Trojan/virus help!

Résolu
Bonjour,
Depuis un bon moment j'ai un pc qui est rempli de virus, trojan, spyware qui lance des pub à chaque fois que j'utilise un navigateur. C'était supportable tant que j'y touchais pas, mais les pubs et les nombreux ralentissements ont eu raison de ma patience (j'utilise ccleaner régulièrement, j'ai antivir et spyware terminator). Alors j'ai décidé de supprimer tout ça une bonne fois pour toute, je suis passé en mode sans echec avec prise en charge réseau, j'ai d'abord effectué un nettoyage avec ccleaner, ensuite un scan en ligne avec bitdefender puis antivir, s'en est suivit un scan avec spybott, et enfin un ultime nettoyage avec ccleaner. Inutile de préciser qu'il y avait beaucoup de fichiers suspects supprimés. Je suis alors revenu au mode normal et là les alertes redondantes d'antivir se déchaînent: tr/cryptxpack.gen avec 3 dll bizarres: fizelugo.dll woyadolu.dll (plus sur de l'orthographe exact pour celui-ci) et ronuruso.dll toutes situées dans le systeme32.

Je suis sous windows xp home sp3 Aidez moi svp!
Configuration: Windows XP
Firefox 3.0.4

76 réponses

Résumé de la discussion

Un ordinateur sous Windows XP est fortement infecté par des virus, trojans et spyware provoquant des publicités intempestives et des ralentissements, malgré des nettoyages et des scans répétés. En mode sans échec avec prise en charge réseau, l’utilisateur a mené des nettoyages et scans successifs (CCleaner, Bitdefender en ligne, Antivir, Spybot) qui ont isolé et supprimé de nombreux fichiers suspects. Parallèlement, des alertes récurrentes de Trojan.Vundo apparaissent, avec des DLL dans system32 et des entrées Run, nécessitant quarantaines et suppressions, souvent via Malwarebytes et des redémarrages jusqu'à disparition partielle. Des conseils complémentaires recommandent de désinstaller UsbFix et de choisir un seul antivirus pour éviter les conflits, tout en veillant à mettre à jour automatiquement le système et les navigateurs.

Bobot (l’IA à votre service)
  1. Okay je prends note, Merci Beaucoup pour ton aide, c''est vraiment cool, j'aurais vraiment galérer sans, thx!!!! :D
    0
    1. Modérateur
      Conserve MBAM. Il te servira à scanner les fichiers douteux en complément de l'antivirus et scanne le disque dur régulièrement.

      Comme navigateur, utilise plutôt Mozilla Firefox qu'Internet Explorer. Tu peux utiliser l'extension Noscript pour plus de sécurité.

      Change tes mots de passe vu que tu étais infecté.

      Vérifie que les mises à jour automatiques sont bien activées (Menu Démarrer, clique droit sur Poste de travail, Onglet Mises à jour automatiques).

      Tu peux aussi modifier le fichier Hosts pour améliorer la sécurité de ton PC :
      http://www.commentcamarche.net/faq/sujet 5993 modifier son fichier hosts
      https://blog.sosordi.net/category/articles

      Par rapport au P2P :
      http://www.libellules.ch/...

      Voici un dossier complet (A lire avec Adobe Reader ou Foxit Reader) :
      https://www.malekal.com/fichiers/projetantimalwares/prevention-protection.pdf

      Sois plus vigilant sur Internet ;)
      0
      1. Oui c'est surement ça ^^, je peux mettre comme résolu alors?!!
        0
        1. Modérateur
          A mon avis, tu avais des alertes car la quarantaine de ComboFix contenait des fichiers infectés et tu avais peut-être des points de restauration infectés.
          0
          1. Pour le moment rien à signaler, mais je pense que là c'est bon, si jamais l'alerte revenais quel outils je devrai utiliser?
            0
            1. Modérateur
              Tu peux supprimer ToolsCleaner.

              Encore des soucis ?
              0
              1. Okay c'est fait voici le rapport:

                [ Rapport ToolsCleaner version 2.2.9 (par A.Rothstein & dj QUIOU) ]

                -->- Recherche:

                C:\Combofix.txt: trouvé !
                C:\lopR.txt: trouvé !
                C:\TB.txt: trouvé !
                C:\UsbFix.txt: trouvé !
                C:\Lop SD: trouvé !
                C:\Qoobox: trouvé !
                C:\_OtMoveIt: trouvé !
                C:\Toolbar SD: trouvé !
                C:\Rsit: trouvé !
                C:\Documents and Settings\Administrateur\Bureau\ComboFix.exe: trouvé !
                C:\Documents and Settings\Administrateur\Mes documents\ComboFix.exe: trouvé !
                C:\Documents and Settings\HP_Propriétaire\Bureau\LopSD.exe: trouvé !
                C:\Documents and Settings\HP_Propriétaire\Bureau\ComboFix.exe: trouvé !
                C:\Documents and Settings\HP_Propriétaire\Bureau\ToolBarSD.exe: trouvé !
                C:\Documents and Settings\HP_Propriétaire\Bureau\OTMoveIt3.exe: trouvé !
                C:\Documents and Settings\HP_Propriétaire\Bureau\Rsit.exe: trouvé !
                C:\Documents and Settings\HP_Propriétaire\Bureau\Nouveau dossier\HijackThis.lnk: trouvé !
                C:\Documents and Settings\HP_Propriétaire\Bureau\Nouveau dossier\HJTInstall.exe: trouvé !
                C:\Documents and Settings\HP_Propriétaire\Bureau\Nouveau dossier\Nouveau dossier (2)\hijackthis.log: trouvé !
                C:\Program Files\UsbFix: trouvé !
                C:\Program Files\Trend Micro\HijackThis: trouvé !
                C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
                C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !
                C:\WINDOWS\msnfix.txt: trouvé !
                C:\WINDOWS\NIRCMD.exe: trouvé !

                ---------------------------------
                -->- Suppression:

                C:\Documents and Settings\Administrateur\Bureau\ComboFix.exe: supprimé !
                C:\Documents and Settings\Administrateur\Mes documents\ComboFix.exe: supprimé !
                C:\Documents and Settings\HP_Propriétaire\Bureau\LopSD.exe: supprimé !
                C:\Documents and Settings\HP_Propriétaire\Bureau\ComboFix.exe: ERREUR DE SUPPRESSION !!
                C:\Documents and Settings\HP_Propriétaire\Bureau\ToolBarSD.exe: supprimé !
                C:\Documents and Settings\HP_Propriétaire\Bureau\Nouveau dossier\HijackThis.lnk: supprimé !
                C:\Documents and Settings\HP_Propriétaire\Bureau\Nouveau dossier\HJTInstall.exe: supprimé !
                C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
                C:\Combofix.txt: supprimé !
                C:\lopR.txt: supprimé !
                C:\TB.txt: supprimé !
                C:\UsbFix.txt: supprimé !
                C:\Documents and Settings\HP_Propriétaire\Bureau\OTMoveIt3.exe: supprimé !
                C:\Documents and Settings\HP_Propriétaire\Bureau\Rsit.exe: supprimé !
                C:\Documents and Settings\HP_Propriétaire\Bureau\Nouveau dossier\Nouveau dossier (2)\hijackthis.log: supprimé !
                C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
                C:\WINDOWS\msnfix.txt: supprimé !
                C:\WINDOWS\NIRCMD.exe: supprimé !
                C:\Lop SD: supprimé !
                C:\Qoobox: supprimé !
                C:\_OtMoveIt: supprimé !
                C:\Toolbar SD: supprimé !
                C:\Rsit: supprimé !
                C:\Program Files\UsbFix: supprimé !
                C:\Program Files\Trend Micro\HijackThis: supprimé !

                Restauration annulée !
                0
                1. Modérateur
                  1/

                  ---> Désinstalle HijackThis.

                  ---> Menu Démarrer > Exécuter > Tape combofix /u et valide.

                  ---> Télécharge ToolsCleaner2 sur ton Bureau.
                  * Double-clique sur ToolsCleaner2.exe pour le lancer.
                  * Clique sur Recherche et laisse le scan agir.
                  * Clique sur Suppression pour finaliser.
                  * Tu peux, si tu le souhaites, te servir des Options Facultatives.
                  * Clique sur Quitter pour obtenir le rapport.
                  * Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

                  2/

                  ---> Télécharge et installe CCleaner (N'installe pas la Yahoo Toolbar) :
                  * Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
                  * Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage.
                  * Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs (Sauvegarde la base de registre).

                  3/

                  ---> Il est nécessaire de désactiver puis réactiver la restauration système pour la purger :
                  http://www.infos-du-net.com/forum/272480-11-desactiver-activer-restauration-systeme

                  ---> Je te conseille de créer un point de restauration que tu pourras utiliser plus tard si tu as un problème :
                  https://www.vulgarisation-informatique.com/creer-point-restauration.php
                  0
                  1. Modérateur
                    Alerte de la part de qui ?
                    0
                    1. De la part d'Antivir c'est une alerte trojan qui vient pas souvent.
                      0
                  2. Modérateur
                    Tu en es où ?
                    0
                    1. C'est correct mais l'alerte revient aléatoirement, c'est le dernier truc qui reste dessus, les autres programmes ne détectes aucunes infections.
                      0
                  3. Modérateur
                    Qui a trouvé des fichiers à supprimer ?
                    0
                    1. Spyware Terminator :p sinon un autre scan (scan d'ouverture) a été effectué dans la matinée et rien n'a été détecté!
                      0
                  4. oups! T'étais sûr de ton coup là hein? lol Effectivement, pas d'alerte pendant le scan mais il a tout de même trouvé des fichiers à supprimer lol! Merci Beaucoup!!!
                    0
                    1. Modérateur
                      Fais un scan et dis-moi ;)
                      0
                      1. Voilà c'est fait, IE7 fonctionne correctement mais n'ayant pas vraiment confiance en ce navigateur je ne m'y suis pas éternisé. L'alerte au démarrage de Firefox semble être partie pour la moment. Mais au moindre scan de spyware terminatoire je suis presque sûr de trouver d'autres alertes trojan.
                        0
                        1. Modérateur
                          ---> Désinstalle AD-Remover.

                          ---> Installe Java :
                          http://cds.sun.com/is-bin/INTERSHOP.enfinity/WFS/CDS-CDS_Developer-Site/en_US/-/USD/VerifyItem-Start/jre-6u11-windows-i586-p.exe?BundledLineItemUUID=eWFIBe.mztAAAAEeH61SQWli&OrderID=GihIBe.mBocAAAEeE61SQWli&ProductID=0TVIBe.o9RsAAAEdDu5Gb7FN&FileName=/jre-6u11-windows-i586-p.exe

                          ---> Mets à jour Adobe Reader :
                          https://get2.adobe.com/reader/otherversions/

                          ---> Mets à jour Internet Explorer :
                          http://www.microsoft.com/downloads/details.aspx?FamilyId=9AE91EBE-3385-447C-8A30-081805B2F90B&displaylang=fr

                          Comme tu as le SP3, tu dois faire une petite modification pour pouvoir installer Internet Explorer 7 :
                          http://www.technos-sources.com/tutorial-installer-ie7-apres-avoir-installe-sp3-windows-xp-98.aspx
                          0
                          1. Logfile of random's system information tool 1.05 (written by random/random)
                            Run by HP_Propriétaire at 2008-12-24 10:20:57
                            Microsoft Windows XP Édition familiale Service Pack 3
                            System drive C: has 21 GB (11%) free of 186 GB
                            Total RAM: 511 MB (26% free)

                            Logfile of Trend Micro HijackThis v2.0.2
                            Scan saved at 10:21:12, on 24/12/2008
                            Platform: Windows XP SP3 (WinNT 5.01.2600)
                            MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
                            Boot mode: Normal

                            Running processes:
                            C:\WINDOWS\System32\smss.exe
                            C:\WINDOWS\system32\winlogon.exe
                            C:\WINDOWS\system32\services.exe
                            C:\WINDOWS\system32\lsass.exe
                            C:\WINDOWS\system32\Ati2evxx.exe
                            C:\WINDOWS\system32\svchost.exe
                            C:\WINDOWS\System32\svchost.exe
                            C:\WINDOWS\system32\Ati2evxx.exe
                            C:\WINDOWS\system32\spoolsv.exe
                            C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
                            C:\WINDOWS\Explorer.EXE
                            C:\Program Files\a-squared Free\a2service.exe
                            C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
                            C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                            C:\Program Files\Bonjour\mDNSResponder.exe
                            C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
                            C:\Program Files\Spyware Terminator\sp_rsser.exe
                            C:\WINDOWS\system32\svchost.exe
                            C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
                            C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
                            C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                            C:\Program Files\QuickTime\QTTask.exe
                            C:\Program Files\TomTom HOME 2\HOMERunner.exe
                            C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                            C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe
                            C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
                            C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                            C:\Program Files\Windows Live\Contacts\wlcomm.exe
                            C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
                            C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
                            C:\Program Files\Mozilla Firefox\firefox.exe
                            C:\Documents and Settings\HP_Propriétaire\Bureau\RSIT.exe
                            C:\Program Files\Trend Micro\HijackThis\HP_Propriétaire.exe

                            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=pavilion&pf=desktop
                            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=pavilion&pf=desktop
                            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                            R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                            R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.bing.com/spresults.aspx
                            R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
                            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                            R3 - URLSearchHook: (no name) - {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL
                            R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn4\yt.dll
                            O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn4\yt.dll
                            O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                            O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                            O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
                            O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
                            O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                            O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                            O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
                            O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
                            O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\Program Files\Copernic Agent\CopernicAgentExt.dll
                            O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn4\yt.dll
                            O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
                            O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
                            O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
                            O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
                            O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                            O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe /boot
                            O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
                            O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\HOMERunner.exe"
                            O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                            O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe" -onlytray
                            O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                            O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
                            O8 - Extra context menu item: Chercher avec Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXT
                            O8 - Extra context menu item: Crawler Search - tbr:iemenu
                            O8 - Extra context menu item: Télécharger avec &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm
                            O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                            O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                            O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\Program Files\Copernic Agent\CopernicAgent.exe
                            O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\Program Files\Copernic Agent\CopernicAgent.exe
                            O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\Program Files\Copernic Agent\CopernicAgent.exe
                            O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
                            O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
                            O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\HP_Propriétaire\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk
                            O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                            O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                            O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                            O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                            O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                            O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                            O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
                            O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - https://www.eset.com/
                            O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
                            O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
                            O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                            O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
                            O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
                            O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
                            O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                            O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                            O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                            O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
                            O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
                            O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                            O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
                            O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
                            O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
                            O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
                            O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
                            0
                            1. info.txt logfile of random's system information tool 1.05 2008-12-24 10:21:18

                              ======Uninstall list======

                              -->C:\PROGRA~1\Yahoo!\Common\UNYT_W~1.EXE
                              -->C:\Program Files\Nero\Nero 7\\nero\uninstall\UNNERO.exe /UNINSTALL
                              -->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
                              -->c:\WINDOWS\system32\\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}
                              -->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
                              -->C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
                              -->C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
                              -->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
                              -->C:\WINDOWS\UNRecode.exe /UNINSTALL
                              -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{39DA87A1-0B26-4562-A70C-2A6147366E47}\Setup.exe"
                              -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9F765BD0-B900-4EDE-A90B-61C8A9E95C42}\Setup.exe"
                              -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BAD59025-5B73-4E12-B789-0028C5A573C2}\Setup.exe"
                              -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E06E4F4E-72D6-4497-BFFD-BCB43077C2F4}\setup.exe" -l0x40c -uninst
                              -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
                              Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
                              Adobe Reader 8.1.3 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81300000003}
                              Ad-remover-->C:\Program Files\Ad-remover\Uninstal.exe
                              Agere Systems PCI Soft Modem-->agrsmdel
                              Apple Mobile Device Support-->MsiExec.exe /I{EC4455AB-F155-4CC1-A4C5-88F3777F9886}
                              Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
                              Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
                              a-squared Free 3.5-->"C:\Program Files\a-squared Free\unins000.exe"
                              Assistant de connexion Windows Live-->MsiExec.exe /I{D6E592B3-67DA-4BBB-9783-E1838FB253A2}
                              ATI - Software Uninstall Utility-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
                              ATI Catalyst Control Center-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{055EE59D-217B-43A7-ABFF-507B966405D8}\setup.exe" -l0x3f3f
                              ATI Control Panel-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
                              ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
                              Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE
                              Beneton Movie GIF 1.1.2-->"C:\Program Files\Beneton Movie GIF\unins000.exe"
                              Bonjour-->MsiExec.exe /I{8A25392D-C5D2-4E79-A2BD-C15DDC5B0959}
                              Canon MP150-->"C:\WINDOWS\system32\CanonMP Uninstaller Information\{CA9A3609-3ECC-4574-8824-A8161A71A603}\DelDrv.exe" /U:{CA9A3609-3ECC-4574-8824-A8161A71A603} /L0x000c
                              Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
                              Code de la Route-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{9A9ED286-6A6F-441D-AF19-C872C5FD0EA2}
                              Complément Microsoft Word pour Microsoft Works Suite-->MsiExec.exe /I{7054ED85-498D-4D20-906F-14646AEC5581}
                              Connexion Facile à Internet-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{8105684D-8CA6-440D-8F58-7E5FD67A499D} /l1036
                              Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
                              DiscJuggler-->C:\Program Files\Padus\DiscJuggler\Uninstall.exe
                              ESET Online Scanner-->C:\WINDOWS\system32\OnlineScannerUninstaller.exe
                              Extension de Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{0CA6047C-D28B-4295-834A-07C52BA20C2D}
                              Galerie de photos Windows Live-->MsiExec.exe /X{43563ACB-371B-4C58-8979-B192B390424C}
                              Gif Movie Gear 4-->"C:\Program Files\Visicom Media\GifMovieGear 4\uninst-gmg.exe"
                              Help and Support Additions-->C:\PROGRA~1\HELPAN~1\UNWISE.EXE C:\PROGRA~1\HELPAN~1\INSTALL.LOG
                              High Definition Audio Driver Package - KB835221-->C:\WINDOWS\$NtUninstallKB835221WXP$\spuninst\spuninst.exe
                              HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
                              HP Deskjet Preloaded Printer Drivers-->MsiExec.exe /X{F419D20A-7719-4639-8E30-C073A040D878}
                              HP Image Zone 4.2-->C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat
                              HP Image Zone Plus 4.2-->C:\Program Files\HP\Digital Imaging\{5E1494D4-3562-4FFB-B35C-600F80F6934C}\setup\hpzscr01.exe -datfile hpdscr01.dat
                              HP PSC & OfficeJet 4.0-->"C:\Program Files\HP\Digital Imaging\{A1062847-0846-427A-92A1-BB8251A91E91}\setup\hpzscr01.exe" -datfile hposcr04.dat
                              HP Software Update-->MsiExec.exe /X{457791C5-D702-4143-A7B2-2744BE9573F2}
                              HPIZ402-->MsiExec.exe /X{8D9768AE-DE42-4A04-A461-2361A58C384D}
                              Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
                              Installation Windows Live-->MsiExec.exe /I{3CCB732A-E472-4CF9-B1EE-F18365341FE0}
                              InterVideo WinDVD Creator 2-->"C:\Program Files\InstallShield Installation Information\{2FCE4FC5-6930-40E7-A4F1-F862207424EF}\setup.exe" REMOVEALL
                              InterVideo WinDVD Player-->"C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL
                              iTunes-->MsiExec.exe /I{318AB667-3230-41B5-A617-CB3BF748D371}
                              Jasc Paint Shop Pro 9-->MsiExec.exe /I{F843C6A3-224D-4615-94F8-3C461BD9AEA0}
                              Junk Mail filter update-->MsiExec.exe /I{4AB8B41B-3AF1-46BE-99B0-0ACD3B300C0A}
                              KBD-->C:\HP\KBD\KBD.EXE uninstalled
                              K-Lite Codec Pack 3.9.5 (Full)-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
                              Ma-Config.com-->MsiExec.exe /X{D1874C3B-A0A5-446F-B76C-5265F11D8A1A}
                              Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
                              Menus intelligents (Windows Live Toolbar)-->MsiExec.exe /X{0CC70FEF-5068-4CD5-B4DE-86FFD98EC929}
                              Messenger Plus! 3-->"C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /Remove
                              Messenger Plus! Live & Sponsor (CiD)-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
                              Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
                              Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
                              Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
                              Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
                              Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
                              Microsoft Kernel-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe"
                              Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
                              Microsoft Search Enhancement Pack-->MsiExec.exe /I{299CF645-48C7-4FA1-8BCD-5CE200CF180D}
                              Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
                              Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
                              Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
                              Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
                              Microsoft Visual J# .NET Redistributable Package 1.1-->MsiExec.exe /X{1A655D51-1423-48A3-B748-8F5A0BE294C8}
                              Microsoft Word 2002-->MsiExec.exe /I{911B040C-6000-11D3-8CFE-0050048383C9}
                              Microsoft Works-->MsiExec.exe /I{E6BAE954-487E-488B-BC4E-2E69E54E8117}
                              Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB956390)-->"C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB958215)-->"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
                              Mise à jour de sécurité pour Windows XP (KB960714)-->"C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuninst.exe"
                              Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
                              Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
                              Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
                              MobileMe Control Panel-->MsiExec.exe /I{2604C0F9-BFD3-4BA0-9EB5-22537C648F03}
                              Mozilla Firefox (3.0)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
                              MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
                              MSVC80_x86-->MsiExec.exe /I{212748BB-0DA5-46DE-82A1-403736DC9F27}
                              MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
                              MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
                              MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
                              Nero 7 Ultra Edition-->MsiExec.exe /X{CF097717-F174-4144-954A-FBC4BF301036}
                              neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
                              Nokia Connectivity Cable Driver-->MsiExec.exe /X{4F1DCA42-2030-437C-A94E-736692A499C1}
                              Nokia PC Suite-->C:\Documents and Settings\All Users\Application Data\Installations\{9C05FA75-0337-4523-AA57-9D3511018887}\Nokia_PC_Suite_rel_6_86_9_3_wu_fre.exe
                              Nokia PC Suite-->MsiExec.exe /I{9C05FA75-0337-4523-AA57-9D3511018887}
                              Norton Internet Security-->MsiExec.exe /I{F396D99B-1FA8-4ED1-A006-B7A5972E06E2}
                              Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
                              Package de pilotes Windows - Nokia Modem (03/05/2008 3.7)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokia_blue_635B28EFCFA9395123BB1C251595CB16129E2560\nokia_bluetooth.inf
                              Package de pilotes Windows - Nokia Modem (03/13/2008 6.86.0.1)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokbtmdm_28F2EAC406838DA65AFF6C6886FE9FE96AEF5186\nokbtmdm.inf
                              Package de pilotes Windows - Nokia pccsmcfd (10/12/2007 6.85.4.0)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccsmcfd_4A1E30386F4D0DEC8F5DF262CFBD8845EEBAB175\pccsmcfd.inf
                              PaltalkScene-->"C:\WINDOWS\Paltalk Messenger\uninstall.exe" "/U:C:\Program Files\Paltalk Messenger\irunin.xml"
                              PC Connectivity Solution-->MsiExec.exe /I{AC599724-5755-48C1-ABE7-ABB857652930}
                              PC-Doctor pour Windows-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1F7CCFA3-D926-4882-B2A5-A0217ED25597}\Setup.exe"
                              PCI Audio Driver-->cmuninst.exe
                              Photo et imagerie HP 3.5 - HP Devices-->C:\Program Files\HP\Digital Imaging\{15B9DC72-73F9-4d99-9E28-848D66DA8D99}\setup\hpzscr01.exe -datfile hpiscr01.dat
                              PhotoFiltre Studio-->"C:\Program Files\PhotoFiltre Studio\Uninst.exe"
                              PhotoFiltre-->"C:\Program Files\PhotoFiltre\Uninst.exe"
                              Pinnacle VideoSpin-->MsiExec.exe /X{4EDB1CA5-983F-4FC3-A8E3-E34981E05A60}
                              PPMate Network TV 2.3.1.69-->C:\Program Files\PPMate\uninst.exe
                              Pro Evolution Soccer 2009-->MsiExec.exe /X{A8DB611A-D80E-450D-85F6-3ACDD164BE31}
                              PS2-->C:\WINDOWS\system32\ps2.exe uninstall
                              Python 2.2 combined Win32 extensions-->C:\Python22\Lib\SITE-P~1\UNWISE~1.EXE C:\Python22\Lib\SITE-P~1\w32inst.log
                              Python 2.2.1-->C:\Python22\UNWISE.EXE C:\Python22\INSTALL.LOG
                              QuickTime-->MsiExec.exe /I{F958CA02-BB40-4007-894B-258729456EE4}
                              Safari-->MsiExec.exe /I{C9D96682-5A4D-45FA-BA3E-DDCB2B0CB868}
                              SC Video Cut and Split 4.2.0.2-->"C:\Program Files\SoftwareClub.ws\SC Video Cut and Split\unins000.exe"
                              Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
                              Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
                              Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
                              Sélecteur d'installation de Microsoft Works 2004-->C:\Program Files\Microsoft Works Suite 2004\Setup\Launcher.exe /ARP E:\
                              Shareaza 2.4.0.0-->"C:\Program Files\Shareaza\Uninstall\unins000.exe"
                              SiS VGA Utilities-->Rundll32 SiSInst.dll,Uninstall VGA,R
                              Sonic RecordNow!-->MsiExec.exe /I{9541FED0-327F-4DF0-8B96-EF57EF622F19}
                              SopCast 3.0.1-->C:\Program Files\SopCast\uninst.exe
                              Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins001.exe"
                              Spyware Terminator-->"C:\Program Files\Spyware Terminator\unins000.exe"
                              Surligneur (Windows Live Toolbar)-->MsiExec.exe /X{81B5F83F-2291-48B0-8375-36B63A9BF5B0}
                              TomTom HOME-->C:\Program Files\TomTom HOME 2\Uninstall TomTom HOME.exe
                              TreeSize Professional 5.1.1-->"C:\Program Files\JAM Software\TreeSize Professional\unins000.exe"
                              Trojan Remover 6.7.5-->"C:\Program Files\Trojan Remover\unins000.exe"
                              VC_MergeModuleToMSI-->MsiExec.exe /I{900A92BA-19EF-4A34-86CF-7B6C85BDD971}
                              VCRedistSetup-->MsiExec.exe /I{3921A67A-5AB1-4E48-9444-C71814CF3027}
                              Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
                              Windows Live Call-->MsiExec.exe /I{01523985-2098-43AF-9C97-12B07BE02A9B}
                              Windows Live Communications Platform-->MsiExec.exe /I{F69E83CF-B440-43F8-89E6-6EA80712109B}
                              Windows Live Favorites pour Windows Live Toolbar-->MsiExec.exe /X{786C4AD1-DCBA-49A6-B0EF-B317A344BD66}
                              Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}
                              Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
                              Windows Live Sync-->MsiExec.exe /X{67D0313C-4F15-437D-9A2D-C1564088A26A}
                              Windows Live Toolbar-->MsiExec.exe /X{915809D6-1F93-45F2-9699-5F1DA64DC24B}
                              Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
                              Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
                              Yahoo! Extras-->C:\PROGRA~1\Yahoo!\Common\unyext.exe
                              Yahoo! Install Manager-->C:\WINDOWS\system32\regsvr32 /u C:\PROGRA~1\Yahoo!\Common\YINSTH~1.DLL
                              Yahoo! Internet Mail-->C:\WINDOWS\system32\regsvr32 /u /s C:\PROGRA~1\Yahoo!\Common\ymmapi.dll
                              Yahoo! Messenger-->C:\PROGRA~1\Yahoo!\MESSEN~1\UNWISE.EXE /U C:\PROGRA~1\Yahoo!\MESSEN~1\INSTALL.LOG
                              Yahoo! Toolbar-->C:\PROGRA~1\Yahoo!\Common\UNYT_W~1.EXE

                              ======Security center information======

                              AV: Avira AntiVir PersonalEdition

                              System event log

                              Computer Name: NOM-641695C7437
                              Event Code: 6009
                              Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 3 Multiprocessor Free.

                              Record Number: 2694
                              Source Name: EventLog
                              Time Written: 20081201064540.000000+060
                              Event Type: Informations
                              User:

                              Computer Name: NOM-641695C7437
                              Event Code: 7036
                              Message: Le service Acquisition d'image Windows (WIA) est entré dans l'état : en cours d'exécution.

                              Record Number: 2693
                              Source Name: Service Control Manager
                              Time Written: 20081130214817.000000+060
                              Event Type: Informations
                              User:

                              Computer Name: NOM-641695C7437
                              Event Code: 4226
                              Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.

                              Record Number: 2692
                              Source Name: Tcpip
                              Time Written: 20081130184255.000000+060
                              Event Type: Avertissement
                              User:

                              Computer Name: NOM-641695C7437
                              Event Code: 7036
                              Message: Le service Service COM de gravage de CD IMAPI est entré dans l'état : arrêté.

                              Record Number: 2691
                              Source Name: Service Control Manager
                              Time Written: 20081130170023.000000+060
                              Event Type: Informations
                              User:

                              Computer Name: NOM-641695C7437
                              Event Code: 7036
                              Message: Le service Service COM de gravage de CD IMAPI est entré dans l'état : en cours d'exécution.

                              Record Number: 2690
                              Source Name: Service Control Manager
                              Time Written: 20081130170019.000000+060
                              Event Type: Informations
                              User:

                              Application event log

                              Computer Name: NOM-641695C7437
                              Event Code: 1
                              Message:
                              Record Number: 8483
                              Source Name: ccSetMgr
                              Time Written: 20081212152943.000000+060
                              Event Type: Informations
                              User: AUTORITE NT\SYSTEM

                              Computer Name: NOM-641695C7437
                              Event Code: 26
                              Message:
                              Record Number: 8482
                              Source Name: ccSetMgr
                              Time Written: 20081212152943.000000+060
                              Event Type: Informations
                              User: AUTORITE NT\SYSTEM

                              Computer Name: NOM-641695C7437
                              Event Code: 26
                              Message:
                              Record Number: 8481
                              Source Name: ccProxy
                              Time Written: 20081212152942.000000+060
                              Event Type: Informations
                              User: AUTORITE NT\SYSTEM

                              Computer Name: NOM-641695C7437
                              Event Code: 1002
                              Message: Application bloquée iexplore.exe, version 6.0.2900.5512, module bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

                              Record Number: 8480
                              Source Name: Application Hang
                              Time Written: 20081212131257.000000+060
                              Event Type: erreur
                              User:

                              Computer Name: NOM-641695C7437
                              Event Code: 1002
                              Message: Application bloquée iexplore.exe, version 6.0.2900.5512, module bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

                              Record Number: 8479
                              Source Name: Application Hang
                              Time Written: 20081212131257.000000+060
                              Event Type: erreur
                              User:

                              ======Environment variables======

                              "ComSpec"=%SystemRoot%\system32\cmd.exe
                              "Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\PC Connectivity Solution;c:\Python22;C:\Program Files\PC-Doctor for Windows\services;C:\Program Files\ATI Technologies\ATI Control Panel;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\Pinnacle\Shared Files;C:\Program Files\QuickTime\QTSystem
                              "windir"=%SystemRoot%
                              "FP_NO_HOST_CHECK"=NO
                              "OS"=Windows_NT
                              "PROCESSOR_ARCHITECTURE"=x86
                              "PROCESSOR_LEVEL"=15
                              "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 3 Stepping 4, GenuineIntel
                              "PROCESSOR_REVISION"=0304
                              "NUMBER_OF_PROCESSORS"=2
                              "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
                              "TEMP"=%SystemRoot%\TEMP
                              "TMP"=%SystemRoot%\TEMP
                              "CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip
                              "QTJAVA"=C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip

                              -----------------EOF-----------------
                              0
                          2. Modérateur
                            Bien.

                            ---> Supprime le dossier RSIT situé dans C:\

                            - Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.

                            - Double-clique sur RSIT.exe afin de lancer le programme.

                            - Clique sur Continue à l'écran Disclaimer.

                            - Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

                            - Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

                            Note : Les rapports sont sauvegardés dans le dossier C:\rsit.

                            PS : Ne poste pas les deux rapports dans le même message.
                            0
                            1. Avira AntiVir Personal
                              Report file date: mardi 23 décembre 2008 19:36

                              Scanning for 1113533 virus strains and unwanted programs.

                              Licensed to: Avira AntiVir PersonalEdition Classic
                              Serial number: 0000149996-ADJIE-0001
                              Platform: Windows XP
                              Windows version: (Service Pack 3) [5.1.2600]
                              Boot mode: Normally booted
                              Username: HP_Propriétaire
                              Computer name: NOM-641695C7437

                              Version information:
                              BUILD.DAT : 8.2.0.337 16934 Bytes 18/11/2008 13:05:00
                              AVSCAN.EXE : 8.1.4.10 315649 Bytes 25/11/2008 17:58:56
                              AVSCAN.DLL : 8.1.4.0 40705 Bytes 17/07/2008 20:02:57
                              LUKE.DLL : 8.1.4.5 164097 Bytes 17/07/2008 20:02:58
                              LUKERES.DLL : 8.1.4.0 12033 Bytes 17/07/2008 20:02:58
                              ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 00:46:31
                              ANTIVIR1.VDF : 7.1.0.197 1170432 Bytes 07/12/2008 18:00:46
                              ANTIVIR2.VDF : 7.1.0.250 342528 Bytes 18/12/2008 18:09:20
                              ANTIVIR3.VDF : 7.1.1.25 194560 Bytes 23/12/2008 12:59:00
                              Engineversion : 8.2.0.45
                              AEVDF.DLL : 8.1.0.6 102772 Bytes 15/10/2008 17:57:32
                              AESCRIPT.DLL : 8.1.1.19 336252 Bytes 12/12/2008 23:52:14
                              AESCN.DLL : 8.1.1.5 123251 Bytes 07/11/2008 17:58:22
                              AERDL.DLL : 8.1.1.3 438645 Bytes 06/11/2008 08:35:44
                              AEPACK.DLL : 8.1.3.4 393591 Bytes 13/11/2008 09:30:00
                              AEOFFICE.DLL : 8.1.0.33 196987 Bytes 12/12/2008 23:52:11
                              AEHEUR.DLL : 8.1.0.75 1524087 Bytes 12/12/2008 23:52:10
                              AEHELP.DLL : 8.1.2.0 119159 Bytes 18/11/2008 17:57:25
                              AEGEN.DLL : 8.1.1.8 323956 Bytes 12/12/2008 23:52:06
                              AEEMU.DLL : 8.1.0.9 393588 Bytes 15/10/2008 17:57:25
                              AECORE.DLL : 8.1.5.2 172405 Bytes 28/11/2008 17:58:27
                              AEBB.DLL : 8.1.0.3 53618 Bytes 15/10/2008 17:57:23
                              AVWINLL.DLL : 1.0.0.12 15105 Bytes 17/07/2008 20:02:57
                              AVPREF.DLL : 8.0.2.0 38657 Bytes 17/07/2008 20:02:57
                              AVREP.DLL : 8.0.0.2 98344 Bytes 31/07/2008 20:01:45
                              AVREG.DLL : 8.0.0.1 33537 Bytes 17/07/2008 20:02:57
                              AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23
                              AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 17/07/2008 20:02:57
                              SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
                              SMTPLIB.DLL : 1.2.0.23 28929 Bytes 17/07/2008 20:02:59
                              NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10
                              RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 17/07/2008 20:02:53
                              RCTEXT.DLL : 8.0.52.0 86273 Bytes 17/07/2008 20:02:53

                              Configuration settings for the scan:
                              Jobname..........................: Manual Selection
                              Configuration file...............: C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\PROFILES\folder.avp
                              Logging..........................: low
                              Primary action...................: interactive
                              Secondary action.................: ignore
                              Scan master boot sector..........: on
                              Scan boot sector.................: on
                              Boot sectors.....................: C:, D:,
                              Process scan.....................: on
                              Scan registry....................: on
                              Search for rootkits..............: on
                              Scan all files...................: All files
                              Scan archives....................: on
                              Recursion depth..................: 20
                              Smart extensions.................: on
                              Macro heuristic..................: on
                              File heuristic...................: medium

                              Start of the scan: mardi 23 décembre 2008 19:36

                              Starting search for hidden objects.
                              '129926' objects were checked, '0' hidden objects were found.

                              The scan of running processes will be started
                              Scan process 'avscan.exe' - '1' Module(s) have been scanned
                              Scan process 'firefox.exe' - '1' Module(s) have been scanned
                              Scan process 'wlcomm.exe' - '1' Module(s) have been scanned
                              Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
                              Scan process 'NclRSSrv.exe' - '1' Module(s) have been scanned
                              Scan process 'NclUSBSrv.exe' - '1' Module(s) have been scanned
                              Scan process 'ServiceLayer.exe' - '1' Module(s) have been scanned
                              Scan process 'alg.exe' - '1' Module(s) have been scanned
                              Scan process 'PCSuite.exe' - '1' Module(s) have been scanned
                              Scan process 'TeaTimer.exe' - '1' Module(s) have been scanned
                              Scan process 'HOMERunner.exe' - '1' Module(s) have been scanned
                              Scan process 'QTTask.exe' - '1' Module(s) have been scanned
                              Scan process 'atiptaxx.exe' - '1' Module(s) have been scanned
                              Scan process 'avgnt.exe' - '1' Module(s) have been scanned
                              Scan process 'SpywareTerminatorShield.Exe' - '1' Module(s) have been scanned
                              Scan process 'wdfmgr.exe' - '1' Module(s) have been scanned
                              Scan process 'svchost.exe' - '1' Module(s) have been scanned
                              Scan process 'sp_rsser.exe' - '1' Module(s) have been scanned
                              Scan process 'SeaPort.exe' - '1' Module(s) have been scanned
                              Scan process 'mDNSResponder.exe' - '1' Module(s) have been scanned
                              Scan process 'AppleMobileDeviceService.exe' - '1' Module(s) have been scanned
                              Scan process 'avguard.exe' - '1' Module(s) have been scanned
                              Scan process 'a2service.exe' - '1' Module(s) have been scanned
                              Scan process 'explorer.exe' - '1' Module(s) have been scanned
                              Scan process 'sched.exe' - '1' Module(s) have been scanned
                              Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
                              Scan process 'svchost.exe' - '1' Module(s) have been scanned
                              Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
                              Scan process 'svchost.exe' - '1' Module(s) have been scanned
                              Scan process 'svchost.exe' - '1' Module(s) have been scanned
                              Scan process 'svchost.exe' - '1' Module(s) have been scanned
                              Scan process 'svchost.exe' - '1' Module(s) have been scanned
                              Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
                              Scan process 'lsass.exe' - '1' Module(s) have been scanned
                              Scan process 'services.exe' - '1' Module(s) have been scanned
                              Scan process 'winlogon.exe' - '1' Module(s) have been scanned
                              Scan process 'csrss.exe' - '1' Module(s) have been scanned
                              Scan process 'smss.exe' - '1' Module(s) have been scanned
                              38 processes with 38 modules were scanned

                              Starting master boot sector scan:
                              Master boot sector HD0
                              [INFO] No virus was found!
                              Master boot sector HD1
                              [INFO] No virus was found!
                              [WARNING] System error [21]: Le périphérique n'est pas prêt.
                              Master boot sector HD2
                              [INFO] No virus was found!
                              [WARNING] System error [21]: Le périphérique n'est pas prêt.
                              Master boot sector HD3
                              [INFO] No virus was found!
                              [WARNING] System error [21]: Le périphérique n'est pas prêt.
                              Master boot sector HD4
                              [INFO] No virus was found!
                              [WARNING] System error [21]: Le périphérique n'est pas prêt.

                              Start scanning boot sectors:
                              Boot sector 'C:\'
                              [INFO] No virus was found!
                              Boot sector 'D:\'
                              [INFO] No virus was found!

                              Starting to scan the registry.
                              The registry was scanned ( '60' files ).

                              Starting the file scan:

                              Begin scan in 'C:\' <HP_PAVILION>
                              C:\hiberfil.sys
                              [WARNING] The file could not be opened!
                              C:\pagefile.sys
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\admparse.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\advpack.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\browseui.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\corpol.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\custsat.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\dxtmsft.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\dxtrans.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\extmgr.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\hmmapi.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\icardie.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\ie4uinit.exe
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\ieakeng.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\ieaksie.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\ieakui.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\ieapfltr.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\iedkcs32.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\iedw.exe
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\ieencode.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\ieframe.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\iepeers.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\ieproxy.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\iernonce.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\iertutil.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\iesetup.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\ieudinit.exe
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\ieui.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\iexplore.exe
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\imgutil.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\inseng.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\jscript.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\jsproxy.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\licmgr10.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\msfeeds.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\msfeedsbs.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\msfeedssync.exe
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\mshta.exe
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\mshtml.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\mshtmled.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\mshtmler.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\msls31.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\msrating.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\mstime.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\occache.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\pngfilt.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\shdocvw.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\shlwapi.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\spmsg.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\spuninst.exe
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\spupdsvc.exe
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\url.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\urlmon.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\vbscript.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\vgx.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\webcheck.dll
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\winfxdocobj.exe
                              [WARNING] The file could not be opened!
                              C:\21399cc7f6b0c15c8b17\wininet.dll
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\asferror.dll
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\legitlibm.dll
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\mpvis.dll
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\setup_wm.exe
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\spuninst.exe
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\spupdsvc.exe
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\unregmp2.exe
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\wmccds.exe
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\wmccfg.exe
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\wmccpl.dll
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\wmcsci.dll
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\wmdbexport.exe
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\wmerror.dll
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\wmlaunch.exe
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\wmp.dll
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\wmpasf.dll
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\wmpband.dll
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\wmpdxm.dll
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\wmpeffects.dll
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\wmpenc.exe
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\wmpencen.dll
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\wmplayer.exe
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\wmploc.dll
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\wmpmde.dll
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\wmpnetwk.exe
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\wmpnscfg.exe
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\wmpnssci.dll
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\wmpps.dll
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\wmpshare.exe
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\wmpshell.dll
                              [WARNING] The file could not be opened!
                              C:\4052c18bad4efb3fd4\wmpsrcwp.dll
                              [WARNING] The file could not be opened!
                              C:\Documents and Settings\Océa.ane\Bureau\InstallAVv_770522170802.exe
                              [DETECTION] Is the TR/FraudPack.hhe Trojan
                              [NOTE] The file was moved to '49c43a42.qua'!
                              C:\Qoobox\Quarantine\C\WINDOWS\system32\nujamizi.dll.vir
                              [DETECTION] Is the TR/Dldr.Agent.awdq Trojan
                              [NOTE] The file was moved to '49bb4a14.qua'!
                              C:\Qoobox\Quarantine\C\WINDOWS\system32\viveveno.dll.vir
                              [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
                              [NOTE] The file was moved to '49c74a0f.qua'!
                              C:\WINDOWS\system32\nubutafi.dll.tmp
                              [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
                              [NOTE] The file was moved to '49b35720.qua'!
                              C:\WINDOWS\system32\zenafasi.dll.tmp
                              [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
                              [NOTE] The file was moved to '49bf5854.qua'!
                              C:\WINDOWS\system32\drivers\sptd.sys
                              [WARNING] The file could not be opened!
                              Begin scan in 'D:\' <HP_RECOVERY>

                              End of the scan: mardi 23 décembre 2008 22:36
                              Used time: 2:59:24 Hour(s)

                              The scan has been done completely.

                              19348 Scanning directories
                              737705 Files were scanned
                              5 viruses and/or unwanted programs were found
                              0 Files were classified as suspicious:
                              0 files were deleted
                              0 files were repaired
                              5 files were moved to quarantine
                              0 files were renamed
                              90 Files cannot be scanned
                              737610 Files not concerned
                              20384 Archives were scanned
                              94 Warnings
                              5 Notes
                              129926 Objects were scanned with rootkit scan
                              0 Hidden objects were found
                              0
                              1. Modérateur
                                ---> Double-clique sur l'icône d'Antivir (Parapluie) dans la barre des tâches.

                                ---> Dans Antivir, choisis Outils puis Configuration.

                                ---> Coche Mode Expert et coche Rech. Rootkit au dém. de la recherche à droite dans Autres réglages.

                                ---> Fais un scan complet et poste le rapport.
                                0
                                1. Voilà le rapport, durant le scan il y a eu pas mal d'alertes mais ce qui me surprend c'est qu'il y a eu aucune détection, donc aucune suppression:

                                  Malwarebytes' Anti-Malware 1.31
                                  Database version: 1535
                                  Windows 5.1.2600 Service Pack 3

                                  23/12/2008 13:56:58
                                  mbam-log-2008-12-23 (13-56-58).txt

                                  Scan type: Full Scan (C:\|D:\|)
                                  Objects scanned: 282696
                                  Time elapsed: 3 hour(s), 28 minute(s), 45 second(s)

                                  Memory Processes Infected: 0
                                  Memory Modules Infected: 0
                                  Registry Keys Infected: 0
                                  Registry Values Infected: 0
                                  Registry Data Items Infected: 0
                                  Folders Infected: 0
                                  Files Infected: 0

                                  Memory Processes Infected:
                                  (No malicious items detected)

                                  Memory Modules Infected:
                                  (No malicious items detected)

                                  Registry Keys Infected:
                                  (No malicious items detected)

                                  Registry Values Infected:
                                  (No malicious items detected)

                                  Registry Data Items Infected:
                                  (No malicious items detected)

                                  Folders Infected:
                                  (No malicious items detected)

                                  Files Infected:
                                  (No malicious items detected)
                                  0
                                  • 1
                                  • 2
                                  • 3
                                  • 4