29 16:13 . 2010-08-29 16:13 -------- d-----w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
                                      2010-08-29 13:23 . 2010-08-29 13:23 -------- d-----w- c:\windows\system32\wbem\Repository
                                      2010-08-29 13:23 . 2010-08-29 13:49 -------- d-----w- c:\documents and settings\Richard\Local Settings\Application Data\DVDVideoSoftTB
                                      2010-08-29 13:23 . 2010-08-29 13:23 -------- d-----w- c:\program files\DVDVideoSoftTB
                                      2010-08-29 13:23 . 2010-08-29 13:23 -------- d-----w- c:\program files\Sony Online Entertainment
                                      2010-08-29 13:22 . 2010-08-29 13:22 -------- d-----w- c:\program files\MP3 Player Product Tools 4.22
                                      2010-08-29 13:22 . 2010-08-29 13:22 -------- d-----w- c:\documents and settings\All Users\Application Data\Yahoo! Companion
                                      2010-08-29 13:22 . 2010-08-29 13:22 -------- d-----w- c:\program files\Microsoft Games
                                      2010-08-29 13:22 . 2010-08-29 13:22 -------- d-----w- c:\program files\Fichiers communs\ParallelGraphics
                                      2010-08-29 13:22 . 2010-08-29 13:22 -------- d-----w- c:\program files\Conduit
                                      2010-08-29 13:22 . 2010-08-29 13:22 -------- d-----w- c:\documents and settings\Richard\Local Settings\Application Data\Microsoft Help
                                      2010-08-29 13:21 . 2010-08-29 13:21 -------- d-----w- c:\program files\Fichiers communs\DVDVideoSoft
                                      2010-08-29 13:21 . 2010-08-29 13:21 -------- d-----w- c:\program files\DVDVideoSoft
                                      2010-08-29 13:21 . 2010-08-29 13:21 -------- d-----w- c:\documents and settings\Richard\Application Data\Avira
                                      2010-08-29 13:20 . 2010-08-29 13:20 -------- d-----w- c:\documents and settings\All Users\Application Data\rionix
                                      2010-08-29 13:20 . 2010-08-29 13:20 -------- d-----w- c:\documents and settings\All Users\Application Data\Intenium
                                      2010-08-29 13:20 . 2010-08-29 13:20 -------- d-----w- c:\documents and settings\All Users\Application Data\EyePowerGames
                                      2010-08-29 13:20 . 2010-08-29 13:20 -------- d-----w- c:\documents and settings\All Users\Application Data\NortonInstaller
                                      2010-08-29 13:20 . 2010-08-29 13:20 -------- d-----w- c:\documents and settings\All Users\Application Data\Norton
                                      2010-08-29 13:20 . 2010-08-29 13:20 -------- d-----w- c:\documents and settings\All Users\Application Data\iWin Games
                                      2010-08-29 13:20 . 2010-08-29 13:20 -------- d-----w- c:\documents and settings\All Users\Application Data\Absolutist
                                      2010-08-24 16:18 . 2010-08-29 13:17 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
                                      2010-08-24 14:00 . 2010-08-24 14:00 -------- d-----r- C:\MSOCache
                                      2010-08-23 00:28 . 2010-08-23 00:28 -------- d-----w- c:\documents and settings\Richard\Application Data\FissaSearch
                                      2010-08-17 16:50 . 2010-08-17 16:51 -------- d-----w- c:\documents and settings\Richard\Application Data\GARMIN
                                      2010-08-16 23:01 . 2010-08-27 17:27 -------- d-----w- c:\documents and settings\Richard\Local Settings\Application Data\moovida Air
                                      2010-08-16 23:01 . 2010-08-27 17:21 -------- d-----w- c:\documents and settings\Richard\Application Data\moovida-1
                                      2010-08-16 22:58 . 2010-08-28 14:10 -------- d-----w- c:\program files\Fluendo
                                      2010-08-14 01:02 . 2010-08-14 01:02 17 ----a-w- c:\windows\system32\shortcut_ex.dat
                                      2010-08-13 20:58 . 2010-08-13 20:58 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\DVDVideoSoftTB
                                      2010-08-11 12:56 . 2010-08-11 12:56 -------- d-----w- c:\documents and settings\Richard\Application Data\Skinux
                                      2010-08-11 12:56 . 2010-08-28 15:33 -------- d-----w- c:\documents and settings\Richard\Application Data\SoftGrid Client
                                      2010-08-10 13:17 . 2010-08-31 10:50 -------- d-----w- c:\program files\eMule
                                      2010-08-05 13:16 . 2010-08-31 00:33 -------- d-----w- c:\program files\Alwil Software

                                      .
                                      (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
                                      .
                                      2010-08-31 17:24 . 2010-08-31 16:47 32 --sha-w- c:\windows\system32\drivers\fidbox2.idx
                                      2010-08-31 17:24 . 2010-08-31 16:47 32 --sha-w- c:\windows\system32\drivers\fidbox.idx
                                      2010-08-31 16:58 . 2010-03-31 11:15 -------- d-----w- c:\documents and settings\All Users\Application Data\SecTaskMan
                                      2010-08-31 12:37 . 2009-10-12 13:48 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
                                      2010-08-30 20:15 . 2009-02-06 21:22 -------- d-----w- c:\program files\Windows Media Connect 2
                                      2010-08-30 18:13 . 2010-06-21 01:30 -------- d-----w- c:\documents and settings\Richard\Application Data\vlc
                                      2010-08-29 16:14 . 2010-08-29 16:14 63488 ----a-w- c:\documents and settings\Richard\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll
                                      2010-08-29 16:14 . 2010-08-29 16:14 52224 ----a-w- c:\documents and settings\Richard\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
                                      2010-08-29 16:14 . 2010-08-29 16:14 117760 ----a-w- c:\documents and settings\Richard\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
                                      2010-08-29 16:13 . 2009-09-29 16:43 -------- d-----w- c:\program files\SUPERAntiSpyware
                                      2010-08-29 15:45 . 2009-08-25 01:08 -------- d-----w- c:\program files\Lavasoft
                                      2010-08-29 13:32 . 2010-07-26 11:25 -------- d-----w- c:\program files\Microsoft Application Virtualization Client
                                      2010-08-29 13:31 . 2010-07-18 20:55 -------- d-----w- c:\program files\QuickTime
                                      2010-08-29 13:31 . 2010-05-18 17:21 -------- d-----w- c:\program files\iTunes
                                      2010-08-29 13:31 . 2009-12-25 21:36 720 ----a-w- c:\documents and settings\All Users\Application Data\ArcSoft\kodak-printcreations-22-080812-oem\acforall.dll
                                      2010-08-29 13:23 . 2010-07-26 11:24 -------- d-----w- c:\documents and settings\Richard\Application Data\TP
                                      2010-08-29 13:22 . 2010-06-30 01:35 -------- d-----w- c:\documents and settings\Richard\Application Data\Microsoft Games
                                      2010-08-29 13:22 . 2009-03-23 00:45 -------- d-----w- c:\program files\Yahoo!
                                      2010-08-29 13:17 . 2009-09-15 23:18 -------- d-----w- c:\program files\PacificPoker
                                      2010-08-28 15:45 . 2009-01-09 11:05 546724 ----a-w- c:\windows\system32\perfh00C.dat
                                      2010-08-28 15:45 . 2009-01-09 11:05 101154 ----a-w- c:\windows\system32\perfc00C.dat
                                      2010-08-28 15:35 . 2010-07-26 11:27 -------- d-----w- c:\windows\system32\config\systemprofile\Application Data\SoftGrid Client
                                      2010-08-28 14:33 . 2010-06-30 01:35 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Games
                                      2010-08-28 14:32 . 2010-03-06 15:21 -------- d-----w- c:\program files\iWin.com
                                      2010-08-27 22:12 . 2009-02-09 22:08 -------- d-----w- c:\program files\Fichiers communs\Adobe
                                      2010-08-27 17:41 . 2009-02-06 21:20 -------- d--h--w- c:\program files\InstallShield Installation Information
                                      2010-08-27 17:28 . 2010-05-29 22:19 -------- d-----w- c:\documents and settings\Richard\Application Data\Sony Online Entertainment
                                      2010-08-26 10:56 . 2009-02-06 21:41 -------- d-----w- c:\program files\Java
                                      2010-08-23 22:04 . 2009-09-15 23:18 -------- d-----w- c:\documents and settings\Richard\Application Data\PacificPoker
                                      2010-08-23 17:10 . 2010-04-18 14:10 -------- d-----w- c:\program files\iWin Games
                                      2010-08-16 22:58 . 2010-08-16 22:58 110592 ----a-r- c:\documents and settings\Richard\Application Data\Microsoft\Installer\{6084C211-01A1-464E-97A0-09772E122B50}\ARPPRODUCTICON.exe
                                      2010-08-16 22:58 . 2010-08-16 22:58 102400 ----a-r- c:\documents and settings\Richard\Application Data\Microsoft\Installer\{6084C211-01A1-464E-97A0-09772E122B50}\NewShortcut6_206049A8CD534D8B87D5F66190F05AB3.exe
                                      2010-08-16 22:58 . 2010-08-16 22:58 102400 ----a-r- c:\documents and settings\Richard\Application Data\Microsoft\Installer\{6084C211-01A1-464E-97A0-09772E122B50}\NewShortcut5_F4EE65F1A6CD4124B059E9FA9A98EBF7.exe
                                      2010-08-16 22:58 . 2010-08-16 22:58 102400 ----a-r- c:\documents and settings\Richard\Application Data\Microsoft\Installer\{6084C211-01A1-464E-97A0-09772E122B50}\NewShortcut4_A414E067513C43BA8786F3DC788BC961.exe
                                      2010-08-16 22:58 . 2010-08-16 22:58 102400 ----a-r- c:\documents and settings\Richard\Application Data\Microsoft\Installer\{6084C211-01A1-464E-97A0-09772E122B50}\NewShortcut3_BCB4A930B9F04A2480525A437423D92B.exe
                                      2010-08-16 22:58 . 2010-08-16 22:58 102400 ----a-r- c:\documents and settings\Richard\Application Data\Microsoft\Installer\{6084C211-01A1-464E-97A0-09772E122B50}\NewShortcut2_B4703F8364D440ADB60E472AD5422128.exe
                                      2010-08-15 22:52 . 2010-07-29 21:34 -------- d-----w- c:\program files\Widestream6
                                      2010-08-12 06:28 . 2010-07-26 13:40 -------- d-----w- c:\documents and settings\All Users\Application Data\VirtualizedApplications
                                      2010-08-11 20:08 . 2010-08-11 20:08 52224 ----a-w- c:\documents and settings\Richard\Application Data\Mozilla\Firefox\Profiles\kuthl9wl.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components\FFExternalAlert.dll
                                      2010-08-11 20:08 . 2010-08-11 20:08 101376 ----a-w- c:\documents and settings\Richard\Application Data\Mozilla\Firefox\Profiles\kuthl9wl.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components\RadioWMPCore.dll
                                      2010-08-11 18:26 . 2009-02-12 19:22 -------- d-----w- c:\documents and settings\Richard\Application Data\Image Zone Express
                                      2010-08-10 22:02 . 2009-10-16 12:58 -------- d-----w- c:\documents and settings\Richard\Application Data\ZoomBrowser EX
                                      2010-08-10 21:37 . 2009-10-16 12:51 -------- d-----w- c:\documents and settings\All Users\Application Data\ZoomBrowser
                                      2010-08-10 00:20 . 2009-02-23 00:32 -------- d-----w- c:\documents and settings\Richard\Application Data\dvdcss
                                      2010-08-08 17:56 . 2010-08-08 17:56 503808 ----a-w- c:\documents and settings\Richard\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-29f39144-n\msvcp71.dll
                                      2010-08-08 17:56 . 2010-08-08 17:56 499712 ----a-w- c:\documents and settings\Richard\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-29f39144-n\jmc.dll
                                      2010-08-08 17:56 . 2010-08-08 17:56 348160 ----a-w- c:\documents and settings\Richard\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-29f39144-n\msvcr71.dll
                                      2010-08-08 17:56 . 2010-08-08 17:56 61440 ----a-w- c:\documents and settings\Richard\Application Data\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-1ac28e3e-n\decora-sse.dll
                                      2010-08-08 17:56 . 2010-08-08 17:56 12800 ----a-w- c:\documents and settings\Richard\Application Data\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-1ac28e3e-n\decora-d3d.dll
                                      2010-07-29 21:35 . 2010-07-29 21:35 -------- d-----w- c:\documents and settings\Richard\Application Data\widestream
                                      2010-07-29 21:34 . 2010-07-29 21:34 -------- d-----w- c:\program files\OfferBox
                                      2010-07-26 11:28 . 2010-07-26 11:28 -------- d-----w- c:\windows\system32\config\systemprofile\Application Data\{90140011-0061-040C-0000-0000000FF1CE}
                                      2010-07-25 19:06 . 2010-03-01 22:50 -------- d-----w- c:\program files\iPod
                                      2010-07-25 19:06 . 2009-04-20 02:13 -------- d-----w- c:\program files\Fichiers communs\Apple
                                      2010-07-25 18:57 . 2010-07-25 18:57 73000 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 9.2.1.5\SetupAdmin.exe
                                      2010-07-25 18:56 . 2010-04-18 15:23 -------- d-----w- c:\program files\Safari
                                      2010-07-25 18:53 . 2010-07-25 18:53 71992 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\Safari 5.33.16.0\SetupAdmin.exe
                                      2010-07-18 20:53 . 2010-07-18 20:53 -------- d-----w- c:\program files\Apple Software Update
                                      2010-07-18 19:57 . 2009-10-13 16:15 -------- d-----w- c:\program files\CCleaner
                                      2010-06-30 12:32 . 2009-01-09 11:05 149504 ----a-w- c:\windows\system32\schannel.dll
                                      2010-06-24 12:25 . 2009-01-09 11:05 916480 ----a-w- c:\windows\system32\wininet.dll
                                      2010-06-24 09:02 . 2009-01-09 11:05 1852032 ----a-w- c:\windows\system32\win32k.sys
                                      2010-06-21 15:27 . 2009-01-09 11:05 354304 ----a-w- c:\windows\system32\drivers\srv.sys
                                      2010-06-17 14:03 . 2009-01-09 11:05 80384 ----a-w- c:\windows\system32\iccvid.dll
                                      2010-06-14 14:31 . 2009-02-06 21:14 744448 ----a-w- c:\windows\pchealth\helpctr\binaries\helpsvc.exe
                                      2010-06-14 07:42 . 2009-01-09 11:05 1172480 ----a-w- c:\windows\system32\msxml3.dll
                                      2009-01-09 11:05 . 2009-02-06 21:40 66408 ----a-w- c:\program files\mozilla firefox\components\jar50.dll
                                      2009-01-09 11:05 . 2009-02-06 21:40 54112 ----a-w- c:\program files\mozilla firefox\components\jsd3250.dll
                                      2009-01-09 11:05 . 2009-02-06 21:40 34688 ----a-w- c:\program files\mozilla firefox\components\myspell.dll
                                      2009-01-09 11:05 . 2009-02-06 21:40 46456 ----a-w- c:\program files\mozilla firefox\components\spellchk.dll
                                      2009-01-09 11:05 . 2009-02-06 21:40 171880 ----a-w- c:\program files\mozilla firefox\components\xpinstal.dll
                                      2006-06-16 01:33 . 2009-02-10 15:54 233472 ----a-w- c:\program files\mozilla firefox\plugins\CrazyTalk4Native.dll
                                      2006-05-25 23:43 . 2009-02-10 15:54 204895 ----a-w- c:\program files\mozilla firefox\plugins\ctdomemhelper.dll
                                      2005-09-29 19:41 . 2009-02-10 15:54 77824 ----a-w- c:\program files\mozilla firefox\plugins\ctframeplayerobject.dll
                                      2006-06-19 18:10 . 2009-02-10 15:54 426081 ----a-w- c:\program files\mozilla firefox\plugins\ctplayerobject.dll
                                      2005-02-02 17:19 . 2009-02-10 15:54 458752 ----a-w- c:\program files\mozilla firefox\plugins\imagickrt.dll
                                      2006-04-10 23:35 . 2009-02-10 15:54 139264 ----a-w- c:\program files\mozilla firefox\plugins\rlcontentclass.dll
                                      2005-11-09 16:10 . 2009-02-10 15:54 204800 ----a-w- c:\program files\mozilla firefox\plugins\RLMusicPacker.dll
                                      2005-11-09 16:42 . 2009-02-10 15:54 106496 ----a-w- c:\program files\mozilla firefox\plugins\RLMusicUnpacker.dll
                                      2006-01-04 16:22 . 2009-02-10 15:54 212992 ----a-w- c:\program files\mozilla firefox\plugins\RLVoicePacker.dll
                                      2006-01-04 16:21 . 2009-02-10 15:54 167936 ----a-w- c:\program files\mozilla firefox\plugins\RLVoiceUnpacker.dll
                                      2009-02-10 15:54 . 2009-02-10 15:54 75 --sh--r- c:\windows\CT4CET.bin
                                      .

                                      ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
                                      .
                                      .
                                      *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
                                      REGEDIT4

                                      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
                                      "{872b5b88-9db5-4310-bdd0-ac189557e5f5}"= "c:\program files\DVDVideoSoftTB\tbDVD1.dll" [2010-08-11 2736736]

                                      [HKEY_CLASSES_ROOT\clsid\{872b5b88-9db5-4310-bdd0-ac189557e5f5}]

                                      [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{2BEFBCCE-46A6-4950-BCB5-7062EAC6C9C9}]
                                      2010-07-05 16:43 134816 ----a-w- c:\program files\Widestream6\spointer\extensions\widestream6_air_ie.dll

                                      [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{872b5b88-9db5-4310-bdd0-ac189557e5f5}]
                                      2010-08-11 20:31 2736736 ----a-w- c:\program files\DVDVideoSoftTB\tbDVD1.dll

                                      [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E2A7BD67-0EAF-497f-B05B-748D7BF3C421}]
                                      2010-07-15 09:32 135840 ----a-w- c:\program files\Fluendo\Moovida\spointer\extensions\moovida_air_ie.dll

                                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
                                      "{872b5b88-9db5-4310-bdd0-ac189557e5f5}"= "c:\program files\DVDVideoSoftTB\tbDVD1.dll" [2010-08-11 2736736]

                                      [HKEY_CLASSES_ROOT\clsid\{872b5b88-9db5-4310-bdd0-ac189557e5f5}]

                                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                                      "igfxtray"="c:\windows\system32\igfxtray.exe" [2006-02-07 94208]
                                      "igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2006-02-07 77824]
                                      "igfxpers"="c:\windows\system32\igfxpers.exe" [2006-02-07 118784]
                                      "SoundMan"="SOUNDMAN.EXE" [2006-07-21 86016]
                                      "AlcWzrd"="ALCWZRD.EXE" [2006-05-04 2808832]
                                      "V0380Mon.exe"="c:\windows\V0380Mon.exe" [2007-08-30 28672]
                                      "webscan"="c:\program files\Acceleration Software\Anti-Virus\stopsignav.exe" [2010-08-24 1443168]
                                      "SoftwareStation"="c:\program files\eAcceleration\Station\station.exe" [2010-06-22 140624]
                                      "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760]
                                      "Adobe ARM"="c:\program files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]

                                      [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
                                      "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2009-01-09 15360]

                                      c:\documents and settings\Richard\Menu D'marrer\Programmes\D'marrage\
                                      OneNote 2010 - Capture d''cran et lancement.lnk - c:\program files\Fichiers communs\Microsoft Shared\Virtualization Handler\CVH.EXE [2010-2-28 3207072]

                                      c:\documents and settings\All Users\Menu D'marrer\Programmes\D'marrage\
                                      HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2005-5-12 282624]
                                      Logiciel Kodak EasyShare.lnk - c:\program files\Kodak\Kodak EasyShare software\bin\EasyShare.exe [2009-7-10 323584]

                                      [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
                                      "ForceClassicControlPanel"= 1 (0x1)

                                      [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
                                      "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

                                      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
                                      2009-09-03 22:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL

                                      [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
                                      BootExecute REG_MULTI_SZ PDBoot.exe\0autocheck autochk *

                                      [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
                                      "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
                                      "%windir%\\system32\\sessmgr.exe"=
                                      "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
                                      "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
                                      "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
                                      "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
                                      "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
                                      "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
                                      "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
                                      "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
                                      "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
                                      "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
                                      "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
                                      "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
                                      "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
                                      "c:\\Program Files\\Messenger\\msmsgs.exe"=
                                      "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
                                      "c:\\Program Files\\Sony\\Media Manager for PSP\\MediaManager.exe"=
                                      "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
                                      "c:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"=
                                      "c:\\Program Files\\iWin Games\\iWinGames.exe"=
                                      "c:\\Program Files\\iWin Games\\WebUpdater.exe"=
                                      "c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
                                      "c:\\Program Files\\Microsoft Games\\Zoo Tycoon 2 Trial Version\\zt2demoretail.exe"=
                                      "c:\\Program Files\\Microsoft Games\\Zoo Tycoon 2 Endangered Species Trial Version\\zt.exe"=
                                      "c:\\Program Files\\iTunes\\iTunes.exe"=
                                      "c:\\Program Files\\Fluendo\\Moovida\\Moovida.exe"=
                                      "c:\\WINDOWS\\system32\\mmc.exe"=

                                      [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
                                      "67:UDP"= 67:UDP:0.0.0.0/255.255.255.255:Enabled:DHCP Discovery Service

                                      R0 iteraid;ITERAID_Service_Install;c:\windows\system32\drivers\iteraid.sys [2009-02-06 26112]
                                      R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [2010-02-17 12872]
                                      R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2010-05-10 67656]
                                      R2 eac_notifysvc;eAcceleration Notification Service;c:\progra~1\EACCEL~1\FRAMEW~1\eac_svc.exe [2010-08-30 111672]
                                      R2 eac_productsvc;eAcceleration Product Manager Service;c:\progra~1\EACCEL~1\FRAMEW~1\eac_productsvc.exe [2010-08-30 263504]
                                      R2 sstsmonsvc;StopSign Antivirus Security Center Provider;c:\progra~1\EACCEL~1\FRAMEW~1\eac_svc.exe [2010-08-30 111672]
                                      R3 RLDesignVirtualAudioCableWdm;Live! Cam Virtual;c:\windows\system32\drivers\livecamv.sys [2009-02-10 31616]
                                      R3 V0380Afx;Creative Camera VF0380 Audio Effects Driver;c:\windows\system32\drivers\V0380Afx.sys [2009-02-10 142656]
                                      R3 V0380Aud;Creative Camera VF0380 Noise Cancellation APO;c:\windows\system32\drivers\V0380Aud.sys [2009-02-10 94976]
                                      R3 V0380Dev;Creative Camera VF0380 Driver;c:\windows\system32\drivers\V0380Vid.sys [2009-02-10 274400]
                                      R3 V0380Vfx;Creative Camera VF0380 Video VFX Driver;c:\windows\system32\drivers\V0380Vfx.sys [2009-02-10 7168]
                                      S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys --> c:\windows\system32\DRIVERS\Lbd.sys [?]
                                      S1 Ext2Fsd;Ext2Fsd; [x]
                                      S2 cvhsvc;Client Virtualization Handler;"c:\program files\Fichiers communs\Microsoft Shared\Virtualization Handler\CVHSVC.EXE" --> c:\program files\Fichiers communs\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [?]
                                      S2 gupdate1c9e3c8f159768a;Service Google Update (gupdate1c9e3c8f159768a);"c:\program files\Google\Update\GoogleUpdate.exe" /svc --> c:\program files\Google\Update\GoogleUpdate.exe [?]
                                      S2 sftlist;Application Virtualization Client;"c:\program files\Microsoft Application Virtualization Client\sftlist.exe" --> c:\program files\Microsoft Application Virtualization Client\sftlist.exe [?]
                                      S3 osppsvc;Office Software Protection Platform;"c:\program files\Fichiers communs\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE" --> c:\program files\Fichiers communs\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [?]
                                      S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfsxp.sys --> c:\windows\system32\DRIVERS\Sftfsxp.sys [?]
                                      S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplayx
                                      0
                                      • 1
                                      • 2

                                      Discussions similaires

                                      Faire slash et anti-slash sur clavier qwerty
                                      emir1

                                      4 réponses
                                      se debarasser de fausses alerte virus
                                      Evka

                                      1 réponse