[Résolu] Infecte par alureon-dr

bonjour

avast me detecte un virus alureon-dr

je met en quarantaine mail il revient

est que detrio5 qui a déjà traité un pb similaire serait dispo

Merci

Bonjour,

• Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.
• Double-clique sur RSIT.exe afin de lancer le programme.

(Sous Vista, il faut cliquer droit sur RSIT.exe et choisir Exécuter en tant qu'administrateur)

• Clique sur Continue à l'écran Disclaimer.
• Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.
• Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

Note : les rapports sont sauvegardés dans le dossier C:\rsit.

Le PC démarre en mode sans échec ?

Si je débranche le dd et le mets sur un autre pc dans un boitier externe usb, est ce possible de desinfecter ?

salut j"ai un exécutable qui l"éradique.....mais ou puis je le mettre sur le site pour en faire profiter ???cordialement

Quel est l'executable qui eraidique ce virus ?

D2RD2 nous a quitté

que penses tu de sortir le dd en externe ?

ok

je vais telecharger ce logiciel

après avoir récupérer mes données, crois tu que je pourrais récupérer mon dd car j'ai beaucoup de logiciel dessus?

j'ai réussi a graver avec ultraISO

quand je boot dessus, j'ai bien la première page

mais après il me dit disk error

dois je retelecharger le fichier iso

merci

Bonsoir

J'ai pris une autre solution linux : toutou linux
j'ai remis un BOOT.ini qui avait disparu
j'ai pu redémarrer en mode sans echec
j'ai executé RSIT

voici les deux rapports :


info.txt logfile of random's system information tool 1.06 2009-11-08 22:03:37

======Uninstall list======

-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{09B44E78-A988-4BC0-962F-63ECD3333708} /l1036
-->C:\Program Files\Fichiers communs\Real\Update_OB\rnuninst.exe RealNetworks|RealPlayer|6.0
-->C:\Program Files\Fichiers communs\Real\Update_OB\rnuninst.exe RealNetworks|RealPlayer|6.0
-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll"
-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->C:\WINDOWS\Modio\SLAMR2KO\Setup.exe /Remove
-->C:\WINDOWS\System32\\MSIEXEC.EXE /x {8855FF30-19CE-4CB1-A654-87B38369CCE1}
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5809E7CF-4DCF-11D4-9875-00105ACE7734}\SETUP.EXE" -l0x40c -l040c UNINSTALL
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A174402A-2EE6-4B86-A930-7BC85A9933BD}\SETUP.EXE" -l0x40c
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Acronis True Image Home-->MsiExec.exe /X{37C8899D-FD70-481F-94AA-1F1B08765E22}
Adobe Flash Player 9 ActiveX-->C:\WINDOWS\System32\Macromed\Flash\FlashUtil9c.exe -uninstallUnlock
Adobe Flash Player ActiveX-->C:\WINDOWS\System32\Macromed\Flash\uninstall_activeX.exe
Adobe Photoshop 7.0.1-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Adobe\Photoshop 7.0\Uninst.isu" -c"C:\Program Files\Adobe\Photoshop 7.0\Uninst.dll"
Adobe Reader 7.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7646-A70000000000}
Adobe Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~2\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~2\Install.log
Ahead Nero Burning ROM-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
Alexandra Ledermann 5-->C:\Program Files\UbiSoft\Lexis Numérique\Alexandra Ledermann 5\Desinst.exe
Alt-Tab Task Switcher Powertoy for Windows XP-->MsiExec.exe /I{A7050037-F0EA-4BAB-BCD5-FC05507D6147}
Ant Movie Catalog-->"C:\Program Files\Ant Movie Catalog\unins000.exe"
Ant Renamer-->"C:\Program Files\Ant Renamer\unins000.exe"
ATI Control Panel-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
ATI Display Driver-->rundll32 C:\WINDOWS\System32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_classISPLAY -clean
ATI DVD Decoder 2.1-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{47CC90C1-27B4-4AA8-9BF6-F3A2D0CEC792}
ATI Multimedia Center 7.9.0.0-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{46AB199F-9518-4E2F-8B98-24DAC3389691}\setup.exe"
ATI Remote Wonder 1.4-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{41331E03-97D4-421E-BBD1-0A914CFE19BC}
ATI Teletext-->C:\PROGRA~1\ATIMUL~1\Teletext\UNWISE.EXE C:\PROGRA~1\ATIMUL~1\Teletext\INSTALL.LOG
AudioCommander-->"C:\Documents and Settings\All Users\Application Data\{DC46D544-3B44-4604-A195-ECE51ADA289C}\setup_ac.exe" REMOVE=TRUE MODIFY=FALSE
avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
AVG Anti-Spyware 7.5-->C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Uninstall.exe
AVIcodec (remove only)-->"C:\Program Files\AVIcodec\uninst.exe"
AviSynth 2 (remove only)-->"C:\DVD-TOOLS\AviSynth2\uninst.exe"
C.I.L. version 2.1-->"C:\Program Files\AlexSoft\CIL\unins000.exe"
Canon Camera Window for ZoomBrowser EX-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{A29EA741-24F7-4C07-9B2C-06CB6491BE4A}
Canon EOS Kiss REBEL 300D Pilote WIA -->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{31A57C3E-30DD-421F-B5C7-974DACB0D05F}
Canon Internet Library for ZoomBrowser EX-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{6A0DBAA6-4FEC-41B7-858E-99EF59B9173C}
Canon PhotoRecord-->MsiExec.exe /X{BEF56F2D-56ED-4176-BF72-7B68D4A3B98D}
Canon RAW Image Task for ZoomBrowser EX-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{D076E06B-F74B-454F-A56E-7510D7B6C9F0}
Canon RemoteCapture Task for ZoomBrowser EX-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{822586CA-0B15-428C-859A-64B3728F28E7}
Canon Utilities File Viewer Utility 1.3-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{2D1C2321-8FDB-49B8-A66B-4008DC0B6B5D}
Canon Utilities PhotoStitch 3.1-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{F11A403B-0DE9-4953-B790-7A2F014FBB2B}
Canon Utilities RemoteCapture 2.7-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{14220DB1-DD96-4BCD-B3D5-03A4EA6631C4}
Canon Utilities ZoomBrowser EX-->MsiExec.exe /X{C1D76D7A-F3BB-47EA-A746-5B1E2FFC1DF2}
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
CDex extraction audio-->"C:\Program Files\CDex_150\uninstall.exe"
Correctif Lecteur Windows Media 9 [Voir KB885492 pour plus d'informations]-->C:\WINDOWS\$NtUninstallKB885492$\spuninst\spuninst.exe
Correctif pour le Lecteur Windows Media [Voir wm828026 pour plus d'informations]-->C:\WINDOWS\$NtUninstallQ828026$\spuninst\spuninst.exe
Correctif Windows XP - KB810217-->C:\WINDOWS\$NtUninstallKB810217$\spuninst\spuninst.exe
Correctif Windows XP - KB821557-->C:\WINDOWS\$NtUninstallKB821557$\spuninst\spuninst.exe
Correctif Windows XP - KB822603-->C:\WINDOWS\$NtUninstallKB822603$\spuninst\spuninst.exe
Correctif Windows XP - KB823182-->C:\WINDOWS\$NtUninstallKB823182$\spuninst\spuninst.exe
Correctif Windows XP - KB823559-->C:\WINDOWS\$NtUninstallKB823559$\spuninst\spuninst.exe
Correctif Windows XP - KB824105-->C:\WINDOWS\$NtUninstallKB824105$\spuninst\spuninst.exe
Correctif Windows XP - KB824141-->C:\WINDOWS\$NtUninstallKB824141$\spuninst\spuninst.exe
Correctif Windows XP - KB824146-->C:\WINDOWS\$NtUninstallKB824146$\spuninst\spuninst.exe
Correctif Windows XP - KB825119-->C:\WINDOWS\$NtUninstallKB825119$\spuninst\spuninst.exe
Correctif Windows XP - KB828028-->C:\WINDOWS\$NtUninstallKB828028$\spuninst\spuninst.exe
Correctif Windows XP - KB828035-->C:\WINDOWS\$NtUninstallKB828035$\spuninst\spuninst.exe
Correctif Windows XP - KB828741-->C:\WINDOWS\$NtUninstallKB828741$\spuninst\spuninst.exe
Correctif Windows XP - KB833987-->C:\WINDOWS\$NtUninstallKB833987$\spuninst\spuninst.exe
Correctif Windows XP - KB835732-->C:\WINDOWS\$NtUninstallKB835732$\spuninst\spuninst.exe
Correctif Windows XP - KB837001-->C:\WINDOWS\$NtUninstallKB837001$\spuninst\spuninst.exe
Correctif Windows XP - KB839645-->C:\WINDOWS\$NtUninstallKB839645$\spuninst\spuninst.exe
Correctif Windows XP - KB840315-->C:\WINDOWS\$NtUninstallKB840315$\spuninst\spuninst.exe
Correctif Windows XP - KB840374-->C:\WINDOWS\$NtUninstallKB840374$\spuninst\spuninst.exe
Correctif Windows XP - KB840987-->C:\WINDOWS\$NtUninstallKB840987$\spuninst\spuninst.exe
Correctif Windows XP - KB841356-->C:\WINDOWS\$NtUninstallKB841356$\spuninst\spuninst.exe
Correctif Windows XP - KB841533-->C:\WINDOWS\$NtUninstallKB841533$\spuninst\spuninst.exe
Correctif Windows XP - KB841873-->C:\WINDOWS\$NtUninstallKB841873$\spuninst\spuninst.exe
Correctif Windows XP - KB842773-->C:\WINDOWS\$NtUninstallKB842773$\spuninst\spuninst.exe
Correctif Windows XP - KB867282-->C:\WINDOWS\$NtUninstallKB867282-IE6SP1-20050127.163319$\spuninst\spuninst.exe
Correctif Windows XP - KB871250-->C:\WINDOWS\$NtUninstallKB871250$\spuninst\spuninst.exe
Correctif Windows XP - KB873333-->C:\WINDOWS\$NtUninstallKB873333$\spuninst\spuninst.exe
Correctif Windows XP - KB873339-->C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
Correctif Windows XP - KB873376-->C:\WINDOWS\$NtUninstallKB873376$\spuninst\spuninst.exe
Correctif Windows XP - KB883357-->C:\WINDOWS\$NtUninstallKB883357$\spuninst\spuninst.exe
Correctif Windows XP - KB883939-->"C:\WINDOWS\$NtUninstallKB883939-IE6SP1-20050428.125228$\spuninst\spuninst.exe"
Correctif Windows XP - KB885250-->C:\WINDOWS\$NtUninstallKB885250$\spuninst\spuninst.exe
Correctif Windows XP - KB885835-->C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
Correctif Windows XP - KB885836-->C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
Correctif Windows XP - KB888113-->C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe
Correctif Windows XP - KB888302-->C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
Correctif Windows XP - KB889293-->C:\WINDOWS\$NtUninstallKB889293-IE6SP1-20041111.235619$\spuninst\spuninst.exe
Correctif Windows XP - KB890047-->C:\WINDOWS\$NtUninstallKB890047$\spuninst\spuninst.exe
Correctif Windows XP - KB890175-->C:\WINDOWS\$NtUninstallKB890175$\spuninst\spuninst.exe
Correctif Windows XP - KB890859-->"C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
Correctif Windows XP - KB890923-->"C:\WINDOWS\$NtUninstallKB890923-IE6SP1-20050225.103456$\spuninst\spuninst.exe"
Correctif Windows XP - KB891711-->C:\WINDOWS\$NtUninstallKB891711$\spuninst\spuninst.exe
Correctif Windows XP - KB891781-->C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
Correctif Windows XP - KB893066-->"C:\WINDOWS\$NtUninstallKB893066$\spuninst\spuninst.exe"
Correctif Windows XP - KB893086-->"C:\WINDOWS\$NtUninstallKB893086$\spuninst\spuninst.exe"
Correctif Windows XP - KB896688-->"C:\WINDOWS\$NtUninstallKB896688-IE6SP1-20051004.130236$\spuninst\spuninst.exe"
Correctif Windows XP - KB896727-->"C:\WINDOWS\$NtUninstallKB896727-IE6SP1-20050719.165959$\spuninst\spuninst.exe"
Correctif Windows XP - KB897715-->"C:\WINDOWS\$NtUninstallKB897715-OE6SP1-20050503.210336$\spuninst\spuninst.exe"
Correctif Windows XP - KB905915-->"C:\WINDOWS\$NtUninstallKB905915-IE6SP1-20051122.175908$\spuninst\spuninst.exe"
Correctif Windows XP - KB911567-->"C:\WINDOWS\$NtUninstallKB911567-OE6SP1-20060316.165634$\spuninst\spuninst.exe"
Correctif Windows XP - KB912812-->"C:\WINDOWS\$NtUninstallKB912812-IE6SP1-20060322.182418$\spuninst\spuninst.exe"
Correctif Windows XP - KB918439-->"C:\WINDOWS\$NtUninstallKB918439-IE6SP1-20060530.145346$\spuninst\spuninst.exe"
Correctif Windows XP - KB918899-->"C:\WINDOWS\$NtUninstallKB918899-IE6SP1-20060725.123917$\spuninst\spuninst.exe"
Correctif Windows XP - KB925486-->"C:\WINDOWS\$NtUninstallKB925486-IE6SP1-20060918.120000$\spuninst\spuninst.exe"
Correctif Windows XP (SP2) Q327979-->C:\WINDOWS\$NtUninstallQ327979$\spuninst\spuninst.exe
Correctif Windows XP (SP2) Q328310-->C:\WINDOWS\$NtUninstallQ328310$\spuninst\spuninst.exe
Correctif Windows XP (SP2) Q329170-->C:\WINDOWS\$NtUninstallQ329170$\spuninst\spuninst.exe
Correctif Windows XP (SP2) Q329441-->C:\WINDOWS\$NtUninstallQ329441$\spuninst\spuninst.exe
Correctif Windows XP (SP2) q330512-->C:\WINDOWS\$NtUninstallq330512$\spuninst\spuninst.exe
Correctif Windows XP (SP2) Q330909-->C:\WINDOWS\$NtUninstallQ330909$\spuninst\spuninst.exe
Correctif Windows XP (SP2) Q331816-->C:\WINDOWS\$NtUninstallQ331816$\spuninst\spuninst.exe
Correctif Windows XP (SP2) Q810020-->C:\WINDOWS\$NtUninstallQ810020$\spuninst\spuninst.exe
Correctif Windows XP (SP2) Q810565-->C:\WINDOWS\$NtUninstallQ810565$\spuninst\spuninst.exe
Correctif Windows XP (SP2) Q810577-->C:\WINDOWS\$NtUninstallQ810577$\spuninst\spuninst.exe
Correctif Windows XP (SP2) Q810833-->C:\WINDOWS\$NtUninstallQ810833$\spuninst\spuninst.exe
Correctif Windows XP (SP2) Q811493-->C:\WINDOWS\$NtUninstallQ811493$\spuninst\spuninst.exe
Correctif Windows XP (SP2) Q814033-->C:\WINDOWS\$NtUninstallQ814033$\spuninst\spuninst.exe
Correctif Windows XP (SP2) Q814545-->C:\WINDOWS\$NtUninstallQ814545$\spuninst\spuninst.exe
Correctif Windows XP (SP2) Q815021-->C:\WINDOWS\$NtUninstallQ815021$\spuninst\spuninst.exe
Correctif Windows XP (SP2) Q815411-->C:\WINDOWS\$NtUninstallQ815411$\spuninst\spuninst.exe
Correctif Windows XP (SP2) Q817606-->C:\WINDOWS\$NtUninstallQ817606$\spuninst\spuninst.exe
Coup de pouce Jardin d'éveil v1.0-->C:\WINDOWS\IsUn040c.exe -fC:\KA\CPJARDIN\DeIsL1.isu
CrossLoop 2.30-->"C:\Program Files\CrossLoop\unins000.exe"
CuteFTP 5.0 XP-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{18DF995F-2ACC-47E4-A33B-A703F4D39E92}\Setup.exe" -l0x40c /l040C UNINSTALL
DAEMON Tools-->MsiExec.exe /I{7A27AE24-F5B8-4ABC-B3DA-AB57BC7309FB}
DameWare NT Utilities-->MsiExec.exe /I{63BD90CB-C19A-4D0D-B61A-7800FE1A9B8C}
DAO-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{438D221C-5B5B-4E4B-B7BD-A86512E5B6C1}
Dazzle MovieStar 5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F8766B65-4B9C-11D6-830E-0050DABBB449}\Setup.exe" -l0x40c
Dazzle Photo Editor-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{39C5A3E0-31AF-11D6-830E-0050DABBB449}\Setup.exe"
DiskExplorer for FAT-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1B31E7B7-3B9B-4E4E-9BA6-E8EFFDD78211}\setup.exe" -l0x9 -removeonly
DivX 5.0.2 Bundle-->C:\WINDOWS\unvise32.exe C:\Program Files\DivX\uninstal.log
DivX Codec-->C:\WINDOWS\unvise32.exe C:\Program Files\DivX\DivX Codec\uninstal.log
DivX Player-->C:\WINDOWS\unvise32.exe C:\Program Files\DivX\DivX Player\uninstal.log
DVC-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{99B98440-4A0D-11D5-8310-0050DABBB21D}\Setup.exe" -l0x40c
DVD Complete-->MsiExec.exe /X{44A0C48D-D548-4F36-9FFF-600CEC4688EB}
DVD Decrypter (Remove Only)-->"C:\Program Files\DVD\DVD Decrypter\uninstall.exe"
DVD Shrink 3.2-->"C:\Program Files\DVD Shrink\unins000.exe"
DVD2SVCD 1.2.1 Build 3-->C:\DVD-TOOLS\DVD2SVCD\unins000.exe
DVDFab Decrypter 3.0.5.0-->"C:\Program Files\DVDFab Decrypter 3\unins000.exe"
EasyDivX v0.820 Standard-->C:\Program Files\EasyDivX\uninstall.exe
EasyPHP 1.6-->"C:\Program Files\EasyPHP\unins000.exe"
Ethereal 0.10.13-->"C:\Program Files\Ethereal\uninstall.exe"
FeedReader-->"C:\Program Files\FeedReader\unins000.exe"
FileToMail 2.0b-->C:\Program Files\FileToMail\uninst.exe
FLV Player-->C:\Program Files\FLV Player\uninstall.exe
GetDataBack for FAT-->"C:\Program Files\Runtime Software\GetDataBack\Uninstall.exe" "C:\Program Files\Runtime Software\GetDataBack\install.log" -u
Ghost Navigator 2.5-->"C:\Program Files\Ghost Navigator\uninstall.exe"
Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar1.dll"
GSpot Codec Information Appliance-->C:\Program Files\GSpot\Uninstall.exe
GUIDE PLUS+(TM) for Windows® System - ATI-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{99D34763-7E45-4FE5-8424-28DBC3A5F0BF}\setup.exe"
Help&Web 5.9.4.2-->"C:\Program Files\ectsoft\unins000.exe"
HijackThis 2.0.2-->"C:\HiJackThis\HijackThis.exe" /uninstall
HP Document Viewer 5.3-->C:\Program Files\HP\Digital Imaging\DocumentViewer\hpzscr01.exe -datfile hpqbud04.dat
HP Image Zone 5.3-->C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat
HP Image Zone Express-->MsiExec.exe /X{FE64AE29-0883-4C70-8388-DC026019C900}
HP Imaging Device Functions 5.3-->C:\Program Files\HP\Digital Imaging\DigitalImagingMonitor\hpzscr01.exe -datfile hpqbud01.dat
HP PSC & OfficeJet 5.3.A-->"C:\Program Files\HP\Digital Imaging\{3E386744-10FA-44b2-98C9-DF7A270DECB3}\setup\hpzscr01.exe" -datfile hposcr06.dat
HP Software Update-->MsiExec.exe /X{15EE79F4-4ED1-4267-9B0F-351009325D7D}
HP Solution Center & Imaging Support Tools 5.3-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
HTMLProtector-->C:\PROGRA~1\HTMLPR~1\UNWISE.EXE C:\PROGRA~1\HTMLPR~1\INSTALL.LOG
Huffyuv AVI lossless video codec (Remove Only)-->rundll.exe setupx.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\HUFFYUV.INF
HydraVision-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3EA9D975-BFDC-4E8E-B88B-0446FBC8CA66}\setup.exe"
iFilmEdit 1.4-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Cinax\iFilmEdit 1.4\Uninst.isu"
Image Resizer Powertoy for Windows XP-->MsiExec.exe /I{1CB92574-96F2-467B-B793-5CEB35C40C29}
ISO Commander (remove only)-->C:\Program Files\ISO Commander\Uninst.exe
J2SE Runtime Environment 5.0-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150000}
Java Web Start-->"C:\Program Files\Java Web Start\uninst-javaws.exe"
Kaspersky Online Scanner-->C:\WINDOWS\System32\KASPER~1\KASPER~1\kavuninstall.exe
Kplan 1.92-->"C:\Program Files\metagenia\kplan\unins000.exe"
LiveUpdate 2.7 (Symantec Corporation)-->"C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE" /U
LRC Editor 4.0 (remove only)-->"C:\Program Files\LRC Editor 4\uninst-gsle4.exe"
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft Data Access Components KB870669-->C:\WINDOWS\muninst.exe C:\WINDOWS\INF\KB870669.inf
Microsoft Office XP Professional-->MsiExec.exe /I{9111040C-6000-11D3-8CFE-0050048383C9}
Microsoft SMS Network Monitor 2.0 Service Pack 1-->"C:\WINDOWS\System32\NetmonFull\UNINSTAL.EXE" "C:\WINDOWS\System32\NetmonFull\INSTALL.LOG" "Microsoft SMS Network Monitor 2.0 Service Pack 1 Uninstall"
Microsoft SQL Server 2005 Backward compatibility-->MsiExec.exe /I{96327C3C-96BE-4C7A-A6F7-A71635E5949A}
Microsoft SQL Server Desktop Engine (LAMSQL)-->MsiExec.exe /X{E09B48B5-E141-427A-AB0C-D3605127224A}
Microsoft Word 2002-->MsiExec.exe /I{911B040C-6000-11D3-8CFE-0050048383C9}
Mise à jour de sécurité pour Lecteur Windows Media (KB911564)-->"C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 9 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 9 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB890046)-->"C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB893756)-->"C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896358)-->"C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896422)-->"C:\WINDOWS\$NtUninstallKB896422$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896423)-->"C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896424)-->"C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896426)-->"C:\WINDOWS\$NtUninstallKB896426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896428)-->"C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB899587)-->"C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB899588)-->"C:\WINDOWS\$NtUninstallKB899588$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB899591)-->"C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB900725)-->"C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB901017)-->"C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB901214)-->"C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB902400)-->"C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB904706)-->"C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB905414)-->"C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB905495)-->"C:\WINDOWS\$NtUninstallKB905495$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB905749)-->"C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB908519)-->"C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB908531)-->"C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB911562)-->"C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB911927)-->"C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB912919)-->"C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB913446)-->"C:\WINDOWS\$NtUninstallKB913446$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB913580)-->"C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB914388)-->"C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB914389)-->"C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB917159)-->"C:\WINDOWS\$NtUninstallKB917159$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB917344)-->"C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB917422)-->"C:\WINDOWS\$NtUninstallKB917422$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB917953)-->"C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB919007)-->"C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920670)-->"C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920683)-->"C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920685)-->"C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB921398)-->"C:\WINDOWS\$NtUninstallKB921398$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB921883)-->"C:\WINDOWS\$NtUninstallKB921883$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB922616)-->"C:\WINDOWS\$NtUninstallKB922616$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB922819)-->"C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923191)-->"C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923414)-->"C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924191)-->"C:\WINDOWS\$NtUninstallKB924191$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924496)-->"C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB835409)-->"C:\WINDOWS\$NtUninstallKB835409$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB910437)-->"C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB911280)-->"C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"
My DSC-->C:\Program Files\InstallShield Installation Information\{225af9a1-b556-88d5-94aa-0010b5426419}\setup.exe
MySQL Connector/ODBC 3.51-->C:\WINDOWS\system32\UNWISE.EXE C:\WINDOWS\system32\myodbc3_install.LOG
MySQL-Front 2.5-->"C:\Program Files\MySQL-Front\unins000.exe"
Namo WebEditor 5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F0696CA8-CD01-4E27-BB5E-702CA0A9ED29}\setup.exe"
Neodivx 9.2 Crystal Fusion-->"C:\Program Files\Neodivx\unins000.exe"
No-IP.com DUC (remove only)-->"C:\Program Files\No-IP\DUC20.exe" -uninstall
OMNIS 7³ Version 8.1-->C:\WINDOWS\unvise32.exe C:\Program Files\Raining Data Corp\OMNIS7381\uninstal.log
Omnis Studio 3.0.1-->C:\WINDOWS\unvise32.exe C:\Program Files\Omnis Software Inc\OS301\uninstal.log
OnDVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F330A4C0-802E-11D5-8311-0050DABBB21D}\Setup.exe" -L0x040c
Package du correctif Windows XP [voir Q329048 pour plus de détails]-->C:\WINDOWS\$NtUninstallQ329048$\spuninst\spuninst.exe
Package du correctif Windows XP [voir Q329115 pour plus de détails]-->C:\WINDOWS\$NtUninstallQ329115$\spuninst\spuninst.exe
Package du correctif Windows XP [voir Q329390 pour plus de détails]-->C:\WINDOWS\$NtUninstallQ329390$\spuninst\spuninst.exe
Package du correctif Windows XP [voir Q329834 pour plus de détails]-->C:\WINDOWS\$NtUninstallQ329834$\spuninst\spuninst.exe
Package du correctif Windows XP [voir Q331060 pour plus de détails]-->C:\WINDOWS\$NtUninstallQ331060$\spuninst\spuninst.exe
Packard Bell InfoCentre-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{07A1C2E1-76DD-11D6-9922-009027E9C183}\setup.exe"
PC Inspector File Recovery-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0DD140D3-9563-481E-AA75-BA457CBDAEF2}\Setup.exe" -l0x40c
PDFCreator-->C:\Program Files\PDFCreator\unins000.exe
PopfaxPrinter 2.1.3-->C:\Program Files\PopfaxPrinter\uninst.exe
PowerDVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe" -uninstall
Prassi PrimoDVD 2.0 (English)-->C:\WINDOWS\Unin.exe /U:C:\Program Files\Prassi PrimoDVD 2.0 (English)\Unin01.in
Quest Software Toad for SQL Server Freeware 2.0-->MsiExec.exe /X{F5EF25D8-8D4B-40C6-BFD3-A149BBC76CE1}
QuickTime-->MsiExec.exe /I{50D8FFDD-90CD-4859-841F-AA1961C7767A}
RadioWeb Player V4-->C:\WINDOWS\st6unst.exe -n "C:\Program Files\Radioweb Player\ST6UNST.LOG"
RadioWeb-->C:\Program Files\RadioWeb\uninstall.exe
RAR Key 8.1 Demo-->C:\Program Files\Passware\demos\un-rarkeyd.exe
Remove on Reboot Shell Extension-->"C:\Program Files\Remove on Reboot\unins000.exe"
Ruby-186-25-->C:\Program Files\ruby\uninstall.exe
SC Ver 2.65-->"C:\Program Files\SC\unins000.exe"
SciTE - Scintilla Text Editor 1.51 with Extensions (wbd-1)-->"C:\Program Files\Scintilla Text Editor\unins000.exe"
Scooby-Doo (TM), Le Mystère du Château hanté(TM)-->C:\Program Files\The Learning Company\Scooby-Doo (TM), Le Mystère du Château hanté(TM)\uninstal.exe
Security Update for Microsoft .NET Framework 2.0 (KB922770)-->C:\WINDOWS\System32\msiexec.exe /promptrestart /uninstall {0E92DD42-76F5-4EF2-B381-F9C1D72BE23D} /package {7131646D-CD3C-40F4-97B9-CD9E4E6262EF}
Security Update pour Microsoft .NET Framework 2.0 (KB917283)-->C:\WINDOWS\System32\msiexec.exe /promptrestart /uninstall {967B098A-042D-4367-BAC9-8BC11684174F} /package {7131646D-CD3C-40F4-97B9-CD9E4E6262EF}
SereneScreen Aquarium-->"C:\Program Files\SereneScreen\Aquarium\unins000.exe"
Skype™ 3.6-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
Sonic RecordNow DX-->MsiExec.exe /I{8855FF30-19CE-4CB1-A654-87B38369CCE1}
SSH Secure Shell-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{74E2CD0C-D4A2-11D3-95A6-0000E86CFDE5}\Setup.exe"
Super Bubble Blob-->C:\The Games Page\Super Bubble Blob\Uninstal.exe
Symantec Ghost Standard Tools-->MsiExec.exe /I{79DB8718-1240-44CA-09E0-49E305BF1010}
Symantec Network Driver Update-->MsiExec.exe /X{6AF90EF6-F7F9-466C-99F4-1774826FBB40}
TeamViewer 4-->C:\Program Files\TeamViewer\Version4\uninstall.exe
Timbuktu Pro-->C:\WINDOWS\Tb2\dinstall.exe
TMPGEnc Plus 2.5-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{06FCEE7D-5E24-4899-A1C6-32BE73414823}
Ulead Photo Express 4.0 SE-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BBC0D330-C37B-4472-BFB9-AA217CF0C95F}\setup.exe"
Ulead Straight-to-Disc SDK-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8D2C1E44-7685-4D05-8342-B0DC6422FA47}\setup.exe" -l0x9
Utilitaire de sauvegarde Windows-->MsiExec.exe /I{76EFFC7C-17A6-479D-9E47-8E658C1695AE}
VideoLAN VLC media player 0.8.6c-->C:\Program Files\VideoLAN\VLC\uninstall.exe
VideoReDo/Plus Version 2.5.3.500-->"C:\Program Files\VideoReDoPlus\unins000.exe"
WatchGuard Mobile VPN with SSL client 10-->"C:\Program Files\WatchGuard\WatchGuard Mobile VPN with SSL\unins000.exe"
Webcam32-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Surveyor Corporation\Webcam32\Uninst.isu"
Webcast-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{200E0DC2-2223-11D6-830E-0050DABBB449}\Setup.exe"
WebStripper-->"C:\Program Files\Solent\WebStripper\unins000.exe"
Windows Installer 3.1 (KB893803)-->"C:\WINDOWS\$MSI31Uninstall_KB893803$\spuninst\spuninst.exe"
Windows Installer 3.1 (KB893803)-->"C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
WinHTTrack Website Copier 3.42-->"C:\Program Files\WinHTTrack\unins000.exe"
WinISO 5.3-->"C:\Program Files\WinISO\unins000.exe"
WinPcap 4.0-->C:\Program Files\WinPcap\uninstall.exe
WinRAR archiver-->C:\Program Files\WinRAR\uninstall.exe
WinZip-->"C:\Program Files\WinZip\WINZIP32.EXE" /uninstall
WizFlow-->C:\PROGRA~1\WizFlow\UNWISE32.EXE C:\PROGRA~1\WizFlow\INSTALL.LOG
WM Recorder 12.0-->C:\Program Files\WMR11\Uninstal.exe
XviD MPEG-4 Video Codec-->"C:\Program Files\XviD\unins000.exe"
ZNsoft divx Data Decoder pack (remove only)-->C:\WINDOWS\System32\rundll32.exe setupapi,InstallHinfSection Remove_DivX 132 C:\WINDOWS\INF\DivX-Data-Decoder.inf

======System event log======

Computer Name: INFOMNI2
Event Code: 7036
Message: Le service Agent client Symantec Ghost Win32 est entré dans l'état : arrêté.

Record Number: 84355
Source Name: Service Control Manager
Time Written: 20090211145534.000000+060
Event Type: Informations
User:

Computer Name: INFOMNI2
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Agent client Symantec Ghost Win32.

Record Number: 84354
Source Name: Service Control Manager
Time Written: 20090211145534.000000+060
Event Type: Informations
User: INFOMNI2\Arnaud

Computer Name: INFOMNI2
Event Code: 7036
Message: Le service Agent client Symantec Ghost Win32 est entré dans l'état : arrêté.

Record Number: 84353
Source Name: Service Control Manager
Time Written: 20090211145533.000000+060
Event Type: Informations
User:

Computer Name: INFOMNI2
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Agent client Symantec Ghost Win32.

Record Number: 84352
Source Name: Service Control Manager
Time Written: 20090211145533.000000+060
Event Type: Informations
User: INFOMNI2\Arnaud

Computer Name: INFOMNI2
Event Code: 7036
Message: Le service Agent client Symantec Ghost Win32 est entré dans l'état : arrêté.

Record Number: 84351
Source Name: Service Control Manager
Time Written: 20090211145532.000000+060
Event Type: Informations
User:

=====Application event log=====

Computer Name: INFOMNI2
Event Code: 101
Message: SQLServerAgent service successfully started.

Record Number: 5
Source Name: SQLAgent$LAMSQL
Time Written: 20090115210038.000000+060
Event Type: Informations
User:

Computer Name: INFOMNI2
Event Code: 3
Message: Timbuktu Pro Initiated
2009-01-15
21:00:25
NetWork: IP
Remote Address:
Local Address: 192.168.1.6
User: INFOMNI2
Comment:

Record Number: 4
Source Name: Timbuktu Pro
Time Written: 20090115210025.000000+060
Event Type: Informations
User:

Computer Name: INFOMNI2
Event Code: 19011
Message:
Record Number: 3
Source Name: MSSQL$LAMSQL
Time Written: 20090115205959.000000+060
Event Type: Avertissement
User:

Computer Name: INFOMNI2
Event Code: 3299
Message: The Apache service named C:\PROGRA~1\EasyPHP\Apache\apache.exe reported the following error:
>>> [Thu Jan 15 20:59:27 2009] [warn] pid file cprogram files/easyphp/apache/logs/httpd.pid overwritten -- Unclean shutdown of previous Apache run? <<<
before the error.log file could be opened.
More information may be available in the error.log file. .

Record Number: 2
Source Name: Apache Service
Time Written: 20090115205927.000000+060
Event Type: erreur
User:

Computer Name: INFOMNI2
Event Code: 105
Message: The service was started.

Record Number: 1
Source Name: ATI Smart
Time Written: 20090115205925.000000+060
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=C:\Program Files\ruby\bin;%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\ATI Technologies\ATI Control Panel;C:\PROGRA~1\FICHIE~1\TVNAVI~1;C:\ORANT\BIN;C:\Program Files\QuickTime\QTSystem;C:\Program Files\Microsoft SQL Server\80\Tools\Binn
"windir"=%SystemRoot%
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 8 Stepping 1, AuthenticAMD
"PROCESSOR_REVISION"=0801
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.RB;.RBW
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre1.5.0\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.5.0\lib\ext\QTJava.zip
"RUBYOPT"=-rubygems
"SAFEBOOT_OPTION"=MINIMAL

-----------------EOF-----------------








Logfile of random's system information tool 1.06 (written by random/random)
Run by Arnaud at 2009-11-08 22:05:24
Microsoft Windows XP Édition familiale Service Pack 1
System drive C: has 20 GB (27%) free of 72 GB
Total RAM: 1023 MB (78% free)

HijackThis download failed

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:\program files\google\googletoolbar1.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll []
{8E718888-423F-11D2-876E-00A0C9082467} - &Radio - C:\WINDOWS\System32\msdxm.ocx [2002-08-30 846364]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2003-04-24 54784]
"EM_EXEC"=C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE [2002-01-28 35328]
"ATIPTA"=C:\ATI Technologies\ATI Control Panel\atiptaxx.exe [2002-10-12 294912]
"ACTIVBOARD"=c:\apps\ABoard\ABoard.exe [2003-05-02 24576]
"LoginPath"=C:\Program Files\Timbuktu Pro\login.exe [1998-06-04 17920]
"Tb2initPath"=C:\Program Files\Timbuktu Pro\tb2init.exe [1998-06-04 22016]
"VCSPlayer"=C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe [2002-06-07 299008]
"CleanEasyImg"=c:\apps\easydvd\cleanall.exe []
"DAEMON Tools-1033"=C:\Program Files\D-Tools\daemon.exe [2003-04-27 77824]
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2003-08-06 151597]
"reg_nuvision_ax"=C:\WINDOWS\System32\Regsvr32 /s NUVision.ax []
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2006-10-25 282624]
"RemoteControl"=C:\WINDOWS\System32\rmctrl.exe [2000-10-16 32768]
"CoolSwitch"=C:\WINDOWS\System32\taskswitch.exe [2002-03-19 45632]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2008-05-16 79224]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2005-05-11 49152]
"TrueImageMonitor.exe"=C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe []
"AcronisTimounterMonitor"=C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe []
"Acronis Scheduler2 Service"=C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2006-02-21 61440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2006-06-19 702768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"=C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll [2007-09-29 79408]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AVG Anti-Spyware Driver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AVG Anti-Spyware Guard]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PSEXESVC]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AVG Anti-Spyware Driver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AVG Anti-Spyware Guard]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PSEXESVC]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\SmartFTP Client\SmartFTP.exe"="C:\Program Files\SmartFTP Client\SmartFTP.exe:*:Enabled:SmartFTP Client 3.0"
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======List of files/folders created in the last 1 months======

2009-11-08 22:03:21 ----D---- C:\rsit
2009-11-08 22:03:21 ----D---- C:\Program Files\trend micro
2009-11-08 12:03:22 ----N---- C:\WINDOWS\winhlp32.exe
2009-11-08 12:03:22 ----N---- C:\WINDOWS\winhelp.exe
2009-11-08 12:03:16 ----N---- C:\WINDOWS\hegames.ini
2009-11-08 12:03:16 ----N---- C:\WINDOWS\HDReg.ini
2009-11-08 12:03:16 ----D---- C:\WINDOWS\WinSxS
2009-11-08 12:02:39 ----N---- C:\WINDOWS\hpqEmlSz.INI
2009-11-08 12:02:39 ----N---- C:\WINDOWS\hpntwksetup.ini
2009-11-08 12:02:39 ----N---- C:\WINDOWS\HP_RedboxHprblog_HPSU.ini
2009-11-08 12:02:39 ----N---- C:\WINDOWS\HP_48BitScanUpdatePatch.ini
2009-11-08 12:02:39 ----N---- C:\WINDOWS\hh.exe
2009-11-08 12:02:39 ----N---- C:\WINDOWS\hew32ext.dll
2009-11-08 12:02:39 ----D---- C:\WINDOWS\Help
2009-11-08 11:59:17 ----N---- C:\WINDOWS\INETWH32.dll
2009-11-08 11:59:17 ----N---- C:\WINDOWS\ieuninst.exe
2009-11-08 11:59:17 ----D---- C:\WINDOWS\ime
2009-11-08 11:59:17 ----D---- C:\WINDOWS\I386
2009-11-08 11:58:19 ----D---- C:\WINDOWS\inf
2009-11-08 11:57:59 ----SHD---- C:\WINDOWS\Installer
2009-11-08 11:57:59 ----N---- C:\WINDOWS\iun6002.exe
2009-11-08 11:57:59 ----N---- C:\WINDOWS\IsUninst.exe
2009-11-08 11:57:59 ----N---- C:\WINDOWS\IsUn040c.exe
2009-11-08 11:57:57 ----N---- C:\WINDOWS\Roboex32.dll
2009-11-08 11:57:57 ----D---- C:\WINDOWS\savsys
2009-11-08 11:57:57 ----D---- C:\WINDOWS\java
2009-11-08 11:57:57 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-11-08 11:57:56 ----N---- C:\WINDOWS\SETUP32.INI
2009-11-08 11:57:56 ----N---- C:\WINDOWS\Setup1.exe
2009-11-08 11:57:56 ----N---- C:\WINDOWS\setdebug.exe
2009-11-08 11:57:56 ----N---- C:\WINDOWS\control.ini
2009-11-08 11:57:56 ----D---- C:\WINDOWS\security
2009-11-08 11:57:51 ----N---- C:\WINDOWS\desktop.ini
2009-11-08 11:57:51 ----N---- C:\WINDOWS\daemon.dll
2009-11-08 11:57:51 ----D---- C:\WINDOWS\Debug
2009-11-08 11:57:51 ----D---- C:\WINDOWS\Cursors
2009-11-08 11:57:50 ----D---- C:\WINDOWS\Downloaded Installations
2009-11-08 11:57:49 ----D---- C:\WINDOWS\Downloaded Program Files
2009-11-08 11:57:42 ----N---- C:\WINDOWS\easyhelp.dll
2009-11-08 11:57:42 ----N---- C:\WINDOWS\easyh32.dll
2009-11-08 11:57:42 ----N---- C:\WINDOWS\DUMP2961.tmp
2009-11-08 11:57:42 ----N---- C:\WINDOWS\dswplug.ini
2009-11-08 11:57:42 ----D---- C:\WINDOWS\Driver Cache
2009-11-08 11:57:34 ----N---- C:\WINDOWS\explorer.exe
2009-11-08 11:57:34 ----D---- C:\WINDOWS\erdnt
2009-11-08 11:57:16 ----N---- C:\WINDOWS\orun32.ini
2009-11-08 11:57:16 ----N---- C:\WINDOWS\OpPrintServer.INI
2009-11-08 11:57:16 ----N---- C:\WINDOWS\oeuninst.exe
2009-11-08 11:57:16 ----N---- C:\WINDOWS\ODBCINST.INI
2009-11-08 11:57:16 ----N---- C:\WINDOWS\ODBC.INI
2009-11-08 11:57:16 ----D---- C:\WINDOWS\Offline Web Pages
2009-11-08 11:57:16 ----D---- C:\WINDOWS\Fonts
2009-11-08 11:57:16 ----A---- C:\WINDOWS\OEWABLog.txt
2009-11-08 11:57:16 ----A---- C:\WINDOWS\ntbtlog.txt
2009-11-08 11:57:15 ----N---- C:\WINDOWS\Packard Bell Companion.INI
2009-11-08 11:57:15 ----D---- C:\WINDOWS\$NtUninstallKB840315$
2009-11-08 11:57:14 ----D---- C:\WINDOWS\$NtUninstallKB889293-IE6SP1-20041111.235619$
2009-11-08 11:57:13 ----D---- C:\WINDOWS\$NtUninstallKB910437$
2009-11-08 11:57:13 ----D---- C:\WINDOWS\$NtUninstallKB897715-OE6SP1-20050503.210336$
2009-11-08 11:57:12 ----D---- C:\WINDOWS\$NtUninstallQ810020$
2009-11-08 11:57:12 ----D---- C:\WINDOWS\$NtUninstallKB918439-IE6SP1-20060530.145346$
2009-11-08 11:57:11 ----N---- C:\WINDOWS\NOTEPAD.EXE
2009-11-08 11:57:11 ----D---- C:\WINDOWS\Media
2009-11-08 11:57:10 ----N---- C:\WINDOWS\System32\wuaueng.dll.mui
2009-11-08 11:57:10 ----N---- C:\WINDOWS\System32\wuaueng.dll
2009-11-08 11:57:10 ----N---- C:\WINDOWS\System32\wuauclt1.exe
2009-11-08 11:57:10 ----N---- C:\WINDOWS\System32\wuauclt.exe
2009-11-08 11:57:10 ----N---- C:\WINDOWS\System32\wuapi.dll.mui
2009-11-08 11:57:10 ----N---- C:\WINDOWS\System32\wuapi.dll
2009-11-08 11:57:10 ----N---- C:\WINDOWS\System32\route.exe
2009-11-08 11:57:10 ----N---- C:\WINDOWS\System32\eula.txt
2009-11-08 11:57:10 ----D---- C:\WINDOWS\pss
2009-11-08 11:57:09 ----N---- C:\WINDOWS\System32\hnetwiz.dll
2009-11-08 11:57:09 ----N---- C:\WINDOWS\System32\hnetmon.dll
2009-11-08 11:57:09 ----N---- C:\WINDOWS\System32\hnetcfg.dll
2009-11-08 11:57:09 ----N---- C:\WINDOWS\System32\hlink.dll
2009-11-08 11:57:09 ----N---- C:\WINDOWS\System32\hid.dll
2009-11-08 11:57:09 ----N---- C:\WINDOWS\System32\hhsetup.dll
2009-11-08 11:57:09 ----N---- C:\WINDOWS\System32\hh.exe
2009-11-08 11:57:09 ----N---- C:\WINDOWS\System32\help.exe
2009-11-08 11:57:09 ----N---- C:\WINDOWS\System32\hccoin.dll
2009-11-08 11:57:09 ----N---- C:\WINDOWS\System32\hal.dll
2009-11-08 11:57:09 ----N---- C:\WINDOWS\System32\h323msp.dll
2009-11-08 11:57:09 ----N---- C:\WINDOWS\System32\h323log.txt
2009-11-08 11:57:09 ----N---- C:\WINDOWS\System32\grpconv.exe
2009-11-08 11:57:09 ----N---- C:\WINDOWS\System32\grep.exe
2009-11-08 11:57:08 ----N---- C:\WINDOWS\System32\tmp.txt
2009-11-08 11:57:08 ----N---- C:\WINDOWS\System32\TLBINF32.dll
2009-11-08 11:57:08 ----N---- C:\WINDOWS\System32\plustab.dll
2009-11-08 11:57:08 ----N---- C:\WINDOWS\System32\pjlmon.dll
2009-11-08 11:57:08 ----N---- C:\WINDOWS\System32\ping6.exe
2009-11-08 11:57:08 ----N---- C:\WINDOWS\System32\ping.exe
2009-11-08 11:57:08 ----N---- C:\WINDOWS\System32\pifmgr.dll
2009-11-08 11:57:08 ----N---- C:\WINDOWS\System32\pidgen.dll
2009-11-08 11:57:08 ----N---- C:\WINDOWS\System32\pid.dll
2009-11-08 11:57:08 ----N---- C:\WINDOWS\System32\picn20.dll
2009-11-08 11:57:08 ----N---- C:\WINDOWS\System32\php4ts.dll
2009-11-08 11:57:08 ----N---- C:\WINDOWS\System32\photowiz.dll
2009-11-08 11:57:08 ----N---- C:\WINDOWS\System32\phototoys.dll
2009-11-08 11:57:08 ----N---- C:\WINDOWS\System32\perfwci.ini
2009-11-08 11:57:08 ----N---- C:\WINDOWS\System32\perfts.dll
2009-11-08 11:57:08 ----N---- C:\WINDOWS\System32\PerfStringBackup.INI
2009-11-08 11:57:08 ----N---- C:\WINDOWS\System32\perfproc.dll
2009-11-08 11:57:07 ----N---- C:\WINDOWS\System32\tscfgwmi.dll
2009-11-08 11:57:07 ----N---- C:\WINDOWS\System32\tsbyuv.dll
2009-11-08 11:57:07 ----N---- C:\WINDOWS\System32\tsappcmp.dll
2009-11-08 11:57:07 ----N---- C:\WINDOWS\System32\trkwks.dll
2009-11-08 11:57:07 ----N---- C:\WINDOWS\System32\tree.com
2009-11-08 11:57:07 ----N---- C:\WINDOWS\System32\traffic.dll
2009-11-08 11:57:07 ----N---- C:\WINDOWS\System32\tracert6.exe
2009-11-08 11:57:07 ----N---- C:\WINDOWS\System32\tracert.exe
2009-11-08 11:57:07 ----N---- C:\WINDOWS\System32\tourstart.exe
2009-11-08 11:57:07 ----N---- C:\WINDOWS\System32\toolhelp.dll
2009-11-08 11:57:07 ----N---- C:\WINDOWS\System32\msrd2x35.dll
2009-11-08 11:57:07 ----N---- C:\WINDOWS\System32\msrclr40.dll
2009-11-08 11:57:07 ----N---- C:\WINDOWS\System32\MSRATING.DLL
2009-11-08 11:57:07 ----N---- C:\WINDOWS\System32\msratelc.dll
2009-11-08 11:57:07 ----N---- C:\WINDOWS\System32\msr2cenu.dll
2009-11-08 11:57:07 ----N---- C:\WINDOWS\System32\msr2c.dll
2009-11-08 11:57:07 ----N---- C:\WINDOWS\System32\mSQL.dll
2009-11-08 11:57:07 ----N---- C:\WINDOWS\System32\MSPRPFR.DLL
2009-11-08 11:57:07 ----N---- C:\WINDOWS\System32\msprivs.dll
2009-11-08 11:57:07 ----N---- C:\WINDOWS\System32\msports.dll
2009-11-08 11:57:07 ----N---- C:\WINDOWS\System32\mspmspsv.dll
2009-11-08 11:57:07 ----N---- C:\WINDOWS\System32\mspmsp.dll
2009-11-08 11:57:07 ----N---- C:\WINDOWS\System32\mspmsnsv.dll
2009-11-08 11:57:07 ----N---- C:\WINDOWS\System32\mspdox35.dll
2009-11-08 11:57:07 ----N---- C:\WINDOWS\System32\mspbde40.dll
2009-11-08 11:57:06 ----N---- C:\WINDOWS\System32\vga.dll
2009-11-08 11:57:06 ----N---- C:\WINDOWS\System32\vbar332.dll
2009-11-08 11:57:06 ----N---- C:\WINDOWS\System32\usrsdpia.dll
2009-11-08 11:57:06 ----N---- C:\WINDOWS\System32\tscon.exe
2009-11-08 11:57:06 ----N---- C:\WINDOWS\System32\systray.exe
2009-11-08 11:57:06 ----N---- C:\WINDOWS\System32\svcpack.dll
2009-11-08 11:57:06 ----N---- C:\WINDOWS\System32\spoolss.dll
2009-11-08 11:57:06 ----N---- C:\WINDOWS\System32\slbiop.dll
2009-11-08 11:57:06 ----N---- C:\WINDOWS\System32\shgina.dll
2009-11-08 11:57:06 ----N---- C:\WINDOWS\System32\setupapi.dll
2009-11-08 11:57:06 ----N---- C:\WINDOWS\System32\serwvdrv.dll
2009-11-08 11:57:06 ----N---- C:\WINDOWS\System32\scrrnfr.dll
2009-11-08 11:57:06 ----N---- C:\WINDOWS\System32\samsrv.dll
2009-11-08 11:57:06 ----N---- C:\WINDOWS\System32\MSRDO20.DLL
2009-11-08 11:57:06 ----N---- C:\WINDOWS\System32\msrd3x40.dll
2009-11-08 11:57:06 ----N---- C:\WINDOWS\System32\msrd2x40.dll
2009-11-08 11:57:05 ----N---- C:\WINDOWS\System32\xcopy.exe
2009-11-08 11:57:05 ----N---- C:\WINDOWS\System32\wuaueng1.dll
2009-11-08 11:57:05 ----N---- C:\WINDOWS\System32\wtsapi32.dll
2009-11-08 11:57:05 ----N---- C:\WINDOWS\System32\wowfaxui.dll
2009-11-08 11:57:05 ----N---- C:\WINDOWS\System32\wmpui.dll
2009-11-08 11:57:05 ----N---- C:\WINDOWS\System32\wmdmps.dll
2009-11-08 11:57:05 ----N---- C:\WINDOWS\System32\cmutil.dll
2009-11-08 11:57:05 ----N---- C:\WINDOWS\System32\cmstp.exe
2009-11-08 11:57:05 ----N---- C:\WINDOWS\System32\cmprops.dll
2009-11-08 11:57:05 ----N---- C:\WINDOWS\System32\cmpbk32.dll
2009-11-08 11:57:05 ----N---- C:\WINDOWS\System32\cmmon32.exe
2009-11-08 11:57:05 ----N---- C:\WINDOWS\System32\CmdLineExt.dll
2009-11-08 11:57:05 ----N---- C:\WINDOWS\System32\CmDlgFR.dll
2009-11-08 11:57:05 ----N---- C:\WINDOWS\System32\cmdl32.exe
2009-11-08 11:57:05 ----N---- C:\WINDOWS\System32\cmdial32.dll
2009-11-08 11:57:05 ----N---- C:\WINDOWS\System32\cmd.exe
2009-11-08 11:57:05 ----N---- C:\WINDOWS\System32\cmcfg32.dll
2009-11-08 11:57:05 ----N---- C:\WINDOWS\System32\clusapi.dll
2009-11-08 11:57:05 ----N---- C:\WINDOWS\System32\clspack.exe
2009-11-08 11:57:05 ----N---- C:\WINDOWS\System32\CLRVIDDC.DLL
2009-11-08 11:57:05 ----N---- C:\WINDOWS\System32\CLRVIDCC.DLL
2009-11-08 11:57:05 ----N---- C:\WINDOWS\System32\clipsrv.exe
2009-11-08 11:57:05 ----N---- C:\WINDOWS\System32\clipbrd.exe
2009-11-08 11:57:05 ----N---- C:\WINDOWS\System32\cliconfg.exe
2009-11-08 11:57:05 ----N---- C:\WINDOWS\System32\cliconfg.dll
2009-11-08 11:57:04 ----N---- C:\WINDOWS\System32\cryptui.dll
2009-11-08 11:57:04 ----N---- C:\WINDOWS\System32\cryptsvc.dll
2009-11-08 11:57:04 ----N---- C:\WINDOWS\System32\cryptnet.dll
2009-11-08 11:57:04 ----N---- C:\WINDOWS\System32\cryptext.dll
2009-11-08 11:57:04 ----N---- C:\WINDOWS\System32\cryptdll.dll
2009-11-08 11:57:04 ----N---- C:\WINDOWS\System32\cryptdlg.dll
2009-11-08 11:57:04 ----N---- C:\WINDOWS\System32\crypt32.dll
2009-11-08 11:57:04 ----N---- C:\WINDOWS\System32\activeds.dll
2009-11-08 11:57:04 ----N---- C:\WINDOWS\System32\aclui.dll
2009-11-08 11:57:04 ----N---- C:\WINDOWS\System32\acledit.dll
2009-11-08 11:57:04 ----N---- C:\WINDOWS\System32\accwiz.exe
2009-11-08 11:57:04 ----N---- C:\WINDOWS\System32\acctres.dll
2009-11-08 11:57:04 ----N---- C:\WINDOWS\System32\aaaamon.dll
2009-11-08 11:57:04 ----N---- C:\WINDOWS\System32\a3d.dll
2009-11-08 11:57:04 ----N---- C:\WINDOWS\System32\6to4svc.dll
2009-11-08 11:57:04 ----D---- C:\WINDOWS\System32\3com_dmi
2009-11-08 11:57:04 ----D---- C:\WINDOWS\System32\3076
2009-11-08 11:57:04 ----D---- C:\WINDOWS\System32\2052
2009-11-08 11:57:04 ----D---- C:\WINDOWS\System32\1054
2009-11-08 11:57:04 ----D---- C:\WINDOWS\System32\1042
2009-11-08 11:57:04 ----D---- C:\WINDOWS\System32\1041
2009-11-08 11:57:04 ----D---- C:\WINDOWS\System32\1037
2009-11-08 11:57:04 ----D---- C:\WINDOWS\System32\1036
2009-11-08 11:57:04 ----D---- C:\WINDOWS\System32\1033
2009-11-08 11:57:04 ----D---- C:\WINDOWS\System32\1031
2009-11-08 11:57:04 ----D---- C:\WINDOWS\System32\1028
2009-11-08 11:57:04 ----D---- C:\WINDOWS\System32\1025
2009-11-08 11:57:03 ----N---- C:\WINDOWS\System32\ctrldll.dll
2009-11-08 11:57:03 ----N---- C:\WINDOWS\System32\ctl3dv2.dll
2009-11-08 11:57:03 ----N---- C:\WINDOWS\System32\ctl3d32.dll
2009-11-08 11:57:03 ----N---- C:\WINDOWS\System32\ctl3d.dll
2009-11-08 11:57:03 ----N---- C:\WINDOWS\System32\ctfmon.exe
2009-11-08 11:57:03 ----N---- C:\WINDOWS\System32\csseqchk.dll
2009-11-08 11:57:03 ----N---- C:\WINDOWS\System32\csrss.exe
2009-11-08 11:57:03 ----N---- C:\WINDOWS\System32\csrsrv.dll
2009-11-08 11:57:03 ----N---- C:\WINDOWS\System32\cscui.dll
2009-11-08 11:57:03 ----N---- C:\WINDOWS\System32\cscript.exe
2009-11-08 11:57:03 ----N---- C:\WINDOWS\System32\cscdll.dll
2009-11-08 11:57:03 ----N---- C:\WINDOWS\System32\ati2dvag(5).dll
2009-11-08 11:57:03 ----N---- C:\WINDOWS\System32\ati2cqag.dll
2009-11-08 11:57:03 ----N---- C:\WINDOWS\System32\ATHPRXY.DLL
2009-11-08 11:57:03 ----N---- C:\WINDOWS\System32\at.exe
2009-11-08 11:57:03 ----N---- C:\WINDOWS\System32\asycfilt.dll
2009-11-08 11:57:03 ----N---- C:\WINDOWS\System32\asfsipc.dll
2009-11-08 11:57:03 ----A---- C:\WINDOWS\System32\aswBoot.exe
2009-11-08 11:57:02 ----N---- C:\WINDOWS\System32\cards.dll
2009-11-08 11:57:02 ----N---- C:\WINDOWS\System32\capicom.dll
2009-11-08 11:57:02 ----N---- C:\WINDOWS\System32\capesnpn.dll
2009-11-08 11:57:02 ----N---- C:\WINDOWS\System32\camocx.dll
2009-11-08 11:57:02 ----N---- C:\WINDOWS\System32\calc.exe
2009-11-08 11:57:02 ----N---- C:\WINDOWS\System32\cacls.exe
2009-11-08 11:57:02 ----N---- C:\WINDOWS\System32\cabview.dll
2009-11-08 11:57:02 ----N---- C:\WINDOWS\System32\ati2dvag.dll
2009-11-08 11:56:54 ----N---- C:\WINDOWS\System32\ccfgnt.dll
2009-11-08 11:56:54 ----N---- C:\WINDOWS\System32\cbkhdlr.exe
2009-11-08 11:56:54 ----N---- C:\WINDOWS\System32\catsrvut.dll
2009-11-08 11:56:54 ----N---- C:\WINDOWS\System32\catsrvps.dll
2009-11-08 11:56:54 ----N---- C:\WINDOWS\System32\catsrv.dll
2009-11-08 11:56:54 ----D---- C:\WINDOWS\System32\CatRoot2
2009-11-08 11:56:54 ----D---- C:\WINDOWS\System32\CatRoot
2009-11-08 11:56:53 ----N---- C:\WINDOWS\System32\colbact.dll
2009-11-08 11:56:53 ----N---- C:\WINDOWS\System32\coinst.dll
2009-11-08 11:56:53 ----N---- C:\WINDOWS\System32\cnvfat.dll
2009-11-08 11:56:53 ----N---- C:\WINDOWS\System32\cnetcfg.dll
2009-11-08 11:56:53 ----N---- C:\WINDOWS\System32\CNDUK170.dll
2009-11-08 11:56:53 ----N---- C:\WINDOWS\System32\CNDNDlg.exe
2009-11-08 11:56:53 ----N---- C:\WINDOWS\System32\CNDCK170.dll
2009-11-08 11:56:53 ----N---- C:\WINDOWS\System32\certmgr.dll
2009-11-08 11:56:53 ----N---- C:\WINDOWS\System32\certcli.dll
2009-11-08 11:56:53 ----N---- C:\WINDOWS\System32\cehelper.dll
2009-11-08 11:56:53 ----N---- C:\WINDOWS\System32\cdplayer.exe.manifest
2009-11-08 11:56:53 ----N---- C:\WINDOWS\System32\cdosys.dll
2009-11-08 11:56:53 ----N---- C:\WINDOWS\System32\cdmodem.dll
2009-11-08 11:56:53 ----N---- C:\WINDOWS\System32\cdm.dll
2009-11-08 11:56:53 ----N---- C:\WINDOWS\System32\CDFVIEW.DLL
2009-11-08 11:56:53 ----N---- C:\WINDOWS\System32\cddbcontrol.dll
2009-11-08 11:56:52 ----N---- C:\WINDOWS\System32\compatUI.dll
2009-11-08 11:56:52 ----N---- C:\WINDOWS\System32\compact.exe
2009-11-08 11:56:52 ----N---- C:\WINDOWS\System32\comp.exe
2009-11-08 11:56:52 ----N---- C:\WINDOWS\System32\COMNCTR.DLL
2009-11-08 11:56:52 ----N---- C:\WINDOWS\System32\commdlg.dll
2009-11-08 11:56:52 ----N---- C:\WINDOWS\System32\command.com
2009-11-08 11:56:52 ----N---- C:\WINDOWS\System32\comdlg32.dll
2009-11-08 11:56:52 ----N---- C:\WINDOWS\System32\comctl32.dll
2009-11-08 11:56:52 ----N---- C:\WINDOWS\System32\comcat.dll
2009-11-08 11:56:52 ----N---- C:\WINDOWS\System32\comaddin.dll
2009-11-08 11:56:52 ----D---- C:\WINDOWS\System32\Com
2009-11-08 11:56:51 ----N---- C:\WINDOWS\System32\defrag.exe
2009-11-08 11:56:51 ----N---- C:\WINDOWS\System32\DECDNET.DLL
2009-11-08 11:56:51 ----N---- C:\WINDOWS\System32\debug.exe
2009-11-08 11:56:51 ----N---- C:\WINDOWS\System32\ddrawex.dll
2009-11-08 11:56:51 ----N---- C:\WINDOWS\System32\ddraw.dll
2009-11-08 11:56:51 ----N---- C:\WINDOWS\System32\ddeshare.exe
2009-11-08 11:56:51 ----N---- C:\WINDOWS\System32\ddeml.dll
2009-11-08 11:56:51 ----N---- C:\WINDOWS\System32\dcomcnfg.exe
2009-11-08 11:56:51 ----N---- C:\WINDOWS\System32\dciman32.dll
2009-11-08 11:56:51 ----N---- C:\WINDOWS\System32\dbnmpntw.dll
2009-11-08 11:56:51 ----N---- C:\WINDOWS\System32\dbnetlib.dll
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\dpnhupnp.dll
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\dpnhpast.dll
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\dpnet.dll
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\dpnaddr.dll
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\dpmodemx.dll
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\dplayx.dll
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\dplaysvr.exe
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\diantz.exe
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\diactfrm.dll
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\dhcpsapi.dll
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\dhcpmon.dll
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\dhcpcsvc.dll
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\dgsetup.dll
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\dgrpsetu.dll
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\dgnet.dll
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\dfsshlex.dll
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\dfshim.dll
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\dfrgui.dll
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\dfrgsnap.dll
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\dfrgres.dll
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\dfrgntfs.exe
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\dfrgfat.exe
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\dfrg.msc
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\devmgr.dll
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\devenum.dll
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\desktop.ini
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\deskperf.dll
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\deskmon.dll
2009-11-08 11:56:50 ----N---- C:\WINDOWS\System32\deskadp.dll
2009-11-08 11:56:50 ----D---- C:\WINDOWS\System32\dhcp
2009-11-08 11:56:49 ----N---- C:\WINDOWS\System32\dpwsockx.dll
2009-11-08 11:56:49 ----N---- C:\WINDOWS\System32\dpwsock.dll
2009-11-08 11:56:49 ----N---- C:\WINDOWS\System32\dpvvox.dll
2009-11-08 11:56:49 ----N---- C:\WINDOWS\System32\dpvsetup.exe
2009-11-08 11:56:49 ----N---- C:\WINDOWS\System32\dpvoice.dll
2009-11-08 11:56:49 ----N---- C:\WINDOWS\System32\dpvacm.dll
2009-11-08 11:56:49 ----N---- C:\WINDOWS\System32\dpserial.dll
2009-11-08 11:56:49 ----N---- C:\WINDOWS\System32\dpnwsock.dll
2009-11-08 11:56:49 ----N---- C:\WINDOWS\System32\dpnsvr.exe
2009-11-08 11:56:49 ----N---- C:\WINDOWS\System32\dpnmodem.dll
2009-11-08 11:56:49 ----N---- C:\WINDOWS\System32\dpnlobby.dll
2009-11-08 11:56:36 ----N---- C:\WINDOWS\System32\dx3j.dll
2009-11-08 11:56:36 ----N---- C:\WINDOWS\System32\drmv2clt.dll
2009-11-08 11:56:36 ----N---- C:\WINDOWS\System32\drmstor.dll
2009-11-08 11:56:36 ----N---- C:\WINDOWS\System32\drmclien.dll
2009-11-08 11:56:36 ----D---- C:\WINDOWS\System32\drivers
2009-11-08 11:56:35 ----N---- C:\WINDOWS\System32\ersvc.dll
2009-11-08 11:56:35 ----N---- C:\WINDOWS\System32\EqnClass.Dll
2009-11-08 11:56:35 ----N---- C:\WINDOWS\System32\ENCDNET.DLL
2009-11-08 11:56:35 ----N---- C:\WINDOWS\System32\encdec.dll
2009-11-08 11:56:35 ----N---- C:\WINDOWS\System32\encapi.dll
2009-11-08 11:56:35 ----N---- C:\WINDOWS\System32\els.dll
2009-11-08 11:56:35 ----N---- C:\WINDOWS\System32\edlin.exe
2009-11-08 11:56:35 ----N---- C:\WINDOWS\System32\edit.com
2009-11-08 11:56:35 ----N---- C:\WINDOWS\System32\DXTRANS.DLL
2009-11-08 11:56:35 ----N---- C:\WINDOWS\System32\DXTMSFT.DLL
2009-11-08 11:56:35 ----N---- C:\WINDOWS\System32\dxmrtp.dll
2009-11-08 11:56:35 ----N---- C:\WINDOWS\System32\dxmasf.dll
2009-11-08 11:56:35 ----N---- C:\WINDOWS\System32\dxdllreg.exe
2009-11-08 11:56:35 ----N---- C:\WINDOWS\System32\dxdiagn.dll
2009-11-08 11:56:35 ----N---- C:\WINDOWS\System32\dxdiag.exe
2009-11-08 11:56:35 ----N---- C:\WINDOWS\System32\dx8vb.dll
2009-11-08 11:56:35 ----N---- C:\WINDOWS\System32\dx7vb.dll
2009-11-08 11:56:34 ----N---- C:\WINDOWS\System32\faultrep.dll
2009-11-08 11:56:34 ----N---- C:\WINDOWS\System32\fastopen.exe
2009-11-08 11:56:34 ----N---- C:\WINDOWS\System32\exts.dll
2009-11-08 11:56:34 ----N---- C:\WINDOWS\System32\extrac32.exe
2009-11-08 11:56:34 ----N---- C:\WINDOWS\System32\expsrv.dll
2009-11-08 11:56:34 ----N---- C:\WINDOWS\System32\expat.dll
2009-11-08 11:56:34 ----N---- C:\WINDOWS\System32\expand.exe
2009-11-08 11:56:34 ----N---- C:\WINDOWS\System32\exe2bin.exe
2009-11-08 11:56:34 ----N---- C:\WINDOWS\System32\eventvwr.msc
2009-11-08 11:56:34 ----N---- C:\WINDOWS\System32\eventvwr.exe
2009-11-08 11:56:34 ----N---- C:\WINDOWS\System32\eventlog.dll
2009-11-08 11:56:34 ----N---- C:\WINDOWS\System32\eventcls.dll
2009-11-08 11:56:34 ----N---- C:\WINDOWS\System32\eudcedit.exe
2009-11-08 11:56:34 ----N---- C:\WINDOWS\System32\esentutl.exe
2009-11-08 11:56:34 ----N---- C:\WINDOWS\System32\esentprf.ini
2009-11-08 11:56:34 ----N---- C:\WINDOWS\System32\esentprf.dll
2009-11-08 11:56:34 ----N---- C:\WINDOWS\System32\esent97.dll
2009-11-08 11:56:34 ----N---- C:\WINDOWS\System32\esent.dll
2009-11-08 11:56:34 ----N---- C:\WINDOWS\System32\es.dll
2009-11-08 11:56:34 ----D---- C:\WINDOWS\System32\export
2009-11-08 11:56:33 ----N---- C:\WINDOWS\System32\mmcshext.dll
2009-11-08 11:56:33 ----N---- C:\WINDOWS\System32\mmcndmgr.dll
2009-11-08 11:56:33 ----N---- C:\WINDOWS\System32\mmcbase.dll
2009-11-08 11:56:33 ----N---- C:\WINDOWS\System32\mmc.exe
2009-11-08 11:56:33 ----N---- C:\WINDOWS\System32\fontview.exe
2009-11-08 11:56:33 ----N---- C:\WINDOWS\System32\fontsub.dll
2009-11-08 11:56:33 ----N---- C:\WINDOWS\System32\fontext.dll
2009-11-08 11:56:33 ----N---- C:\WINDOWS\System32\fnfilter.dll
2009-11-08 11:56:33 ----N---- C:\WINDOWS\System32\fmifs.dll
2009-11-08 11:56:33 ----N---- C:\WINDOWS\System32\FM20FRA.DLL
2009-11-08 11:56:33 ----N---- C:\WINDOWS\System32\FM20.DLL
2009-11-08 11:56:33 ----N---- C:\WINDOWS\System32\fldrclnr.dll
2009-11-08 11:56:33 ----N---- C:\WINDOWS\System32\fixmapi.exe
2009-11-08 11:56:33 ----N---- C:\WINDOWS\System32\finger.exe
2009-11-08 11:56:33 ----N---- C:\WINDOWS\System32\findstr.exe
2009-11-08 11:56:33 ----N---- C:\WINDOWS\System32\find.exe
2009-11-08 11:56:33 ----N---- C:\WINDOWS\System32\filemgmt.dll
2009-11-08 11:56:33 ----N---- C:\WINDOWS\System32\feclient.dll
2009-11-08 11:56:33 ----N---- C:\WINDOWS\System32\fdsv.exe
2009-11-08 11:56:33 ----N---- C:\WINDOWS\System32\FdfTk.dll
2009-11-08 11:56:33 ----N---- C:\WINDOWS\System32\fc.exe
2009-11-08 11:56:32 ----N---- C:\WINDOWS\System32\mountvol.exe
2009-11-08 11:56:32 ----N---- C:\WINDOWS\System32\moricons.dll
2009-11-08 11:56:32 ----N---- C:\WINDOWS\System32\more.com
2009-11-08 11:56:32 ----N---- C:\WINDOWS\System32\modex.dll
2009-11-08 11:56:32 ----N---- C:\WINDOWS\System32\modemui.dll
2009-11-08 11:56:32 ----N---- C:\WINDOWS\System32\mode.com
2009-11-08 11:56:32 ----N---- C:\WINDOWS\System32\mobsync.exe
2009-11-08 11:56:32 ----N---- C:\WINDOWS\System32\mobsync.dll
2009-11-08 11:56:32 ----N---- C:\WINDOWS\System32\mnmsrvc.exe
2009-11-08 11:56:32 ----N---- C:\WINDOWS\System32\mnmdd.dll
2009-11-08 11:56:32 ----N---- C:\WINDOWS\System32\mmutilse.dll
2009-11-08 11:56:32 ----N---- C:\WINDOWS\System32\mmsystem.dll
2009-11-08 11:56:32 ----N---- C:\WINDOWS\System32\mmfutil.dll
2009-11-08 11:56:32 ----N---- C:\WINDOWS\System32\mmdrv.dll
2009-11-08 11:56:32 ----N---- C:\WINDOWS\System32\iassvcs.dll
2009-11-08 11:56:32 ----N---- C:\WINDOWS\System32\iassdo.dll
2009-11-08 11:56:32 ----N---- C:\WINDOWS\System32\iassam.dll
2009-11-08 11:56:32 ----N---- C:\WINDOWS\System32\iasrecst.dll
2009-11-08 11:56:32 ----N---- C:\WINDOWS\System32\iasrad.dll
2009-11-08 11:56:32 ----N---- C:\WINDOWS\System32\iaspolcy.dll
2009-11-08 11:56:32 ----N---- C:\WINDOWS\System32\iasnap.dll
2009-11-08 11:56:32 ----N---- C:\WINDOWS\System32\iashlpr.dll
2009-11-08 11:56:32 ----N---- C:\WINDOWS\System32\iasads.dll
2009-11-08 11:56:32 ----N---- C:\WINDOWS\System32\iasacct.dll
2009-11-08 11:56:31 ----N---- C:\WINDOWS\System32\ifsutil.dll
2009-11-08 11:56:31 ----N---- C:\WINDOWS\System32\ifmon.dll
2009-11-08 11:56:31 ----N---- C:\WINDOWS\System32\iexpress.exe
2009-11-08 11:56:31 ----N---- C:\WINDOWS\System32\iesetup.dll
2009-11-08 11:56:31 ----N---- C:\WINDOWS\System32\iernonce.dll
2009-11-08 11:56:31 ----N---- C:\WINDOWS\System32\IEPEERS.DLL
2009-11-08 11:56:31 ----N---- C:\WINDOWS\System32\iedkcs32.dll
2009-11-08 11:56:31 ----N---- C:\WINDOWS\System32\ieakui.dll
2009-11-08 11:56:31 ----N---- C:\WINDOWS\System32\ieaksie.dll
2009-11-08 11:56:31 ----N---- C:\WINDOWS\System32\ieakeng.dll
2009-11-08 11:56:31 ----N---- C:\WINDOWS\System32\ie4uinit.exe
2009-11-08 11:56:31 ----N---- C:\WINDOWS\System32\idq.dll
2009-11-08 11:56:31 ----N---- C:\WINDOWS\System32\icwphbk.dll
2009-11-08 11:56:31 ----N---- C:\WINDOWS\System32\icwdial.dll
2009-11-08 11:56:31 ----N---- C:\WINDOWS\System32\iconv-1.3.dll
2009-11-08 11:56:31 ----N---- C:\WINDOWS\Sys

Bonjour

D'abord merci pour ton travail et ta patience

Voici le rapport MBAM

Malwarebytes' Anti-Malware 1.41
Version de la base de données: 3131
Windows 5.1.2600 Service Pack 1

09/11/2009 09:11:26
mbam-log-2009-11-09 (09-11-26).txt

Type de recherche: Examen rapide
Eléments examinés: 168498
Temps écoulé: 16 minute(s), 30 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 20
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 2

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\Interface\{00ada225-ea6c-4fb3-82e8-68189201ccb9} (Adware.Winad) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{03b800f9-2536-4441-8cda-2a3e6d15b4f8} (Adware.ISTBar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{dfbcc1eb-b149-487e-80c1-cc1562021542} (Adware.ISTBar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\{735c5a0c-f79f-47a1-8ca1-2a2e482662a8} (Adware.Winad) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{86227d9c-0efe-4f8a-aa55-30386a3f5686} (Adware.ISTBar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{1e5f0d38-214b-4085-ad2a-d2290e6a2d2c} (Adware.MediaAccess) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{4ee12b71-aa5e-45ec-8666-2db3ad3fdf44} (Adware.ISTBar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{15696ae2-6ea4-47f4-bea6-a3d32693efc7} (Adware.Winad) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\CWINDOWS/Downloaded Program Files/PiratePoppers.1.0.0.39.dll (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{38d97cce-7243-4b6e-b6a8-dd872ad3eb33} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{6868afe5-f258-47dc-bc37-0821f96dc1d2} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{49e67060-2c0d-415e-94c7-52a49f73b2f1} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{49e67060-2c0d-415e-94c7-52a49f73b2f1} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\LoaderX.exe (Adware.Winad) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\popcaploader.popcaploaderctrl2 (Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\popcaploader.popcaploaderctrl2.1 (Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affltid (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\xpre (Trojan.Downloader) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.39.dll (Trojan.Agent) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.39.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.39.inf (Trojan.Agent) -> Quarantined and deleted successfully.


Merci

Bonjour

je n'arrive pas à télécharger java (impossible de trouver le serveur)

quel version d'adobe reader faut il prendre

Merci

ok pour java

pour la maj adobe, j'ai trouve ça :
http://www.adobe.com/support/downl [...] rm=Windows


Version 9.1.3
Name Size Date
Adobe Reader 9.1.3 update - Multiple Languages 1.6MB 7/31/2009
Version 9.2
Adobe Reader MUI 9.2 Update - Multiple Languages 22.01MB 10/13/2009

pourquoi la 9.1.3 fait 1.6MB et la 9.2 fait 22MB

c'est pour xp SP2
je suis en sp1

est ce obligatoire ?

je sais
mais ma connexion est trop lente, pour télécharger SP2

Pour être plus sécurisé il faudrait que je le fasse

En attendant est ce que mon pc est à peu près propre ?

Je n'ai plus le message avast

ok

j'ai tout supprimé

plus de message avast

Merci pour tout

je ne vois pas de desinstalleur de hijackthis
je ne trouve pas de logiciel hijackthis dans "ajouter ou supprimer des programmes"

Voici le rapport de ToolsCleaner2
[ Rapport ToolsCleaner version 2.3.11 (par A.Rothstein & dj QUIOU) ]

--> Recherche:

C:\GenProc: trouvé !
C:\Rsit: trouvé !
C:\Documents and Settings\Administrateur\Bureau\ComboFix.exe: trouvé !
C:\Documents and Settings\All Users\Documents\hijackthis.log: trouvé !
C:\Documents and Settings\Arnaud\Bureau\alureon\HijackThis.exe: trouvé !
C:\Documents and Settings\Arnaud\Bureau\alureon\ToolBarSD.exe: trouvé !
C:\Documents and Settings\Arnaud\Bureau\alureon\hijackthis.log: trouvé !
C:\Documents and Settings\Arnaud\Bureau\alureon\Rsit.exe: trouvé !
C:\Documents and Settings\Arnaud\Bureau\alureon\Genproc.exe: trouvé !
C:\Documents and Settings\Arnaud\Bureau\alureon\Genproc - Raccourci.lnk: trouvé !
C:\GenProc\Genproc.exe: trouvé !
C:\GenProc\Outil\mbr.exe: trouvé !
C:\GenProc\Page\GenProc

• .html: trouvé !

C:\Nettoyage virus\Clean.zip: trouvé !
C:\Nettoyage virus\VirtumundoBeGone.exe: trouvé !
C:\Nettoyage virus\vundoFix.exe: trouvé !
C:\Nettoyage virus\SmitFraudFix.exe: trouvé !
C:\Nettoyage virus\SmitFraudfix: trouvé !

---------------------------------
--> Suppression:

C:\Documents and Settings\Administrateur\Bureau\ComboFix.exe: supprimé !
C:\Documents and Settings\Arnaud\Bureau\alureon\HijackThis.exe: supprimé !
C:\Documents and Settings\Arnaud\Bureau\alureon\ToolBarSD.exe: supprimé !
C:\Nettoyage virus\Clean.zip: supprimé !
C:\Nettoyage virus\VirtumundoBeGone.exe: supprimé !
C:\Nettoyage virus\vundoFix.exe: supprimé !
C:\Nettoyage virus\SmitFraudFix.exe: supprimé !
C:\Documents and Settings\All Users\Documents\hijackthis.log: supprimé !
C:\Documents and Settings\Arnaud\Bureau\alureon\hijackthis.log: supprimé !
C:\Documents and Settings\Arnaud\Bureau\alureon\Rsit.exe: supprimé !
C:\Documents and Settings\Arnaud\Bureau\alureon\Genproc.exe: supprimé !
C:\Documents and Settings\Arnaud\Bureau\alureon\Genproc - Raccourci.lnk: supprimé !
C:\GenProc\Genproc.exe: supprimé !
C:\GenProc\Outil\mbr.exe: supprimé !
C:\GenProc\Page\GenProc

• .html: ERREUR DE SUPPRESSION !!

C:\GenProc: supprimé !
C:\Rsit: supprimé !
C:\Nettoyage virus\SmitFraudfix: supprimé !

ok
super travail
merci pour tout
Bon courage pour la suite