Comment bloquer les pubs !!

Télécharge hostsman ou le plugins adblock.

Salut.

Cela peut être un effet indésirable engendré par une infection; :) Auquel cas, AdBlock ou autres seront inutiles.

Pour en être sûr :

HijackThis :

▶ Télécharge /// ---> HijackThis <--- \\

▶ Tout est expliqué sur ce site web pour l'installer et l'utiliser correctement.

▶ Poste le rapport obtenu dans le bloc note dans ta prochaine réponse.

Comment copier/coller le rapport :

▶ Quand tu as le rapport à l écran, tu fais ctrl A pour "sélectionner tout" puis ctrl C pour "copier".

▶ Ensuite tu viens sur le forum pour me répondre et tu fais ctrl V pour "coller" le rapport.

++

ok merci je vais essayer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:01:47, on 14/11/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Steam\Steam.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HJT.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,userinit.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: NP Helper Class - {35B8D58C-B0CB-46b0-BA64-05B3804E4E86} - C:\Program Files\Internet Saving Optimizer\3.8.1.4690\NPIEAddOn.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: System Search Dispatcher - {CDBFB47B-58A8-4111-BF95-06178DCE326D} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [PromoReg] C:\WINDOWS\Temp\_ex-08.exe
O4 - HKLM\..\Run: [17947504] C:\Documents and Settings\All Users\Application Data\17947504\17947504.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [FACE VC] C:\DOCUME~1\valou\APPLIC~1\AUDIOC~1\DASHEGGS.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=GRxdm081YYFR
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-5/myWebFaceInitialSetup1.0.1.3.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - http://fichiers.touslesdrivers.com/maconfig/MaConfig_3_5_1_0.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

Ok. Plusieurs choses.

LopSD : Recherche :

Il y a des infections LOP dans ton PC.

▶ Télécharge et enregistre lopSD sur le Bureau

▶ Double-clique sur Lop S&D

▶ Fais l'installation

▶ Ferme toutes les applications

▶ Lance-le par un double-clic sur le raccourci qui est sur le bureau

▶ Avec VISTA => clic-droit et => Exécuter en tant qu'administrateur

▶ Tape F pour français , puis presse entrée

▶ Tape 1

▶ Presse Entrée

▶ Le PC va redémarrer

* Note : si l'antivirus annonce une infection dans TEMP , l'ignorer

▶ Attend l'apparition du rapport

▶ Copie le rapport et colle-le dans la réponse

* le rapport se trouve aussi à C:\lopR

++

( 40 Processes )

iexplore.exe ~ [PID:3596]
iexplore.exe ~ [PID:2168]
iexplore.exe ~ [PID:624]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\ALLUSE~1\APPLIC~1\comp two long internet
C:\DOCUME~1\valou\Cookies\valou@advertstream[2].txt
C:\DOCUME~1\valou\Cookies\valou@adultfriendfinder[2].txt
C:\DOCUME~1\valou\Cookies\valou@advertising[2].txt

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-11-14 14:14:52
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

[F:599][D:99]-> C:\DOCUME~1\valou\LOCALS~1\Temp
[F:201][D:0]-> C:\DOCUME~1\valou\Cookies
[F:6853][D:10]-> C:\DOCUME~1\valou\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 14/11/2009|14:15 - Option : [1]

--------------------\\ Fin du rapport a 14:15:33

lopSD : nettoyage

▶ Relance Lop S&D

▶ Choisis cette fois-ci l'option 2 (Suppression)

▶ Ne ferme pas la fenêtre lors de la suppression !

▶ Poste le rapport généré (C:\lopR.txt)

* (Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

==============================

ToolbarSD : recherche

▶ Télécharge Toolbar-S&D (de Team IDN) sur ton Bureau

▶ Lance l'installation du programme en exécutant le fichier téléchargé.

▶ Sous XP : Double-clique sur le raccourci de Toolbar-S&D.

▶ Sous Vista : Fais un clic droit sur ToolbarSD et sélectionne "Exécuter en tant qu'administrateur".

▶ Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.

▶ Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.

▶ Poste le rapport généré. (C:\TB.txt)

++

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 5200+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : valou ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1351 [VPS 091113-1] 4.8.1351 (Activated)
C:\ (Local Disk) - NTFS - Total:78 Go (Free:46 Go)
D:\ (Local Disk) - NTFS - Total:219 Go (Free:219 Go)
E:\ (CD or DVD)
F:\ (USB)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 14/11/2009|14:24 )

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\DOCUME~1\valou\Cookies\valou@advertstream[2].txt
Supprime! - C:\DOCUME~1\valou\Cookies\valou@adultfriendfinder[2].txt
Supprime! - C:\DOCUME~1\valou\Cookies\valou@advertising[2].txt
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\comp two long internet

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

--------------------\\ Listing des dossiers dans APPLIC~1

[17/09/2009|12:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[30/09/2009|17:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\17947504
[22/07/2009|16:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[17/09/2009|12:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[17/09/2009|12:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[23/09/2009|17:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ma-config.com
[31/08/2009|10:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[29/10/2009|21:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype

[22/07/2009|15:06] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[02/09/2009|13:08] C:\DOCUME~1\JESSII~1\APPLIC~1\Adobe
[19/09/2009|14:01] C:\DOCUME~1\JESSII~1\APPLIC~1\AdobeUM
[26/08/2009|11:39] C:\DOCUME~1\JESSII~1\APPLIC~1\Ahead
[22/10/2009|14:02] C:\DOCUME~1\JESSII~1\APPLIC~1\Apple Computer
[23/10/2009|07:49] C:\DOCUME~1\JESSII~1\APPLIC~1\dvdcss
[25/08/2009|09:47] C:\DOCUME~1\JESSII~1\APPLIC~1\Identities
[23/10/2009|20:39] C:\DOCUME~1\JESSII~1\APPLIC~1\LimeWire
[25/08/2009|09:49] C:\DOCUME~1\JESSII~1\APPLIC~1\Macromedia
[03/09/2009|12:41] C:\DOCUME~1\JESSII~1\APPLIC~1\Microsoft
[25/08/2009|09:52] C:\DOCUME~1\JESSII~1\APPLIC~1\Mozilla
[30/10/2009|16:18] C:\DOCUME~1\JESSII~1\APPLIC~1\Skype
[30/10/2009|16:14] C:\DOCUME~1\JESSII~1\APPLIC~1\skypePM
[26/08/2009|09:38] C:\DOCUME~1\JESSII~1\APPLIC~1\Sun
[23/10/2009|10:39] C:\DOCUME~1\JESSII~1\APPLIC~1\vlc
[26/08/2009|11:55] C:\DOCUME~1\JESSII~1\APPLIC~1\WinRAR

[22/07/2009|15:06] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[23/09/2009|17:04] C:\DOCUME~1\LOCALS~1\APPLIC~1\twain_32

[22/07/2009|15:06] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[24/09/2009|09:11] C:\DOCUME~1\NETWOR~1\APPLIC~1\twain_32

[22/08/2009|21:02] C:\DOCUME~1\valou\APPLIC~1\Adobe
[27/08/2009|13:40] C:\DOCUME~1\valou\APPLIC~1\AdobeUM
[22/07/2009|16:19] C:\DOCUME~1\valou\APPLIC~1\Ahead
[17/09/2009|12:27] C:\DOCUME~1\valou\APPLIC~1\Apple Computer
[24/09/2009|16:51] C:\DOCUME~1\valou\APPLIC~1\audiocornbait
[09/10/2009|09:36] C:\DOCUME~1\valou\APPLIC~1\dvdcss
[22/07/2009|15:09] C:\DOCUME~1\valou\APPLIC~1\Identities
[22/07/2009|15:10] C:\DOCUME~1\valou\APPLIC~1\Macromedia
[03/10/2009|12:15] C:\DOCUME~1\valou\APPLIC~1\Microsoft
[25/08/2009|14:51] C:\DOCUME~1\valou\APPLIC~1\Mozilla
[13/11/2009|12:41] C:\DOCUME~1\valou\APPLIC~1\Skype
[13/11/2009|08:39] C:\DOCUME~1\valou\APPLIC~1\skypePM
[27/08/2009|13:40] C:\DOCUME~1\valou\APPLIC~1\Sun
[24/09/2009|12:23] C:\DOCUME~1\valou\APPLIC~1\SystemRequirementsLab
[22/10/2009|13:16] C:\DOCUME~1\valou\APPLIC~1\vlc
[22/07/2009|15:46] C:\DOCUME~1\valou\APPLIC~1\WinRAR

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[10/11/2009 21:13][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[14/11/2009 10:26][--ah-----] C:\WINDOWS\tasks\SA.DAT
[28/08/2001 15:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[22/07/2009|16:10] C:\Program Files\Adobe
[22/07/2009|16:18] C:\Program Files\Ahead
[22/07/2009|15:10] C:\Program Files\Alwil Software
[17/09/2009|12:08] C:\Program Files\Apple Software Update
[21/08/2009|13:21] C:\Program Files\ATI Technologies
[23/09/2009|17:27] C:\Program Files\CCleaner
[22/07/2009|15:03] C:\Program Files\ComPlus Applications
[24/09/2009|16:52] C:\Program Files\DIFX
[13/09/2009|14:59] C:\Program Files\DoubleD
[29/10/2009|21:11] C:\Program Files\Fichiers communs
[22/07/2009|15:10] C:\Program Files\Free
[06/09/2009|07:14] C:\Program Files\FunWebProducts
[21/08/2009|12:44] C:\Program Files\InstallShield Installation Information
[14/10/2009|06:43] C:\Program Files\Internet Explorer
[13/09/2009|14:59] C:\Program Files\Internet Saving Optimizer
[17/09/2009|12:09] C:\Program Files\iPod
[17/09/2009|12:09] C:\Program Files\iTunes
[26/08/2009|09:39] C:\Program Files\Java
[01/11/2009|11:34] C:\Program Files\Lavalys
[26/08/2009|09:39] C:\Program Files\LimeWire
[23/09/2009|17:34] C:\Program Files\ma-config.com
[21/08/2009|12:08] C:\Program Files\Messenger
[26/08/2009|09:02] C:\Program Files\Microsoft
[22/07/2009|15:06] C:\Program Files\microsoft frontpage
[06/09/2009|10:44] C:\Program Files\Microsoft Office
[21/08/2009|13:18] C:\Program Files\Movie Maker
[13/11/2009|21:34] C:\Program Files\Mozilla Firefox
[24/09/2009|16:17] C:\Program Files\MSI
[02/09/2009|13:18] C:\Program Files\MSN
[22/07/2009|15:03] C:\Program Files\MSN Gaming Zone
[05/09/2009|19:29] C:\Program Files\MyWebSearch
[21/08/2009|12:04] C:\Program Files\NetMeeting
[22/07/2009|15:03] C:\Program Files\Online Services
[21/08/2009|19:44] C:\Program Files\Outlook Express
[17/09/2009|12:08] C:\Program Files\QuickTime
[21/08/2009|11:59] C:\Program Files\Realtek
[22/07/2009|15:05] C:\Program Files\Services en ligne
[24/09/2009|16:57] C:\Program Files\Setup Files
[29/10/2009|21:11] C:\Program Files\Skype
[14/11/2009|11:49] C:\Program Files\Steam
[24/09/2009|12:23] C:\Program Files\SystemRequirementsLab
[14/11/2009|13:52] C:\Program Files\Trend Micro
[22/07/2009|15:09] C:\Program Files\Uninstall Information
[03/09/2009|13:09] C:\Program Files\VideoLAN
[21/08/2009|12:54] C:\Program Files\Winamp
[26/08/2009|09:02] C:\Program Files\Windows Live
[21/08/2009|12:06] C:\Program Files\Windows Media Player
[21/08/2009|12:04] C:\Program Files\Windows NT
[22/07/2009|15:05] C:\Program Files\WindowsUpdate
[24/09/2009|09:23] C:\Program Files\WinPcap
[22/07/2009|15:45] C:\Program Files\WinRAR
[22/07/2009|15:06] C:\Program Files\xerox

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[22/07/2009|16:11] C:\Program Files\Fichiers communs\Adobe
[22/07/2009|16:18] C:\Program Files\Fichiers communs\Ahead
[23/09/2009|17:30] C:\Program Files\Fichiers communs\Apple
[31/08/2009|10:48] C:\Program Files\Fichiers communs\Designer
[21/08/2009|12:44] C:\Program Files\Fichiers communs\InstallShield
[25/09/2009|09:31] C:\Program Files\Fichiers communs\Microsoft Shared
[22/07/2009|15:04] C:\Program Files\Fichiers communs\MSSoap
[22/07/2009|19:20] C:\Program Files\Fichiers communs\ODBC
[22/07/2009|15:04] C:\Program Files\Fichiers communs\Services
[29/10/2009|21:11] C:\Program Files\Fichiers communs\Skype
[22/07/2009|19:20] C:\Program Files\Fichiers communs\SpeechEngines
[31/08/2009|10:48] C:\Program Files\Fichiers communs\System
[26/08/2009|08:58] C:\Program Files\Fichiers communs\Windows Live

--------------------\\ Process

( 37 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-11-14 14:24:55
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

[F:599][D:99]-> C:\DOCUME~1\valou\LOCALS~1\Temp
[F:198][D:0]-> C:\DOCUME~1\valou\Cookies
[F:6871][D:10]-> C:\DOCUME~1\valou\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 14/11/2009|14:15 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 14/11/2009|14:25 - Option : [2]

--------------------\\ Fin du rapport a 14:25:26

-----------\\ ToolBar S&D 1.2.9 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 5200+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : valou ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1351 [VPS 091113-1] 4.8.1351 (Activated)
C:\ (Local Disk) - NTFS - Total:78 Go (Free:46 Go)
D:\ (Local Disk) - NTFS - Total:219 Go (Free:219 Go)
E:\ (CD or DVD)
F:\ (USB)

"C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
Option : [1] ( 14/11/2009|14:27 )

-----------\\ Recherche de Fichiers / Dossiers ...

C:\Program Files\FunWebProducts
C:\Program Files\FunWebProducts\ScreenSaver
C:\Program Files\FunWebProducts\Shared
C:\Program Files\FunWebProducts\ScreenSaver\Images
C:\Program Files\MyWebSearch
C:\Program Files\MyWebSearch\bar
C:\Program Files\MyWebSearch\bar\History
C:\Program Files\MyWebSearch\bar\Settings
C:\Program Files\MyWebSearch\bar\History\search3
C:\Program Files\MyWebSearch\bar\Settings\setting2.htm
C:\Program Files\MyWebSearch\bar\Settings\settings.dat
C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat

-----------\\ Extensions

(valou) - {C2DCA7EB-22D2-4FD2-86A9-F99FCC8122BB} => fbstoolbar
(valou) - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} => adblockplus

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="https://www.google.fr/?gws_rd=ssl"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

1 - "C:\ToolBar SD\TB_1.txt" - 14/11/2009|14:28 - Option : [1]

-----------\\ Fin du rapport a 14:28:13,64

Ok. Sans vouloir être méchant, tu sembles les accumuler ! :)

ToolbarSD : nettoyage

▶ Relance Toolbar-S&D.

▶ Tape sur "2" puis valide en appuyant sur "Entrée".

/!\ Ne ferme pas la fenêtre lors de la suppression /!\

▶ Un rapport sera généré, poste son contenu ici.

NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
Tape explorer puis valide.

Attention donc aux programmes que tu installes. Jette un oeil ici également :

Ce qu'il faut savoir sur les toolbars (barres d'outils)

=======================================

▶ Télécharge Malwarebytes Anti-Malware (MBAM): /// ---> Malwarebytes Anti-Malware <--- \\

▶ Installe-le en vérifiant que la case de mise à jour soit bien cochée en fin d'installation.

▶ Après la mise à jour, lance-le et coche "Examen Rapide". Puis "Rechercher".

▶ Si MBAM trouve quelque chose: fais "Voir les résultats" puis "Supprimer la sélection".

▶ Poste le rapport généré.

=======================================

▶ Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.

http://images.malwareremoval.com/random/RSIT.exe

▶ Double-clique sur RSIT.exe.

▶ Clique sur Continue à l'écran Disclaimer.

▶ Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

▶ Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

▶ A noter: Les rapports se trouvent également ici: C:\rsit.

++

-----------\\ ToolBar S&D 1.2.9 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 5200+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : valou ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1351 [VPS 091114-0] 4.8.1351 (Activated)
C:\ (Local Disk) - NTFS - Total:78 Go (Free:46 Go)
D:\ (Local Disk) - NTFS - Total:219 Go (Free:219 Go)
E:\ (CD or DVD)
F:\ (USB)

"C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
Option : [2] ( 14/11/2009|14:33 )

-----------\\ SUPPRESSION

Supprime! - C:\Program Files\FunWebProducts\ScreenSaver
Supprime! - C:\Program Files\FunWebProducts\Shared
Supprime! - C:\Program Files\MyWebSearch\bar
Supprime! - C:\Program Files\FunWebProducts
Supprime! - C:\Program Files\MyWebSearch

-----------\\ Recherche de Fichiers / Dossiers ...

-----------\\ Extensions

(valou) - {C2DCA7EB-22D2-4FD2-86A9-F99FCC8122BB} => fbstoolbar
(valou) - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} => adblockplus

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="https://www.google.fr/?gws_rd=ssl"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="https://www.msn.com/fr-fr/"

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

1 - "C:\ToolBar SD\TB_1.txt" - 14/11/2009|14:28 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 14/11/2009|14:33 - Option : [2]

-----------\\ Fin du rapport a 14:33:53,26

Malwarebytes' Anti-Malware 1.41
Version de la base de données: 3168
Windows 5.1.2600 Service Pack 3

14/11/2009 14:43:03
mbam-log-2009-11-14 (14-43-03).txt

Type de recherche: Examen rapide
Eléments examinés: 110689
Temps écoulé: 6 minute(s), 4 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 2
Clé(s) du Registre infectée(s): 24
Valeur(s) du Registre infectée(s): 5
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 31
Fichier(s) infecté(s): 686

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
C:\Program Files\Internet Saving Optimizer\3.8.1.4690\NPIEAddOn.dll (Adware.DoubleD) -> Delete on reboot.
C:\Program Files\Internet Saving Optimizer\3.8.1.4690\NPCommon.dll (Adware.DoubleD) -> Delete on reboot.

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\explorerbar.funredirector (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\explorerbar.funredirector.1 (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{480098c6-f6ad-4c61-9b5c-2bae228a34d1} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{877f3eab-4462-44df-8475-6064eafd7fbf} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{35b8d58c-b0cb-46b0-ba64-05b3804e4e86} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{c28a0312-c403-417b-a425-a915bc0519cd} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{35b8d58c-b0cb-46b0-ba64-05b3804e4e86} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{35b8d58c-b0cb-46b0-ba64-05b3804e4e86} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{883dfc00-8a21-411d-956c-73a4e4b7d16f} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{25b8d58c-b0cb-46b0-ba64-05b3804e4e86} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{cdbfb47b-58a8-4111-bf95-06178dce326d} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{cdbfb47b-58a8-4111-bf95-06178dce326d} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{19127ad2-394b-70f5-c650-b97867baa1f7} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{43bf8cd1-c5d5-2230-7bb2-98f22c2b7dc6} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{494e6cec-7483-a4ee-0938-895519a84bc7} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{19127ad2-394b-70f5-c650-b97867baa1f7} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{43bf8cd1-c5d5-2230-7bb2-98f22c2b7dc6} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{494e6cec-7483-a4ee-0938-895519a84bc7} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\DoubleD (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Internet Saving Optimizer (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Media Access Startup (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\DoubleD (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Internet Saving Optimizer (Adware.DoubleD) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions\{2224e955-00e9-4613-a844-ce69fccaae91} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network\UID (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\17947504 (Rogue.Multiple) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\PromoReg (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RList (Malware.Trace) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Documents and Settings\All Users\Application Data\17947504 (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Documents and Settings\LocalService\Application Data\twain_32 (Trojan.Zbot) -> Quarantined and deleted successfully.
C:\Documents and Settings\NetworkService\Application Data\twain_32 (Trojan.Zbot) -> Quarantined and deleted successfully.
C:\Program Files\DoubleD (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\DoubleD\GamingHarbor Toolbar (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer (Adware.DoubleD) -> Delete on reboot.
C:\Program Files\Internet Saving Optimizer\3.8.1.4690 (Adware.DoubleD) -> Delete on reboot.
C:\Program Files\Internet Saving Optimizer\3.8.1.4690\Data (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.8.1.4690\FF (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.8.1.4690\FF\chrome (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.8.1.4690\FF\chrome\content (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.8.1.4690\FF\components (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\twain_32 (Backdoor.Bot) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\DoubleD (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020 (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Cache (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Skins (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690 (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\Internet Saving Optimizer (Adware.DoubleD) -> Delete on reboot.
C:\Documents and Settings\valou\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690 (Adware.DoubleD) -> Delete on reboot.
C:\Documents and Settings\valou\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690 (Adware.DoubleD) -> Files: 603 -> Delete on reboot.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Media Access Startup (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Media Access Startup\2.0.0.1050 (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\Media Access Startup (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\Media Access Startup\2.0.0.1050 (Adware.DoubleD) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\Program Files\Internet Saving Optimizer\3.8.1.4690\NPIEAddOn.dll (Adware.DoubleD) -> Delete on reboot.
C:\Documents and Settings\Jessiiica'R\Local Settings\Temp\TMPA.tmp (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Temp\TMPA.tmp (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\17947504\17947504 (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\17947504\pc17947504ins (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Documents and Settings\LocalService\Application Data\twain_32\user.ds (Trojan.Zbot) -> Quarantined and deleted successfully.
C:\Documents and Settings\NetworkService\Application Data\twain_32\user.ds (Trojan.Zbot) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.8.1.4690\adwpx.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.8.1.4690\NPCommon.dll (Adware.DoubleD) -> Delete on reboot.
C:\Program Files\Internet Saving Optimizer\3.8.1.4690\unins000.dat (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.8.1.4690\unins000.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.8.1.4690\Data\config.md (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.8.1.4690\FF\chrome.manifest (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.8.1.4690\FF\install.rdf (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.8.1.4690\FF\chrome\NPAddOn.jar (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.8.1.4690\FF\chrome\content\NPAddOn.js (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.8.1.4690\FF\chrome\content\NPAddOn.xul (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.8.1.4690\FF\components\NPFFAddOn.dll (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.8.1.4690\FF\components\NPFFAddOn.xpt (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.8.1.4690\FF\components\NPFFHelperComponent.js (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\twain_32\local.ds (Backdoor.Bot) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\twain_32\user.ds (Backdoor.Bot) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Cache\248d6576afce4ee94af42d7350131106.gif (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Cache\24a70fb875fab686b6b3c217612bc07c.gif (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Cache\2afcf6f3f2e19cc42d7f72f3b18b26ef.gif (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Cache\50bffa6936b3e661971a58e3c8bdf4cb.gif (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Cache\default1.dat (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Cache\loading.dat (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Cache\loading.gif (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\FFSearchHistory.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Cursor.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_DailyVideo.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Game.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Glitter.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Logo.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Option.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Recipe.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Ringtone.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Screensaver.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Search.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Smiley.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Smiley_Config.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Smiley_Config.mx.new (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Smiley_TellAFriend.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Wallpaper.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_Web.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_WebDropdown_01.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_WebDropdown_02.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_WebDropdown_03.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_WebDropdown_04.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_WebDropdown_05.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_WebDropdown_06.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\Module_WebDropdown_07.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\pixel.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\ProductInfo.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\profile.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\SearchEngineList.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\tbcore.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\ToolbarLayout.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\UpdateCentre.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\UpdateCentreBk.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\URLDynamic.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Data\URLStatic.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\About.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Component_ComboBox.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Cursor.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Cursor.png (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_DailyVideo.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Game.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Glitter.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Glitter.png (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Logo.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Option.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Recipe.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Ringtone.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Screensaver.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Search.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Smiley.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Smiley.png (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Wallpaper.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_Web.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_WebDropdown_01.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_WebDropdown_01.png (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_WebDropdown_02.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_WebDropdown_02.png (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_WebDropdown_03.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_WebDropdown_03.png (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_WebDropdown_04.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_WebDropdown_04.png (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_WebDropdown_05.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_WebDropdown_05.png (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_WebDropdown_06.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_WebDropdown_06.png (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_WebDropdown_07.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\Module_WebDropdown_07.png (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnDefault.png (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnDisplay.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnDisplay.png (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnDisplay18.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnDisplay20.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnGlitters.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnGlitters.png (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnGlitters18.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnGlitters20.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnOption.png (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnSmiley.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnSmiley.png (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnSmiley18.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnSmiley20.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnTellFd.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnTellFd.png (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnTellFd18.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnTellFd20.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnWink.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnWink.png (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnWink18.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Icons\TBBtnWink20.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Skins\myskin1.skf (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Skins\myskin2.skf (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Skins\myskin3.skf (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Skins\myskin4.skf (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Skins\TellafriendSkin.skf (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Skins\TellafriendSkin_s.skf (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\valou\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.2.5.24020\Skins\ToastSkin.skf (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\config.md (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\ipdata.md (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090913-155958.296.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090913-160022.031.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090913-160040.078.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090913-160049.468.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090913-160148.781.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090913-160149.546.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090913-160240.203.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090914-150239.859.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090914-183452.375.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090914-202226.046.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090914-202311.296.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090914-203058.390.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090914-215542.953.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090916-144713.468.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090916-153322.437.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090916-200626.453.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090917-181255.281.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090917-184452.281.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090917-204427.265.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090917-211202.781.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090917-211639.468.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090917-212513.125.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090917-220556.140.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090918-082444.375.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090918-083733.875.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090918-084821.046.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090918-085101.656.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090918-085817.875.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090918-085837.343.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090918-181352.125.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-091952.890.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-100642.828.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-100907.531.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-111820.281.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-114135.953.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-120452.250.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-121652.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-145014.359.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-145420.125.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-150337.046.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-170554.609.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-171826.671.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-174653.453.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-175407.156.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-213502.140.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-213845.531.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-214129.953.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-214318.921.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-220334.875.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090919-231508.453.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090920-090011.687.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090920-103927.015.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090920-104739.437.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090920-105334.750.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090920-105548.390.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090920-105720.703.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090920-114331.078.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090920-115150.703.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090920-115646.062.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090920-121828.765.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090920-125428.640.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-105506.515.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-110229.640.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-113214.625.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-120321.546.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-122009.031.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-122724.421.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-124624.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-131121.828.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-201710.437.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-203726.062.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-204610.031.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-204955.687.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-213333.781.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-214630.062.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-215415.343.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-221909.062.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-222128.984.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-222129.843.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-223517.406.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-223518.312.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090922-223524.875.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-115630.421.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-120145.296.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-133328.625.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-133415.328.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-135625.953.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-135903.671.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-142226.828.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-171002.343.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-171356.343.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-171620.109.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-171911.281.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-172038.515.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-180342.843.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-182445.000.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-182513.000.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-183606.203.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090923-183607.187.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090924-101134.078.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090924-101137.578.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090924-102751.718.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090924-192637.234.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090925-161004.046.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090925-181048.156.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090925-184308.031.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090925-192216.406.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090925-192339.687.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090925-195329.765.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090925-195619.620.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090925-202531.717.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090926-131653.609.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090926-210028.312.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090926-213128.562.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090926-213214.359.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090926-213258.750.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090926-220336.671.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090926-220636.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090926-223448.953.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090926-230621.171.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090926-231439.125.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090926-232042.421.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090926-233719.437.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090926-233803.656.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090926-234207.796.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090927-000901.531.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090927-003100.421.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090927-132756.734.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090927-135347.515.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090927-151358.375.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090929-183309.859.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090930-175435.437.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090930-180404.125.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090930-181414.421.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090930-181444.640.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090930-182607.578.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090930-183037.796.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090930-190546.656.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20090930-194229.125.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091001-190505.140.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091001-193821.562.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091001-200059.296.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091001-202304.687.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091001-205614.687.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091001-213443.140.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091001-214811.515.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091001-215636.343.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091002-162843.437.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091002-164415.125.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091002-175358.406.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091002-190618.437.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091002-194354.406.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091002-195625.328.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091002-214111.235.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091002-214744.929.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091002-215010.306.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091002-221835.077.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jessiiica'R\Local Settings\Application Data\Internet Saving Optimizer\3.8.1.4690\NP_20091002-223323.114.log (Adware.DoubleD) -> Qua

Logfile of random's system information tool 1.06 (written by random/random)
Run by valou at 2009-11-14 14:47:34
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 47 GB (59%) free of 80 GB
Total RAM: 894 MB (46% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:47:37, on 14/11/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\valou\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\valou.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,userinit.exe,
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [FACE VC] C:\DOCUME~1\valou\APPLIC~1\AUDIOC~1\DASHEGGS.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - http://fichiers.touslesdrivers.com/maconfig/MaConfig_3_5_1_0.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

info.txt logfile of random's system information tool 1.06 2009-11-14 14:47:38

======Uninstall list======

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 7.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70000000000}
Ahead Nero Burning ROM-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
Apple Application Support-->MsiExec.exe /I{0C34B801-6AEC-4667-B053-03A67E2D0415}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
Counter-Strike-->"C:\Program Files\Steam\steam.exe" steam://uninstall/10
EVEREST Ultimate Edition v5.30-->"C:\Program Files\Lavalys\EVEREST Ultimate Edition\unins000.exe"
High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
iTunes-->MsiExec.exe /I{EC2A8F27-4FBF-4E41-B27B-FE822511B761}
Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
LimeWire 5.2.13-->"C:\Program Files\LimeWire\uninstall.exe"
Liveupdate4-->"C:\Program Files\MSI\Live Update 4\unins000.exe"
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Office XP Professional avec FrontPage-->MsiExec.exe /I{9028040C-6000-11D3-8CFE-0050048383C9}
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB972260)-->"C:\WINDOWS\ie8updates\KB972260-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB974455)-->"C:\WINDOWS\ie8updates\KB974455-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB972260)-->"C:\WINDOWS\$NtUninstallKB972260$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB972636)-->"C:\WINDOWS\ie8updates\KB972636-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB976749)-->"C:\WINDOWS\ie8updates\KB976749-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
Mozilla Firefox (3.5.5)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
Pack Vista Inspirat 2 1.0-->C:\WINDOWS\BricoPacks\Vista Inspirat 2\Remove.exe
Package de pilotes Windows - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)-->C:\PROGRA~1\DIFX\7B44739871F4D539FA473F57A832EA4B6A59EF06\DPInst.exe /d /u C:\WINDOWS\system32\DRVSTORE\amdk8_1F9DE4E49C97F59EE9F75C34E0E91E568FC9EEB2\amdk8.inf
QuickTime-->MsiExec.exe /I{A429C2AE-EBF1-4F81-A221-1C115CAADDAD}
REALTEK GbE & FE Ethernet PCI-E NIC Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C9BED750-1211-4480-B1A5-718A3BE15525}\setup.exe" -l0x40c -removeonly
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Skype web features-->MsiExec.exe /I{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}
Skype™ 4.1-->MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
System Requirements Lab-->C:\Program Files\SystemRequirementsLab\Uninstall.exe
VLC media player 1.0.1-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Winamp (remove only)-->"C:\Program Files\Winamp\UninstWA.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"

======Security center information======

AV: avast! antivirus 4.8.1351 [VPS 091114-0]

======System event log======

Computer Name: VALOUDROID
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 3 Multiprocessor Free.

Record Number: 8842
Source Name: EventLog
Time Written: 20091023131601.000000+120
Event Type: Informations
User:

Computer Name: VALOUDROID
Event Code: 6006
Message: Le service d'Enregistrement d'événement a été arrêté.

Record Number: 8841
Source Name: EventLog
Time Written: 20091023131512.000000+120
Event Type: Informations
User:

Computer Name: VALOUDROID
Event Code: 7036
Message: Le service Ati HotKey Poller est entré dans l'état : arrêté.

Record Number: 8840
Source Name: Service Control Manager
Time Written: 20091023131500.000000+120
Event Type: Informations
User:

Computer Name: VALOUDROID
Event Code: 4226
Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.

Record Number: 8839
Source Name: Tcpip
Time Written: 20091023084733.000000+120
Event Type: Avertissement
User:

Computer Name: VALOUDROID
Event Code: 4201
Message: Le système a détecté que la carte réseau \DEVICE\TCPIP_{7C625784-9892-4562-A4C0-A26F72BFCCC6} était connectée au réseau,
et a lancé une opération normale sur la carte réseau.

Record Number: 8838
Source Name: Tcpip
Time Written: 20091023084649.000000+120
Event Type: Informations
User:

=====Application event log=====

Computer Name: VALOUDROID
Event Code: 1000
Message: Application défaillante iexplore.exe, version 8.0.6001.18702, module défaillant kernel32.dll, version 5.1.2600.5781, adresse de défaillance 0x00012afb.

Record Number: 589
Source Name: Application Error
Time Written: 20090923180307.000000+120
Event Type: erreur
User:

Computer Name: VALOUDROID
Event Code: 1002
Message: Application bloquée iexplore.exe, version 8.0.6001.18702, module bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

Record Number: 588
Source Name: Application Hang
Time Written: 20090923180247.000000+120
Event Type: erreur
User:

Computer Name: VALOUDROID
Event Code: 1001
Message: Détecteur d'erreurs 1180947459.

Record Number: 587
Source Name: Application Hang
Time Written: 20090923180234.000000+120
Event Type: erreur
User:

Computer Name: VALOUDROID
Event Code: 1002
Message: Application bloquée iexplore.exe, version 8.0.6001.18702, module bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

Record Number: 586
Source Name: Application Hang
Time Written: 20090923180209.000000+120
Event Type: erreur
User:

Computer Name: VALOUDROID
Event Code: 1002
Message: Application bloquée iexplore.exe, version 8.0.6001.18702, module bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

Record Number: 585
Source Name: Application Hang
Time Written: 20090923180208.000000+120
Event Type: erreur
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 107 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=6b02
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip

-----------------EOF-----------------

info.txt logfile of random's system information tool 1.06 2009-11-14 14:47:38

======Uninstall list======

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 7.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70000000000}
Ahead Nero Burning ROM-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
Apple Application Support-->MsiExec.exe /I{0C34B801-6AEC-4667-B053-03A67E2D0415}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
Counter-Strike-->"C:\Program Files\Steam\steam.exe" steam://uninstall/10
EVEREST Ultimate Edition v5.30-->"C:\Program Files\Lavalys\EVEREST Ultimate Edition\unins000.exe"
High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
iTunes-->MsiExec.exe /I{EC2A8F27-4FBF-4E41-B27B-FE822511B761}
Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
LimeWire 5.2.13-->"C:\Program Files\LimeWire\uninstall.exe"
Liveupdate4-->"C:\Program Files\MSI\Live Update 4\unins000.exe"
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Office XP Professional avec FrontPage-->MsiExec.exe /I{9028040C-6000-11D3-8CFE-0050048383C9}
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB972260)-->"C:\WINDOWS\ie8updates\KB972260-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB974455)-->"C:\WINDOWS\ie8updates\KB974455-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB972260)-->"C:\WINDOWS\$NtUninstallKB972260$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB972636)-->"C:\WINDOWS\ie8updates\KB972636-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB976749)-->"C:\WINDOWS\ie8updates\KB976749-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
Mozilla Firefox (3.5.5)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
Pack Vista Inspirat 2 1.0-->C:\WINDOWS\BricoPacks\Vista Inspirat 2\Remove.exe
Package de pilotes Windows - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)-->C:\PROGRA~1\DIFX\7B44739871F4D539FA473F57A832EA4B6A59EF06\DPInst.exe /d /u C:\WINDOWS\system32\DRVSTORE\amdk8_1F9DE4E49C97F59EE9F75C34E0E91E568FC9EEB2\amdk8.inf
QuickTime-->MsiExec.exe /I{A429C2AE-EBF1-4F81-A221-1C115CAADDAD}
REALTEK GbE & FE Ethernet PCI-E NIC Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C9BED750-1211-4480-B1A5-718A3BE15525}\setup.exe" -l0x40c -removeonly
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Skype web features-->MsiExec.exe /I{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}
Skype™ 4.1-->MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
System Requirements Lab-->C:\Program Files\SystemRequirementsLab\Uninstall.exe
VLC media player 1.0.1-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Winamp (remove only)-->"C:\Program Files\Winamp\UninstWA.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"

======Security center information======

AV: avast! antivirus 4.8.1351 [VPS 091114-0]

======System event log======

Computer Name: VALOUDROID
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 3 Multiprocessor Free.

Record Number: 8842
Source Name: EventLog
Time Written: 20091023131601.000000+120
Event Type: Informations
User:

Computer Name: VALOUDROID
Event Code: 6006
Message: Le service d'Enregistrement d'événement a été arrêté.

Record Number: 8841
Source Name: EventLog
Time Written: 20091023131512.000000+120
Event Type: Informations
User:

Computer Name: VALOUDROID
Event Code: 7036
Message: Le service Ati HotKey Poller est entré dans l'état : arrêté.

Record Number: 8840
Source Name: Service Control Manager
Time Written: 20091023131500.000000+120
Event Type: Informations
User:

Computer Name: VALOUDROID
Event Code: 4226
Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.

Record Number: 8839
Source Name: Tcpip
Time Written: 20091023084733.000000+120
Event Type: Avertissement
User:

Computer Name: VALOUDROID
Event Code: 4201
Message: Le système a détecté que la carte réseau \DEVICE\TCPIP_{7C625784-9892-4562-A4C0-A26F72BFCCC6} était connectée au réseau,
et a lancé une opération normale sur la carte réseau.

Record Number: 8838
Source Name: Tcpip
Time Written: 20091023084649.000000+120
Event Type: Informations
User:

=====Application event log=====

Computer Name: VALOUDROID
Event Code: 1000
Message: Application défaillante iexplore.exe, version 8.0.6001.18702, module défaillant kernel32.dll, version 5.1.2600.5781, adresse de défaillance 0x00012afb.

Record Number: 589
Source Name: Application Error
Time Written: 20090923180307.000000+120
Event Type: erreur
User:

Computer Name: VALOUDROID
Event Code: 1002
Message: Application bloquée iexplore.exe, version 8.0.6001.18702, module bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

Record Number: 588
Source Name: Application Hang
Time Written: 20090923180247.000000+120
Event Type: erreur
User:

Computer Name: VALOUDROID
Event Code: 1001
Message: Détecteur d'erreurs 1180947459.

Record Number: 587
Source Name: Application Hang
Time Written: 20090923180234.000000+120
Event Type: erreur
User:

Computer Name: VALOUDROID
Event Code: 1002
Message: Application bloquée iexplore.exe, version 8.0.6001.18702, module bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

Record Number: 586
Source Name: Application Hang
Time Written: 20090923180209.000000+120
Event Type: erreur
User:

Computer Name: VALOUDROID
Event Code: 1002
Message: Application bloquée iexplore.exe, version 8.0.6001.18702, module bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

Record Number: 585
Source Name: Application Hang
Time Written: 20090923180208.000000+120
Event Type: erreur
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 107 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=6b02
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip

-----------------EOF-----------------

info.txt logfile of random's system information tool 1.06 2009-11-14 14:47:38

======Uninstall list======

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 7.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70000000000}
Ahead Nero Burning ROM-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
Apple Application Support-->MsiExec.exe /I{0C34B801-6AEC-4667-B053-03A67E2D0415}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
Counter-Strike-->"C:\Program Files\Steam\steam.exe" steam://uninstall/10
EVEREST Ultimate Edition v5.30-->"C:\Program Files\Lavalys\EVEREST Ultimate Edition\unins000.exe"
High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
iTunes-->MsiExec.exe /I{EC2A8F27-4FBF-4E41-B27B-FE822511B761}
Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
LimeWire 5.2.13-->"C:\Program Files\LimeWire\uninstall.exe"
Liveupdate4-->"C:\Program Files\MSI\Live Update 4\unins000.exe"
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Office XP Professional avec FrontPage-->MsiExec.exe /I{9028040C-6000-11D3-8CFE-0050048383C9}
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB972260)-->"C:\WINDOWS\ie8updates\KB972260-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB974455)-->"C:\WINDOWS\ie8updates\KB974455-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB972260)-->"C:\WINDOWS\$NtUninstallKB972260$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB972636)-->"C:\WINDOWS\ie8updates\KB972636-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB976749)-->"C:\WINDOWS\ie8updates\KB976749-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
Mozilla Firefox (3.5.5)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
Pack Vista Inspirat 2 1.0-->C:\WINDOWS\BricoPacks\Vista Inspirat 2\Remove.exe
Package de pilotes Windows - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)-->C:\PROGRA~1\DIFX\7B44739871F4D539FA473F57A832EA4B6A59EF06\DPInst.exe /d /u C:\WINDOWS\system32\DRVSTORE\amdk8_1F9DE4E49C97F59EE9F75C34E0E91E568FC9EEB2\amdk8.inf
QuickTime-->MsiExec.exe /I{A429C2AE-EBF1-4F81-A221-1C115CAADDAD}
REALTEK GbE & FE Ethernet PCI-E NIC Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C9BED750-1211-4480-B1A5-718A3BE15525}\setup.exe" -l0x40c -removeonly
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Skype web features-->MsiExec.exe /I{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}
Skype™ 4.1-->MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
System Requirements Lab-->C:\Program Files\SystemRequirementsLab\Uninstall.exe
VLC media player 1.0.1-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Winamp (remove only)-->"C:\Program Files\Winamp\UninstWA.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"

======Security center information======

AV: avast! antivirus 4.8.1351 [VPS 091114-0]

======System event log======

Computer Name: VALOUDROID
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 3 Multiprocessor Free.

Record Number: 8842
Source Name: EventLog
Time Written: 20091023131601.000000+120
Event Type: Informations
User:

Computer Name: VALOUDROID
Event Code: 6006
Message: Le service d'Enregistrement d'événement a été arrêté.

Record Number: 8841
Source Name: EventLog
Time Written: 20091023131512.000000+120
Event Type: Informations
User:

Computer Name: VALOUDROID
Event Code: 7036
Message: Le service Ati HotKey Poller est entré dans l'état : arrêté.

Record Number: 8840
Source Name: Service Control Manager
Time Written: 20091023131500.000000+120
Event Type: Informations
User:

Computer Name: VALOUDROID
Event Code: 4226
Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.

Record Number: 8839
Source Name: Tcpip
Time Written: 20091023084733.000000+120
Event Type: Avertissement
User:

Computer Name: VALOUDROID
Event Code: 4201
Message: Le système a détecté que la carte réseau \DEVICE\TCPIP_{7C625784-9892-4562-A4C0-A26F72BFCCC6} était connectée au réseau,
et a lancé une opération normale sur la carte réseau.

Record Number: 8838
Source Name: Tcpip
Time Written: 20091023084649.000000+120
Event Type: Informations
User:

=====Application event log=====

Computer Name: VALOUDROID
Event Code: 1000
Message: Application défaillante iexplore.exe, version 8.0.6001.18702, module défaillant kernel32.dll, version 5.1.2600.5781, adresse de défaillance 0x00012afb.

Record Number: 589
Source Name: Application Error
Time Written: 20090923180307.000000+120
Event Type: erreur
User:

Computer Name: VALOUDROID
Event Code: 1002
Message: Application bloquée iexplore.exe, version 8.0.6001.18702, module bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

Record Number: 588
Source Name: Application Hang
Time Written: 20090923180247.000000+120
Event Type: erreur
User:

Computer Name: VALOUDROID
Event Code: 1001
Message: Détecteur d'erreurs 1180947459.

Record Number: 587
Source Name: Application Hang
Time Written: 20090923180234.000000+120
Event Type: erreur
User:

Computer Name: VALOUDROID
Event Code: 1002
Message: Application bloquée iexplore.exe, version 8.0.6001.18702, module bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

Record Number: 586
Source Name: Application Hang
Time Written: 20090923180209.000000+120
Event Type: erreur
User:

Computer Name: VALOUDROID
Event Code: 1002
Message: Application bloquée iexplore.exe, version 8.0.6001.18702, module bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

Record Number: 585
Source Name: Application Hang
Time Written: 20090923180208.000000+120
Event Type: erreur
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 107 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=6b02
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip

-----------------EOF-----------------

Peux-tu faire ceci stp :

Ouvre MBAM, va sur l'onglet "Rapports/Logs".
Trouve le rapport que tu as posté plus haut.
Clique sur "Ouvrir".
Dans la nouvelle fenêtre >> Fichier >> Enregistrer sous... >> Choisis ton bureau.

Poste à nouveau le rapport. Mais il est trop long pour le forum. Alors passe par un hébergeur : CI-JOINT

=======================

OTM :

▶ Télécharge OTM (de Old_Timer) sur ton Bureau

▶ Double-clique sur OTM.exe pour le lancer.

▶ Assure toi que la case Unregister Dll's and Ocx's soit bien cochée.

▶ Copie la liste qui se trouve en gras dans la citation ci-dessous et colle-la dans le cadre de gauche de OTM sous "Paste instructions for item to be moved".

-----------------------------------------------------------------------------

:reg
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"FACE VC"=-

:files
c:\docume~1\valou\applic~1\audioc~1\dasheggs.exe

:commands
[purity]
[emptytemp]
[start explorer]

-----------------------------------------------------------------------------

▶ clique sur MoveIt! pour lancer la suppression.

▶ Le résultat apparaitra dans le cadre "Results".

▶ Clique sur Exit pour fermer.

▶ Poste le rapport situé dans C:\_OTM\MovedFiles.

▶ Il te sera peut-être demandé de redémarrer le pc pour achever la suppression. Si c'est le cas accepte par Yes.

++

Y a t-il d'autre indications à suivre ?

http://www.cijoint.fr/cjlink.php?file=cj200911/cijWLJMGnC.txt

Ok vu ! :)