Virus packed generic 200

Bonjour,

Suite à la détection du virus, j'ai fait un peu le tour et j'ai voulu telecharger malware mais impossible de boucler l'installation, ca bloque avec la barre à fond pourtant...

J'ai tout de même effectué les rapports de hijackthis, sait-on jamais. si quelqu'un peut m'expliquer, ce serait sympa,

Merci d'avance.

Logfile of random's system information tool 1.06 (written by random/random)
Run by Pc bas at 2009-06-09 11:34:58
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 127 GB (43%) free of 297 GB
Total RAM: 2046 MB (53% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:35:02, on 09/06/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Internet Explorer\Iexplore.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\DOCUME~1\PCBAS~1\LOCALS~1\Temp\b.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\WINDOWS\vVX1000.exe
C:\Program Files\Logitech\Gaming Software\LWEMon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
C:\Program Files\Steam\Steam.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\flexnet\i486_nt\obj\lmgrd.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\flexnet\i486_nt\obj\lmgrd.exe
C:\Program Files\Mio Technology\MioSync\mioSync.exe
C:\Program Files\MagicDisc\MagicDisc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Symantec AntiVirus\DoScan.exe
C:\Program Files\flexnet\i486_nt\obj\ptc_d.exe
C:\Program Files\Autodesk\3ds Max 9\mentalray\satellite\raysat_3dsmax9_32server.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Pc bas\Bureau\HJTInstall.exe
C:\Documents and Settings\Pc bas\Bureau\RSIT.exe
C:\Program Files\trend micro\Pc bas.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: XML module - {500BCA15-57A7-4eaf-8143-8C619470B13D} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
O4 - HKLM\..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui
O4 - HKLM\..\Run: [net] "C:\WINDOWS\system32\net.net"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Gadwin PrintScreen] C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe /nosplash
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [net] "C:\WINDOWS\system32\net.net"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: MagicDisc.lnk = C:\Program Files\MagicDisc\MagicDisc.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: MioSync.lnk = C:\Program Files\Mio Technology\MioSync\mioSync.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
O16 - DPF: {402EE96E-2CE8-482D-ADA5-CECEEA07E16D} (TurnTool Scene) - http://www.turntool.com/ViewerInstall.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: FLEXlm server for PTC - Macrovision Corporation - C:\Program Files\flexnet\i486_nt\obj\lmgrd.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: mental ray 3.5 Satellite (32-bit) (mi-raysat_3dsmax9_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 9\mentalray\satellite\raysat_3dsmax9_32server.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

--
End of file - 11108 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\Google Software Updater.job
C:\WINDOWS\tasks\{783AF354-B514-42d6-970E-3E8BF0A5279C}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{500BCA15-57A7-4eaf-8143-8C619470B13D}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-04-23 259696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll [2009-03-24 668656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll [2009-04-23 470512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-05-27 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-05-27 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-04-23 259696]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ATICCC"=C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe [2006-05-10 90112]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-09-12 16264192]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-05-27 148888]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"ccApp"=C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe [2006-07-19 52896]
"vptray"=C:\PROGRA~1\SYMANT~1\VPTray.exe [2006-11-14 125536]
"LifeCam"=C:\Program Files\Microsoft LifeCam\LifeExp.exe [2007-05-17 279912]
"VX1000"=C:\WINDOWS\vVX1000.exe [2007-04-10 709992]
"Start WingMan Profiler"=C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2008-04-04 88584]
"net"=C:\WINDOWS\system32\net.net [2009-06-08 110592]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-07-12 68856]
"MsnMsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2007-10-18 5724184]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Gadwin PrintScreen"=C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe [2007-08-20 495616]
"Steam"=C:\Program Files\Steam\Steam.exe [2009-05-19 1217784]
"net"=C:\WINDOWS\system32\net.net [2009-06-08 110592]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-01-26 2144088]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Adobe Reader Synchronizer.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
MioSync.lnk - C:\Program Files\Mio Technology\MioSync\mioSync.exe

C:\Documents and Settings\Pc bas\Menu Démarrer\Programmes\Démarrage
MagicDisc.lnk - C:\Program Files\MagicDisc\MagicDisc.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2006-07-18 86016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\NavLogon]
C:\WINDOWS\system32\NavLogon.dll [2006-11-14 43616]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=95000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Microsoft LifeCam\LifeCam.exe"="C:\Program Files\Microsoft LifeCam\LifeCam.exe:*:Enabled:LifeCam.exe"
"C:\Program Files\Microsoft LifeCam\LifeExp.exe"="C:\Program Files\Microsoft LifeCam\LifeExp.exe:*:Enabled:LifeExp.exe"
"C:\Program Files\GP Bikes\core.exe"="C:\Program Files\GP Bikes\core.exe:*:Enabled:core"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Documents and Settings\Pc bas\Mes documents\Fred\WoW-BurningCrusade-frFR-Installer-downloader.exe"="C:\Documents and Settings\Pc bas\Mes documents\Fred\WoW-BurningCrusade-frFR-Installer-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"C:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe"="C:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe:*:Enabled:TmNationsESWC"
"C:\Documents and Settings\Pc bas\Bureau\YuLeech-bbo_fr_setup_0_1_exe.exe"="C:\Documents and Settings\Pc bas\Bureau\YuLeech-bbo_fr_setup_0_1_exe.exe:*:Enabled:YuLeech"
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\THQ\Dawn of War - Dark Crusade\DarkCrusade.exe"="C:\Program Files\THQ\Dawn of War - Dark Crusade\DarkCrusade.exe:*:Disabled:DarkCrusade"
"C:\Program Files\eMule\eMule.exe"="C:\Program Files\eMule\eMule.exe:*:Enabled:eMule Plus"
"C:\Program Files\Sports Interactive\Football Manager 2009\fm.exe"="C:\Program Files\Sports Interactive\Football Manager 2009\fm.exe:*:Disabled:Football Manager 2009"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\proeWildfire 4.0\i486_nt\nms\nmsd.exe"="C:\Program Files\proeWildfire 4.0\i486_nt\nms\nmsd.exe:*:Enabled:Pro/ENGINEER Wildfire from PTC"
"C:\Program Files\proeWildfire 4.0\i486_nt\obj\pro_comm_msg.exe"="C:\Program Files\proeWildfire 4.0\i486_nt\obj\pro_comm_msg.exe:*:Enabled:Pro/ENGINEER Wildfire from PTC"
"C:\Program Files\proeWildfire 4.0\i486_nt\obj\xtop.exe"="C:\Program Files\proeWildfire 4.0\i486_nt\obj\xtop.exe:*:Enabled:Pro/ENGINEER Wildfire from PTC"
"C:\Program Files\GTR2\GTR2.exe"="C:\Program Files\GTR2\GTR2.exe:*:Enabled:GTR2 - FIA GT Racing Game"
"C:\Program Files\RayV\RayV\RayV.dll"="C:\Program Files\RayV\RayV\RayV.dll:*:Enabled:RayV"
"C:\Program Files\RayV\RayV\RayV.exe"="C:\Program Files\RayV\RayV\RayV.exe:*:Enabled:RayV"
"C:\Program Files\Autodesk\3ds Max 9\3dsmax.exe"="C:\Program Files\Autodesk\3ds Max 9\3dsmax.exe:*:Enabled:Autodesk 3ds Max 9 32-bit"
"C:\Program Files\Autodesk\Backburner\monitor.exe"="C:\Program Files\Autodesk\Backburner\monitor.exe:*:Enabled:backburner 2.3 monitor"
"C:\Program Files\Autodesk\Backburner\manager.exe"="C:\Program Files\Autodesk\Backburner\manager.exe:*:Enabled:backburner 2.3 manager"
"C:\Program Files\Autodesk\Backburner\server.exe"="C:\Program Files\Autodesk\Backburner\server.exe:*:Enabled:backburner 2.3 server"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3e0a865c-5023-11dd-85f5-9ad4ff93ca4c}]
shell\AutoRun\command - I:\nideiect.com
shell\explore\command - I:\nideiect.com
shell\open\command - I:\nideiect.com

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a683916c-cabf-11dd-86fb-001731718a28}]
shell\AutoRun\command - setupSNK.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{bbd5110b-54e4-11dd-860d-001731718a28}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL NoLimit.exe

======List of files/folders created in the last 1 months======

2009-06-09 11:34:58 ----D---- C:\rsit
2009-06-09 11:34:58 ----D---- C:\Program Files\trend micro
2009-06-09 11:15:40 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-06-09 11:11:39 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-06-09 11:11:39 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-06-09 10:50:22 ----D---- C:\WINDOWS\BDOSCAN8
2009-06-09 10:38:52 ----D---- C:\Program Files\Panda Security
2009-06-09 10:23:22 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-06-09 10:14:59 ----D---- C:\WINDOWS\system32\Kaspersky Lab
2009-06-04 21:19:31 ----D---- C:\Program Files\SCi Games
2009-06-04 17:46:37 ----D---- C:\Documents and Settings\Pc bas\Application Data\BlackBean
2009-06-02 18:47:50 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2009-06-02 18:47:50 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2009-06-02 18:47:50 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2009-06-02 18:47:49 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2009-06-02 18:47:49 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2009-06-02 18:47:49 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2009-06-02 18:47:49 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2009-06-02 18:47:48 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2009-06-02 18:47:48 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2009-06-02 18:47:47 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2009-06-02 18:47:47 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2009-06-02 18:47:47 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2009-06-02 18:47:46 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2009-06-02 18:47:46 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2009-06-02 18:45:43 ----D---- C:\BMW M3 Challenge
2009-05-31 22:57:09 ----D---- C:\Program Files\Alcohol Soft
2009-05-31 14:54:47 ----D---- C:\Documents and Settings\Pc bas\Application Data\RayV
2009-05-28 12:59:34 ----D---- C:\Program Files\EA Sports
2009-05-27 18:30:06 ----D---- C:\Program Files\Feneris
2009-05-27 17:28:27 ----A---- C:\WINDOWS\system32\javaws.exe
2009-05-27 17:28:27 ----A---- C:\WINDOWS\system32\javaw.exe
2009-05-27 17:28:27 ----A---- C:\WINDOWS\system32\java.exe
2009-05-27 17:28:27 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-05-16 14:55:58 ----D---- C:\Program Files\Mio Technology
2009-05-16 11:09:29 ----D---- C:\Program Files\The KMPlayer FR

======List of files/folders modified in the last 1 months======

2009-06-09 11:34:58 ----RD---- C:\Program Files
2009-06-09 11:30:48 ----D---- C:\Program Files\Mozilla Firefox
2009-06-09 11:29:18 ----D---- C:\WINDOWS
2009-06-09 11:28:53 ----D---- C:\WINDOWS\Temp
2009-06-09 11:28:38 ----D---- C:\WINDOWS\system32
2009-06-09 11:28:36 ----D---- C:\Program Files\Steam
2009-06-09 11:28:16 ----SD---- C:\WINDOWS\Tasks
2009-06-09 11:15:41 ----D---- C:\WINDOWS\system32\drivers
2009-06-09 11:13:05 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-06-09 10:50:24 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-06-09 10:50:22 ----HD---- C:\WINDOWS\inf
2009-06-09 10:38:35 ----D---- C:\WINDOWS\system32\CatRoot2
2009-06-09 10:05:33 ----HD---- C:\Config.Msi
2009-06-09 10:05:32 ----SHD---- C:\WINDOWS\Installer
2009-06-09 10:03:46 ----SD---- C:\Documents and Settings\Pc bas\Application Data\Microsoft
2009-06-09 10:03:15 ----A---- C:\WINDOWS\NeroDigital.ini
2009-06-08 19:25:08 ----D---- C:\WINDOWS\Prefetch
2009-06-08 19:24:52 ----D---- C:\Program Files\Symantec AntiVirus
2009-06-08 16:31:12 ----D---- C:\Documents and Settings\All Users\Application Data\Google Updater
2009-06-07 12:10:48 ----D---- C:\WINDOWS\Microsoft.NET
2009-06-07 11:07:40 ----D---- C:\Program Files\Fichiers communs\Autodesk Shared
2009-06-07 11:06:23 ----D---- C:\Documents and Settings\All Users\Application Data\Autodesk
2009-06-07 11:04:33 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-06-07 11:04:23 ----RSD---- C:\WINDOWS\assembly
2009-06-07 11:04:06 ----D---- C:\WINDOWS\WinSxS
2009-06-07 11:03:09 ----D---- C:\WINDOWS\system32\DirectX
2009-06-06 16:45:22 ----D---- C:\Documents and Settings\Pc bas\Application Data\uTorrent
2009-06-04 17:30:07 ----HD---- C:\Program Files\InstallShield Installation Information
2009-06-02 21:00:05 ----D---- C:\Program Files\GTR2
2009-05-28 21:47:15 ----D---- C:\betty
2009-05-27 17:28:07 ----D---- C:\Program Files\Java
2009-05-23 15:46:03 ----D---- C:\Program Files\rFactor
2009-05-23 15:44:51 ----D---- C:\Program Files\DivX
2009-05-23 13:58:10 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-05-23 13:49:34 ----D---- C:\Documents and Settings\All Users\Application Data\2DBoy
2009-05-19 15:40:15 ----D---- C:\WINDOWS\Debug
2009-05-12 20:51:51 ----D---- C:\nono
2009-05-10 22:38:18 ----D---- C:\WINDOWS\security

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK8;AMD Processor Driver; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-06-18 36864]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys []
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 SAVRT;SAVRT; \??\C:\Program Files\Symantec AntiVirus\savrt.sys []
R1 SAVRTPEL;SAVRTPEL; \??\C:\Program Files\Symantec AntiVirus\Savrtpel.sys []
R1 SPBBCDrv;SPBBCDrv; \??\C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCDrv.sys []
R1 SYMTDI;SYMTDI; C:\WINDOWS\System32\Drivers\SYMTDI.SYS [2006-08-07 195776]
R3 3xHybrid;3xHybrid service; C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2005-05-03 710144]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-07-18 1675776]
R3 ATSWPDRV;AuthenTec TruePrint USB Driver (AES2500); C:\WINDOWS\System32\Drivers\ATSwpDrv.sys [2005-03-29 116594]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys []
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-09-12 4381184]
R3 mcdbus;Driver for MagicISO SCSI Host Controller; C:\WINDOWS\system32\DRIVERS\mcdbus.sys [2008-07-28 116736]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-03-02 12288]
R3 NAVENG;NAVENG; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20090608.007\naveng.sys []
R3 NAVEX15;NAVEX15; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20090608.007\navex15.sys []
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-07-11 57856]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-07-11 20480]
R3 SymEvent;SymEvent; \??\C:\Program Files\Symantec\SYMEVENT.SYS []
R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 VX1000;VX-1000; C:\WINDOWS\system32\DRIVERS\VX1000.sys [2007-04-10 1966312]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\WINDOWS\system32\drivers\WmBEnum.sys [2008-01-24 19336]
R3 WmXlCore;Logitech Translation Layer Driver; C:\WINDOWS\system32\drivers\WmXlCore.sys [2008-01-24 48904]
R3 X10Hid;X10 Hid Device; C:\WINDOWS\System32\Drivers\x10hid.sys [2005-11-28 7040]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2005-03-08 51120]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2005-03-08 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2005-03-08 21744]
S3 MPE;Filtre BDA MPE; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-13 15232]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 SYMREDRV;SYMREDRV; C:\WINDOWS\System32\Drivers\SYMREDRV.SYS [2006-08-07 24768]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 wceusbsh;Windows CE USB Serial Host Driver; C:\WINDOWS\system32\DRIVERS\wceusbsh.sys [2006-03-09 37768]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WmFilter;Logitech Gaming HID Filter Driver; C:\WINDOWS\system32\drivers\WmFilter.sys [2008-01-24 28168]
S3 WmHidLo;Logitech Gaming USB Filter Driver; C:\WINDOWS\system32\drivers\WmHidLo.sys [2008-01-24 29192]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:\WINDOWS\system32\drivers\WmVirHid.sys [2008-01-24 14728]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 XUIF;X10 USB Wireless Transceiver; C:\WINDOWS\System32\Drivers\x10ufx2.sys [2005-05-19 17792]
S3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\WINDOWS\system32\DRIVERS\xusb21.sys [2007-08-28 55808]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-07-18 401408]
R2 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe [2009-06-07 72704]
R2 ccSetMgr;Symantec Settings Manager; C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe [2006-07-19 169632]
R2 DefWatch;Symantec AntiVirus Definition Watcher; C:\Program Files\Symantec AntiVirus\DefWatch.exe [2006-11-14 31840]
R2 FLEXlm server for PTC;FLEXlm server for PTC; C:\Program Files\flexnet\i486_nt\obj\lmgrd.exe [2009-03-31 1371778]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-05-27 152984]
R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 mi-raysat_3dsmax9_32;mental ray 3.5 Satellite (32-bit); C:\Program Files\Autodesk\3ds Max 9\mentalray\satellite\raysat_3dsmax9_32server.exe [2006-09-29 65536]
R2 MSCamSvc;MSCamSvc; C:\Program Files\Microsoft LifeCam\MSCamS32.exe [2007-05-17 271720]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2004-09-29 69632]
R2 SPBBCSvc;Symantec SPBBCSvc; C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe [2006-04-11 1160848]
R2 x10nets;X10 Device Network Service; C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe [2001-11-12 20480]
R3 ccEvtMgr;Symantec Event Manager; C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe [2006-07-19 192160]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-24 183280]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2006-10-20 36864]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2006-10-30 741376]
S3 LiveUpdate;LiveUpdate; C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE [2006-09-08 2528960]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 SavRoam;SAVRoam; C:\Program Files\Symantec AntiVirus\SavRoam.exe [2006-11-14 119904]
S3 SNDSrvc;Symantec Network Drivers Service; C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe [2006-08-07 214720]
S3 Symantec AntiVirus;Symantec AntiVirus; C:\Program Files\Symantec AntiVirus\Rtvscan.exe [2006-11-14 1835104]
S3 usnjsvc;Messenger Sharing Folders USN Journal Reader service; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2006-10-30 122880]

-----------------EOF-----------------

info.txt logfile of random's system information tool 1.06 2009-06-09 11:35:04

======Uninstall list======

-->MsiExec.exe /I{9A346205-EA92-4406-B1AB-50379DA3F057}
-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
3dsmax ancillary install-->MsiExec.exe /I{7C8B5E63-821A-4DFB-BDFA-19854D88EC5C}
3DVIA player 4.1-->MsiExec.exe /X{4E868D3D-6EEB-4273-926C-2287236B5B79}
7-Zip 4.57-->"C:\Program Files\7-Zip\Uninstall.exe"
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 8 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A80000000002}
Adobe Shockwave Player 11-->C:\WINDOWS\system32\adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log
Advertisement Service-->C:\WINDOWS\system32\net.net Uninstall
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
ATI Catalyst Control Center-->MsiExec.exe /I{2852AC2C-B2FC-4F4A-A573-D466C872E688}
Autodesk 3ds Max 9 32-bit-->MsiExec.exe /I{E96D4088-AAC5-437F-9E39-EC0E387897B4}
Autodesk DWF Viewer 7-->MsiExec.exe /I{9A346205-EA92-4406-B1AB-50379DA3F057}
Backburner-->MsiExec.exe /I{3D347E6D-5A03-4342-B5BA-6A771885F379}
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Commandos 3 - Destination Berlin-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C270BC04-1540-4673-960F-A546B2C860CD}\setup.EXE"
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Cotation version 1.24-->"C:\Program Files\Cotation\unins000.exe"
dBpowerAMP mp3PRO Input Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP mp3PRO Input Codec.dat
dBpowerAMP Ogg Vorbis Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Ogg Vorbis Codec.dat
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
eMule-->"C:\Program Files\eMule\Uninstall.exe"
FBX Plugin 2006.08 for Max 9.0-->C:\Program Files\Autodesk\FBX\FbxPlugins\2006.08\Max90\Uninstall.exe
Gadwin PrintScreen-->C:\Program Files\Gadwin Systems\PrintScreen\Uninstall.exe
Ghost Trails Plugin-->C:\3dsmax9\plugins\uninstal.exe
Google Earth-->MsiExec.exe /I{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_BDA1448D3D255554.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
GP500 de Microprose-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Microprose\GP500\Uninst.isu"
GTR 2 1.0.0.0-->"C:\Program Files\GTR2\Support\unins000.exe"
High Definition Audio - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Hotfix pour Microsoft .NET Framework 2.0 (KB918842)-->C:\WINDOWS\system32\msiexec.exe /promptrestart /uninstall {5FD48194-AD97-46A1-ABDB-12FC85916742} /package {7131646D-CD3C-40F4-97B9-CD9E4E6262EF}
HP PSC & OfficeJet 5.3.B-->"C:\Program Files\HP\Digital Imaging\{49FB31C1-26EC-44c6-AB47-73C66E2BC41E}\setup\hpzscr01.exe" -datfile hposcr07.dat
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
J2SE Runtime Environment 5.0 Update 9-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150090}
Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216013FF}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Kaspersky Online Scanner-->C:\WINDOWS\system32\KASPER~1\KASPER~1\kavuninstall.exe
Kaspersky On-line Scanner-->C:\WINDOWS\system32\KASPER~1\KASPER~1\kavuninstall.exe
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
livebox-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{17342E3B-0818-4A6F-BFF8-99476605ADD6}\Setup.exe" -l0x40c
LiveUpdate 3.1 (Symantec Corporation)-->"C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE" /U
Logitech Gaming Software 5.02-->MsiExec.exe /X{64B20B36-AEE7-4DD4-897C-C5DA5C218F60}
Macromedia Flash Player 8-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\swflash.inf,DefaultUninstall,5
Magic ISO Maker v5.5 (build 0261)-->C:\PROGRA~1\MagicISO\UNWISE.EXE C:\PROGRA~1\MagicISO\INSTALL.LOG
MagicDisc 2.7.105-->C:\PROGRA~1\MAGICD~1\UNWISE.EXE C:\PROGRA~1\MAGICD~1\INSTALL.LOG
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Micro Application - Architecte Studio Pro 2006-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1A27646D-2508-48D8-9BC3-B0B570D188F7}\SETUP.EXE" -l0x40c
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft .NET Framework 3.0-->c:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setup.exe
Microsoft .NET Framework 3.0-->MsiExec.exe /X{15095BF3-A3D7-4DDF-B193-3A496881E003}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{929CE49F-1CA7-4CF3-A9A1-6D757443C63F}
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe"
Microsoft LifeCam-->MsiExec.exe /X{968D41C3-25BB-4632-A6DF-2E1C8F0143A4}
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Mio Technology Speedcam Synchronisation ( M2 ) 1.2.12.03.2007-->C:\PROGRA~1\MIOTEC~1\MioSync\Setup.exe /remove
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB942763)-->"C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Mod DTM v3.5-->MsiExec.exe /X{4A091FC6-6DFE-4CB0-BF45-D90AB2353226}
Mozilla Firefox (3.0.10)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 6.0 Parser (KB925673)-->MsiExec.exe /I{FE9126DB-5F84-495A-BB46-3C724F1C2D08}
Nero 6 Ultra Edition-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
OpenAL-->"C:\Program Files\OpenAL\OalinstGridRelease.exe" /U
Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Panda ActiveScan 2.0-->C:\Program Files\Panda Security\ActiveScan 2.0\as2uninst.exe
PhotoFiltre-->"C:\Program Files\PhotoFiltre\Uninst.exe"
Picasa 3-->"C:\Program Files\Google\Picasa3\Uninstall.exe"
Pro/ENGINEER Release Wildfire 4.0 Datecode M070-->"C:\Program Files\proeWildfire 4.0\uninstall\i486_nt\obj\psuninst.exe" "C:\Program Files\proeWildfire 4.0\uninstall\instlog.txt"
PTC License Server Release Wildfire 4.0 Datecode M070-->"C:\Program Files\flexnet\uninstall\i486_nt\obj\psuninst.exe" "C:\Program Files\flexnet\uninstall\instlog.txt"
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m
rFactor (remove only)-->"C:\Program Files\rFactor\Uninstall.exe"
Richard Burns Rally-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{92C7D009-A464-4948-A980-7A3E28CB2F49}\setup.exe" -l0x40c
RSRBR2009-->"C:\Program Files\SCi Games\Richard Burns Rally\unins000.exe"
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Skype™ 4.0-->MsiExec.exe /X{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
Symantec AntiVirus-->MsiExec.exe /I{33CFCF98-F8D6-4549-B469-6F4295676D83}
VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}
VideoLAN VLC media player 0.8.6i-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Windows Communication Foundation-->MsiExec.exe /X{491DD792-AD81-429C-9EB4-86DD3D22E333}
Windows Driver Package - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)-->C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\DPInst.exe /u C:\WINDOWS\system32\DRVSTORE\amdk8_6FE44FCD212D4A086C7BC0C98B9A619782073FB7\amdk8.inf
Windows Driver Package - NVIDIA (NVENETFD) Net (07/11/2006 65.2.1)-->C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\DPInst.exe /u C:\WINDOWS\system32\DRVSTORE\nvenetfd_9840D7C5AA8DA757B75FAB24B5FF0EEEF7B15981\nvenetfd.inf
Windows Driver Package - NVIDIA Corporation (nvata) HDC (06/28/2006 5.10.2600.0677)-->C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\DPInst.exe /u C:\WINDOWS\system32\DRVSTORE\nvata_549D44A3E434018ACE1197E4096E58522843E30B\nvata.inf
Windows Driver Package - NVIDIA System (06/08/2006 4.5.7)-->C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\DPInst.exe /u C:\WINDOWS\system32\DRVSTORE\nvsmbus_B987EB6DD48E85A36A1BEF3C96CF8082EDCE96A8\nvsmbus.inf
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Messenger-->MsiExec.exe /X{508CE775-4BA4-4748-82DF-FE28DA9F03B0}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Windows Workflow Foundation-->MsiExec.exe /I{7D1B85BD-AA07-48B8-808D-67A4067FC6BD}
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
X10 Hardware(TM)-->C:\WINDOWS\UNWISE.EXE C:\PROGRA~1\X10HAR~1\Install.log

======Security center information======

AV: Symantec AntiVirus Corporate Edition (disabled)

======System event log======

Computer Name: PARTISOT-291AAB
Event Code: 7036
Message: Le service Service de découvertes SSDP est entré dans l'état : en cours d'exécution.

Record Number: 21940
Source Name: Service Control Manager
Time Written: 20090523043441.000000+120
Event Type: Informations
User:

Computer Name: PARTISOT-291AAB
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Service de découvertes SSDP.

Record Number: 21939
Source Name: Service Control Manager
Time Written: 20090523043440.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: PARTISOT-291AAB
Event Code: 7036
Message: Le service Explorateur d'ordinateur est entré dans l'état : arrêté.

Record Number: 21938
Source Name: Service Control Manager
Time Written: 20090523043437.000000+120
Event Type: Informations
User:

Computer Name: PARTISOT-291AAB
Event Code: 7036
Message: Le service Service de la passerelle de la couche Application est entré dans l'état : en cours d'exécution.

Record Number: 21937
Source Name: Service Control Manager
Time Written: 20090523043436.000000+120
Event Type: Informations
User:

Computer Name: PARTISOT-291AAB
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Service de la passerelle de la couche Application.

Record Number: 21936
Source Name: Service Control Manager
Time Written: 20090523043436.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

=====Application event log=====

Computer Name: PARTISOT-291AAB
Event Code: 6
Message:

Impossible d'analyser 1 fichiers dans C:\Documents and Settings\Pc bas\Bureau\SYLVAIN\divx\Day.Watch.(Night.Watch.2).2007.FRENCH.DVDRip.XViD-CiNEFOX\cf_xvid_nw2.part37.rar à cause d'erreurs d'extraction détectées par les moteurs de décomposition.

Record Number: 17101
Source Name: Symantec AntiVirus
Time Written: 20090518112952.000000+120
Event Type: Avertissement
User:

Computer Name: PARTISOT-291AAB
Event Code: 6
Message:

Impossible d'analyser 1 fichiers dans C:\Documents and Settings\Pc bas\Bureau\SYLVAIN\divx\Day.Watch.(Night.Watch.2).2007.FRENCH.DVDRip.XViD-CiNEFOX\cf_xvid_nw2.part36.rar à cause d'erreurs d'extraction détectées par les moteurs de décomposition.

Record Number: 17100
Source Name: Symantec AntiVirus
Time Written: 20090518112952.000000+120
Event Type: Avertissement
User:
<

24 réponses

Résumé de la discussion

Suite à la détection d'un virus, le demandeur signale une impossibilité d'achever l'installation d'un malware et sollicite des explications, tout en fournissant des rapports HijackThis et un log système. Des éléments tels que des processus et services listés, des outils de sécurité présents (Spybot, Malwarebytes, Symantec), et des paramètres de démarrage modifiés suggèrent une infection complexe nécessitant une désinfection approfondie. Le contenu des journaux mentionne des emplacements suspects comme Temp et des entrées d'autorun, ainsi que des composants liés à des barres d'outils et à des programmes potentiellement indésirables. D'autres éléments utiles indiquent d'envisager une désinfection hors ligne avec un LiveCD antivirus et de sauvegarder les données critiques avant toute manipulation, afin de limiter les risques de perte.

Bobot (l’IA à votre service)
  1. Contributeur sécurité
    slt colle un rapport d'un scan rapide avec malwarebyte que tu as

    puis

    Télécharge et installe UsbFix de C_XX & Chiquitine29

    Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d'avoir été infectées sans les ouvrir

    # Double clic sur le raccourci UsbFix présent sur ton bureau .

    # Choisis l'option 1 ( Recherche )

    # Laisse travailler l'outil.

    # Ensuite post le rapport UsbFix.txt qui apparaitra.

    # Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )

    ( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

    # Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
    Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
    Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
    1. Merci pour la rapidité, le problème est que malwarebyte ne veut pas s'installer, et donc impossible de le lancer.

      Je fais tout de meme le scan avec usbfix.
    2. @jyconnaisrienVoici le rapport

      ############################## [ UsbFix V3.029 | Scan ]

      # User : Pc bas (Administrateurs) # PARTISOT-291AAB
      # Update on 05/06/09 by Chiquitine29, C_XX & Chimay8
      # WebSite : http://pagesperso-orange.fr/NosTools/usbfix.html
      # Start at: 11:51:32 | 09/06/2009

      # AMD Athlon(tm) 64 X2 Dual Core Processor 4200+
      # Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
      # Internet Explorer 7.0.5730.13
      # Windows Firewall Status : Enabled
      # AV : Symantec AntiVirus Corporate Edition 10.1.5.5000 [ (!) Disabled | Updated ]

      # C:\ # Disque fixe local # 290,09 Go (130,73 Go free) # NTFS
      # D:\ # Disque CD-ROM
      # E:\ # Disque amovible
      # F:\ # Disque amovible
      # G:\ # Disque amovible
      # H:\ # Disque CD-ROM # 1,44 Go (0 Mo free) [RBR] # CDFS
      # I:\ # Disque amovible
      # J:\ # Disque CD-ROM
      # K:\ # Disque CD-ROM
      # L:\ # Disque CD-ROM

      ############################## [ Processus actifs ]

      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\DOCUME~1\PCBAS~1\LOCALS~1\Temp\b.exe
      C:\WINDOWS\RTHDCPL.EXE
      C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
      C:\Program Files\Java\jre6\bin\jusched.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
      C:\PROGRA~1\SYMANT~1\VPTray.exe
      C:\WINDOWS\vVX1000.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Logitech\Gaming Software\LWEMon.exe
      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
      C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
      C:\Program Files\Steam\Steam.exe
      C:\Program Files\Symantec AntiVirus\DefWatch.exe
      C:\Program Files\flexnet\i486_nt\obj\lmgrd.exe
      C:\Program Files\Java\jre6\bin\jqs.exe
      C:\Program Files\flexnet\i486_nt\obj\lmgrd.exe
      C:\Program Files\Mio Technology\MioSync\mioSync.exe
      C:\Program Files\MagicDisc\MagicDisc.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
      C:\Program Files\Symantec AntiVirus\DoScan.exe
      C:\Program Files\flexnet\i486_nt\obj\ptc_d.exe
      C:\Program Files\Autodesk\3ds Max 9\mentalray\satellite\raysat_3dsmax9_32server.exe
      C:\Program Files\Microsoft LifeCam\MSCamS32.exe
      C:\WINDOWS\system32\HPZipm12.exe
      C:\WINDOWS\system32\svchost.exe
      C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\WINDOWS\system32\wbem\wmiapsrv.exe
      C:\WINDOWS\System32\alg.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
      C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
      C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
      C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\Internet Explorer\Iexplore.exe
      C:\WINDOWS\system32\wbem\wmiprvse.exe

      ################## [ Registre Startup ]

      HKCU_Main: "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
      HKCU_Main: "Search Page"="https://www.google.com/?gws_rd=ssl"
      HKCU_Main: "Start Page"="https://www.google.com/?gws_rd=ssl"
      HKLM_logon: "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
      HKLM_logon: "DefaultUserName"="Pc bas"
      HKLM_logon: "AltDefaultUserName"="Pc bas"
      HKLM_logon: "LegalNoticeCaption"=""
      HKLM_logon: "LegalNoticeText"=""
      HKLM_Run: ATICCC="C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
      HKLM_Run: RTHDCPL=RTHDCPL.EXE
      HKLM_Run: SkyTel=SkyTel.EXE
      HKLM_Run: Alcmtr=ALCMTR.EXE
      HKLM_Run: SunJavaUpdateSched="C:\Program Files\Java\jre6\bin\jusched.exe"
      HKLM_Run: NeroFilterCheck=C:\WINDOWS\system32\NeroCheck.exe
      HKLM_Run: ccApp="C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
      HKLM_Run: vptray=C:\PROGRA~1\SYMANT~1\VPTray.exe
      HKLM_Run: LifeCam="C:\Program Files\Microsoft LifeCam\LifeExp.exe"
      HKLM_Run: VX1000=C:\WINDOWS\vVX1000.exe
      HKLM_Run: Start WingMan Profiler=C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui
      HKLM_Run: net="C:\WINDOWS\system32\net.net"
      HKLM_Run: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
      HKCU_Run: swg=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      HKCU_Run: MsnMsgr="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
      HKCU_Run: ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe
      HKCU_Run: Gadwin PrintScreen=C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe /nosplash
      HKCU_Run: Steam="C:\Program Files\Steam\Steam.exe" -silent
      HKCU_Run: net="C:\WINDOWS\system32\net.net"
      HKCU_Run: SpybotSD TeaTimer=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

      ################## [ Fichiers # Dossiers infectieux ]

      Found ! H:\autorun.ini
      Found ! H:\Setup.exe
      Found ! H:\autorun.inf

      ################## [ Registre # Clés Run infectieuses ]

      ################## [ Registre # Mountpoints2 ]

      HKCU\...\Explorer\MountPoints2\{3e0a865c-5023-11dd-85f5-9ad4ff93ca4c}\Shell\AutoRun\Command
      HKCU\...\Explorer\MountPoints2\{3e0a865c-5023-11dd-85f5-9ad4ff93ca4c}\Shell\explore\Command
      HKCU\...\Explorer\MountPoints2\{3e0a865c-5023-11dd-85f5-9ad4ff93ca4c}\Shell\open\Command
      HKCU\...\Explorer\MountPoints2\{a683916c-cabf-11dd-86fb-001731718a28}\Shell\AutoRun\Command
      HKCU\...\Explorer\MountPoints2\{bbd5110b-54e4-11dd-860d-001731718a28}\Shell\AutoRun\Command

      ################## [ ! Fin du rapport # UsbFix V3.029 ! ]
  2. Contributeur sécurité
    Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d avoir été infectés sans les ouvrir

    # Double clic sur le raccourci UsbFix présent sur ton bureau

    # choisis l'option 2 ( Suppression )

    # Ton bureau disparaitra et le pc redémarrera .

    # Au redémarrage , UsbFix scannera ton pc , laisse travailler l'outil.

    # Ensuite post le rapport UsbFix.txt qui apparaitra avec le bureau .

    # Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )

    ( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

    ______________________
    retente malwarebyte et si cela marche pas:

    colle un rapport avec super antispyware:
    https://www.malekal.com/?s=SUPERAntiSpyware
    1. ############################## [ UsbFix V3.029 | Cleaning ]

      # User : Pc bas (Administrateurs) # PARTISOT-291AAB
      # Update on 05/06/09 by Chiquitine29, C_XX & Chimay8
      # WebSite : http://pagesperso-orange.fr/NosTools/usbfix.html
      # Start at: 13:08:21 | 09/06/2009

      # AMD Athlon(tm) 64 X2 Dual Core Processor 4200+
      # Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
      # Internet Explorer 7.0.5730.13
      # Windows Firewall Status : Enabled
      # AV : Symantec AntiVirus Corporate Edition 10.1.5.5000 [ (!) Disabled | Updated ]

      # C:\ # Disque fixe local # 290,09 Go (130,64 Go free) # NTFS
      # D:\ # Disque CD-ROM
      # E:\ # Disque amovible
      # F:\ # Disque amovible
      # G:\ # Disque amovible
      # H:\ # Disque CD-ROM # 1,44 Go (0 Mo free) [RBR] # CDFS
      # I:\ # Disque amovible
      # J:\ # Disque CD-ROM
      # K:\ # Disque CD-ROM
      # L:\ # Disque CD-ROM

      ############################## [ Processus actifs ]

      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
      C:\Program Files\Internet Explorer\Iexplore.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\DOCUME~1\PCBAS~1\LOCALS~1\Temp\b.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
      C:\Program Files\Symantec AntiVirus\DefWatch.exe
      C:\Program Files\flexnet\i486_nt\obj\lmgrd.exe
      C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      C:\Program Files\flexnet\i486_nt\obj\lmgrd.exe
      C:\Program Files\Java\jre6\bin\jqs.exe
      C:\Program Files\flexnet\i486_nt\obj\ptc_d.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
      C:\Program Files\Autodesk\3ds Max 9\mentalray\satellite\raysat_3dsmax9_32server.exe
      C:\Program Files\Microsoft LifeCam\MSCamS32.exe
      C:\WINDOWS\system32\HPZipm12.exe
      C:\WINDOWS\system32\svchost.exe
      C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\WINDOWS\System32\alg.exe
      C:\WINDOWS\system32\wbem\wmiprvse.exe
      C:\WINDOWS\system32\wbem\wmiapsrv.exe
      C:\WINDOWS\system32\wbem\wmiprvse.exe

      ################## [ Fichiers # Dossiers infectieux ]

      (!) Not Deleted ! H:\autorun.ini
      (!) Not Deleted ! H:\Setup.exe
      (!) Not Deleted ! H:\autorun.inf

      ################## [ Registre # Clés Run infectieuses ]

      Deleted ! HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Cognac"

      ################## [ Registre # Mountpoints2 ]

      Deleted ! HKCU\...\Explorer\MountPoints2\{3e0a865c-5023-11dd-85f5-9ad4ff93ca4c}\Shell\AutoRun\Command
      Deleted ! HKCU\...\Explorer\MountPoints2\{a683916c-cabf-11dd-86fb-001731718a28}\Shell\AutoRun\Command
      Deleted ! HKCU\...\Explorer\MountPoints2\{bbd5110b-54e4-11dd-860d-001731718a28}\Shell\AutoRun\Command

      ################## [ Listing des fichiers présent ]

      [12/07/2008 15:04|--a------|0] - C:\AUTOEXEC.BAT
      [12/07/2008 14:58|---hs----|216] - C:\boot.ini
      [02/03/2006 14:00|-rahs----|4952] - C:\Bootfont.bin
      [12/07/2008 15:04|--a------|0] - C:\CONFIG.SYS
      [21/02/2009 20:27|--a------|199] - C:\DARE.INI
      [27/03/2009 00:11|--a------|78670] - C:\EUTHANASIE.JPG
      [31/12/2008 12:20|--a------|230424] - C:\img2-001.raw
      [26/07/2008 20:30|--a------|1098607] - C:\IMG_0001.JPG
      [12/07/2008 15:04|-rahs----|0] - C:\IO.SYS
      [12/07/2008 15:04|-rahs----|0] - C:\MSDOS.SYS
      [02/03/2006 14:00|-rahs----|47564] - C:\NTDETECT.COM
      [27/08/2008 16:05|-rahs----|252240] - C:\ntldr
      [?|?|?] - C:\pagefile.sys
      [01/04/2009 00:31|--a------|1104724] - C:\ptcsetup.bak
      [01/04/2009 19:06|--a------|662838] - C:\ptcsetup.log
      [20/07/2008 18:17|--a------|90] - C:\Setup.log
      [27/08/2008 16:22|--ah-----|268] - C:\sqmdata00.sqm
      [17/02/2009 08:21|--ah-----|268] - C:\sqmdata01.sqm
      [27/08/2008 16:22|--ah-----|244] - C:\sqmnoopt00.sqm
      [17/02/2009 08:21|--ah-----|244] - C:\sqmnoopt01.sqm
      [02/03/2009 20:48|--ahs----|5632] - C:\Thumbs.db
      [16/03/2009 11:49|--a------|4] - C:\timestmp.tmp
      [09/06/2009 13:13|--a------|4441] - C:\UsbFix.txt
      [19/10/2006 15:00|-r-------|2648675] - H:\Autorun.exe
      [26/01/2007 12:54|-r-------|5009] - H:\Autorun.ini
      [06/07/2004 12:25|-r-------|695949] - H:\BDA.cab
      [06/07/2004 12:25|-r-------|1148978] - H:\BDANT.cab
      [06/07/2004 12:25|-r-------|968059] - H:\BDAXP.cab
      [06/07/2004 12:25|-r-------|60416] - H:\DSETUP.dll
      [06/07/2004 12:25|-r-------|15439890] - H:\DirectX.cab
      [13/04/2006 09:52|-r-------|241664] - H:\EAutorun.exe
      [05/08/2004 00:52|-r-------|851968] - H:\Launcher.exe
      [06/07/2004 12:25|-r-------|1108569] - H:\ManagedDX.CAB
      [25/04/2006 10:23|-r-------|725734] - H:\Product.bmp
      [13/08/2004 23:41|-r-------|4235264] - H:\RichardBurnsRally.exe
      [06/07/2004 12:25|-r-------|22486] - H:\autorun.ico
      [26/01/2007 12:41|-r-------|113] - H:\autorun.inf
      [20/10/2005 14:52|-r-------|29216] - H:\bouton_10_ROLLOFF.bmp
      [20/10/2005 14:52|-r-------|29216] - H:\bouton_10_ROLLON.bmp
      [20/10/2005 14:49|-r-------|14168] - H:\bouton_OFF.bmp
      [20/10/2005 14:50|-r-------|14168] - H:\bouton_OVER.bmp
      [13/08/2004 23:44|-r-------|51423065] - H:\data1.cab
      [13/08/2004 23:52|-r-------|214543] - H:\data1.hdr
      [13/08/2004 23:52|-r-------|1401341262] - H:\data2.cab
      [06/07/2004 12:25|-r-------|1973760] - H:\dsetup32.dll
      [23/07/2004 16:24|-r-------|40960] - H:\dxdetect.exe
      [06/07/2004 12:25|-r-------|13095049] - H:\dxnt.cab
      [06/07/2004 12:25|-r-------|461824] - H:\dxsetup.exe
      [05/12/2002 15:16|-r-------|418296] - H:\engine32.cab
      [24/04/2006 17:17|-r-------|6410064] - H:\etoiles.swf
      [06/07/2004 12:25|-r-------|26] - H:\fingerprint.dat
      [13/08/2004 23:52|-r-------|1007] - H:\layout.bin
      [06/07/2004 12:25|-r-------|1132544] - H:\mdxredist.msi
      [26/04/2006 10:47|-r-------|1336392] - H:\mindscape.bmp
      [13/08/2004 20:18|-r-------|6770] - H:\readme_cze.txt
      [13/08/2004 20:18|-r-------|6558] - H:\readme_eng.txt
      [13/08/2004 20:18|-r-------|7578] - H:\readme_fre.txt
      [13/08/2004 20:18|-r-------|8447] - H:\readme_ger.txt
      [13/08/2004 20:18|-r-------|7101] - H:\readme_ita.txt
      [13/08/2004 20:18|-r-------|7917] - H:\readme_pol.txt
      [13/08/2004 20:18|-r-------|7142] - H:\readme_spa.txt
      [13/08/2004 23:43|-r-------|405649] - H:\setup.boot
      [02/12/2002 16:33|-r-------|107512] - H:\setup.exe
      [13/08/2004 23:43|-r-------|434] - H:\setup.ini
      [13/08/2004 23:43|-r-------|177821] - H:\setup.inx
      [06/07/2004 12:25|-r-------|29] - H:\trackinfo.dat
      [13/08/2004 23:41|-r-------|432] - H:\vssver.scc
      [06/07/2004 12:25|-r-------|4085904] - H:\wmfdist.exe

      ################## [ Vaccination ]

      # C:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.

      ################## [ ! Fin du rapport # UsbFix V3.029 ! ]
      1. Je sens que ce pc va partir à la poubelle.... malwarebyte ne se lance pas et superantispyware a rencontré une erreur et doit fermer, meme après réinstallation... je ne comprends pas.

        Voici le rapport rsit

        Logfile of random's system information tool 1.06 (written by random/random)
        Run by Pc bas at 2009-06-09 14:01:43
        Microsoft Windows XP Édition familiale Service Pack 3
        System drive C: has 134 GB (45%) free of 297 GB
        Total RAM: 2046 MB (57% free)

        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 14:01:46, on 09/06/2009
        Platform: Windows XP SP3 (WinNT 5.01.2600)
        MSIE: Internet Explorer v7.00 (7.00.6000.16827)
        Boot mode: Normal

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
        C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
        C:\WINDOWS\Explorer.EXE
        C:\Program Files\Internet Explorer\Iexplore.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\WINDOWS\RTHDCPL.EXE
        C:\Program Files\Java\jre6\bin\jusched.exe
        C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
        C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
        C:\PROGRA~1\SYMANT~1\VPTray.exe
        C:\WINDOWS\vVX1000.exe
        C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
        C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
        C:\Program Files\Steam\Steam.exe
        C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
        C:\Program Files\Symantec AntiVirus\DefWatch.exe
        C:\Program Files\flexnet\i486_nt\obj\lmgrd.exe
        C:\Program Files\Java\jre6\bin\jqs.exe
        C:\Program Files\flexnet\i486_nt\obj\lmgrd.exe
        C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
        C:\Program Files\flexnet\i486_nt\obj\ptc_d.exe
        C:\Program Files\Symantec AntiVirus\DoScan.exe
        C:\Program Files\Mio Technology\MioSync\mioSync.exe
        C:\Program Files\Autodesk\3ds Max 9\mentalray\satellite\raysat_3dsmax9_32server.exe
        C:\Program Files\MagicDisc\MagicDisc.exe
        C:\Program Files\Microsoft LifeCam\MSCamS32.exe
        C:\WINDOWS\system32\HPZipm12.exe
        C:\WINDOWS\system32\svchost.exe
        C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
        C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
        C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
        C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
        C:\Program Files\Mozilla Firefox\firefox.exe
        C:\WINDOWS\system32\msiexec.exe
        C:\Documents and Settings\Pc bas\Bureau\RSIT.exe
        C:\Program Files\trend micro\Pc bas.exe

        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
        O2 - BHO: XML module - {500BCA15-57A7-4eaf-8143-8C619470B13D} - (no file)
        O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
        O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
        O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
        O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
        O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
        O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
        O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
        O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
        O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
        O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
        O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
        O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
        O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
        O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
        O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
        O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
        O4 - HKLM\..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui
        O4 - HKLM\..\Run: [net] "C:\WINDOWS\system32\net.net"
        O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
        O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
        O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
        O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKCU\..\Run: [Gadwin PrintScreen] C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe /nosplash
        O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
        O4 - HKCU\..\Run: [net] "C:\WINDOWS\system32\net.net"
        O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
        O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
        O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
        O4 - Startup: MagicDisc.lnk = C:\Program Files\MagicDisc\MagicDisc.exe
        O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
        O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
        O4 - Global Startup: MioSync.lnk = C:\Program Files\Mio Technology\MioSync\mioSync.exe
        O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
        O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
        O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
        O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
        O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
        O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
        O16 - DPF: {402EE96E-2CE8-482D-ADA5-CECEEA07E16D} (TurnTool Scene) - http://www.turntool.com/ViewerInstall.exe
        O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab
        O17 - HKLM\System\CCS\Services\Tcpip\..\{C114F8BE-6AFC-4E74-8FB4-1FE6E7D8449B}: NameServer = 208.67.222.222,208.67.220.220
        O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
        O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
        O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
        O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
        O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
        O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
        O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
        O23 - Service: FLEXlm server for PTC - Macrovision Corporation - C:\Program Files\flexnet\i486_nt\obj\lmgrd.exe
        O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
        O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
        O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
        O23 - Service: mental ray 3.5 Satellite (32-bit) (mi-raysat_3dsmax9_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 9\mentalray\satellite\raysat_3dsmax9_32server.exe
        O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
        O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
        O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
        O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
        O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
        O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
        1. Voila le rapport

          Antivirus Version Dernière mise à jour Résultat
          a-squared 4.5.0.18 2009.06.09 Trojan-Clicker.Win32.VBiframe!IK*
          AhnLab-V3 5.0.0.2 2009.06.09 -
          AntiVir 7.9.0.180 2009.06.08 TR/Crypt.XPACK.Gen
          Antiy-AVL 2.0.3.1 2009.06.08 Trojan/Win32.VBiframe
          Authentium 5.1.2.4 2009.06.08 -
          Avast 4.8.1335.0 2009.06.08 Win32:Trojan-gen {Other}
          AVG 8.5.0.339 2009.06.08 Clicker.ZKH
          BitDefender 7.2 2009.06.09 Trojan.Generic.1953699
          CAT-QuickHeal 10.00 2009.06.09 TrojanClicker.VBiframe.jq
          ClamAV 0.94.1 2009.06.09 -
          Comodo 1291 2009.06.09 -
          DrWeb 5.0.0.12182 2009.06.09 Trojan.Click.25308
          eSafe 7.0.17.0 2009.06.07 Win32.TRCrypt.XPACK
          eTrust-Vet 31.6.6548 2009.06.08 -
          F-Prot 4.4.4.56 2009.06.08 -
          F-Secure 8.0.14470.0 2009.06.09 Trojan-Clicker.Win32.VBiframe.jq
          Fortinet 3.117.0.0 2009.06.08 W32/AdClicker.C!tr
          GData 19 2009.06.09 Trojan.Generic.1953699
          Ikarus T3.1.1.59.0 2009.06.09 -
          K7AntiVirus 7.10.757 2009.06.08 -
          Kaspersky 7.0.0.125 2009.06.09 Trojan-Clicker.Win32.VBiframe.jq
          McAfee 5640 2009.06.08 Generic AdClicker.c
          McAfee+Artemis 5640 2009.06.08 Generic AdClicker.c
          McAfee-GW-Edition 6.7.6 2009.06.09 Trojan.Crypt.XPACK.Gen
          Microsoft 1.4701 2009.06.09 TrojanDownloader:Win32/Pacoheir.A
          NOD32 4139 2009.06.08 a variant of Win32/TrojanClicker.Punad.AA
          Norman 6.01.09 2009.06.08 -
          nProtect 2009.1.8.0 2009.06.09 -
          Panda 10.0.0.14 2009.06.09 -
          PCTools 4.4.2.0 2009.06.06 -
          Prevx 3.0 2009.06.09 High Risk Cloaked Malware
          Rising 21.33.11.00 2009.06.09 -
          Sophos 4.42.0 2009.06.09 Mal/Generic-A
          Sunbelt 3.2.1858.2 2009.06.09 -
          Symantec 1.4.4.12 2009.06.09 -
          TheHacker 6.3.4.3.342 2009.06.08 -
          TrendMicro 8.950.0.1092 2009.06.09 -
          VBA32 3.12.10.6 2009.06.08 Trojan-Clicker.Win32.VBiframe.jq
          ViRobot 2009.6.9.1774 2009.06.09 -
          VirusBuster 4.6.5.0 2009.06.08 -
          Information additionnelle
          File size: 110592 bytes
          MD5 : 6f3db834bc59ffe4424efd6cbd385064
          SHA1 : 5c56c3d4ab257aeab5f7deb588e7340ab2e02deb
          SHA256: 74e005525ecd43444ac10b7245c9faaa85660001160b62dee71b44431cf7a461
          PEInfo: PE Structure information

          ( base data )
          entrypointaddress.: 0x12E7
          timedatestamp.....: 0x4A248E8C (Tue Jun 2 04:29:32 2009)
          machinetype.......: 0x14C (Intel I386)

          ( 4 sections )
          name viradd virsiz rawdsiz ntrpy md5
          .text 0x1000 0xBDF0 0x5000 7.81 c4df53a0d1651455466ea22dfd922ce0
          .data 0xD000 0xE54 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
          .rsrc 0xE000 0x3DA8 0x4000 3.48 941f77d46672ed6a706cfb442a3b2905
          .adata 0x12000 0x1CAA0 0x11000 8.00 d05a4d3a849b0b13f1555a0111460d8f

          ( 4 imports )

          > advapi32.dll: RegSetValueA, RegEnumValueA, RegEnumKeyA, RegDeleteKeyA
          > kernel32.dll: GetModuleHandleA, ExitProcess, GetProcAddress, HeapCreate, GetCurrentProcess
          > ole32.dll: CoInitializeEx, OleRun, CoInitialize, CoCreateInstanceEx
          > user32.dll: CreateWindowExA, SetWindowLongA, wsprintfA, CloseWindow

          ( 0 exports )
          TrID : File type identification
          Win32 Executable Generic (68.0%)
          Generic Win/DOS Executable (15.9%)
          DOS Executable Generic (15.9%)
          Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
          ssdeep: -
          Prevx Info: http://info.prevx.com/aboutprogramtext.asp?PX5=7FCCF50600210BD3B03101122AFA0F00C8C3F7CC
          PEiD : Armadillo v1.71
          RDS : NSRL Reference Data Set
          1. Contributeur sécurité
            encore une infection que norton ne connais pas .... il est toujours aussi pas bon ...

            télécharge OTMoveIt
            http://oldtimer.geekstogo.com/OTMoveIt3.exe (de Old_Timer) sur ton Bureau.

            double-clique sur OTMoveIt.exe pour le lancer.
            copie la liste qui se trouve en citation ci-dessous,
            et colle-la dans le cadre de gauche de OTMoveIt :Paste instruction for items to be moved.
            (attention bien mettre :processes)

            :processes
            explorer.exe
            :files
            C:\WINDOWS\system32\net.net
            :reg
            [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{500BCA15-57A7-4eaf-8143-8C619470B13D}]
            [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
            [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]
            [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
            "net"=-
            [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
            "net"=-
            :commands
            [purity]
            [emptytemp]
            [start explorer]

            clique sur MoveIt! pour lancer la suppression.
            le résultat apparaitra dans le cadre "Results".
            clique sur Exit pour fermer.
            poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

            il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.

            ______________________

            dis si malwarebyte ou super antispyware marchent
            1. quand je lance otmoveit, j'ai ce message d'erreur

              http://img193.imageshack.us/img193/3705/erreurl.jpg
              1. Contributeur sécurité
                télécharge combofix (par sUBs) ici :

                http://download.bleepingcomputer.com/sUBs/ComboFix.exe

                et enregistre le sur le bureau

                sous le nom de antibagle. Fais le avant que le fichier ne soit enregistré sur le bureau.

                déconnecte toi d'internet et ferme toutes tes applications.

                désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)

                double-clique sur combofix.exe et suis les instructions

                à la fin, il va produire un rapport C:\ComboFix.txt

                réactive ton parefeu, ton antivirus, la garde de ton antispyware

                copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse.

                Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

                Tu as un tutoriel complet ici :

                https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix
                1. Voila le rapport après ce long travail de combofix

                  ComboFix 09-06-08.03 - Pc bas 09/06/2009 15:26.1 - NTFSx86
                  Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.2046.1597 [GMT 2:00]
                  Lancé depuis: c:\documents and settings\Pc bas\Bureau\antibagle.exe
                  AV: Symantec AntiVirus Corporate Edition *On-access scanning disabled* (Updated) {FB06448E-52B8-493A-90F3-E43226D3305C}
                  .

                  (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
                  .

                  c:\windows\msnimport.exe
                  c:\windows\system32\drivers\SKYNETkxejtqdi.sys
                  c:\windows\system32\drivers\UACgyppyckctlmtofg.sys
                  c:\windows\system32\SKYNETdesxdtmk.dat
                  c:\windows\system32\SKYNETsevyevew.dll
                  c:\windows\system32\SKYNETunbaqjno.dll
                  c:\windows\system32\tmp93.tmp
                  c:\windows\system32\tmp94.tmp
                  c:\windows\system32\UACchciumfrxmypcxh.log
                  c:\windows\system32\UACfcxkkcndedcbonj.dll
                  c:\windows\system32\UACfvnhukmyxfuigjt.dll
                  c:\windows\system32\UACicpoxjwjcgyjfef.dll
                  c:\windows\system32\uacinit.dll
                  c:\windows\system32\UACinkbyjggpxendpj.dll
                  c:\windows\system32\UACkamucnysqkhqris.dll
                  c:\windows\system32\UACritjgolxevrqhjp.dat
                  c:\windows\system32\UACsaedfchipauyqhl.log
                  c:\windows\system32\UACvuxinbmndorgfcp.dll
                  c:\windows\system32\UACwnntcwxoinbicgl.log
                  c:\windows\system32\UACynoiyinygbhfyut.db
                  c:\windows\Tasks\{783AF354-B514-42d6-970E-3E8BF0A5279C}.job

                  .
                  ((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
                  .

                  -------\Service_UACd.sys
                  -------\Service_SKYNETjgxnxtbw

                  ((((((((((((((((((((((((((((( Fichiers créés du 2009-05-09 au 2009-06-09 ))))))))))))))))))))))))))))))))))))
                  .

                  2009-06-09 12:00 . 2009-06-09 12:00 -------- d-----w- c:\program files\SUPERAntiSpyware
                  2009-06-09 12:00 . 2009-06-09 12:00 -------- d-----w- c:\documents and settings\Pc bas\Application Data\SUPERAntiSpyware.com
                  2009-06-09 12:00 . 2009-06-09 12:00 -------- d-----w- c:\program files\Fichiers communs\Wise Installation Wizard
                  2009-06-09 09:58 . 2009-06-09 09:58 -------- d-----w- c:\program files\SlySoft
                  2009-06-09 09:57 . 2009-06-09 09:57 -------- d-----w- c:\program files\abgx360
                  2009-06-09 09:51 . 2009-06-09 11:17 -------- d-----w- C:\UsbFix
                  2009-06-09 09:45 . 2009-06-09 09:45 -------- d-----w- c:\documents and settings\Pc bas\Application Data\ImgBurn
                  2009-06-09 09:44 . 2009-06-09 09:44 -------- d-----w- c:\program files\ImgBurn
                  2009-06-09 09:34 . 2009-06-09 12:01 -------- d-----w- c:\program files\trend micro
                  2009-06-09 09:34 . 2009-06-09 09:35 -------- d-----w- C:\rsit
                  2009-06-09 09:11 . 2009-06-09 11:45 -------- d-----w- c:\program files\Spybot - Search & Destroy
                  2009-06-09 09:11 . 2009-06-09 11:45 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
                  2009-06-09 08:50 . 2009-06-09 08:58 -------- d-----w- c:\windows\BDOSCAN8
                  2009-06-09 08:38 . 2008-06-19 15:24 28544 ----a-w- c:\windows\system32\drivers\pavboot.sys
                  2009-06-09 08:38 . 2009-06-09 08:38 -------- d-----w- c:\program files\Panda Security
                  2009-06-09 08:23 . 2009-06-09 11:49 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
                  2009-06-09 08:14 . 2009-06-09 08:14 -------- d-----w- c:\windows\system32\Kaspersky Lab
                  2009-06-04 19:19 . 2009-06-04 19:19 -------- d-----w- c:\program files\SCi Games
                  2009-06-04 15:46 . 2009-06-04 15:46 -------- d-----w- c:\documents and settings\Pc bas\Application Data\BlackBean
                  2009-06-02 16:45 . 2009-06-04 15:37 -------- d-----w- C:\BMW M3 Challenge
                  2009-05-31 20:57 . 2009-05-31 20:57 -------- d-----w- c:\program files\Alcohol Soft
                  2009-05-31 20:50 . 2009-05-31 20:50 721904 ----a-w- c:\windows\system32\drivers\sptd.sys
                  2009-05-31 12:54 . 2009-05-31 13:12 -------- d-----w- c:\documents and settings\Pc bas\Application Data\RayV
                  2009-05-28 10:59 . 2009-05-28 10:59 -------- d-----w- c:\program files\EA Sports
                  2009-05-27 16:30 . 2009-05-27 16:30 -------- d-----w- c:\program files\Feneris
                  2009-05-27 15:28 . 2009-05-27 15:28 410984 ----a-w- c:\windows\system32\deploytk.dll
                  2009-05-27 15:27 . 2009-05-27 15:27 152576 ----a-w- c:\documents and settings\Pc bas\Application Data\Sun\Java\jre1.6.0_13\lzma.dll
                  2009-05-16 12:55 . 2009-05-16 12:55 -------- d-----w- c:\program files\Mio Technology
                  2009-05-16 12:54 . 2008-04-14 01:57 32128 -c--a-w- c:\windows\system32\dllcache\wceusbsh.sys
                  2009-05-16 12:54 . 2006-03-09 08:17 37768 ----a-r- c:\windows\system32\drivers\wceusbsh.sys
                  2009-05-16 09:09 . 2009-05-23 13:47 -------- d-----w- c:\program files\The KMPlayer FR

                  .
                  (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
                  .
                  2009-06-09 13:40 . 2009-03-16 21:37 -------- d-----w- c:\program files\Steam
                  2009-06-08 17:24 . 2008-07-12 15:27 -------- d-----w- c:\program files\Symantec AntiVirus
                  2009-06-08 14:31 . 2008-07-12 17:29 -------- d-----w- c:\documents and settings\All Users\Application Data\Google Updater
                  2009-06-07 09:07 . 2008-10-24 13:07 -------- d-----w- c:\program files\Fichiers communs\Autodesk Shared
                  2009-06-07 09:06 . 2008-10-24 13:09 -------- d-----w- c:\documents and settings\All Users\Application Data\Autodesk
                  2009-06-07 09:04 . 2006-03-02 12:00 83250 ----a-w- c:\windows\system32\perfc00C.dat
                  2009-06-07 09:04 . 2006-03-02 12:00 504822 ----a-w- c:\windows\system32\perfh00C.dat
                  2009-06-06 14:45 . 2008-07-12 17:48 -------- d-----w- c:\documents and settings\Pc bas\Application Data\uTorrent
                  2009-06-04 15:30 . 2008-07-12 15:05 -------- d--h--w- c:\program files\InstallShield Installation Information
                  2009-06-02 19:00 . 2009-05-08 20:29 -------- d-----w- c:\program files\GTR2
                  2009-05-27 15:28 . 2008-07-12 15:18 -------- d-----w- c:\program files\Java
                  2009-05-23 13:46 . 2009-05-08 09:16 -------- d-----w- c:\program files\rFactor
                  2009-05-23 13:44 . 2008-12-09 15:46 -------- d-----w- c:\program files\DivX
                  2009-05-23 11:49 . 2008-12-21 10:41 -------- d-----w- c:\documents and settings\All Users\Application Data\2DBoy
                  2009-05-08 12:24 . 2009-02-21 18:06 -------- d-----w- c:\program files\Ubisoft
                  2009-05-08 11:59 . 2009-04-07 15:34 -------- d-----w- c:\program files\EA GAMES
                  2009-05-08 11:58 . 2008-07-14 10:10 -------- d-----w- c:\program files\LimeWire
                  2009-05-08 11:57 . 2008-12-24 14:55 -------- d-----w- c:\program files\Codemasters
                  2009-05-08 11:57 . 2009-04-20 09:19 -------- d-----w- c:\documents and settings\All Users\Application Data\Codemasters
                  2009-05-08 11:56 . 2008-12-14 10:28 -------- d-----w- c:\documents and settings\Pc bas\Application Data\InstallShield Installation Information
                  2009-05-08 11:56 . 2009-02-18 13:43 -------- d-----w- c:\documents and settings\Pc bas\Application Data\InstallShield
                  2009-05-08 11:56 . 2009-02-18 13:44 -------- d-----w- c:\program files\THQ
                  2009-05-08 09:58 . 2009-05-08 09:58 -------- d-----w- c:\documents and settings\All Users\Application Data\Trymedia
                  2009-05-03 17:34 . 2008-07-17 18:54 98304 ----a-w- c:\windows\system32\CmdLineExt.dll
                  2009-05-01 18:30 . 2009-05-01 18:30 3366912 ----a-w- c:\windows\system32\GPhotos.scr
                  2009-05-01 10:28 . 2009-04-16 11:18 138184 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
                  2009-05-01 10:28 . 2009-04-16 11:18 183112 ----a-w- c:\windows\system32\PnkBstrB.exe
                  2009-04-20 09:12 . 2008-07-13 18:57 444952 ----a-w- c:\windows\system32\wrap_oal.dll
                  2009-04-20 09:12 . 2008-07-13 18:57 109080 ----a-w- c:\windows\system32\OpenAL32.dll
                  2009-04-20 09:12 . 2008-07-13 18:57 -------- d-----w- c:\program files\OpenAL
                  2009-04-16 13:14 . 2009-04-16 11:18 66872 ----a-w- c:\windows\system32\PnkBstrA.exe
                  2009-04-16 13:14 . 2009-04-16 11:08 -------- d-----w- c:\program files\Electronic Arts
                  2009-04-16 11:06 . 2009-04-16 11:06 -------- d-----w- c:\documents and settings\Pc bas\Application Data\Leadertech
                  2009-03-17 11:57 . 2008-07-12 13:20 64960 -c--a-w- c:\documents and settings\Pc bas\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
                  2009-03-16 12:18 . 2009-06-02 16:47 69448 ----a-w- c:\windows\system32\XAPOFX1_3.dll
                  2009-03-16 12:18 . 2009-06-02 16:47 517448 ----a-w- c:\windows\system32\XAudio2_4.dll
                  2009-03-16 12:18 . 2009-06-02 16:47 235352 ----a-w- c:\windows\system32\xactengine3_4.dll
                  2009-03-16 12:18 . 2009-06-02 16:47 22360 ----a-w- c:\windows\system32\X3DAudio1_6.dll
                  2009-03-16 09:49 . 2009-03-16 09:48 4 ----a-w- C:\timestmp.tmp
                  .

                  ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
                  .
                  .
                  *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
                  REGEDIT4

                  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                  "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-07-12 68856]
                  "MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]
                  "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
                  "Gadwin PrintScreen"="c:\program files\Gadwin Systems\PrintScreen\PrintScreen.exe" [2007-08-20 495616]
                  "Steam"="c:\program files\Steam\Steam.exe" [2009-05-19 1217784]
                  "net"="c:\windows\system32\net.net" [2009-06-08 110592]

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                  "ATICCC"="c:\program files\ATI Technologies\ATI.ACE\CLIStart.exe" [2006-05-10 90112]
                  "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-05-27 148888]
                  "NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
                  "ccApp"="c:\program files\Fichiers communs\Symantec Shared\ccApp.exe" [2006-07-19 52896]
                  "vptray"="c:\progra~1\SYMANT~1\VPTray.exe" [2006-11-14 125536]
                  "LifeCam"="c:\program files\Microsoft LifeCam\LifeExp.exe" [2007-05-17 279912]
                  "VX1000"="c:\windows\vVX1000.exe" [2007-04-10 709992]
                  "Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2008-04-04 88584]
                  "net"="c:\windows\system32\net.net" [2009-06-08 110592]
                  "CloneCDTray"="c:\program files\SlySoft\CloneCD\CloneCDTray.exe" [2005-05-19 57344]
                  "RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.EXE [2006-09-12 16264192]
                  "SkyTel"="SkyTel.EXE" - c:\windows\SkyTel.exe [2006-05-16 2879488]

                  [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
                  "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

                  c:\documents and settings\Pc bas\Menu D‚marrer\Programmes\D‚marrage\
                  MagicDisc.lnk - c:\program files\MagicDisc\MagicDisc.exe [2008-10-24 575488]

                  c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
                  Adobe Reader Synchronizer.lnk - c:\program files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe [2006-10-23 734872]
                  Lancement rapide d'Adobe Reader.lnk - c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe [2006-10-23 40048]
                  MioSync.lnk - c:\program files\Mio Technology\MioSync\mioSync.exe [2009-5-16 647168]

                  [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
                  "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

                  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
                  2008-12-22 10:05 356352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll

                  [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
                  "DisableMonitoring"=dword:00000001

                  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
                  "%windir%\\system32\\sessmgr.exe"=
                  "c:\\Program Files\\uTorrent\\uTorrent.exe"=
                  "c:\\Program Files\\Microsoft LifeCam\\LifeCam.exe"=
                  "c:\\Program Files\\Microsoft LifeCam\\LifeExp.exe"=
                  "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
                  "c:\\Documents and Settings\\Pc bas\\Mes documents\\Fred\\WoW-BurningCrusade-frFR-Installer-downloader.exe"=
                  "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
                  "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
                  "c:\\Program Files\\eMule\\eMule.exe"=
                  "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
                  "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
                  "c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
                  "c:\\Program Files\\Skype\\Phone\\Skype.exe"=
                  "c:\\Program Files\\proeWildfire 4.0\\i486_nt\\nms\\nmsd.exe"=
                  "c:\\Program Files\\proeWildfire 4.0\\i486_nt\\obj\\pro_comm_msg.exe"=
                  "c:\\Program Files\\proeWildfire 4.0\\i486_nt\\obj\\xtop.exe"=
                  "c:\\Program Files\\GTR2\\GTR2.exe"=
                  "c:\\Program Files\\Autodesk\\3ds Max 9\\3dsmax.exe"=
                  "c:\\Program Files\\Autodesk\\Backburner\\monitor.exe"=
                  "c:\\Program Files\\Autodesk\\Backburner\\manager.exe"=
                  "c:\\Program Files\\Autodesk\\Backburner\\server.exe"=

                  R0 pavboot;pavboot;c:\windows\system32\drivers\pavboot.sys [09/06/2009 10:38 28544]
                  R3 3xHybrid;3xHybrid service;c:\windows\system32\drivers\3xHybrid.sys [03/05/2005 11:25 710144]
                  R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Fichiers communs\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [26/02/2009 19:18 101936]
                  R3 X10Hid;X10 Hid Device;c:\windows\system32\drivers\x10hid.sys [12/07/2008 17:13 7040]
                  S3 SavRoam;SAVRoam;c:\program files\Symantec AntiVirus\SavRoam.exe [14/11/2006 15:50 119904]
                  .
                  Contenu du dossier 'Tâches planifiées'

                  2009-06-06 c:\windows\Tasks\AppleSoftwareUpdate.job
                  - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

                  2009-06-09 c:\windows\Tasks\Google Software Updater.job
                  - c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-07-12 12:58]
                  .
                  - - - - ORPHELINS SUPPRIMES - - - -

                  BHO-{500BCA15-57A7-4eaf-8143-8C619470B13D} - (no file)
                  SafeBoot-procexp90.Sys

                  .
                  ------- Examen supplémentaire -------
                  .
                  uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
                  uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
                  IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
                  IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
                  TCP: {C114F8BE-6AFC-4E74-8FB4-1FE6E7D8449B} = 208.67.222.222,208.67.220.220
                  Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\program files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
                  DPF: {402EE96E-2CE8-482D-ADA5-CECEEA07E16D} - hxxp://www.turntool.com/ViewerInstall.exe
                  FF - ProfilePath - c:\documents and settings\Pc bas\Application Data\Mozilla\Firefox\Profiles\avkh5vmw.default\
                  FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
                  FF - prefs.js: browser.search.selectedEngine - Google
                  FF - plugin: c:\program files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll
                  FF - plugin: c:\program files\Google\Picasa3\npPicasa2.dll
                  FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
                  FF - plugin: c:\program files\Virtools\3D Life Player\npvirtools.dll
                  .

                  **************************************************************************

                  catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                  Rootkit scan 2009-06-09 15:40
                  Windows 5.1.2600 Service Pack 3 NTFS

                  Recherche de processus cachés ...

                  Recherche d'éléments en démarrage automatique cachés ...

                  Recherche de fichiers cachés ...

                  Scan terminé avec succès
                  Fichiers cachés: 0

                  **************************************************************************
                  .
                  --------------------- CLES DE REGISTRE BLOQUEES ---------------------

                  [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•9~*]
                  "C040110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
                  .
                  --------------------- DLLs chargées dans les processus actifs ---------------------

                  - - - - - - - > 'winlogon.exe'(780)
                  c:\program files\SUPERAntiSpyware\SASWINLO.dll
                  c:\windows\system32\Ati2evxx.dll

                  - - - - - - - > 'explorer.exe'(2504)
                  c:\progra~1\WINDOW~2\wmpband.dll
                  c:\windows\system32\eappprxy.dll
                  c:\windows\system32\WPDShServiceObj.dll
                  c:\windows\system32\PortableDeviceTypes.dll
                  c:\windows\system32\PortableDeviceApi.dll
                  .
                  ------------------------ Autres processus actifs ------------------------
                  .
                  c:\windows\system32\ati2evxx.exe
                  c:\windows\system32\ati2evxx.exe
                  c:\program files\Fichiers communs\Symantec Shared\ccSetMgr.exe
                  c:\program files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
                  c:\program files\ATI Technologies\ATI.ACE\CLI.exe
                  c:\program files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
                  c:\program files\Symantec AntiVirus\DefWatch.exe
                  c:\program files\flexnet\i486_nt\obj\lmgrd.exe
                  c:\program files\flexnet\i486_nt\obj\lmgrd.exe
                  c:\program files\Java\jre6\bin\jqs.exe
                  c:\program files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
                  c:\program files\flexnet\i486_nt\obj\ptc_d.exe
                  c:\program files\Autodesk\3ds Max 9\mentalray\satellite\raysat_3dsmax9_32server.exe
                  c:\program files\Microsoft LifeCam\MSCamS32.exe
                  c:\windows\system32\HPZipm12.exe
                  c:\progra~1\COMMON~1\X10\Common\X10nets.exe
                  c:\windows\system32\wscntfy.exe
                  c:\program files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
                  c:\program files\ATI Technologies\ATI.ACE\CLI.exe
                  c:\program files\ATI Technologies\ATI.ACE\CLI.exe
                  .
                  **************************************************************************
                  .
                  Heure de fin: 2009-06-09 15:46 - La machine a redémarré
                  ComboFix-quarantined-files.txt 2009-06-09 13:46

                  Avant-CF: 140 276 047 872 octets libres
                  Après-CF: 140 171 710 464 octets libres

                  WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
                  [boot loader]
                  timeout=2
                  default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
                  [operating systems]
                  c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
                  multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect

                  265 --- E O F --- 2009-05-14 10:30
                  1. Contributeur sécurité
                    ok cela devrait marcher:

                    télécharge OTMoveIt
                    http://oldtimer.geekstogo.com/OTMoveIt3.exe (de Old_Timer) sur ton Bureau.

                    double-clique sur OTMoveIt.exe pour le lancer.
                    copie la liste qui se trouve en citation ci-dessous,
                    et colle-la dans le cadre de gauche de OTMoveIt :Paste instruction for items to be moved.
                    (attention bien mettre :processes)

                    :processes
                    explorer.exe
                    :files
                    C:\timestmp.tmp
                    C:\WINDOWS\system32\net.net
                    :reg
                    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi­on\Explorer\Browser Helper Objects\{500BCA15-57A7-4eaf-8143-8C619470B13D}]
                    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi­on\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
                    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi­on\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]
                    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersio­n\Run]
                    "net"=-
                    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
                    "net"=-
                    :commands
                    [purity]
                    [emptytemp]
                    [start explorer]

                    clique sur MoveIt! pour lancer la suppression.
                    le résultat apparaitra dans le cadre "Results".
                    clique sur Exit pour fermer.
                    poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

                    il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.
                    _________________

                    passe malwarebyte ou super antispyware
                    1. otmoveit a toujours le message d'erreur par contre, malware se lance
                      1. Rapport de malware,

                        Malwarebytes' Anti-Malware 1.37
                        Version de la base de données: 2253
                        Windows 5.1.2600 Service Pack 3

                        09/06/2009 16:29:19
                        mbam-log-2009-06-09 (16-29-15).txt

                        Type de recherche: Examen rapide
                        Eléments examinés: 81977
                        Temps écoulé: 3 minute(s), 6 second(s)

                        Processus mémoire infecté(s): 0
                        Module(s) mémoire infecté(s): 0
                        Clé(s) du Registre infectée(s): 1
                        Valeur(s) du Registre infectée(s): 2
                        Elément(s) de données du Registre infecté(s): 0
                        Dossier(s) infecté(s): 0
                        Fichier(s) infecté(s): 1

                        Processus mémoire infecté(s):
                        (Aucun élément nuisible détecté)

                        Module(s) mémoire infecté(s):
                        (Aucun élément nuisible détecté)

                        Clé(s) du Registre infectée(s):
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\net (Trojan.Agent) -> No action taken.

                        Valeur(s) du Registre infectée(s):
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\net (Trojan.Downloader) -> No action taken.
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\net (Trojan.Downloader) -> No action taken.

                        Elément(s) de données du Registre infecté(s):
                        (Aucun élément nuisible détecté)

                        Dossier(s) infecté(s):
                        (Aucun élément nuisible détecté)

                        Fichier(s) infecté(s):
                        C:\WINDOWS\system32\net.net (Trojan.Downloader) -> No action taken.

                        Je reviens que ce soir, merci deja pour toute l'aide et le temps consacré a m'aider
                        1. Contributeur sécurité
                          ok colle malwarebyte (un scan rapide suffit) alors on verra après pour otmovit que faire
                          1. Contributeur sécurité
                            ok vire ce qui a été trouvé par malwarebyte

                            puis

                            essaie de refaire otmovit
                            et mets un nouveau rapport RSIT
                            1. Otmoveit ne marche toujours pas,

                              Rapport rsit de 1 mois

                              Logfile of random's system information tool 1.06 (written by random/random)
                              Run by Pc bas at 2009-06-09 19:02:07
                              Microsoft Windows XP Édition familiale Service Pack 3
                              System drive C: has 119 GB (40%) free of 297 GB
                              Total RAM: 2046 MB (67% free)

                              Logfile of Trend Micro HijackThis v2.0.2
                              Scan saved at 19:02:10, on 09/06/2009
                              Platform: Windows XP SP3 (WinNT 5.01.2600)
                              MSIE: Internet Explorer v7.00 (7.00.6000.16827)
                              Boot mode: Normal

                              Running processes:
                              C:\WINDOWS\System32\smss.exe
                              C:\WINDOWS\system32\winlogon.exe
                              C:\WINDOWS\system32\services.exe
                              C:\WINDOWS\system32\lsass.exe
                              C:\WINDOWS\system32\Ati2evxx.exe
                              C:\WINDOWS\system32\svchost.exe
                              C:\WINDOWS\System32\svchost.exe
                              C:\WINDOWS\system32\Ati2evxx.exe
                              C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
                              C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
                              C:\WINDOWS\system32\spoolsv.exe
                              C:\WINDOWS\Explorer.EXE
                              C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
                              C:\WINDOWS\RTHDCPL.EXE
                              C:\Program Files\Java\jre6\bin\jusched.exe
                              C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
                              C:\PROGRA~1\SYMANT~1\VPTray.exe
                              C:\WINDOWS\vVX1000.exe
                              C:\Program Files\Logitech\Gaming Software\LWEMon.exe
                              C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
                              C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                              C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
                              C:\WINDOWS\system32\ctfmon.exe
                              C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe
                              C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
                              C:\Program Files\Symantec AntiVirus\DefWatch.exe
                              C:\Program Files\flexnet\i486_nt\obj\lmgrd.exe
                              C:\Program Files\flexnet\i486_nt\obj\lmgrd.exe
                              C:\Program Files\Java\jre6\bin\jqs.exe
                              C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
                              C:\Program Files\flexnet\i486_nt\obj\ptc_d.exe
                              C:\Program Files\Mio Technology\MioSync\mioSync.exe
                              C:\Program Files\Autodesk\3ds Max 9\mentalray\satellite\raysat_3dsmax9_32server.exe
                              C:\Program Files\Microsoft LifeCam\MSCamS32.exe
                              C:\WINDOWS\system32\HPZipm12.exe
                              C:\WINDOWS\system32\svchost.exe
                              C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
                              C:\Program Files\MagicDisc\MagicDisc.exe
                              C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
                              C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
                              C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
                              C:\Program Files\Mozilla Firefox\firefox.exe
                              C:\Program Files\Windows Live\Messenger\usnsvc.exe
                              C:\Documents and Settings\Pc bas\Bureau\RSIT.exe
                              C:\Program Files\trend micro\Pc bas.exe

                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                              R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                              O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                              O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
                              O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                              O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                              O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
                              O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
                              O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
                              O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                              O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
                              O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
                              O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
                              O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
                              O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
                              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
                              O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
                              O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
                              O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
                              O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
                              O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
                              O4 - HKLM\..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui
                              O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
                              O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                              O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
                              O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                              O4 - HKCU\..\Run: [Gadwin PrintScreen] C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe /nosplash
                              O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                              O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                              O4 - Startup: MagicDisc.lnk = C:\Program Files\MagicDisc\MagicDisc.exe
                              O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
                              O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
                              O4 - Global Startup: MioSync.lnk = C:\Program Files\Mio Technology\MioSync\mioSync.exe
                              O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
                              O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
                              O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
                              O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
                              O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
                              O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                              O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                              O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                              O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                              O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
                              O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
                              O16 - DPF: {402EE96E-2CE8-482D-ADA5-CECEEA07E16D} (TurnTool Scene) - http://www.turntool.com/ViewerInstall.exe
                              O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab
                              O17 - HKLM\System\CCS\Services\Tcpip\..\{C114F8BE-6AFC-4E74-8FB4-1FE6E7D8449B}: NameServer = 208.67.222.222,208.67.220.220
                              O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
                              O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                              O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
                              O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
                              O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
                              O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
                              O23 - Service: FLEXlm server for PTC - Macrovision Corporation - C:\Program Files\flexnet\i486_nt\obj\lmgrd.exe
                              O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
                              O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
                              O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
                              O23 - Service: mental ray 3.5 Satellite (32-bit) (mi-raysat_3dsmax9_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 9\mentalray\satellite\raysat_3dsmax9_32server.exe
                              O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
                              O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
                              O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
                              O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
                              O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
                              O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
                              1. Contributeur sécurité
                                parfait

                                pour virer ce qui a été utilisé:

                                Télécharge ToolsCleaner sur ton bureau.
                                --> http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner
                                # Clique sur Recherche et laisse le scan agir ...
                                # Clique sur Suppression pour finaliser.
                                # Tu peux, si tu le souhaites, te servir des Options facultatives.
                                # Clique sur Quitter pour obtenir le rapport.
                                # Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

                                ps : pas besoin de m´envoyer le rapport si tout a été supprimé

                                _____________

                                pour vérifier que tout est ok:

                                colle le rapport d'un scan en ligne
                                avec un des suivants:

                                bitdefender en ligne :
                                http://www.bitdefender.fr/scan_fr/scan8/ie.html

                                Panda en ligne :
                                http://pandasoftware.fr

                                Kaspersky en ligne
                                https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr

                                Eset (Nod32) en ligne
                                https://www.eset.com/

                                a plus

                                rq: internet explorer 8 est sorti et le sp3 de windows aussi
                                • 1
                                • 2