Voilà sans faire exprès j'ai ouvert un .exe qui a installer ce virus et maintenant mon ordinateur lag et des pages internet n'ouvre plus et j'entend souvent un "pop" et un rond rouge avec un "X" blanc a l'intérieur est toujours dans le coin inférieur droit (à coté de l'heure) de mon écran et si je click le programme Xp security Center s'installe mais celui ce supprime facilement, reste plus qu'à savoir comment supprimé le rond rouge. Merci beaucoup à tout ceux qui pourront m'aider!

P.s.: je suis sous Windows XP media center!

Merci, mais malheureusement ça ne marche pas... DSS ne s'ouvre pas. Que dois-je faire?

P.s.: Avant le virus j'avait spybot search and destroy et maintenant je ne peux plus l'ouvrir... parce que je crois que le virus me l'interdit, alors est-ce la même chose pour DSS?

Non, il se passe rien c'est tout...

Je redémarre?

Encore merci mais Hijackthis a le même problème! On dirait que le virus bloque ce qui le nui! Il n'y a que AVG free 8.0 qui n'est pas bloqué... Je peux faire quelque chose avec celui-ci?

Le site web n'ouvre pas (comme d'autres depuis l'arrivé du virus) tu as un lien directe de téléchargement s.v.p.

Merci! Tout a marché! Le virus est supprimé (et plus!)! Encore merci! Les prochaines fois je saurai quoi faire! Encore merci!

Le rapport:

Malwarebytes' Anti-Malware 1.24
Version de la base de données: 1027
Windows 5.1.2600 Service Pack 2

15:27:56 2008-08-05
mbam-log-8-5-2008 (15-27-56).txt

Type de recherche: Examen rapide
Eléments examinés: 84074
Temps écoulé: 1 hour(s), 0 minute(s), 48 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 2
Clé(s) du Registre infectée(s): 20
Valeur(s) du Registre infectée(s): 7
Elément(s) de données du Registre infecté(s): 2
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 48

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
C:\WINDOWS\system32\geBrsPfd.dll (Trojan.Vundo) -> Delete on reboot.
C:\WINDOWS\system32\iifdcBQJ.dll (Trojan.Vundo) -> Delete on reboot.

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07714de3-6d09-4e6e-828b-bd9065afadc6} (Trojan.Vundo) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{07714de3-6d09-4e6e-828b-bd9065afadc6} (Trojan.Vundo) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7a4bce1d-ebfc-4d46-8e26-2366a325065e} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{7a4bce1d-ebfc-4d46-8e26-2366a325065e} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{bb81fe02-f70b-46c2-82c3-de5c6652e677} (Trojan.Vundo) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bb81fe02-f70b-46c2-82c3-de5c6652e677} (Trojan.Vundo) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\iifdcbqj (Trojan.Vundo) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{da132864-2fcd-49d4-ad8a-3a866ef4ca7f} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{36c3896a-ebba-4f51-a0da-4464d729633e} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{a246508b-6022-45a7-aa7d-64ef00ac0007} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\XP_SecurityCenter (Rogue.XPSecurityCenter) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IProxyProvider (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\aoprndtws (Trojan.Vundo) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\c448f3d2 (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{bb81fe02-f70b-46c2-82c3-de5c6652e677} (Trojan.Vundo) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\bmc77bc04e (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\buritos (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\XP SecurityCenter (Rogue.XPSecurityCenter) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\braviax (Trojan.Downloader) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\braviax (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (Trojan.Vundo) -> Data: c:\windows\system32\gebrspfd -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Authentication Packages (Trojan.Vundo) -> Data: c:\windows\system32\gebrspfd -> Delete on reboot.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\system32\geBrsPfd.dll (Trojan.Vundo) -> Delete on reboot.
C:\WINDOWS\system32\dfPsrBeg.ini (Trojan.Vundo) -> Delete on reboot.
C:\WINDOWS\system32\dfPsrBeg.ini2 (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\rtkblu.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\qdaxighi.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ihgixadq.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\tbnsaghh.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\hhgasnbt.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\tuvTliIX.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\XIilTvut.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\XIilTvut.ini2 (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\yerpnwlw.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\wlwnprey.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\iifdcBQJ.dll (Trojan.Vundo) -> Delete on reboot.
C:\WINDOWS\system32\aklyxgen.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\karina.dat (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ccqsbs.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\dgxljlkm.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\edgnweme.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\gaowxq.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\gjbbhaif.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\karina.dat (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\mldbodng.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\nbawxqvn.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\nnnlLEuu.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\pwwvqgan.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\qsmecgjh.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\smtnmxxs.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\winivstr.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\xrxbhrfr.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ybtufcme.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ygsxxygi.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings\-------.NOM-5A733FE684E\Local Settings\Temporary Internet Files\Content.IE5\65YM7ZVO\kb767887[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings\-------.NOM-5A733FE684E\Local Settings\Temporary Internet Files\Content.IE5\0Q2DNHI8\kb767887[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings\-------.NOM-5A733FE684E\Local Settings\Temporary Internet Files\Content.IE5\3R07NNJ1\kb456456[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings\-------.NOM-5A733FE684E\Local Settings\Temporary Internet Files\Content.IE5\N93LDJEF\kb671231[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings\HP_Administrateur\Local Settings\Temporary Internet Files\Content.IE5\NDGTBCGM\kb671231[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\buritos.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\cookies.ini (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\nemo.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\beep.sys (Fake.Beep.Sys) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\dllcache\beep.sys (Fake.Beep.Sys) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\braviax.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\pskt.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\BMc77bc04e.xml (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\BMc77bc04e.txt (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\buritos.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\ws386.ini (Malware.Trace) -> Quarantined and deleted successfully.

Deckard's System Scanner v20071014.68
Run by ----- on 2008-08-05 16:42:58
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.

-- Last 5 Restore Point(s) --
91: 2008-08-05 20:43:19 UTC - RP126 - Deckard's System Scanner Restore Point
90: 2008-08-05 19:32:25 UTC - RP125 - Last known good configuration
89: 2008-08-05 19:32:15 UTC - RP124 - Installed AVG Free 8.0
88: 2008-08-05 19:32:14 UTC - RP123 - Installed AVG Free 8.0
87: 2008-08-05 19:32:13 UTC - RP122 - Last known good configuration

-- First Restore Point --
1: 2008-08-05 19:31:29 UTC - RP36 - Point de vérification système

Backed up registry hives.
Performed disk cleanup.

[color=red]Total Physical Memory: 383 MiB (512 MiB recommended).[/color]

-- HijackThis Clone ------------------------------------------------------------

Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2008-08-05 16:45:45
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\ehome\ehRecvr.exe
C:\WINDOWS\ehome\ehSched.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\AVG\AVG8\avgrsx.exe
C:\Program Files\AVG\AVG8\avgemc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\hp\drivers\hplsbwatcher\LSBurnWatcher.exe
C:\WINDOWS\ehome\ehmsas.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\svchost.exe
C:\hp\KBD\KBD.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system\hpsysdrv.exe
C:\WINDOWS\system32\hphmon06.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\WISPTIS.EXE
C:\Documents and Settings\-------.NOM-5A733FE684E\Bureau\dss.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.com/search?q=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com
O2 - BHO: (no name) - {BB81FE02-F70B-46C2-82C3-DE5C6652E677} - C:\WINDOWS\system32\iifdcBQJ.dll
O2 - BHO: (no name) - {C1E92CA8-DB1F-430B-9C37-3CE9974C2213} - C:\WINDOWS\system32\geBrsPfd.dll
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: (no name) - - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\GoogleToolbar2.dll
O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\Program Files\Copernic Agent\CopernicAgentExt.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\Program Files\Copernic Agent\CopernicAgent.exe
O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\Program Files\Copernic Agent\CopernicAgent.exe
O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\Program Files\Copernic Agent\CopernicAgent.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (file missing)
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - (file missing)
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ [...] wflash.cab
O18 - Protocol: copernicagent - {A979B6BD-E40B-4A07-ABDD-A62C64A4EBF6} - C:\Program Files\Copernic Agent\CopernicAgentExt.dll
O18 - Protocol: copernicagentcache - {AAC34CFD-274D-4A9D-B0DC-C74C05A67E1D} - C:\Program Files\Copernic Agent\CopernicAgentExt.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll
O18 - Protocol: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\msitss.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll
O18 - Protocol: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\11\OWC11.DLL
O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
O20 - AppInit_DLLs: karina.dat
O20 - Winlogon Notify: iifdcBQJ - C:\WINDOWS\system32\iifdcBQJ.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\ati2evxx.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG8\avgwdsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Office Source Engine (ose) - Unknown owner - C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

--
End of file - 9092 bytes

-- File Associations -----------------------------------------------------------

[COLOR=red].reg - regfile - shell\open\command - regedit.exe "%1" %*[/COLOR]
[COLOR=red].scr - scrfile - shell\open\command - "%1" %*[/COLOR]

-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

S1 intelppm (Pilote de processeur Intel) - c:\windows\system32\drivers\intelppm.sys (file missing)
S3 NPPTNT2 - c:\windows\system32\npptnt2.sys <Not Verified; INCA Internet Co., Ltd.; nProtect NPSC Kernel Mode Driver for NT>
S3 PcdrNdisuio (PCDRNDISUIO Usermode I/O Protocol) - c:\windows\system32\drivers\pcdrndisuio.sys <Not Verified; Windows (R) 2000 DDK provider; Windows (R) 2000 DDK driver>
S3 TVICHW32 - c:\windows\system32\drivers\tvichw32.sys <Not Verified; EnTech Taiwan; TVicHW32 Generic Device Driver for Windows 95/98/ME/NT/2000/2003/XP/XP64>

-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

S3 ose (Office Source Engine) - "c:\program files\fichiers communs\microsoft shared\source engine\ose.exe" (file missing)

-- Device Manager: Disabled ----------------------------------------------------

No disabled devices found.

-- Files created between 2008-07-05 and 2008-08-05 -----------------------------

2008-08-05 15:34:16 19363 --ahs---- C:\WINDOWS\system32\dfPsrBeg.ini2
2008-08-05 14:16:04 0 d-------- C:\Documents and Settings\-------.NOM-5A733FE684E\Application Data\Malwarebytes
2008-08-05 14:15:23 0 d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-08-05 14:15:23 0 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-08-05 13:30:10 0 d-------- C:\Program Files\Trend Micro
2008-08-05 10:35:01 0 d--h----- C:\$AVG8.VAULT$
2008-08-05 06:53:52 2048 --a------ C:\WINDOWS\system32\fmdqolis.exe
2008-08-05 06:53:39 90112 --a------ C:\WINDOWS\system32\irkgcwyq.dll
2008-08-05 06:46:43 95744 --a------ C:\WINDOWS\system32\qxggmm.dll
2008-08-05 06:46:42 95744 --a------ C:\WINDOWS\system32\xidaafhc.dll
2008-08-05 06:46:39 2048 --a------ C:\WINDOWS\system32\dtnldyrr.exe
2008-08-05 06:46:29 90112 --a------ C:\WINDOWS\system32\xvtcatjw.dll
2008-08-04 21:15:01 0 d-------- C:\Documents and Settings\norman.NOM-5A733FE684E\Application Data\Mozilla
2008-08-04 21:12:49 14960 --a------ C:\WINDOWS\ynusi.dll
2008-08-04 21:12:49 10966 --a------ C:\WINDOWS\system32\odybofor.dat
2008-08-04 21:12:49 17281 --a------ C:\WINDOWS\system32\gosamufo.pif
2008-08-04 21:12:49 13326 --a------ C:\WINDOWS\paqaka.sys
2008-08-04 21:12:49 19829 --a------ C:\WINDOWS\nevi.sys
2008-08-04 21:12:49 18705 --a------ C:\WINDOWS\lebemy.bat
2008-08-04 21:12:49 16146 --a------ C:\WINDOWS\lalin.vbs
2008-08-04 21:12:49 11928 --a------ C:\WINDOWS\ezufopix.pif
2008-08-04 21:12:49 19992 --a------ C:\Documents and Settings\norman.NOM-5A733FE684E\Application Data\caginij.com
2008-08-04 21:12:48 12517 --a------ C:\Documents and Settings\norman.NOM-5A733FE684E\Application Data\qiqofi.vbs
2008-08-04 19:28:47 0 d-------- C:\WINDOWS\system32\drivers\Avg
2008-08-04 19:17:34 0 d-------- C:\Program Files\AVG
2008-08-04 19:17:33 0 d-------- C:\Documents and Settings\All Users\Application Data\avg8
2008-08-04 19:13:06 246784 -----n--- C:\WINDOWS\system32\geBrsPfd.dll
2008-08-04 19:05:15 36864 -----n--- C:\WINDOWS\system32\iifdcBQJ.dll
2008-08-03 12:27:15 0 d-------- C:\Documents and Settings\HP_Administrateur\.gimp-2.4
2008-07-28 01:42:45 0 d-------- C:\Program Files\mIRC
2008-07-28 01:42:45 0 d-------- C:\Documents and Settings\HP_Administrateur\Application Data\mIRC
2008-07-20 18:43:44 0 d-------- C:\Documents and Settings\normand\Contacts
2008-07-08 13:55:02 23 --a------ C:\Documents and Settings\------.NOM-5A733FE684E\jagex_runescape_preferences.dat

-- Find3M Report ---------------------------------------------------------------

2008-08-05 16:41:30 0 d-------- C:\Documents and Settings\-------.NOM-5A733FE684E\Application Data\uTorrent
2008-08-04 21:12:49 0 d-------- C:\Program Files\Fichiers communs
2008-08-04 21:12:49 15277 --a------ C:\Program Files\Fichiers communs\opugoma.lib
2008-07-26 17:14:00 0 d-------- C:\Program Files\Java
2008-07-10 15:00:59 0 d-------- C:\Program Files\QuickTime
2008-07-10 11:24:25 0 d-------- C:\Program Files\GetFlash
2008-07-08 14:33:52 0 d-------- C:\Program Files\Dofus
2008-06-24 17:41:13 0 d-------- C:\Documents and Settings\--------.NOM-5A733FE684E\Application Data\Mozilla
2008-06-15 10:12:05 0 d-------- C:\Program Files\PC-Doctor for Windows
2008-06-15 10:12:04 0 d-------- C:\Program Files\PC Inspector File Recovery
2008-06-15 10:12:03 0 d-------- C:\Program Files\Microsoft Works
2008-06-15 10:12:03 0 d-------- C:\Program Files\Messenger
2008-06-15 10:12:01 0 d-------- C:\Program Files\DivX
2008-06-15 10:11:59 0 d-------- C:\Program Files\Easy Internet signup
2008-05-24 19:59:31 5632 --ahs---- C:\Program Files\Thumbs.db
2008-05-22 23:40:51 449652 --a------ C:\WINDOWS\system32\perfh00C.dat
2008-05-22 23:40:51 65566 --a------ C:\WINDOWS\system32\perfc00C.dat

-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{BB81FE02-F70B-46C2-82C3-DE5C6652E677}]
2008-08-04 19:05 36864 --------- C:\WINDOWS\system32\iifdcBQJ.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{C1E92CA8-DB1F-430B-9C37-3CE9974C2213}]
2008-08-04 19:13 246784 --------- C:\WINDOWS\system32\geBrsPfd.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2004-08-10 18:04]
"HPBootOp"="C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2005-02-25 22:34]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-03-18 04:05]
"LSBWatcher"="c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe" [2004-10-14 23:54]
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2006-05-22 01:53]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 04:27]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 21:00]
"uTorrent"="C:\Program Files\uTorrent\uTorrent.exe" [2008-02-02 17:26]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 11:34]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-04-13 11:45]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 19:24]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{BB81FE02-F70B-46C2-82C3-DE5C6652E677}"= C:\WINDOWS\system32\iifdcBQJ.dll [2008-08-04 19:05 36864]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\iifdcBQJ]
iifdcBQJ.dll 2008-08-04 19:05 36864 C:\WINDOWS\system32\iifdcBQJ.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=karina.dat

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
"Authentication Packages"= msv1_0 C:\WINDOWS\system32\geBrsPfd

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{148277f2-c9b4-11d9-9ecb-806d6172696f}]
AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a58db6b8-0592-11dd-8824-806d6172696f}]
AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480

-- End of Deckard's System Scanner: finished at 2008-08-05 16:46:33 ------------

Deckard's System Scanner v20071014.68
Extra logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------

-- System Information ----------------------------------------------------------

Microsoft Windows XP Professionnel (build 2600) SP 2.0
Architecture: X86; Language: French

CPU 0: AMD Athlon(tm) 64 Processor 3400+
Percentage of Memory in Use: 63%
Physical Memory (total/avail): 382.48 MiB / 140.91 MiB
Pagefile Memory (total/avail): 917.37 MiB / 617.91 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1909.82 MiB

C: is Fixed (NTFS) - 178.04 GiB total, 65.54 GiB free.
D: is Fixed (FAT32) - 8.25 GiB total, 1.06 GiB free.
E: is CDROM (No Media)
F: is CDROM (No Media)
H: is Removable (No Media)
I: is Removable (No Media)
J: is Removable (No Media)
K: is Removable (No Media)

\\.\PHYSICALDRIVE0 - ST3200822AS - 186.31 GiB - 2 partitions
\PARTITION0 - Unknown - 8.26 GiB - D:
\PARTITION1 (bootable) - Système de fichiers installable - 178.04 GiB - C:

\\.\PHYSICALDRIVE2 - Generic USB CF Reader USB Device

\\.\PHYSICALDRIVE4 - Generic USB MS Reader USB Device

\\.\PHYSICALDRIVE1 - Generic USB SD Reader USB Device

\\.\PHYSICALDRIVE3 - Generic USB SM Reader USB Device

-- Security Center -------------------------------------------------------------

AUOptions is scheduled to auto-install.
Windows Internal Firewall is disabled.

FirstRunDisabled is set.
AntiVirusDisableNotify is set.
FirewallDisableNotify is set.
UpdatesDisableNotify is set.

AV: AVG Anti-Virus v8.0 (AVG Technologies) [COLOR=RED]Disabled[/COLOR]

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%ProgramFiles%\\iTunes\\iTunes.exe"="%ProgramFiles%\\iTunes\\iTunes.exe:*:enabled:iTunes"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\Updates from HP\\309731\\Program\\Updates from HP.exe"="C:\\Program Files\\Updates from HP\\309731\\Program\\Updates from HP.exe:*:Enabled:BackWeb for Pavilion"
"C:\\Program Files\\Services en ligne\\AOL\\waol.exe"="C:\\Program Files\\Services en ligne\\AOL\\waol.exe:*:Enabled:AOL Canada"
"C:\\Program Files\\uTorrent\\uTorrent.exe"="C:\\Program Files\\uTorrent\\uTorrent.exe:*:Enabled:µTorrent"
"C:\\Program Files\\Real\\RealPlayer\\realplay.exe"="C:\\Program Files\\Real\\RealPlayer\\realplay.exe:*isabled:RealPlayer"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\WINDOWS\\system32\\mmc.exe"="C:\\WINDOWS\\system32\\mmc.exe:*isabled:Microsoft Management Console"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"C:\\Program Files\\mIRC\\mirc.exe"="C:\\Program Files\\mIRC\\mirc.exe:*:Enabled:mIRC"
"C:\\Program Files\\AVG\\AVG8\\avgemc.exe"="C:\\Program Files\\AVG\\AVG8\\avgemc.exe:*:Enabled:avgemc.exe"

-- Environment Variables -------------------------------------------------------

ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\Ma%u2030lys.NOM-5A733FE684E\Application Data
CLIENTNAME=Console
CommonProgramFiles=C:\Program Files\Fichiers communs
COMPUTERNAME=NOM-5A733FE684E
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\Ma%u2030lys.NOM-5A733FE684E
LOGONSERVER=\\NOM-5A733FE684E
NewEnvironment1=C:\Program Files\PC-Doctor for Windows\
NUMBER_OF_PROCESSORS=1
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;c:\Python22;C:\Program Files\ATI Technologies\ATI Control Panel;;C:\PROGRA~1\FICHIE~1\MUVEET~1\030625;C:\PROGRA~1\FICHIE~1\MUVEET~1\030625
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 15 Model 47 Stepping 0, AuthenticAMD
PROCESSOR_LEVEL=15
PROCESSOR_REVISION=2f00
ProgramFiles=C:\Program Files
PROMPT=$P$G
SESSIONNAME=Console
SonicCentral=c:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\MALYS~1.NOM\LOCALS~1\Temp
TMP=C:\DOCUME~1\MALYS~1.NOM\LOCALS~1\Temp
USERDOMAIN=NOM-5A733FE684E
USERNAME=Ma%u2030lys
USERPROFILE=C:\Documents and Settings\Ma%u2030lys.NOM-5A733FE684E
windir=C:\WINDOWS

-- User Profiles ---------------------------------------------------------------

HP_Administrateur [I](admin)[/I]
normand [I](admin)[/I]
-------.NOM-5A733FE684E [I](admin)[/I]
norman.NOM-5A733FE684E
Administrateur [I](admin)[/I]
Invité [I](guest)[/I]

-- Add/Remove Programs ---------------------------------------------------------

--> C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
--> C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
--> c:\WINDOWS\system32\\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205}
--> c:\WINDOWS\system32\\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382}
--> c:\WINDOWS\system32\\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629}
--> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4E7DC12A-3597-4A94-9429-F6C6987361B1}\setup.exe" -l0x40c -removeonly
--> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7DADB304-AF20-48C3-A780-4B4133A08817}\setup.exe" -l0x40c -removeonly
--> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9C423CF6-2DAA-4A37-94B8-59D7ECC7DB13}\setup.exe" -l0x40c -removeonly
--> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FA6CC4B4-7741-4F8D-8E81-15C4BAB9869B}\setup.exe" -l0x40c -removeonly
--> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Acrobat - Reader 6.0.2 Update --> MsiExec.exe /I{AC76BA86-0000-0000-0000-6028747ADE01}
Adobe Flash Player ActiveX --> C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player Plugin --> C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 6.0.1 - Français --> MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A00000000001}
Agere Systems PCI Soft Modem --> agrsmdel
Assistant de connexion Windows Live --> MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986}
ATI Control Panel --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
ATI Display Driver --> rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_classISPLAY -clean
µTorrent --> "C:\Program Files\uTorrent\uTorrent.exe" /UNINSTALL
CDex extraction audio --> "C:\Program Files\CDex_150\uninstall.exe"
Compléments d'aide et de support --> WScript.exe C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\eHelpSetup.jse eHelpUninstall
Connexion Facile à Internet --> C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{8105684D-8CA6-440D-8F58-7E5FD67A499D} /l1036
Copernic Agent Basic --> "C:\WINDOWS\CopernicAgentUninstall(1).exe" /ARGSFILE="C:\Program Files\Copernic Agent\unwise.dat"
Correctif cumulatif 1 pour Windows XP Édition Media Center 2005 (KB873369) --> C:\WINDOWS\$NtUninstallMC05Upd1$\spuninst\spuninst.exe
Correctif Lecteur Windows Media 10 [Voir KB889858 pour plus d'informations] --> C:\WINDOWS\$NtUninstallKB889858$\spuninst\spuninst.exe
Correctif Windows XP - KB867282 --> C:\WINDOWS\$NtUninstallKB867282$\spuninst\spuninst.exe
Correctif Windows XP - KB873339 --> C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
Correctif Windows XP - KB883667 --> C:\WINDOWS\$NtUninstallKB883667$\spuninst\spuninst.exe
Correctif Windows XP - KB885250 --> C:\WINDOWS\$NtUninstallKB885250$\spuninst\spuninst.exe
Correctif Windows XP - KB885354 --> C:\WINDOWS\$NtUninstallKB885354$\spuninst\spuninst.exe
Correctif Windows XP - KB885835 --> C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
Correctif Windows XP - KB885836 --> C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
Correctif Windows XP - KB886185 --> C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe
Correctif Windows XP - KB887472 --> C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe
Correctif Windows XP - KB887742 --> C:\WINDOWS\$NtUninstallKB887742$\spuninst\spuninst.exe
Correctif Windows XP - KB888113 --> C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe
Correctif Windows XP - KB888302 --> C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
Correctif Windows XP - KB890175 --> C:\WINDOWS\$NtUninstallKB890175$\spuninst\spuninst.exe
Correctif Windows XP - KB890859 --> "C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
Correctif Windows XP - KB891220 --> C:\WINDOWS\$NtUninstallKB891220$\spuninst\spuninst.exe
Correctif Windows XP - KB891781 --> C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
Encyclopédie Microsoft Encarta 2005 --> MsiExec.exe /I{05460044-64A6-4248-A026-9745C1E9E159}
Galerie de photos Windows Live --> MsiExec.exe /X{A70FA218-6598-4AC9-813D-63597C5DD068}
GemMaster Mystic --> "C:\Program Files\GemMasterFrench\uninstallgemmaster.exe"
Gimp Pack Mode 2.4.2 --> "C:\Program Files\Gimp Pack Mode\unins000.exe"
Google Toolbar for Internet Explorer --> regsvr32 /u /s "c:\program files\google\googletoolbar2.dll"
HP Appareils photos Photosmart 4.5 --> C:\Program Files\HP\Digital Imaging\{ABA2B37F-AB88-486e-870A-52454A23FEE0}\setup\hpzscr01.exe -datfile hpiscr01.dat
HP Boot Optimizer --> MsiExec.exe /I{3BA95526-6AE0-4B87-A62D-17187EF565FC}
HP Deskjet Printer Preload --> MsiExec.exe /I{2C5D07FB-31A2-4F2D-9FDA-0B24ACD42BD0}
HP Image Zone 4.8.6 --> C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat
HP Image Zone for Media Center PC --> MsiExec.exe /X{8D0C57BC-4942-4960-BB6D-142456D6F233}
HP Image Zone Plus 4.8.6 --> C:\Program Files\HP\Digital Imaging\{32498B7B-E1F3-4ad5-A23B-F26414E94BE0}\setup\hpzscr01.exe -datfile hpdscr01.dat
HP PSC & OfficeJet 4.7 --> "C:\Program Files\HP\Digital Imaging\{342C7C88-D335-4bc2-8CF1-281857629CE2}\setup\hpzscr01.exe" -datfile hposcr05.dat
HP Software Update --> MsiExec.exe /X{64FC0C98-B035-4530-B15D-3D30610B6DF1}
HP Tunes --> MsiExec.exe /X{6512B303-F989-4C13-B9F6-A99989E4ED54}
HPIZplus450 --> MsiExec.exe /X{0E484A60-A429-49A8-982C-D6475F1E80A9}
InterVideo WinDVD Player --> "C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL
iTunes --> C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{72C2CA17-1E7D-4D03-AA43-CDCF76010A27}
J2SE Runtime Environment 5.0 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150000}
Java(TM) 6 Update 5 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
Java(TM) 6 Update 7 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
KBD --> C:\HP\KBD\KBD.EXE uninstalled
KC Softwares VideoInspector --> "C:\Program Files\KC Softwares\VideoInspector\unins000.exe"
Malwarebytes' Anti-Malware --> "C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft Office Standard Edition 2003 --> MsiExec.exe /I{9112040C-6000-11D3-8CFE-0150048383C9}
Microsoft SQL Server 2005 Compact Edition [ENU] --> MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Visual C++ 2005 Redistributable --> MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Works --> MsiExec.exe /I{A059DE09-1B49-4450-B340-7AE097EC3F04}
mIRC --> C:\Program Files\mIRC\uninstall.exe _?=C:\Program Files\mIRC
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB936782) --> "C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398) --> "C:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB923723) --> "C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB890046) --> "C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB893756) --> "C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896358) --> "C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896423) --> "C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896428) --> "C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB899587) --> "C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB899591) --> "C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB900725) --> "C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB901017) --> "C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB901214) --> "C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB902400) --> "C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB905414) --> "C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB905749) --> "C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB908519) --> "C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB911562) --> "C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB911927) --> "C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB913580) --> "C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB914388) --> "C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB914389) --> "C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB918118) --> "C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB918439) --> "C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB919007) --> "C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920213) --> "C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920670) --> "C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920683) --> "C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920685) --> "C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB922819) --> "C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923191) --> "C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923414) --> "C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923689) --> "C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923980) --> "C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924270) --> "C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924496) --> "C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924667) --> "C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB925902) --> "C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB926255) --> "C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB926436) --> "C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB927779) --> "C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB927802) --> "C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB928255) --> "C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB928843) --> "C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB929123) --> "C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB930178) --> "C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB931261) --> "C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB931784) --> "C:\WINDOWS\$NtUninstallKB931784$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB932168) --> "C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB933729) --> "C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB935839) --> "C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB935840) --> "C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB936021) --> "C:\WINDOWS\$NtUninstallKB936021$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB937894) --> "C:\WINDOWS\$NtUninstallKB937894$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938127) --> "C:\WINDOWS\$NtUninstallKB938127$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941202) --> "C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941568) --> "C:\WINDOWS\$NtUninstallKB941568$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569) --> "C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941644) --> "C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941693) --> "C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB943055) --> "C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB943460) --> "C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB943485) --> "C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB944338) --> "C:\WINDOWS\$NtUninstallKB944338$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB944653) --> "C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB945553) --> "C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946026) --> "C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB947864) --> "C:\WINDOWS\$NtUninstallKB947864$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB948590) --> "C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB948881) --> "C:\WINDOWS\$NtUninstallKB948881$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950749) --> "C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760) --> "C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762) --> "C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2) --> "C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376) --> "C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698) --> "C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748) --> "C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB894391) --> "C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB898461) --> "C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB900485) --> "C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB904942) --> "C:\WINDOWS\$NtUninstallKB904942$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB908531) --> "C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB910437) --> "C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB911280) --> "C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB916595) --> "C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB920872) --> "C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB922582) --> "C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB927891) --> "C:\WINDOWS\$NtUninstallKB927891$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB930916) --> "C:\WINDOWS\$NtUninstallKB930916$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB932823-v3) --> "C:\WINDOWS\$NtUninstallKB932823-v3$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB938828) --> "C:\WINDOWS\$NtUninstallKB938828$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB942763) --> "C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe"
Mozilla Firefox (3.0.1) --> C:\Program Files\Mozilla Firefox\uninstall\helper.exe
muvee autoProducer 4.0 --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FC10C922-52E9-4739-ACD0-EB0FF035EE7E}\setup.exe" -l0x40c
muvee autoProducer unPlugged - HPD --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D8E4A88B-E35A-4F3B-AB60-42E7DB0EC765}\setup.exe" -l0x40c
Otto --> "C:\Program Files\FrenchOtto\uninstallotto.exe"
PC-Doctor for Windows --> C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{19C989C4-50AE-43A4-B06E-8C70FFFF852F} /l1036
PC Inspector File Recovery --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0DD140D3-9563-481E-AA75-BA457CBDAEF2}\Setup.exe" -l0x40c
PhotoFiltre Studio --> "C:\Program Files\PhotoFiltre\Uninst2.exe"
Photosmart 320,370,7400,8100,8400 Series (fra) --> C:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\setup\hpzscr01.exe -datfile hphscr01.dat
PS2 --> C:\WINDOWS\system32\ps2.exe uninstall
Python 2.2 pywin32 extensions (build 203) --> "C:\Python22\Removepywin32.exe" -u "C:\Python22\pywin32-wininst.log"
Python 2.2.3 --> C:\Python22\UNWISE.EXE C:\Python22\INSTALL.LOG
RealPlayer --> C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Security Update for CAPICOM (KB931906) --> MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906) --> MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Shockwave --> C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
Sonic Encoders --> MsiExec.exe /I{9941F0AA-B903-4AF4-A055-83A9815CC011}
Sonic Express Labeler --> MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
Sonic MyDVD Plus --> MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
Sonic RecordNow Audio --> MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382}
Sonic RecordNow Copy --> MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629}
Sonic RecordNow Data --> MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205}
Sonic Update Manager --> MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
Sony Picture Utility --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D5068583-D569-468B-9755-5FBF5848F46F}\setup.exe" -l0x40c /removeonly uninstall -removeonly
Sony USB Driver --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5C29CB8B-AC1E-4114-8D68-9CD080140D4A}\Setup.exe" UNINSTALL
Windows Imaging Component --> "C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Live installer --> MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Messenger --> MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
Windows XP Édition Media Center 2005 KB888316 --> C:\WINDOWS\$NtUninstallKB888316$\spuninst\spuninst.exe
Windows XP Édition Media Center 2005 KB890629 -->
Windows XP Media Center Edition 2005 KB895678 --> C:\WINDOWS\$NtUninstallKB895678$\spuninst\spuninst.exe
WinRAR archiver --> C:\Program Files\WinRAR\uninstall.exe
Zune Desktop Theme --> MsiExec.exe /X{7E20EFE6-E604-48C6-8B39-BA4742F2CDB4}

-- Application Event Log -------------------------------------------------------

Event Record #/Type5953 / Success
Event Submitted/Written: 08/05/2008 03:33:04 PM
Event ID/Source: 12001 / usnjsvc
Event Description:
The Messenger Sharing USN Journal Reader service started successfully.

Event Record #/Type5933 / Success
Event Submitted/Written: 08/05/2008 10:27:25 AM
Event ID/Source: 12001 / usnjsvc
Event Description:
The Messenger Sharing USN Journal Reader service started successfully.

Event Record #/Type5926 / Error
Event Submitted/Written: 08/04/2008 09:22:37 PM
Event ID/Source: 1000 / Application Error
Event Description:
Application défaillante setup.exe, version 8.0.0.134, module défaillant , version 0.0.0.0, adresse de défaillance 0x00000000.
Traitement de l'événement propre au support pour [setup.exe!ws!]

Event Record #/Type5914 / Success
Event Submitted/Written: 08/04/2008 07:57:25 PM
Event ID/Source: 12001 / usnjsvc
Event Description:
The Messenger Sharing USN Journal Reader service started successfully.

Event Record #/Type5817 / Success
Event Submitted/Written: 08/02/2008 07:42:47 PM
Event ID/Source: 12001 / usnjsvc
Event Description:
The Messenger Sharing USN Journal Reader service started successfully.

-- Security Event Log ----------------------------------------------------------

No Errors/Warnings found.

-- System Event Log ------------------------------------------------------------

Event Record #/Type5562 / Warning
Event Submitted/Written: 08/05/2008 04:16:02 PM
Event ID/Source: 4226 / Tcpip
Event Description:
TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.

Event Record #/Type5560 / Warning
Event Submitted/Written: 08/05/2008 03:48:41 PM
Event ID/Source: 4226 / Tcpip
Event Description:
TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.

Event Record #/Type5558 / Error
Event Submitted/Written: 08/05/2008 03:43:25 PM
Event ID/Source: 10005 / DCOM
Event Description:
DCOM a reçu l'erreur "%%1058" lors de la mise en route du service wuauserv avec les arguments ""
pour démarrer le serveur :
{E60687F7-01A1-40AA-86AC-DB1CBF673334}

Event Record #/Type5551 / Warning
Event Submitted/Written: 08/05/2008 03:31:51 PM
Event ID/Source: 4226 / Tcpip
Event Description:
TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.

Event Record #/Type5533 / Error
Event Submitted/Written: 08/05/2008 03:30:59 PM
Event ID/Source: 7026 / Service Control Manager
Event Description:
Le pilote de démarrage système ou d'amorçage suivant n'a pas pu se charger :
AvgMfx86
Beep

-- End of Deckard's System Scanner: finished at 2008-08-05 16:46:33 ------------

log:

Explorer killed successfully
C:\WINDOWS\system32\dfPsrBeg.ini2 moved successfully.
C:\WINDOWS\system32\fmdqolis.exe moved successfully.
DllUnregisterServer procedure not found in C:\WINDOWS\system32\irkgcwyq.dll
C:\WINDOWS\system32\irkgcwyq.dll NOT unregistered.
C:\WINDOWS\system32\irkgcwyq.dll moved successfully.
DllUnregisterServer procedure not found in C:\WINDOWS\system32\qxggmm.dll
C:\WINDOWS\system32\qxggmm.dll NOT unregistered.
C:\WINDOWS\system32\qxggmm.dll moved successfully.
DllUnregisterServer procedure not found in C:\WINDOWS\system32\xidaafhc.dll
C:\WINDOWS\system32\xidaafhc.dll NOT unregistered.
C:\WINDOWS\system32\xidaafhc.dll moved successfully.
C:\WINDOWS\system32\dtnldyrr.exe moved successfully.
DllUnregisterServer procedure not found in C:\WINDOWS\system32\xvtcatjw.dll
C:\WINDOWS\system32\xvtcatjw.dll NOT unregistered.
C:\WINDOWS\system32\xvtcatjw.dll moved successfully.
LoadLibrary failed for C:\WINDOWS\ynusi.dll
C:\WINDOWS\ynusi.dll NOT unregistered.
C:\WINDOWS\ynusi.dll moved successfully.
C:\WINDOWS\system32\odybofor.dat moved successfully.
C:\WINDOWS\system32\gosamufo.pif moved successfully.
C:\WINDOWS\paqaka.sys moved successfully.
C:\WINDOWS\nevi.sys moved successfully.
C:\WINDOWS\lebemy.bat moved successfully.
C:\WINDOWS\lalin.vbs moved successfully.
C:\WINDOWS\ezufopix.pif moved successfully.
C:\Documents and Settings\norman.NOM-5A733FE684E\Application Data\caginij.com moved successfully.
C:\Documents and Settings\norman.NOM-5A733FE684E\Application Data\qiqofi.vbs moved successfully.
DllUnregisterServer procedure not found in C:\WINDOWS\system32\geBrsPfd.dll
C:\WINDOWS\system32\geBrsPfd.dll NOT unregistered.
C:\WINDOWS\system32\geBrsPfd.dll moved successfully.
DllUnregisterServer procedure not found in C:\WINDOWS\system32\iifdcBQJ.dll
C:\WINDOWS\system32\iifdcBQJ.dll NOT unregistered.
File move failed. C:\WINDOWS\system32\iifdcBQJ.dll scheduled to be moved on reboot.
C:\Program Files\Fichiers communs\opugoma.lib moved successfully.
< purity >
< emptytemp >
File delete failed. C:\DOCUME~1\MALYS~1.NOM\LOCALS~1\Temp\etilqs_APbY1oLyP49dsYJjHSjH scheduled to be deleted on reboot.
Temp folders emptied.
IE temp folders emptied.
Explorer started successfully

OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 08062008_101444

Files moved on Reboot...
DllUnregisterServer procedure not found in C:\WINDOWS\system32\iifdcBQJ.dll
C:\WINDOWS\system32\iifdcBQJ.dll NOT unregistered.
File move failed. C:\WINDOWS\system32\iifdcBQJ.dll scheduled to be moved on reboot.
C:\DOCUME~1\MALYS~1.NOM\LOCALS~1\Temp\etilqs_APbY1oLyP49dsYJjHSjH moved successfully.


Dss:

Deckard's System Scanner v20071014.68
Run by Maëlys on 2008-08-06 10:22:26
Computer is in Normal Mode.
--------------------------------------------------------------------------------

[color=red]Percentage of Memory in Use: 78% (more than 75%).[/color]
[color=red]Total Physical Memory: 383 MiB (512 MiB recommended).[/color]


-- HijackThis Clone ------------------------------------------------------------


Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2008-08-06 10:22:37
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\ehome\ehRecvr.exe
C:\WINDOWS\ehome\ehSched.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\explorer.exe
C:\Program Files\AVG\AVG8\avgrsx.exe
C:\Program Files\AVG\AVG8\avgemc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\ehome\ehmsas.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\hp\drivers\hplsbwatcher\LSBurnWatcher.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\hp\KBD\KBD.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system\hpsysdrv.exe
C:\WINDOWS\system32\hphmon06.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Documents and Settings\Maëlys.NOM-5A733FE684E\Bureau\dss.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.com/search?q=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com
O2 - BHO: (no name) - {BB81FE02-F70B-46C2-82C3-DE5C6652E677} - C:\WINDOWS\system32\iifdcBQJ.dll
O2 - BHO: (no name) - {CFE21418-3E8A-4657-9ED9-B0B7D5D5DE1D} - C:\WINDOWS\system32\geBrsPfd.dll (file missing)
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: (no name) - - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\GoogleToolbar2.dll
O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\Program Files\Copernic Agent\CopernicAgentExt.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [BMc77bc04e] Rundll32.exe "C:\WINDOWS\system32\ytarbvyj.dll",s
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\Program Files\Copernic Agent\CopernicAgent.exe
O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\Program Files\Copernic Agent\CopernicAgent.exe
O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\Program Files\Copernic Agent\CopernicAgent.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (file missing)
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - (file missing)
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ [...] wflash.cab
O18 - Protocol: copernicagent - {A979B6BD-E40B-4A07-ABDD-A62C64A4EBF6} - C:\Program Files\Copernic Agent\CopernicAgentExt.dll
O18 - Protocol: copernicagentcache - {AAC34CFD-274D-4A9D-B0DC-C74C05A67E1D} - C:\Program Files\Copernic Agent\CopernicAgentExt.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll
O18 - Protocol: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\msitss.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll
O18 - Protocol: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\11\OWC11.DLL
O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
O20 - Winlogon Notify: iifdcBQJ - C:\WINDOWS\system32\iifdcBQJ.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\ati2evxx.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG8\avgwdsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Office Source Engine (ose) - Unknown owner - C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe


--
End of file - 9221 bytes

-- Files created between 2008-07-06 and 2008-08-06 -----------------------------

2008-08-05 21:45:53 90112 --a------ C:\WINDOWS\system32\ytarbvyj.dll
2008-08-05 21:45:11 345 --ahs---- C:\WINDOWS\system32\dfMmlnmp.ini2
2008-08-05 21:45:05 246272 --a------ C:\WINDOWS\system32\pmnlmMfd.dll
2008-08-05 14:16:04 0 d-------- C:\Documents and Settings\Maëlys.NOM-5A733FE684E\Application Data\Malwarebytes
2008-08-05 14:15:23 0 d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-08-05 14:15:23 0 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-08-05 13:30:10 0 d-------- C:\Program Files\Trend Micro
2008-08-05 10:35:01 0 d--h----- C:\$AVG8.VAULT$
2008-08-04 21:15:01 0 d-------- C:\Documents and Settings\norman.NOM-5A733FE684E\Application Data\Mozilla
2008-08-04 19:28:47 0 d-------- C:\WINDOWS\system32\drivers\Avg
2008-08-04 19:17:34 0 d-------- C:\Program Files\AVG
2008-08-04 19:17:33 0 d-------- C:\Documents and Settings\All Users\Application Data\avg8
2008-08-04 19:05:15 36864 -----n--- C:\WINDOWS\system32\iifdcBQJ.dll
2008-08-03 12:27:15 0 d-------- C:\Documents and Settings\HP_Administrateur\.gimp-2.4
2008-07-28 01:42:45 0 d-------- C:\Program Files\mIRC
2008-07-28 01:42:45 0 d-------- C:\Documents and Settings\HP_Administrateur\Application Data\mIRC
2008-07-20 18:43:44 0 d-------- C:\Documents and Settings\normand\Contacts
2008-07-08 13:55:02 23 --a------ C:\Documents and Settings\Maëlys.NOM-5A733FE684E\jagex_runescape_preferences.dat


-- Find3M Report ---------------------------------------------------------------

2008-08-06 10:19:37 0 d-------- C:\Documents and Settings\Maëlys.NOM-5A733FE684E\Application Data\uTorrent
2008-08-04 21:12:49 0 d-------- C:\Program Files\Fichiers communs
2008-07-26 17:14:00 0 d-------- C:\Program Files\Java
2008-07-10 15:00:59 0 d-------- C:\Program Files\QuickTime
2008-07-10 11:24:25 0 d-------- C:\Program Files\GetFlash
2008-07-08 14:33:52 0 d-------- C:\Program Files\Dofus
2008-06-24 17:41:13 0 d-------- C:\Documents and Settings\Maëlys.NOM-5A733FE684E\Application Data\Mozilla
2008-06-15 10:12:05 0 d-------- C:\Program Files\PC-Doctor for Windows
2008-06-15 10:12:04 0 d-------- C:\Program Files\PC Inspector File Recovery
2008-06-15 10:12:03 0 d-------- C:\Program Files\Microsoft Works
2008-06-15 10:12:03 0 d-------- C:\Program Files\Messenger
2008-06-15 10:12:01 0 d-------- C:\Program Files\DivX
2008-06-15 10:11:59 0 d-------- C:\Program Files\Easy Internet signup
2008-05-24 19:59:31 5632 --ahs---- C:\Program Files\Thumbs.db
2008-05-22 23:40:51 449652 --a------ C:\WINDOWS\system32\perfh00C.dat
2008-05-22 23:40:51 65566 --a------ C:\WINDOWS\system32\perfc00C.dat


-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown


[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{BB81FE02-F70B-46C2-82C3-DE5C6652E677}]
2008-08-04 19:05 36864 --------- C:\WINDOWS\system32\iifdcBQJ.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{CFE21418-3E8A-4657-9ED9-B0B7D5D5DE1D}]
C:\WINDOWS\system32\geBrsPfd.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2004-08-10 18:04]
"HPBootOp"="C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2005-02-25 22:34]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-03-18 04:05]
"LSBWatcher"="c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe" [2004-10-14 23:54]
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2006-05-22 01:53]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 04:27]
"BMc77bc04e"="C:\WINDOWS\system32\ytarbvyj.dll" [2008-08-05 21:45]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 21:00]
"uTorrent"="C:\Program Files\uTorrent\uTorrent.exe" [2008-02-02 17:26]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 11:34]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-04-13 11:45]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 19:24]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{BB81FE02-F70B-46C2-82C3-DE5C6652E677}"= C:\WINDOWS\system32\iifdcBQJ.dll [2008-08-04 19:05 36864]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\iifdcBQJ]
iifdcBQJ.dll 2008-08-04 19:05 36864 C:\WINDOWS\system32\iifdcBQJ.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
"Authentication Packages"= msv1_0 C:\WINDOWS\system32\geBrsPfd

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,




-- End of Deckard's System Scanner: finished at 2008-08-06 10:23:11 ------------


Merci mais pourrais-tu m'expliquer brèvement la fonction des étapes précédentes et ceux à venir s.v.p.? Car j'aimerais savoir ce que je fais, et aussi si tout cela peut se faire 1 fois par mois en prévention?

Je sais pas si mon AVG est disable car il est dit que les drivers de mon resident shield are not found... Que dois-je faire? Je peux désinstaller temporairement... Ça me dérange pas.

Désolé du délais, cet après-midi j'ai eu une panne d'électricité...

Encore un gros merci pour ton aide!

Rapport ComboFix:

ComboFix 08-08-05.02 - Maëlys 2008-08-06 19:21:43.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.134 [GMT -4:00]
Endroit: C:\Documents and Settings\Maëlys.NOM-5A733FE684E\Bureau\ComboFix.exe
* Création d'un nouveau point de restauration
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\XPSecurityCenter
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\XPSecurityCenter\Uninstall.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\XPSecurityCenter\XPSecurityCenter.lnk
C:\Documents and Settings\Maëlys.NOM-5A733FE684E\Application Data\inst.exe
C:\Documents and Settings\Maëlys.NOM-5A733FE684E\Application Data\macromedia\Flash Player\#SharedObjects\TDNJUKFX\interclick.com
C:\Documents and Settings\Maëlys.NOM-5A733FE684E\Application Data\macromedia\Flash Player\#SharedObjects\TDNJUKFX\interclick.com\ud.sol
C:\Documents and Settings\Maëlys.NOM-5A733FE684E\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#interclick.com
C:\Documents and Settings\Maëlys.NOM-5A733FE684E\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#interclick.com\settings.sol
C:\Documents and Settings\norman.NOM-5A733FE684E\Application Data\macromedia\Flash Player\interclick.com
C:\Documents and Settings\norman.NOM-5A733FE684E\Application Data\macromedia\Flash Player\interclick.com\ud.sol
C:\Documents and Settings\norman.NOM-5A733FE684E\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#interclick.com
C:\Documents and Settings\norman.NOM-5A733FE684E\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#interclick.com\settings.sol
C:\Documents and Settings\norman.NOM-5A733FE684E\Local Settings\Temporary Internet Files\ysad.ban
C:\Documents and Settings\Norman\Application Data\macromedia\Flash Player\#SharedObjects\BSB3TCVH\interclick.com
C:\Documents and Settings\Norman\Application Data\macromedia\Flash Player\#SharedObjects\BSB3TCVH\interclick.com\ud.sol
C:\Documents and Settings\Norman\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#interclick.com
C:\Documents and Settings\Norman\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#interclick.com\settings.sol
C:\Documents and Settings\Norman\Local Settings\Temporary Internet Files\ijjistarter_verinfo.dat
C:\WINDOWS\BMc77bc04e.txt
C:\WINDOWS\BMc77bc04e.xml
C:\WINDOWS\db32.txt
C:\WINDOWS\Downloaded Program Files\setup.inf
C:\WINDOWS\pskt.ini
C:\WINDOWS\system32\dfMmlnmp.ini
C:\WINDOWS\system32\dfMmlnmp.ini2
C:\WINDOWS\system32\jkgnycgk.ini
C:\WINDOWS\system32\jqksxkll.ini
C:\WINDOWS\system32\mcrh.tmp
C:\WINDOWS\system32\nfdrvwco.ini
C:\WINDOWS\system32\opnNfDsp.dll
C:\WINDOWS\system32\pmnlmMfd.dll
C:\WINDOWS\system32\psDfNnpo.ini
C:\WINDOWS\system32\psDfNnpo.ini2
C:\WINDOWS\system32\rjwpgt.dll
C:\WINDOWS\system32\uiqbuelu.dll
C:\WINDOWS\system32\uxltpiak.dll
C:\WINDOWS\system32\ytarbvyj.dll
D:\Autorun.inf

.
((((((((((((((((((((((((((((( Fichiers cr%u201A%u201As 2008-07-06 to 2008-08-06 ))))))))))))))))))))))))))))))))))))
.

2008-08-06 13:02 . 2008-08-06 13:02 <REP> d-------- C:\WINDOWS\system32\LogFiles
2008-08-06 10:29 . 2008-08-06 10:29 2,048 --a------ C:\WINDOWS\system32\ohaqwgyg.exe
2008-08-06 10:26 . 2008-08-06 10:26 80,896 --a------ C:\WINDOWS\system32\llkxskqj.dll
2008-08-06 10:14 . 2008-08-06 10:14 <REP> d-------- C:\_OTMoveIt
2008-08-05 19:16 . 2008-08-05 19:16 244 --ah----- C:\sqmnoopt19.sqm
2008-08-05 19:16 . 2008-08-05 19:16 232 --ah----- C:\sqmdata19.sqm
2008-08-05 18:25 . 2008-08-05 18:25 268 --ah----- C:\sqmdata18.sqm
2008-08-05 18:25 . 2008-08-05 18:25 244 --ah----- C:\sqmnoopt18.sqm
2008-08-05 16:42 . 2008-08-05 16:42 <REP> d-------- C:\Deckard
2008-08-05 15:32 . 2008-08-06 10:14 25,632 --ahs---- C:\WINDOWS\system32\dfPsrBeg.ini
2008-08-05 14:15 . 2008-08-05 14:16 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-08-05 14:15 . 2008-08-05 14:15 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-08-05 14:15 . 2008-07-30 20:15 38,472 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-08-05 14:15 . 2008-07-30 20:15 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-08-05 13:30 . 2008-08-05 13:30 <REP> d-------- C:\Program Files\Trend Micro
2008-08-05 10:35 . 2008-08-06 12:00 <REP> d--h----- C:\$AVG8.VAULT$
2008-08-05 00:30 . 2008-08-05 00:30 268 --ah----- C:\sqmdata17.sqm
2008-08-05 00:30 . 2008-08-05 00:30 244 --ah----- C:\sqmnoopt17.sqm
2008-08-04 21:12 . 2008-08-04 21:12 18,362 --a------ C:\WINDOWS\yjero.lib
2008-08-04 21:12 . 2008-08-04 21:12 18,234 --a------ C:\WINDOWS\system32\acahene.inf
2008-08-04 21:12 . 2008-08-04 21:12 13,522 --a------ C:\WINDOWS\exaz._sy
2008-08-04 21:12 . 2008-08-04 21:12 12,216 --a------ C:\WINDOWS\uteha._dl
2008-08-04 21:12 . 2008-08-04 21:12 11,058 --a------ C:\WINDOWS\xidudaxotu.dl
2008-08-04 21:11 . 2008-08-04 21:34 195,735 --a------ C:\WINDOWS\system32\_scui.cpl
2008-08-04 19:28 . 2008-08-05 12:24 <REP> d-------- C:\WINDOWS\system32\drivers\Avg
2008-08-04 19:28 . 2008-08-04 19:28 96,520 --a------ C:\WINDOWS\system32\drivers\avgldx86.sys
2008-08-04 19:28 . 2008-08-04 19:28 76,040 --a------ C:\WINDOWS\system32\drivers\avgtdix.sys
2008-08-04 19:28 . 2008-08-04 19:28 10,520 --a------ C:\WINDOWS\system32\avgrsstx.dll
2008-08-04 19:22 . 2008-08-04 19:22 268 --ah----- C:\sqmdata16.sqm
2008-08-04 19:22 . 2008-08-04 19:22 244 --ah----- C:\sqmnoopt16.sqm
2008-08-04 19:17 . 2008-08-04 19:17 <REP> d-------- C:\Program Files\AVG
2008-08-04 19:17 . 2008-08-04 20:14 <REP> d-------- C:\Documents and Settings\All Users\Application Data\avg8
2008-08-03 12:29 . 2008-08-03 12:29 268 --ah----- C:\sqmdata15.sqm
2008-08-03 12:29 . 2008-08-03 12:29 244 --ah----- C:\sqmnoopt15.sqm
2008-08-03 12:27 . 2008-08-03 12:29 <REP> d-------- C:\Documents and Settings\HP_Administrateur\.gimp-2.4
2008-08-02 09:33 . 2008-08-04 06:10 73,728 --a------ C:\WINDOWS\Setup_ver1.1351.25.exe
2008-07-30 17:39 . 2008-07-30 17:39 244 --ah----- C:\sqmnoopt14.sqm
2008-07-30 17:39 . 2008-07-30 17:39 232 --ah----- C:\sqmdata14.sqm
2008-07-30 17:37 . 2008-07-30 17:37 268 --ah----- C:\sqmdata13.sqm
2008-07-30 17:37 . 2008-07-30 17:37 244 --ah----- C:\sqmnoopt13.sqm
2008-07-28 01:42 . 2008-07-28 01:42 <REP> d-------- C:\Program Files\mIRC
2008-07-28 01:42 . 2008-07-28 01:52 <REP> d-------- C:\Documents and Settings\HP_Administrateur\Application Data\mIRC
2008-07-23 18:43 . 2008-07-23 18:43 268 --ah----- C:\sqmdata12.sqm
2008-07-23 18:43 . 2008-07-23 18:43 244 --ah----- C:\sqmnoopt12.sqm
2008-07-20 18:43 . 2008-07-20 21:00 <REP> d-------- C:\Documents and Settings\normand\Contacts
2008-07-19 10:16 . 2008-07-19 10:16 268 --ah----- C:\sqmdata11.sqm
2008-07-19 10:16 . 2008-07-19 10:16 244 --ah----- C:\sqmnoopt11.sqm
2008-07-15 12:30 . 2008-07-15 12:30 268 --ah----- C:\sqmdata10.sqm
2008-07-15 12:30 . 2008-07-15 12:30 244 --ah----- C:\sqmnoopt10.sqm
2008-07-14 19:24 . 2008-07-14 19:24 244 --ah----- C:\sqmnoopt09.sqm
2008-07-14 19:24 . 2008-07-14 19:24 232 --ah----- C:\sqmdata09.sqm
2008-07-14 19:18 . 2008-07-14 19:18 268 --ah----- C:\sqmdata08.sqm
2008-07-14 19:18 . 2008-07-14 19:18 244 --ah----- C:\sqmnoopt08.sqm
2008-07-13 22:28 . 2008-07-13 22:28 244 --ah----- C:\sqmnoopt07.sqm
2008-07-13 22:28 . 2008-07-13 22:28 232 --ah----- C:\sqmdata07.sqm
2008-07-13 22:24 . 2008-07-13 22:24 268 --ah----- C:\sqmdata06.sqm
2008-07-13 22:24 . 2008-07-13 22:24 244 --ah----- C:\sqmnoopt06.sqm

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-08-06 15:19 --------- d-----w C:\Program Files\Winamp
2008-08-06 15:15 --------- d-----w C:\Program Files\GameSpy Arcade
2008-08-06 15:13 --------- d-----w C:\Program Files\GemMasterFrench
2008-08-05 00:14 --------- d-----w C:\Documents and Settings\All Users\Application Data\Avg7
2008-07-26 21:14 --------- d-----w C:\Program Files\Java
2008-07-10 19:00 --------- d-----w C:\Program Files\QuickTime
2008-07-10 15:24 --------- d-----w C:\Program Files\GetFlash
2008-07-08 18:33 --------- d-----w C:\Program Files\Dofus
2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys
2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
2008-06-15 14:12 --------- d-----w C:\Program Files\PC Inspector File Recovery
2008-06-15 14:12 --------- d-----w C:\Program Files\PC-Doctor for Windows
2008-06-15 14:12 --------- d-----w C:\Program Files\Microsoft Works
2008-06-15 14:12 --------- d-----w C:\Program Files\DivX
2008-06-15 14:11 --------- d-----w C:\Program Files\Easy Internet signup
2008-06-14 17:59 272,768 ------w C:\WINDOWS\system32\drivers\bthport.sys
2008-06-06 12:43 --------- d-----w C:\Documents and Settings\norman.NOM-5A733FE684E\Application Data\Sony Corporation
2008-05-24 23:59 5,632 --sha-w C:\Program Files\Thumbs.db
2008-03-16 15:21 97,376 ----a-w C:\Documents and Settings\Norman\Application Data\GDIPFONTCACHEV1.DAT
2008-03-07 19:34 97,376 ----a-w C:\Documents and Settings\HP_Administrateur\Application Data\GDIPFONTCACHEV1.DAT
2007-07-09 01:09 1,690 ----a-w C:\Documents and Settings\Incomplete\downloads.dat
2007-03-04 22:02 374 ----a-w C:\Documents and Settings\Norman\Application Data\wklnhst.dat
2006-05-22 04:22 251 ----a-w C:\Program Files\wt3d.ini
1998-07-31 08:49 66,916 ----a-w C:\Program Files\SMF.DTA
1999-07-07 00:00 6 --sh--r C:\WINDOWS\@@desktop.dat
1999-07-07 00:00 6 --sh--r C:\WINDOWS\@desktop@.dat
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les %u201Al%u201Aments vides & les %u201Al%u201Aments initiaux l%u201Agitimes ne sont pas list%u201As

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 21:00 15360]
"uTorrent"="C:\Program Files\uTorrent\uTorrent.exe" [2008-02-02 17:26 219952]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 11:34 5724184]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-04-13 11:45 68856]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 19:24 1694208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2004-08-10 18:04 59392]
"HPBootOp"="C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2005-02-25 22:34 245760]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-03-18 04:05 339968]
"LSBWatcher"="c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe" [2004-10-14 23:54 253952]
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2006-05-22 01:53 180269]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 04:27 144784]
"c448f3d2"="C:\WINDOWS\system32\llkxskqj.dll" [2008-08-06 10:26 80896]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
"C:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\WINDOWS\\system32\\mmc.exe"=
"C:\\Program Files\\LimeWire\\LimeWire.exe"=
"C:\\Program Files\\mIRC\\mirc.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgemc.exe"=

R1 AvgLdx86;AVG Free AVI Loader Driver x86;C:\WINDOWS\system32\Drivers\avgldx86.sys [2008-08-04 19:28]
R2 AvgTdiX;AVG Free8 Network Redirector;C:\WINDOWS\system32\Drivers\avgtdix.sys [2008-08-04 19:28]
R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 13:08]
.
- - - - ORPHANS REMOVED - - - -

BHO-{BB81FE02-F70B-46C2-82C3-DE5C6652E677} - C:\WINDOWS\system32\iifdcBQJ.dll
BHO-{CFE21418-3E8A-4657-9ED9-B0B7D5D5DE1D} - C:\WINDOWS\system32\geBrsPfd.dll
HKLM-Run-BMc77bc04e - C:\WINDOWS\system32\uxltpiak.dll
ShellExecuteHooks-{BB81FE02-F70B-46C2-82C3-DE5C6652E677} - C:\WINDOWS\system32\iifdcBQJ.dll
Notify-iifdcBQJ - iifdcBQJ.dll

.
------- Supplementary Scan -------
.
FireFox -: Profile - C:\Documents and Settings\Maëlys.NOM-5A733FE684E\Application Data\Mozilla\Firefox\Profiles\ncrh1kkt.default\

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-06 19:35:13
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cach%u201As ...

Balayage cach%u201A autostart entries ...

Balayage des fichiers cach%u201As ...

C:\WINDOWS\system32\jqksxkll.ini 1487632 bytes

Scan termin%u201A avec succ%u0160s
Les fichiers cach%u201As: 1

**************************************************************************
.
--------------------- DLLs a charg%u201A sous des processus courants ---------------------

PROCESS: C:\WINDOWS\explorer.exe
-> C:\WINDOWS\system32\llkxskqj.dll
.
------------------------ Other Running Processes ------------------------
.
C:\WINDOWS\system32\ati2evxx.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\ehome\ehRecvr.exe
C:\WINDOWS\ehome\ehSched.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\ehome\ehmsas.exe
C:\WINDOWS\system32\rundll32.exe
.
**************************************************************************
.
Temps d'accomplissement: 2008-08-06 19:46:41 - machine was rebooted
ComboFix-quarantined-files.txt 2008-08-06 23:46:34

Pre-Run: 71,442,321,408 octets libres
Post-Run: 71,711,047,680 octets libres

227 --- E O F --- 2008-07-19 12:45:45

Rapport Dss:

Deckard's System Scanner v20071014.68
Run by Maëlys on 2008-08-06 19:51:08
Computer is in Normal Mode.
--------------------------------------------------------------------------------

[color=red]Total Physical Memory: 383 MiB (512 MiB recommended).[/color]

-- HijackThis Clone ------------------------------------------------------------

Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2008-08-06 19:51:14
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\ehome\ehRecvr.exe
C:\WINDOWS\ehome\ehSched.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\AVG\AVG8\avgrsx.exe
C:\Program Files\AVG\AVG8\avgemc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\ehome\ehmsas.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\hp\drivers\hplsbwatcher\LSBurnWatcher.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\explorer.exe
C:\hp\KBD\KBD.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system\hpsysdrv.exe
C:\WINDOWS\system32\hphmon06.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Documents and Settings\Maëlys.NOM-5A733FE684E\Bureau\dss.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.com/search?q=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: (no name) - - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\GoogleToolbar2.dll
O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\Program Files\Copernic Agent\CopernicAgentExt.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [c448f3d2] rundll32.exe "C:\WINDOWS\system32\llkxskqj.dll",b
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\Program Files\Copernic Agent\CopernicAgent.exe
O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\Program Files\Copernic Agent\CopernicAgent.exe
O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\Program Files\Copernic Agent\CopernicAgent.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (file missing)
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - (file missing)
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ [...] wflash.cab
O18 - Protocol: copernicagent - {A979B6BD-E40B-4A07-ABDD-A62C64A4EBF6} - C:\Program Files\Copernic Agent\CopernicAgentExt.dll
O18 - Protocol: copernicagentcache - {AAC34CFD-274D-4A9D-B0DC-C74C05A67E1D} - C:\Program Files\Copernic Agent\CopernicAgentExt.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll
O18 - Protocol: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\msitss.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll
O18 - Protocol: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\11\OWC11.DLL
O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\ati2evxx.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG8\avgwdsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Office Source Engine (ose) - Unknown owner - C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

--
End of file - 8593 bytes

-- Files created between 2008-07-06 and 2008-08-06 -----------------------------

2008-08-06 19:19:56 68096 --a------ C:\WINDOWS\zip.exe
2008-08-06 19:19:56 49152 --a------ C:\WINDOWS\VFind.exe
2008-08-06 19:19:56 212480 --a------ C:\WINDOWS\swxcacls.exe <Not Verified; SteelWerX; SteelWerX Extended Configurator ACLists>
2008-08-06 19:19:56 136704 --a------ C:\WINDOWS\swsc.exe <Not Verified; SteelWerX; SteelWerX Service Controller>
2008-08-06 19:19:56 161792 --a------ C:\WINDOWS\swreg.exe <Not Verified; SteelWerX; SteelWerX Registry Editor>
2008-08-06 19:19:56 98816 --a------ C:\WINDOWS\sed.exe
2008-08-06 19:19:56 80412 --a------ C:\WINDOWS\grep.exe
2008-08-06 19:19:56 89504 --a------ C:\WINDOWS\fdsv.exe <Not Verified; Smallfrogs Studio; >
2008-08-06 13:02:04 0 d-------- C:\WINDOWS\system32\LogFiles
2008-08-06 10:29:38 2048 --a------ C:\WINDOWS\system32\ohaqwgyg.exe
2008-08-06 10:26:38 80896 --a------ C:\WINDOWS\system32\llkxskqj.dll
2008-08-05 14:16:04 0 d-------- C:\Documents and Settings\Maëlys.NOM-5A733FE684E\Application Data\Malwarebytes
2008-08-05 14:15:23 0 d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-08-05 14:15:23 0 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-08-05 13:30:10 0 d-------- C:\Program Files\Trend Micro
2008-08-05 10:35:01 0 d--h----- C:\$AVG8.VAULT$
2008-08-04 21:15:01 0 d-------- C:\Documents and Settings\norman.NOM-5A733FE684E\Application Data\Mozilla
2008-08-04 19:28:47 0 d-------- C:\WINDOWS\system32\drivers\Avg
2008-08-04 19:17:34 0 d-------- C:\Program Files\AVG
2008-08-04 19:17:33 0 d-------- C:\Documents and Settings\All Users\Application Data\avg8
2008-08-03 12:27:15 0 d-------- C:\Documents and Settings\HP_Administrateur\.gimp-2.4
2008-07-28 01:42:45 0 d-------- C:\Program Files\mIRC
2008-07-28 01:42:45 0 d-------- C:\Documents and Settings\HP_Administrateur\Application Data\mIRC
2008-07-20 18:43:44 0 d-------- C:\Documents and Settings\normand\Contacts
2008-07-08 13:55:02 23 --a------ C:\Documents and Settings\Maëlys.NOM-5A733FE684E\jagex_runescape_preferences.dat

-- Find3M Report ---------------------------------------------------------------

2008-08-06 19:47:23 0 d-------- C:\Documents and Settings\Maëlys.NOM-5A733FE684E\Application Data\uTorrent
2008-08-06 19:26:11 0 d-------- C:\Program Files\Fichiers communs
2008-08-06 11:19:03 0 d-------- C:\Program Files\Winamp
2008-08-06 11:15:37 0 d-------- C:\Program Files\GameSpy Arcade
2008-08-06 11:13:15 0 d-------- C:\Program Files\GemMasterFrench
2008-07-26 17:14:00 0 d-------- C:\Program Files\Java
2008-07-10 15:00:59 0 d-------- C:\Program Files\QuickTime
2008-07-10 11:24:25 0 d-------- C:\Program Files\GetFlash
2008-07-08 14:33:52 0 d-------- C:\Program Files\Dofus
2008-06-24 17:41:13 0 d-------- C:\Documents and Settings\Maëlys.NOM-5A733FE684E\Application Data\Mozilla
2008-06-15 10:12:05 0 d-------- C:\Program Files\PC-Doctor for Windows
2008-06-15 10:12:04 0 d-------- C:\Program Files\PC Inspector File Recovery
2008-06-15 10:12:03 0 d-------- C:\Program Files\Microsoft Works
2008-06-15 10:12:03 0 d-------- C:\Program Files\Messenger
2008-06-15 10:12:01 0 d-------- C:\Program Files\DivX
2008-06-15 10:11:59 0 d-------- C:\Program Files\Easy Internet signup
2008-05-24 19:59:31 5632 --ahs---- C:\Program Files\Thumbs.db
2008-05-22 23:40:51 449652 --a------ C:\WINDOWS\system32\perfh00C.dat
2008-05-22 23:40:51 65566 --a------ C:\WINDOWS\system32\perfc00C.dat

-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2004-08-10 18:04]
"HPBootOp"="C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2005-02-25 22:34]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-03-18 04:05]
"LSBWatcher"="c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe" [2004-10-14 23:54]
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2006-05-22 01:53]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 04:27]
"c448f3d2"="C:\WINDOWS\system32\llkxskqj.dll" [2008-08-06 10:26]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 21:00]
"uTorrent"="C:\Program Files\uTorrent\uTorrent.exe" [2008-02-02 17:26]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 11:34]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-04-13 11:45]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 19:24]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme
"DisableRegistryTools"=0 (0x0)
"HideLegacyLogonScripts"=0 (0x0)
"HideLogoffScripts"=0 (0x0)
"RunLogonScriptSync"=1 (0x1)
"RunStartupScriptSync"=0 (0x0)
"HideStartupScripts"=0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"HideLegacyLogonScripts"=0 (0x0)
"HideLogoffScripts"=0 (0x0)
"RunLogonScriptSync"=1 (0x1)
"RunStartupScriptSync"=0 (0x0)
"HideStartupScripts"=0 (0x0)

-- End of Deckard's System Scanner: finished at 2008-08-06 19:51:34 ------------

Salut, je ne sais pas comment désactiver AVG car il n'y a à peu près aucun contrôle... J'essaie de le désinstaller mais il dit que il y a une erreur qui est que le programme est supposément pas installé! Que dois-je faire?

Rapport combofix:

ComboFix 08-08-05.02 - Maëlys 2008-08-08 10:33:16.2 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.135 [GMT -4:00]
Endroit: C:\Documents and Settings\Maëlys.NOM-5A733FE684E\Bureau\ComboFix.exe
Command switches used :: C:\Documents and Settings\Maëlys.NOM-5A733FE684E\Bureau\CFScript.txt
* Création d'un nouveau point de restauration

FILE ::
C:\WINDOWS\exaz._sy
C:\WINDOWS\system32\_scui.cpl
C:\WINDOWS\system32\acahene.inf
C:\WINDOWS\system32\dfPsrBeg.ini
C:\WINDOWS\system32\llkxskqj.dll
C:\WINDOWS\system32\ohaqwgyg.exe
C:\WINDOWS\uteha._dl
C:\WINDOWS\xidudaxotu.dl
C:\WINDOWS\yjero.lib
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\_OTMoveIt
C:\_OTMoveIt\MovedFiles\08062008_101444.log
C:\_OTMoveIt\MovedFiles\08062008_101444.res
C:\_OTMoveIt\MovedFiles\08062008_101444\Documents and Settings\MALYS~1.NOM\LOCALS~1\Temp\etilqs_APbY1oLyP49dsYJjHSjH
C:\_OTMoveIt\MovedFiles\08062008_101444\Documents and Settings\norman.NOM-5A733FE684E\Application Data\caginij.com
C:\_OTMoveIt\MovedFiles\08062008_101444\Documents and Settings\norman.NOM-5A733FE684E\Application Data\qiqofi.vbs
C:\_OTMoveIt\MovedFiles\08062008_101444\Program Files\Fichiers communs\opugoma.lib
C:\_OTMoveIt\MovedFiles\08062008_101444\WINDOWS\ezufopix.pif
C:\_OTMoveIt\MovedFiles\08062008_101444\WINDOWS\lalin.vbs
C:\_OTMoveIt\MovedFiles\08062008_101444\WINDOWS\lebemy.bat
C:\_OTMoveIt\MovedFiles\08062008_101444\WINDOWS\nevi.sys
C:\_OTMoveIt\MovedFiles\08062008_101444\WINDOWS\paqaka.sys
C:\_OTMoveIt\MovedFiles\08062008_101444\WINDOWS\system32\dfPsrBeg.ini2
C:\_OTMoveIt\MovedFiles\08062008_101444\WINDOWS\system32\dtnldyrr.exe
C:\_OTMoveIt\MovedFiles\08062008_101444\WINDOWS\system32\fmdqolis.exe
C:\_OTMoveIt\MovedFiles\08062008_101444\WINDOWS\system32\geBrsPfd.dll
C:\_OTMoveIt\MovedFiles\08062008_101444\WINDOWS\system32\gosamufo.pif
C:\_OTMoveIt\MovedFiles\08062008_101444\WINDOWS\system32\irkgcwyq.dll
C:\_OTMoveIt\MovedFiles\08062008_101444\WINDOWS\system32\odybofor.dat
C:\_OTMoveIt\MovedFiles\08062008_101444\WINDOWS\system32\qxggmm.dll
C:\_OTMoveIt\MovedFiles\08062008_101444\WINDOWS\system32\xidaafhc.dll
C:\_OTMoveIt\MovedFiles\08062008_101444\WINDOWS\system32\xvtcatjw.dll
C:\_OTMoveIt\MovedFiles\08062008_101444\WINDOWS\ynusi.dll
C:\Deckard
C:\WINDOWS\exaz._sy
C:\WINDOWS\system32\_scui.cpl
C:\WINDOWS\system32\acahene.inf
C:\WINDOWS\system32\dfPsrBeg.ini
C:\WINDOWS\system32\jqksxkll.ini
C:\WINDOWS\system32\llkxskqj.dll
C:\WINDOWS\system32\ohaqwgyg.exe
C:\WINDOWS\uteha._dl
C:\WINDOWS\xidudaxotu.dl
C:\WINDOWS\yjero.lib

.
((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-07-08 to 2008-08-08 ))))))))))))))))))))))))))))))))))))
.

2008-08-06 19:46 . 2008-08-06 19:46 <REP> d-------- C:\Documents and Settings\Maëlys.NOM-5A733FE684E
2008-08-06 19:46 . <REP> C:\Documents and Settings\Maman-Tat´\Local Settings
2008-08-06 19:46 . 2008-08-06 19:46 <REP> d-------- C:\Documents and Settings\Maman-Tatï
2008-08-06 19:46 . <REP> C:\Documents and Settings\MaÙlys.NOM-5A733FE684E\Local Settings
2008-08-06 19:46 . <REP> C:\Documents and Settings\MaÙlys.NOM-5A733FE684E\Local Settings
2008-08-06 19:46 . 2008-08-06 19:46 <REP> d-------- C:\Documents and Settings\Invité
2008-08-06 19:46 . <REP> C:\Documents and Settings\InvitÚ\Local Settings
2008-08-06 19:46 . <REP> C:\Documents and Settings\InvitÚ\Local Settings
2008-08-06 13:02 . 2008-08-06 13:02 <REP> d-------- C:\WINDOWS\system32\LogFiles
2008-08-05 19:16 . 2008-08-05 19:16 244 --ah----- C:\sqmnoopt19.sqm
2008-08-05 19:16 . 2008-08-05 19:16 232 --ah----- C:\sqmdata19.sqm
2008-08-05 18:25 . 2008-08-05 18:25 268 --ah----- C:\sqmdata18.sqm
2008-08-05 18:25 . 2008-08-05 18:25 244 --ah----- C:\sqmnoopt18.sqm
2008-08-05 14:15 . 2008-08-05 14:16 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-08-05 14:15 . 2008-08-05 14:15 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-08-05 14:15 . 2008-07-30 20:15 38,472 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-08-05 14:15 . 2008-07-30 20:15 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-08-05 13:30 . 2008-08-05 13:30 <REP> d-------- C:\Program Files\Trend Micro
2008-08-05 10:35 . 2008-08-07 10:00 <REP> d--h----- C:\$AVG8.VAULT$
2008-08-05 00:30 . 2008-08-05 00:30 268 --ah----- C:\sqmdata17.sqm
2008-08-05 00:30 . 2008-08-05 00:30 244 --ah----- C:\sqmnoopt17.sqm
2008-08-04 19:28 . 2008-08-05 12:24 <REP> d-------- C:\WINDOWS\system32\drivers\Avg
2008-08-04 19:28 . 2008-08-04 19:28 96,520 --a------ C:\WINDOWS\system32\drivers\avgldx86.sys
2008-08-04 19:28 . 2008-08-04 19:28 76,040 --a------ C:\WINDOWS\system32\drivers\avgtdix.sys
2008-08-04 19:28 . 2008-08-04 19:28 10,520 --a------ C:\WINDOWS\system32\avgrsstx.dll
2008-08-04 19:22 . 2008-08-04 19:22 268 --ah----- C:\sqmdata16.sqm
2008-08-04 19:22 . 2008-08-04 19:22 244 --ah----- C:\sqmnoopt16.sqm
2008-08-04 19:17 . 2008-08-04 19:17 <REP> d-------- C:\Program Files\AVG
2008-08-04 19:17 . 2008-08-07 09:55 <REP> d-------- C:\Documents and Settings\All Users\Application Data\avg8
2008-08-03 12:29 . 2008-08-03 12:29 268 --ah----- C:\sqmdata15.sqm
2008-08-03 12:29 . 2008-08-03 12:29 244 --ah----- C:\sqmnoopt15.sqm
2008-08-03 12:27 . 2008-08-03 12:29 <REP> d-------- C:\Documents and Settings\HP_Administrateur\.gimp-2.4
2008-08-02 09:33 . 2008-08-04 06:10 73,728 --a------ C:\WINDOWS\Setup_ver1.1351.25.exe
2008-07-30 17:39 . 2008-07-30 17:39 244 --ah----- C:\sqmnoopt14.sqm
2008-07-30 17:39 . 2008-07-30 17:39 232 --ah----- C:\sqmdata14.sqm
2008-07-30 17:37 . 2008-07-30 17:37 268 --ah----- C:\sqmdata13.sqm
2008-07-30 17:37 . 2008-07-30 17:37 244 --ah----- C:\sqmnoopt13.sqm
2008-07-28 01:42 . 2008-07-28 01:42 <REP> d-------- C:\Program Files\mIRC
2008-07-28 01:42 . 2008-07-28 01:52 <REP> d-------- C:\Documents and Settings\HP_Administrateur\Application Data\mIRC
2008-07-23 18:43 . 2008-07-23 18:43 268 --ah----- C:\sqmdata12.sqm
2008-07-23 18:43 . 2008-07-23 18:43 244 --ah----- C:\sqmnoopt12.sqm
2008-07-20 18:43 . 2008-07-20 21:00 <REP> d-------- C:\Documents and Settings\normand\Contacts
2008-07-19 10:16 . 2008-07-19 10:16 268 --ah----- C:\sqmdata11.sqm
2008-07-19 10:16 . 2008-07-19 10:16 244 --ah----- C:\sqmnoopt11.sqm
2008-07-18 14:39 . 2008-07-18 14:39 587,264 --a------ C:\WINDOWS\WLXPGSS.SCR
2008-07-15 12:30 . 2008-07-15 12:30 268 --ah----- C:\sqmdata10.sqm
2008-07-15 12:30 . 2008-07-15 12:30 244 --ah----- C:\sqmnoopt10.sqm
2008-07-14 19:24 . 2008-07-14 19:24 244 --ah----- C:\sqmnoopt09.sqm
2008-07-14 19:24 . 2008-07-14 19:24 232 --ah----- C:\sqmdata09.sqm
2008-07-14 19:18 . 2008-07-14 19:18 268 --ah----- C:\sqmdata08.sqm
2008-07-14 19:18 . 2008-07-14 19:18 244 --ah----- C:\sqmnoopt08.sqm
2008-07-13 22:28 . 2008-07-13 22:28 244 --ah----- C:\sqmnoopt07.sqm
2008-07-13 22:28 . 2008-07-13 22:28 232 --ah----- C:\sqmdata07.sqm
2008-07-13 22:24 . 2008-07-13 22:24 268 --ah----- C:\sqmdata06.sqm
2008-07-13 22:24 . 2008-07-13 22:24 244 --ah----- C:\sqmnoopt06.sqm

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-08-07 13:57 --------- d-----w C:\Documents and Settings\All Users\Application Data\Avg7
2008-08-06 15:19 --------- d-----w C:\Program Files\Winamp
2008-08-06 15:15 --------- d-----w C:\Program Files\GameSpy Arcade
2008-08-06 15:13 --------- d-----w C:\Program Files\GemMasterFrench
2008-07-26 21:14 --------- d-----w C:\Program Files\Java
2008-07-10 19:00 --------- d-----w C:\Program Files\QuickTime
2008-07-10 15:24 --------- d-----w C:\Program Files\GetFlash
2008-07-08 18:33 --------- d-----w C:\Program Files\Dofus
2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys
2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
2008-06-15 14:12 --------- d-----w C:\Program Files\PC Inspector File Recovery
2008-06-15 14:12 --------- d-----w C:\Program Files\PC-Doctor for Windows
2008-06-15 14:12 --------- d-----w C:\Program Files\Microsoft Works
2008-06-15 14:12 --------- d-----w C:\Program Files\DivX
2008-06-15 14:11 --------- d-----w C:\Program Files\Easy Internet signup
2008-06-14 17:59 272,768 ------w C:\WINDOWS\system32\drivers\bthport.sys
2008-05-24 23:59 5,632 --sha-w C:\Program Files\Thumbs.db
2008-03-16 15:21 97,376 ----a-w C:\Documents and Settings\Norman\Application Data\GDIPFONTCACHEV1.DAT
2008-03-07 19:34 97,376 ----a-w C:\Documents and Settings\HP_Administrateur\Application Data\GDIPFONTCACHEV1.DAT
2007-07-09 01:09 1,690 ----a-w C:\Documents and Settings\Incomplete\downloads.dat
2007-03-04 22:02 374 ----a-w C:\Documents and Settings\Norman\Application Data\wklnhst.dat
2006-05-22 04:22 251 ----a-w C:\Program Files\wt3d.ini
1998-07-31 08:49 66,916 ----a-w C:\Program Files\SMF.DTA
1999-07-07 00:00 6 --sh--r C:\WINDOWS\@@desktop.dat
1999-07-07 00:00 6 --sh--r C:\WINDOWS\@desktop@.dat
.

((((((((((((((((((((((((((((( snapshot@2008-08-06_19.46.08.57 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-02-04 14:10:10 208,928 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\ImagingDevice.dll
+ 2008-02-04 14:06:54 417,312 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\ImagingServices.dll
+ 2008-02-04 14:08:42 83,488 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\LiveAlbumXCtrl.dll
+ 2008-02-04 14:07:46 1,779,744 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\MicrosoftEffects.dll
+ 2008-02-04 14:05:04 46,112 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\PhotoViewerShim.dll
+ 2008-02-04 14:06:46 372,256 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXAlbumDownloadWizard.exe
+ 2008-02-01 15:23:12 279,680 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\wlxclip.dll
+ 2008-02-01 15:13:40 191,104 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXDSPA.dll
+ 2008-02-04 14:10:02 130,592 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXGrinderScheduler.dll
+ 2008-02-04 14:06:00 59,424 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXImageTranscode.dll
+ 2008-02-04 14:08:26 712,224 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXMediaPublishSubscribe.dll
+ 2008-02-01 15:17:40 587,264 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXPGSS.SCR
+ 2008-02-04 14:07:22 1,565,728 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXPhotoAcq.dll
+ 2008-02-01 15:13:40 227,456 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXPhotoAcquireWizard.exe
+ 2008-02-04 14:08:38 86,560 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXPhotoCinematic.dll
+ 2008-02-04 14:08:32 83,488 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXPhotoClassic.dll
+ 2008-02-04 14:09:08 125,472 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXPhotoGallery.exe
+ 2008-02-01 15:13:42 16,000 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXPhotoGalleryRepair.exe
+ 2008-02-04 14:06:54 394,272 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXPhotoLibraryDatabase.dll
+ 2008-02-04 14:06:20 1,515,040 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXPhotoViewer.dll
+ 2008-02-04 14:06:20 1,250,336 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXPhotoVoyager.dll
+ 2008-02-04 14:06:18 752,672 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXPipeline.dll
+ 2008-02-04 14:06:14 734,752 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXPipetran.dll
+ 2008-02-01 15:13:42 101,504 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXQuickTimeControlHost.exe
+ 2008-02-04 14:05:00 20,512 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXQuickTimeControlHostPS.dll
+ 2008-02-04 14:05:04 53,792 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXQuickTimeShellExt.dll
+ 2008-02-04 14:08:42 85,024 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXThumbCache.dll
+ 2008-02-04 14:10:04 144,416 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXVAFilt.dll
+ 2008-02-04 14:07:40 675,360 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXVideoAcquireWizard.exe
+ 2008-02-04 14:07:10 69,152 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXVideoCameraAutoPlayManager.exe
+ 2008-02-04 14:10:10 165,408 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXVideoTrim.dll
- 2008-04-22 05:24:17 123,008 ----a-r C:\WINDOWS\Installer\{A70FA218-6598-4AC9-813D-63597C5DD068}\WLXPhotoGalleryIcon.exe
+ 2008-08-07 13:30:49 123,008 ----a-r C:\WINDOWS\Installer\{A70FA218-6598-4AC9-813D-63597C5DD068}\WLXPhotoGalleryIcon.exe
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 21:00 15360]
"uTorrent"="C:\Program Files\uTorrent\uTorrent.exe" [2008-02-02 17:26 219952]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 11:34 5724184]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-04-13 11:45 68856]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 19:24 1694208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2004-08-10 18:04 59392]
"HPBootOp"="C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2005-02-25 22:34 245760]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-03-18 04:05 339968]
"LSBWatcher"="c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe" [2004-10-14 23:54 253952]
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2006-05-22 01:53 180269]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 04:27 144784]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
"C:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\WINDOWS\\system32\\mmc.exe"=
"C:\\Program Files\\LimeWire\\LimeWire.exe"=
"C:\\Program Files\\mIRC\\mirc.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgemc.exe"=

R1 AvgLdx86;AVG Free AVI Loader Driver x86;C:\WINDOWS\system32\Drivers\avgldx86.sys [2008-08-04 19:28]
R2 avg8emc;AVG Free8 E-mail Scanner;C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-08-04 19:28]
R2 avg8wd;AVG Free8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-08-04 19:28]
R2 AvgTdiX;AVG Free8 Network Redirector;C:\WINDOWS\system32\Drivers\avgtdix.sys [2008-08-04 19:28]
R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 13:08]
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-08 10:42:55
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cach‚s ...

Balayage cach‚ autostart entries ...

Balayage des fichiers cach‚s ...

Scan termin‚ avec succŠs
Les fichiers cach‚s: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\ehome\ehRecvr.exe
C:\WINDOWS\ehome\ehSched.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\ehome\ehmsas.exe
.
**************************************************************************
.
Temps d'accomplissement: 2008-08-08 10:53:43 - machine was rebooted
ComboFix-quarantined-files.txt 2008-08-08 14:53:38
ComboFix2.txt 2008-08-06 23:46:43

Pre-Run: 74,843,144,192 octets libres
Post-Run: 74,823,671,808 octets libres

251 --- E O F --- 2008-08-07 13:30:53

Le PC va très bien maintenant! Merci vraiment BEAUCOUP!

Rapport:

Deckard's System Scanner v20071014.68
Run by Maëlys on 2008-08-10 11:10:02
Computer is in Normal Mode.
--------------------------------------------------------------------------------

[color=red]Total Physical Memory: 383 MiB (512 MiB recommended).[/color]


-- HijackThis Clone ------------------------------------------------------------


Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2008-08-10 11:10:08
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\ehome\ehRecvr.exe
C:\WINDOWS\ehome\ehSched.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\AVG\AVG8\avgrsx.exe
C:\Program Files\AVG\AVG8\avgemc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\hp\drivers\hplsbwatcher\LSBurnWatcher.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\ehome\ehmsas.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Messenger\msmsgs.exe
C:\hp\KBD\KBD.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system\hpsysdrv.exe
C:\Documents and Settings\Maëlys.NOM-5A733FE684E\Bureau\dss.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.com/search?q=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: (no name) - - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\GoogleToolbar2.dll
O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\Program Files\Copernic Agent\CopernicAgentExt.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\Program Files\Copernic Agent\CopernicAgent.exe
O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\Program Files\Copernic Agent\CopernicAgent.exe
O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\Program Files\Copernic Agent\CopernicAgent.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (file missing)
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - (file missing)
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ [...] wflash.cab
O18 - Protocol: copernicagent - {A979B6BD-E40B-4A07-ABDD-A62C64A4EBF6} - C:\Program Files\Copernic Agent\CopernicAgentExt.dll
O18 - Protocol: copernicagentcache - {AAC34CFD-274D-4A9D-B0DC-C74C05A67E1D} - C:\Program Files\Copernic Agent\CopernicAgentExt.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll
O18 - Protocol: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\msitss.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll
O18 - Protocol: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\11\OWC11.DLL
O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\ati2evxx.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG8\avgwdsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Office Source Engine (ose) - Unknown owner - C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe


--
End of file - 8445 bytes

-- Files created between 2008-07-10 and 2008-08-10 -----------------------------

2008-08-06 13:02:04 0 d-------- C:\WINDOWS\system32\LogFiles
2008-08-05 14:16:04 0 d-------- C:\Documents and Settings\Maëlys.NOM-5A733FE684E\Application Data\Malwarebytes
2008-08-05 14:15:23 0 d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-08-05 14:15:23 0 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-08-05 13:30:10 0 d-------- C:\Program Files\Trend Micro
2008-08-05 10:35:01 0 d--h----- C:\$AVG8.VAULT$
2008-08-04 21:15:01 0 d-------- C:\Documents and Settings\norman.NOM-5A733FE684E\Application Data\Mozilla
2008-08-04 19:28:47 0 d-------- C:\WINDOWS\system32\drivers\Avg
2008-08-04 19:17:34 0 d-------- C:\Program Files\AVG
2008-08-04 19:17:33 0 d-------- C:\Documents and Settings\All Users\Application Data\avg8
2008-08-03 12:27:15 0 d-------- C:\Documents and Settings\HP_Administrateur\.gimp-2.4
2008-07-28 01:42:45 0 d-------- C:\Program Files\mIRC
2008-07-28 01:42:45 0 d-------- C:\Documents and Settings\HP_Administrateur\Application Data\mIRC
2008-07-20 18:43:44 0 d-------- C:\Documents and Settings\normand\Contacts
2008-07-18 14:39:16 587264 --a------ C:\WINDOWS\WLXPGSS.SCR <Not Verified; Microsoft Corporation; Galerie de photos Windows Live>


-- Find3M Report ---------------------------------------------------------------

2008-08-10 11:10:09 0 d-------- C:\Documents and Settings\Maëlys.NOM-5A733FE684E\Application Data\uTorrent
2008-08-08 10:38:23 0 d-------- C:\Program Files\Fichiers communs
2008-08-06 11:19:03 0 d-------- C:\Program Files\Winamp
2008-08-06 11:15:37 0 d-------- C:\Program Files\GameSpy Arcade
2008-08-06 11:13:15 0 d-------- C:\Program Files\GemMasterFrench
2008-07-26 17:14:00 0 d-------- C:\Program Files\Java
2008-07-10 15:00:59 0 d-------- C:\Program Files\QuickTime
2008-07-10 11:24:25 0 d-------- C:\Program Files\GetFlash
2008-07-08 14:33:52 0 d-------- C:\Program Files\Dofus
2008-06-24 17:41:13 0 d-------- C:\Documents and Settings\Maëlys.NOM-5A733FE684E\Application Data\Mozilla
2008-06-15 10:12:05 0 d-------- C:\Program Files\PC-Doctor for Windows
2008-06-15 10:12:04 0 d-------- C:\Program Files\PC Inspector File Recovery
2008-06-15 10:12:03 0 d-------- C:\Program Files\Microsoft Works
2008-06-15 10:12:03 0 d-------- C:\Program Files\Messenger
2008-06-15 10:12:01 0 d-------- C:\Program Files\DivX
2008-06-15 10:11:59 0 d-------- C:\Program Files\Easy Internet signup
2008-05-24 19:59:31 5632 --ahs---- C:\Program Files\Thumbs.db
2008-05-22 23:40:51 449652 --a------ C:\WINDOWS\system32\perfh00C.dat
2008-05-22 23:40:51 65566 --a------ C:\WINDOWS\system32\perfc00C.dat


-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2004-08-10 18:04]
"HPBootOp"="C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2005-02-25 22:34]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-03-18 04:05]
"LSBWatcher"="c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe" [2004-10-14 23:54]
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2006-05-22 01:53]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 04:27]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 21:00]
"uTorrent"="C:\Program Files\uTorrent\uTorrent.exe" [2008-02-02 17:26]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 11:34]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-04-13 11:45]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 19:24]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme
"DisableRegistryTools"=0 (0x0)
"HideLegacyLogonScripts"=0 (0x0)
"HideLogoffScripts"=0 (0x0)
"RunLogonScriptSync"=1 (0x1)
"RunStartupScriptSync"=0 (0x0)
"HideStartupScripts"=0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"HideLegacyLogonScripts"=0 (0x0)
"HideLogoffScripts"=0 (0x0)
"RunLogonScriptSync"=1 (0x1)
"RunStartupScriptSync"=0 (0x0)
"HideStartupScripts"=0 (0x0)
"DisableRegistryTools"=0 (0x0)




-- End of Deckard's System Scanner: finished at 2008-08-10 11:10:31 ------------

J'ai effectivement reçu le message "La licence de Kaspersky On-line Scanner est périmée", même suite à la suppression de On-Line Scanner ça ne fonctionne pas... Que faire?

Ça ne fonctionne pas plus.

Tu veux que je grave toute ma musique et mes photos? C'est que c'est beaucoup de Go ça...