Windows security alert
Dernière réponse : dans Sécurité
Bonjour,
Depuis hier j'ai des fenêtres security center alert qui s'ouvre toutes les minutes stipulant que m'on pc est infecté et que je doit télécharger Malware Defense.
Je croi que je ne suis pas un cas isolé...
je suis un néophyte en informatique
Je suis désespéré et je serais éternellement reconnaissant à celui qui m'aidera.
HELP ME PLEASE
Merci d'avance
j'ai lancé RSIT et j'obtient .
log-bloc note :
Logfile of random's system information tool 1.06 (written by random/random)
Run by Administrateur at 2009-12-24 18:10:54
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 18 GB (12%) free of 153 GB
Total RAM: 1535 MB (63% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:11:11, on 24/12/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16945)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\EoRezo\EoEngine.exe
C:\WINDOWS\system32\rundll32.exe
C:\Documents and Settings\Administrateur\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
C:\Program Files\Microsoft LifeChat\LifeChat.exe
C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe
C:\XTREME~1\wh_exec.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\RomStation\RomStation.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\richtx64.exe
C:\Program Files\Malware Defense\mdefense.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wscsvc32.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\RSIT.exe
C:\Program Files\Internet Explorer\Iexplore.exe
C:\Program Files\trend micro\Administrateur.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.ke.voila.fr/S/voila?kw=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://y.lo.st
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://y.lo.st
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll (file missing)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Multi_Media_France toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMult.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: EoBHO - {C7B76B90-3455-4AE6-A752-EAC4D19689E5} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Multi_Media_France toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMult.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: SYSTRAN Toolbar - {95daa571-4def-4a6d-97d8-98a346672a24} - mscoree.dll (file missing)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\EoRezo\EoEngine.exe"
O4 - HKLM\..\Run: [SoftwareHelper] C:\Documents and Settings\Administrateur\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [LifeChat] "C:\Program Files\Microsoft LifeChat\LifeChat.exe"
O4 - HKLM\..\Run: [WindowsLivePhone] C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe /AutoRun
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKLM\..\Run: [WheelMouse] C:\XTREME~1\wh_exec.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MealRdr] C:\DOCUME~1\ADMINI~1\APPLIC~1\16ISOW~1\Dale Eggs.exe
O4 - HKCU\..\Run: [EPSON Stylus DX6000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBIE.EXE /FU "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\E_SE6.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [WindowsLivePhone] "C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe" /AutoRun
O4 - HKCU\..\Run: [RomStation] "C:\Program Files\RomStation\RomStation.exe" /background
O4 - HKCU\..\Run: [richtx64.exe] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\richtx64.exe
O4 - HKCU\..\Run: [Malware Defense] "C:\Program Files\Malware Defense\mdefense.exe" -noscan
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Consulter les dictionnaires (SYSTRAN) - res://C:\Program Files\SYSTRAN\6\\GUIres.dll/lookup.js
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Traduire (SYSTRAN) - res://C:\Program Files\SYSTRAN\6\\GUIres.dll/translate.js
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {9DF1C00D-8426-4337-972C-DC042D19A916} (FTMediaPlayer Class) - http://webtv.guidetv.orange.fr/resources/OCS_8971.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = domvelocar.local
O17 - HKLM\Software\..\Telephony: DomainName = domvelocar.local
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = domvelocar.local
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = domvelocar.local
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: Service Google Update (gupdate1ca19b16c1c692c) (gupdate1ca19b16c1c692c) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
--
End of file - 11602 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\BD4240DE9E8DF182.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - c:\program files\real\realplayer\rpbrowserrecordplugin.dll [2009-10-06 329312]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7009fcd4-05be-44f4-9583-93fe419ab7b0}]
Multi_Media_France toolbar - C:\Program Files\Multi_Media_France\tbMult.dll [2007-06-18 1383448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-10 259696]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2009-11-13 764912]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}]
EoBHO Class - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll [2008-11-18 42792]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll [2009-04-29 470512]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
EpsonToolBandKicker Class - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7009fcd4-05be-44f4-9583-93fe419ab7b0} - Multi_Media_France toolbar - C:\Program Files\Multi_Media_France\tbMult.dll [2007-06-18 1383448]
{EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-10 259696]
{95daa571-4def-4a6d-97d8-98a346672a24} - SYSTRAN Toolbar - C:\WINDOWS\system32\mscoree.dll [2006-12-22 271360]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\System32\NvCpl.dll [2006-03-09 7561216]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe [2008-06-10 144784]
"NeroFilterCheck"=C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe [2007-03-01 153136]
"NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2007-12-03 2213160]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2008-09-06 413696]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-09-10 289576]
"nwiz"=nwiz.exe /install []
"EoEngine"=C:\Program Files\EoRezo\EoEngine.exe [2009-02-23 472872]
"SoftwareHelper"=C:\Documents and Settings\Administrateur\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe [2008-12-09 368224]
"nod32kui"=C:\Program Files\Eset\nod32kui.exe [2009-12-23 917504]
"LifeChat"=C:\Program Files\Microsoft LifeChat\LifeChat.exe [2008-08-21 267296]
"WindowsLivePhone"=C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe [2008-12-22 787816]
"ISUSPM"=C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe [2006-03-20 213936]
"WheelMouse"=C:\XTREME~1\wh_exec.exe [2008-10-08 98304]
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2009-10-06 198160]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"Adobe ARM"=C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe []
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Tok-Cirrhatus"= []
"MealRdr"=C:\DOCUME~1\ADMINI~1\APPLIC~1\16ISOW~1\Dale Eggs.exe []
"EPSON Stylus DX6000 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBIE.EXE [2006-09-22 139264]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-03-28 68856]
"WindowsLivePhone"=C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe [2008-12-22 787816]
"RomStation"=C:\Program Files\RomStation\RomStation.exe [2009-12-17 949760]
"richtx64.exe"=C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\richtx64.exe [2009-12-23 675840]
"Malware Defense"=C:\Program Files\Malware Defense\mdefense.exe [2009-12-24 1756088]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2008-09-05 267304]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{54D9498B-CF93-414F-8984-8CE7FDE0D391}"=C:\Program Files\ewido anti-malware\shellhook.dll [2004-09-30 39488]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0
"DisableCMD"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=0
"NoBandCustomize"=0
"NoFolderOptions"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3273351f-2de3-11dc-84b0-001109404d44}]
shell\AutoRun\command - F:\InstallTomTomHOME.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{793f8543-f0af-11da-8435-806d6172696f}]
shell\AutoRun\command - E:\INSTALL.EXE
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e8299287-9763-11dc-84e1-001109404d44}]
shell\Auto\command - AdobeR.exe e
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e
======File associations======
.scr - open - C:\Program Files\VCW VicMan's Photo Editor\vcwphoto.exe %1
.scr - install -
.scr - config -
======List of files/folders created in the last 1 months======
2009-12-24 18:10:55 ----D---- C:\Program Files\trend micro
2009-12-24 18:10:54 ----D---- C:\rsit
2009-12-24 08:28:28 ----D---- C:\Program Files\Malware Defense
2009-12-24 04:40:30 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-12-24 04:40:30 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-12-23 07:22:34 ----A---- C:\WINDOWS\system32\krl32mainweq.dll
2009-12-23 07:18:21 ----A---- C:\Documents and Settings\All Users\Application Data\sysReserve.ini
2009-12-22 11:14:22 ----A---- C:\WINDOWS\W3DemoUnin.exe
2009-12-21 07:59:15 ----D---- C:\WINDOWS\Cache
2009-12-20 17:28:40 ----D---- C:\Documents and Settings\Administrateur\Application Data\Help
2009-12-20 17:16:20 ----RA---- C:\WINDOWS\system32\MpvpxX86.dll
2009-12-20 17:16:20 ----RA---- C:\WINDOWS\system32\MpvpxSSE.dll
2009-12-20 17:16:19 ----RA---- C:\WINDOWS\system32\MpvpxMMX.dll
2009-12-20 17:16:16 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2009-12-20 17:10:39 ----D---- C:\Program Files\Digital Photo Navigator 1.0
2009-12-20 17:09:02 ----N---- C:\WINDOWS\system32\WNASPI32.DLL
2009-12-20 17:09:02 ----D---- C:\MWASPI
2009-12-20 17:09:02 ----A---- C:\WINDOWS\msfsetup.ini
2009-12-20 17:06:54 ----D---- C:\Program Files\PIXELA
2009-12-19 11:57:07 ----SHD---- C:\Documents and Settings\All Users\Application Data\SecuROM
2009-12-18 11:27:17 ----D---- C:\Program Files\Nouveau dossier
2009-12-18 10:05:34 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2009-12-18 10:05:34 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2009-12-18 10:05:33 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2009-12-18 10:05:32 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2009-12-18 10:05:32 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2009-12-18 10:05:32 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2009-12-18 10:05:31 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2009-12-18 10:05:30 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2009-12-18 10:05:30 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2009-12-18 10:05:30 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2009-12-18 10:05:29 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2009-12-18 10:05:29 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2009-12-18 10:05:28 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2009-12-18 10:05:27 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2009-12-18 10:05:27 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2009-12-18 10:05:27 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2009-12-18 10:05:26 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2009-12-18 10:05:24 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2009-12-18 10:05:24 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2009-12-18 10:05:24 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2009-12-18 10:05:23 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2009-12-18 10:05:23 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2009-12-18 10:05:23 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2009-12-18 10:05:22 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2009-12-18 10:05:21 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2009-12-18 10:05:21 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2009-12-18 10:05:21 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2009-12-18 10:05:20 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2009-12-18 10:05:19 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2009-12-18 10:05:19 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2009-12-18 10:05:18 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2009-12-18 10:05:18 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2009-12-18 10:05:17 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2009-12-18 10:05:16 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2009-12-18 10:05:15 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2009-12-18 10:05:14 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2009-12-18 10:05:13 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2009-12-18 10:05:12 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2009-12-18 10:05:12 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2009-12-18 10:05:11 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2009-12-18 10:05:10 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2009-12-18 10:05:10 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2009-12-18 10:05:09 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2009-12-18 10:05:09 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2009-12-18 10:05:08 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2009-12-18 10:05:07 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2009-12-18 10:05:04 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2009-12-18 10:04:57 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2009-12-18 10:04:57 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2009-12-18 10:04:48 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2009-12-18 10:04:48 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2009-12-18 10:04:47 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2009-12-18 10:04:46 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2009-12-18 10:04:46 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2009-12-18 10:04:46 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2009-12-18 10:04:45 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2009-12-18 10:04:45 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2009-12-18 10:04:45 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2009-12-18 10:04:45 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2009-12-18 10:04:44 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2009-12-18 10:04:35 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2009-12-18 10:04:35 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2009-12-18 10:04:34 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2009-12-18 10:04:33 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2009-12-18 10:04:32 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2009-12-18 10:04:32 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2009-12-18 10:04:31 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2009-12-18 10:04:31 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2009-12-18 10:04:16 ----D---- C:\WINDOWS\Logs
2009-12-18 10:04:08 ----D---- C:\Program Files\DIFX
2009-12-18 10:03:30 ----D---- C:\WINDOWS\system32\AGEIA
2009-12-18 10:03:28 ----D---- C:\Program Files\AGEIA Technologies
2009-12-18 10:03:05 ----D---- C:\Program Files\Fichiers communs\Wise Installation Wizard
2009-12-18 09:34:54 ----D---- C:\Program Files\Borderland
2009-12-15 20:45:20 ----SHD---- C:\Config.Msi
2009-12-15 00:29:30 ----D---- C:\Program Files\CCleaner
2009-12-15 00:02:05 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2009-12-09 13:06:36 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2009-12-09 13:06:21 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2009-12-09 13:05:38 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2009-12-09 13:03:52 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2009-12-09 13:03:35 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2009-11-25 13:03:10 ----HDC---- C:\WINDOWS\$NtUninstallKB976098-v2$
2009-11-25 13:02:40 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
======List of files/folders modified in the last 1 months======
2009-12-24 18:11:00 ----D---- C:\WINDOWS
2009-12-24 18:10:55 ----RD---- C:\Program Files
2009-12-24 17:55:13 ----D---- C:\Documents and Settings\Administrateur\Application Data\EoRezo
2009-12-24 17:54:48 ----D---- C:\Program Files\Mozilla Firefox
2009-12-24 17:53:38 ----D---- C:\WINDOWS\Temp
2009-12-24 17:53:38 ----D---- C:\WINDOWS\system32
2009-12-24 17:52:48 ----D---- C:\Program Files\EoRezo
2009-12-24 17:52:32 ----SHD---- C:\WINDOWS\CSC
2009-12-24 17:52:32 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-12-24 04:40:31 ----D---- C:\WINDOWS\system32\drivers
2009-12-24 03:57:04 ----D---- C:\WINDOWS\Prefetch
2009-12-23 22:24:54 ----D---- C:\Program Files\Atmosphere Deluxe
2009-12-23 22:18:48 ----D---- C:\Program Files\Eset
2009-12-23 22:14:48 ----A---- C:\WINDOWS\system32\imon.dll
2009-12-23 08:39:31 ----D---- C:\Documents and Settings\Administrateur\Application Data\uTorrent
2009-12-22 11:14:37 ----D---- C:\WINDOWS\system32\CatRoot2
2009-12-22 11:14:23 ----D---- C:\Program Files\Warcraft III Demo
2009-12-21 08:07:38 ----D---- C:\Program Files\VCW VicMan's Photo Editor
2009-12-21 07:04:22 ----D---- C:\WINDOWS\security
2009-12-20 19:35:09 ----A---- C:\WINDOWS\NeroDigital.ini
2009-12-20 19:00:39 ----HD---- C:\WINDOWS\inf
2009-12-20 19:00:37 ----D---- C:\Program Files\Movie Maker
2009-12-20 17:17:23 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-12-20 17:16:50 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-12-20 17:10:39 ----HD---- C:\Program Files\InstallShield Installation Information
2009-12-20 17:09:02 ----D---- C:\WINDOWS\system
2009-12-20 11:08:12 ----D---- C:\telechargement reload paradise
2009-12-19 13:00:23 ----SHD---- C:\WINDOWS\Installer
2009-12-19 13:00:23 ----D---- C:\WINDOWS\WinSxS
2009-12-19 11:33:18 ----D---- C:\WINDOWS\system32\DirectX
2009-12-19 11:32:08 ----RSH---- C:\boot.ini
2009-12-18 10:04:36 ----D---- C:\WINDOWS\Microsoft.NET
2009-12-18 10:04:06 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-12-18 10:03:05 ----D---- C:\Program Files\Fichiers communs
2009-12-15 20:46:37 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-12-15 20:46:35 ----SD---- C:\WINDOWS\Tasks
2009-12-15 07:43:27 ----D---- C:\Program Files\ewido anti-malware
2009-12-15 07:42:51 ----D---- C:\WINDOWS\Minidump
2009-12-15 07:42:51 ----D---- C:\WINDOWS\Debug
2009-12-15 01:01:17 ----D---- C:\Documents and Settings\Administrateur\Application Data\16ISOWARN
2009-12-14 23:58:51 ----D---- C:\Program Files\eMule
2009-12-09 13:06:12 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2009-12-09 13:05:37 ----HD---- C:\WINDOWS\$hf_mig$
2009-12-09 13:05:13 ----D---- C:\WINDOWS\system32\fr-fr
2009-12-09 13:05:13 ----D---- C:\Program Files\Internet Explorer
2009-12-09 13:04:54 ----D---- C:\WINDOWS\ie7updates
2009-12-07 20:00:31 ----D---- C:\Program Files\RomStation
2009-12-01 21:06:19 ----A---- C:\WINDOWS\system32\MRT.exe
2009-11-28 08:47:52 ----AC---- C:\WINDOWS\ODBC.INI
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 AmdK7;Pilote de processeur AMD K7; C:\WINDOWS\System32\DRIVERS\amdk7.sys [2008-04-14 41856]
R1 ewido security suite driver;ewido security suite driver; \??\C:\Program Files\ewido anti-malware\guard.sys []
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2002-08-30 12032]
R2 AMON;AMON; \??\C:\WINDOWS\system32\drivers\amon.sys []
R2 hardlock;hardlock; \??\C:\WINDOWS\system32\drivers\hardlock.sys []
R2 hardlock;hardlock; \??\C:\WINDOWS\system32\drivers\hardlock.sys []
R2 Haspnt;Haspnt; \??\C:\WINDOWS\system32\drivers\Haspnt.sys []
R2 MASPINT;MASPINT; C:\WINDOWS\system32\drivers\MASPINT.sys [2000-03-29 8096]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2006-05-19 4007552]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 FETND5BV;VIA Rhine-Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\System32\DRIVERS\fetnd5bv.sys [2005-11-16 42496]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2008-04-17 15464]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 Mtlmnt5;Mtlmnt5; C:\WINDOWS\System32\DRIVERS\Mtlmnt5.sys [2004-04-01 126686]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2006-03-09 3650368]
R3 Slntamr;Smart Link 56K Modem Driver; C:\WINDOWS\System32\DRIVERS\slntamr.sys [2004-04-01 404990]
R3 SlWdmSup;SlWdmSup; C:\WINDOWS\System32\DRIVERS\SlWdmSup.sys [2004-01-28 13240]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbscan;Pilote de scanneur USB; C:\WINDOWS\System32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 whfltr2k;WheelMouse USB Lower Filter Driver; C:\WINDOWS\system32\DRIVERS\whfltr2k.sys [2007-01-25 6784]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 FETNDIS;Pilote NT de carte VIA PCI 10/100Mo Fast Ethernet; C:\WINDOWS\System32\DRIVERS\fetnd5.sys [2001-08-17 27165]
S3 MSTEE;Convertisseur en T/site-à -site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 Mtlstrm;Mtlstrm; C:\WINDOWS\System32\DRIVERS\Mtlstrm.sys [2004-01-28 1309184]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NtMtlFax;NtMtlFax; C:\WINDOWS\System32\DRIVERS\NtMtlFax.sys [2004-01-28 180360]
S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCAMPR5.SYS []
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []
S3 PIXMC10;JVC Communication PIX-MC10 Driver; C:\WINDOWS\System32\Drivers\pixmc10c.sys [2002-09-27 31232]
S3 PIXMC10A;JVC PIX-MC10 Audio Capture; C:\WINDOWS\System32\Drivers\pixmc10a.sys [2002-10-04 28060]
S3 PIXMC10V;JVC PIX-MC10 Video Capture; C:\WINDOWS\System32\Drivers\pixmc10v.sys [2002-11-28 22652]
S3 SIWIO;SIWIO; \??\C:\WINDOWS\TEMP\SiwIo.sys []
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SlNtHal;SlNtHal; C:\WINDOWS\System32\DRIVERS\Slnthal.sys [2004-01-28 95424]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 EPSONStatusAgent2;EPSON Printer Status Agent2; C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe [2001-08-09 90112]
R2 ewido security suite control;ewido security suite control; C:\Program Files\ewido anti-malware\ewidoctrl.exe [2005-11-30 13888]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe [2006-10-19 61440]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2007-12-03 869672]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\System32\nvsvc32.exe [2006-03-09 143436]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 SLService;SmartLinkService; C:\WINDOWS\system32\slserv.exe [2004-01-08 73796]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2008-09-10 536872]
S2 gupdate1ca19b16c1c692c;Service Google Update (gupdate1ca19b16c1c692c); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-08-10 133104]
S2 NOD32krn;NOD32 Kernel Service; C:\Program Files\Eset\nod32krn.exe [2009-12-23 495616]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-29 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe [2007-12-13 447784]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S4 ewido security suite guard;ewido security suite guard; C:\Program Files\ewido anti-malware\ewidoguard.exe [2005-12-18 151616]
-----------------EOF-----------------
info-bloc note :
info.txt logfile of random's system information tool 1.06 2009-12-24 18:11:14
======Uninstall list======
-->C:\Program Files\Nero\Nero8\\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
-->C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
-->C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->C:\WINDOWS\UNRecode.exe /UNINSTALL
-->MsiExec /X{D56B0E27-4A3E-46C9-B5C1-D93D580C099C}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Acrobat 4.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 4.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 4.0\NT\Uninst.dll"
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 9.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A92000000001}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
Camera RAW Plug-In for EPSON Creativity Suite-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8DAC1AE4-33D1-4A78-8A42-00E09EDECC3E}\SETUP.EXE" -l0x40c UNINST
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB976098-v2)-->"C:\WINDOWS\$NtUninstallKB976098-v2$\spuninst\spuninst.exe"
Digital Photo Navigator 1.0-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B7EF4BD8-CA13-11D5-AE3D-005004B8E30C}\setup.exe" -l0x9
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Plus DirectShow Filters-->C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
DVD Decoder Pak for Windows XP-->MsiExec.exe /X{92C5DB3D-9D6F-4324-BB11-57825F4C2635}
eDrawings 2005-->MsiExec.exe /I{97917FA0-00C5-4351-AD6B-87AB99C52792}
eMule-->"C:\Program Files\eMule\Uninstall.exe"
eoEngine 9.1-->"C:\Program Files\EoRezo\unins000.exe"
EPSON Attach To Email-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{20C45B32-5AB6-46A4-94EF-58950CAF05E5} /l1033 ADDREMOVEDLG
EPSON Copy Utility 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67EDD823-135A-4D59-87BD-950616D6E857}\SETUP.EXE" -l0x40c -UnInstall
EPSON Easy Photo Print-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B66E665A-DF96-4C38-9422-C7F74BC1B4E5}\SETUP.EXE" -l0x40c UNINST
EPSON File Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2EB81825-E9EE-44F4-8F51-1240C3898DC6}\Setup.exe" -l0x40c UNINST
EPSON Logiciel imprimante-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
EPSON Scan Assistant-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}\Setup.exe" -l0x40c -u
EPSON Scan-->C:\Program Files\epson\escndv\setup\setup.exe /r
EPSON SMART PANEL for Scanner-->C:\WINDOWS\unin040c.exe -f"C:\Program Files\EPSON\EPSON SMART PANEL for Scanner\DeIsL1.isu"
EPSON Web-To-Page-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}\SETUP.EXE" -l0x40c -anything
ESDX6000_CX5900 Guide util.-->C:\Program Files\EPSON\TPMANUAL\ESDX6000_CX5900\USE_G\DOCUNINS.EXE
ewido anti-malware-->C:\Program Files\ewido anti-malware\Uninstall.exe
Gaming Mouse-->"C:\Program Files\Gaming Mouse\uninstall.exe"
Gestionnaire de périphériques de Windows Live-->MsiExec.exe /X{6530EB5E-F2BE-45D3-906B-E4AFFF2D1588}
Google Chrome-->"C:\Program Files\Google\Chrome\Application\3.0.195.38\Installer\setup.exe" --uninstall --system-level
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_9DE96A29E721D90A.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
ImageMixer With VCD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5AA18C57-381C-4C99-8FE6-5EB1CB0A5BC0}\setup.exe"
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
iTunes-->MsiExec.exe /I{41B9E2CF-0B3F-442A-B5B3-592A4A355634}
IZArc 3.7-->"C:\Program Files\IZArc\unins000.exe"
Java(TM) 6 Update 4-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160040}
Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
Lame ACM MP3 Codec-->"C:\WINDOWS\IFinst26.exe" -UC:\Program Files\Lame MP3 Codec\IFU8.inf
Lame ACM MP3 Codec-->C:\WINDOWS\system32\rundll32.exe setupapi,InstallHinfSection Remove_LameMP3 132 C:\WINDOWS\INF\LameACM.inf
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Ludiclub.com-->C:\WINDOWS\system32\GKSUI20.EXE C:\Program Files\Ludiclub\UninstallC075.DAT
Malware Defense-->C:\Program Files\Malware Defense\Uninstall.exe
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft .NET Framework 1.1 Security Update (KB953297)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft LifeChat-->MsiExec.exe /X{66039B36-96AE-40D1-8A32-071F7A61B738}
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0015-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0019-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0044-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}
Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
Microsoft Office Outlook Connector-->MsiExec.exe /I{95120000-0122-040C-0000-0000000FF1CE}
Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office Professional Plus 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {14809F99-C601-4D4A-9391-F1E8FAA964C5}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9}
Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft Search Enhancement Pack-->MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
MicroStaff WINASPI-->C:\MWASPI\uninst.exe
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 8 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 9 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB969897)-->"C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB972260)-->"C:\WINDOWS\ie7updates\KB972260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB974455)-->"C:\WINDOWS\ie7updates\KB974455-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB976325)-->"C:\WINDOWS\ie7updates\KB976325-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB913433)-->C:\WINDOWS\System32\MacroMed\Flash\genuinst.exe C:\WINDOWS\System32\MacroMed\Flash\KB913433.inf
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970430)-->"C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971961)-->"C:\WINDOWS\$NtUninstallKB971961$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973904)-->"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 7 (KB976749)-->"C:\WINDOWS\ie7updates\KB976749-IE7\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB971737)-->"C:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB973687)-->"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
MKV To AVI With Subtitle version 1.0-->"C:\Program Files\mkvtoavis\unins000.exe"
Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Mozilla Firefox (3.5.6)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
Multi Media France Toolbar-->C:\PROGRA~1\MULTI_~1\UNWISE.EXE C:\PROGRA~1\MULTI_~1\INSTALL.LOG
Nero 8-->MsiExec.exe /X{5FCCD531-1B38-4A94-924C-127F722F1036}
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
NOD32 Antivirus System-->C:\Program Files\Eset\Setup\setup.exe /UNINSTALL
NOD32 FiX v1.9-->"C:\Program Files\Eset\unins000.exe"
NVIDIA Drivers-->C:\WINDOWS\System32\nvudisp.exe UninstallGUI
NVIDIA PhysX v8.10.29-->MsiExec.exe /X{D56B0E27-4A3E-46C9-B5C1-D93D580C099C}
OGA Notifier 2.0.0048.0-->MsiExec.exe /I{B2544A03-10D0-4E5E-BA69-0362FFC20D18}
OpenOffice.org Installer 1.0-->MsiExec.exe /X{3A2AF807-9F9F-43C9-A24A-17B617238B74}
Depuis hier j'ai des fenêtres security center alert qui s'ouvre toutes les minutes stipulant que m'on pc est infecté et que je doit télécharger Malware Defense.
Je croi que je ne suis pas un cas isolé...
je suis un néophyte en informatique
Je suis désespéré et je serais éternellement reconnaissant à celui qui m'aidera.
HELP ME PLEASE
Merci d'avance
j'ai lancé RSIT et j'obtient .
log-bloc note :
Logfile of random's system information tool 1.06 (written by random/random)
Run by Administrateur at 2009-12-24 18:10:54
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 18 GB (12%) free of 153 GB
Total RAM: 1535 MB (63% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:11:11, on 24/12/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16945)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\EoRezo\EoEngine.exe
C:\WINDOWS\system32\rundll32.exe
C:\Documents and Settings\Administrateur\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
C:\Program Files\Microsoft LifeChat\LifeChat.exe
C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe
C:\XTREME~1\wh_exec.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\RomStation\RomStation.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\richtx64.exe
C:\Program Files\Malware Defense\mdefense.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wscsvc32.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\RSIT.exe
C:\Program Files\Internet Explorer\Iexplore.exe
C:\Program Files\trend micro\Administrateur.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.ke.voila.fr/S/voila?kw=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://y.lo.st
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://y.lo.st
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll (file missing)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Multi_Media_France toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMult.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: EoBHO - {C7B76B90-3455-4AE6-A752-EAC4D19689E5} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Multi_Media_France toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMult.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: SYSTRAN Toolbar - {95daa571-4def-4a6d-97d8-98a346672a24} - mscoree.dll (file missing)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\EoRezo\EoEngine.exe"
O4 - HKLM\..\Run: [SoftwareHelper] C:\Documents and Settings\Administrateur\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [LifeChat] "C:\Program Files\Microsoft LifeChat\LifeChat.exe"
O4 - HKLM\..\Run: [WindowsLivePhone] C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe /AutoRun
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKLM\..\Run: [WheelMouse] C:\XTREME~1\wh_exec.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MealRdr] C:\DOCUME~1\ADMINI~1\APPLIC~1\16ISOW~1\Dale Eggs.exe
O4 - HKCU\..\Run: [EPSON Stylus DX6000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBIE.EXE /FU "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\E_SE6.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [WindowsLivePhone] "C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe" /AutoRun
O4 - HKCU\..\Run: [RomStation] "C:\Program Files\RomStation\RomStation.exe" /background
O4 - HKCU\..\Run: [richtx64.exe] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\richtx64.exe
O4 - HKCU\..\Run: [Malware Defense] "C:\Program Files\Malware Defense\mdefense.exe" -noscan
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Consulter les dictionnaires (SYSTRAN) - res://C:\Program Files\SYSTRAN\6\\GUIres.dll/lookup.js
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Traduire (SYSTRAN) - res://C:\Program Files\SYSTRAN\6\\GUIres.dll/translate.js
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {9DF1C00D-8426-4337-972C-DC042D19A916} (FTMediaPlayer Class) - http://webtv.guidetv.orange.fr/resources/OCS_8971.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = domvelocar.local
O17 - HKLM\Software\..\Telephony: DomainName = domvelocar.local
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = domvelocar.local
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = domvelocar.local
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: Service Google Update (gupdate1ca19b16c1c692c) (gupdate1ca19b16c1c692c) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
--
End of file - 11602 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\BD4240DE9E8DF182.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - c:\program files\real\realplayer\rpbrowserrecordplugin.dll [2009-10-06 329312]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7009fcd4-05be-44f4-9583-93fe419ab7b0}]
Multi_Media_France toolbar - C:\Program Files\Multi_Media_France\tbMult.dll [2007-06-18 1383448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-10 259696]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2009-11-13 764912]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}]
EoBHO Class - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll [2008-11-18 42792]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll [2009-04-29 470512]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
EpsonToolBandKicker Class - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7009fcd4-05be-44f4-9583-93fe419ab7b0} - Multi_Media_France toolbar - C:\Program Files\Multi_Media_France\tbMult.dll [2007-06-18 1383448]
{EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-10 259696]
{95daa571-4def-4a6d-97d8-98a346672a24} - SYSTRAN Toolbar - C:\WINDOWS\system32\mscoree.dll [2006-12-22 271360]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\System32\NvCpl.dll [2006-03-09 7561216]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe [2008-06-10 144784]
"NeroFilterCheck"=C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe [2007-03-01 153136]
"NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2007-12-03 2213160]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2008-09-06 413696]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-09-10 289576]
"nwiz"=nwiz.exe /install []
"EoEngine"=C:\Program Files\EoRezo\EoEngine.exe [2009-02-23 472872]
"SoftwareHelper"=C:\Documents and Settings\Administrateur\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe [2008-12-09 368224]
"nod32kui"=C:\Program Files\Eset\nod32kui.exe [2009-12-23 917504]
"LifeChat"=C:\Program Files\Microsoft LifeChat\LifeChat.exe [2008-08-21 267296]
"WindowsLivePhone"=C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe [2008-12-22 787816]
"ISUSPM"=C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe [2006-03-20 213936]
"WheelMouse"=C:\XTREME~1\wh_exec.exe [2008-10-08 98304]
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2009-10-06 198160]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"Adobe ARM"=C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe []
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Tok-Cirrhatus"= []
"MealRdr"=C:\DOCUME~1\ADMINI~1\APPLIC~1\16ISOW~1\Dale Eggs.exe []
"EPSON Stylus DX6000 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBIE.EXE [2006-09-22 139264]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-03-28 68856]
"WindowsLivePhone"=C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe [2008-12-22 787816]
"RomStation"=C:\Program Files\RomStation\RomStation.exe [2009-12-17 949760]
"richtx64.exe"=C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\richtx64.exe [2009-12-23 675840]
"Malware Defense"=C:\Program Files\Malware Defense\mdefense.exe [2009-12-24 1756088]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2008-09-05 267304]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{54D9498B-CF93-414F-8984-8CE7FDE0D391}"=C:\Program Files\ewido anti-malware\shellhook.dll [2004-09-30 39488]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0
"DisableCMD"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=0
"NoBandCustomize"=0
"NoFolderOptions"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3273351f-2de3-11dc-84b0-001109404d44}]
shell\AutoRun\command - F:\InstallTomTomHOME.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{793f8543-f0af-11da-8435-806d6172696f}]
shell\AutoRun\command - E:\INSTALL.EXE
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e8299287-9763-11dc-84e1-001109404d44}]
shell\Auto\command - AdobeR.exe e
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e
======File associations======
.scr - open - C:\Program Files\VCW VicMan's Photo Editor\vcwphoto.exe %1
.scr - install -
.scr - config -
======List of files/folders created in the last 1 months======
2009-12-24 18:10:55 ----D---- C:\Program Files\trend micro
2009-12-24 18:10:54 ----D---- C:\rsit
2009-12-24 08:28:28 ----D---- C:\Program Files\Malware Defense
2009-12-24 04:40:30 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-12-24 04:40:30 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-12-23 07:22:34 ----A---- C:\WINDOWS\system32\krl32mainweq.dll
2009-12-23 07:18:21 ----A---- C:\Documents and Settings\All Users\Application Data\sysReserve.ini
2009-12-22 11:14:22 ----A---- C:\WINDOWS\W3DemoUnin.exe
2009-12-21 07:59:15 ----D---- C:\WINDOWS\Cache
2009-12-20 17:28:40 ----D---- C:\Documents and Settings\Administrateur\Application Data\Help
2009-12-20 17:16:20 ----RA---- C:\WINDOWS\system32\MpvpxX86.dll
2009-12-20 17:16:20 ----RA---- C:\WINDOWS\system32\MpvpxSSE.dll
2009-12-20 17:16:19 ----RA---- C:\WINDOWS\system32\MpvpxMMX.dll
2009-12-20 17:16:16 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2009-12-20 17:10:39 ----D---- C:\Program Files\Digital Photo Navigator 1.0
2009-12-20 17:09:02 ----N---- C:\WINDOWS\system32\WNASPI32.DLL
2009-12-20 17:09:02 ----D---- C:\MWASPI
2009-12-20 17:09:02 ----A---- C:\WINDOWS\msfsetup.ini
2009-12-20 17:06:54 ----D---- C:\Program Files\PIXELA
2009-12-19 11:57:07 ----SHD---- C:\Documents and Settings\All Users\Application Data\SecuROM
2009-12-18 11:27:17 ----D---- C:\Program Files\Nouveau dossier
2009-12-18 10:05:34 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2009-12-18 10:05:34 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2009-12-18 10:05:33 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2009-12-18 10:05:32 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2009-12-18 10:05:32 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2009-12-18 10:05:32 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2009-12-18 10:05:31 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2009-12-18 10:05:30 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2009-12-18 10:05:30 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2009-12-18 10:05:30 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2009-12-18 10:05:29 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2009-12-18 10:05:29 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2009-12-18 10:05:28 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2009-12-18 10:05:27 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2009-12-18 10:05:27 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2009-12-18 10:05:27 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2009-12-18 10:05:26 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2009-12-18 10:05:24 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2009-12-18 10:05:24 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2009-12-18 10:05:24 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2009-12-18 10:05:23 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2009-12-18 10:05:23 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2009-12-18 10:05:23 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2009-12-18 10:05:22 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2009-12-18 10:05:21 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2009-12-18 10:05:21 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2009-12-18 10:05:21 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2009-12-18 10:05:20 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2009-12-18 10:05:19 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2009-12-18 10:05:19 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2009-12-18 10:05:18 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2009-12-18 10:05:18 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2009-12-18 10:05:17 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2009-12-18 10:05:16 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2009-12-18 10:05:15 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2009-12-18 10:05:14 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2009-12-18 10:05:13 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2009-12-18 10:05:12 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2009-12-18 10:05:12 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2009-12-18 10:05:11 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2009-12-18 10:05:10 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2009-12-18 10:05:10 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2009-12-18 10:05:09 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2009-12-18 10:05:09 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2009-12-18 10:05:08 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2009-12-18 10:05:07 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2009-12-18 10:05:04 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2009-12-18 10:04:57 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2009-12-18 10:04:57 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2009-12-18 10:04:48 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2009-12-18 10:04:48 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2009-12-18 10:04:47 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2009-12-18 10:04:46 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2009-12-18 10:04:46 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2009-12-18 10:04:46 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2009-12-18 10:04:45 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2009-12-18 10:04:45 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2009-12-18 10:04:45 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2009-12-18 10:04:45 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2009-12-18 10:04:44 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2009-12-18 10:04:35 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2009-12-18 10:04:35 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2009-12-18 10:04:34 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2009-12-18 10:04:33 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2009-12-18 10:04:32 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2009-12-18 10:04:32 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2009-12-18 10:04:31 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2009-12-18 10:04:31 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2009-12-18 10:04:16 ----D---- C:\WINDOWS\Logs
2009-12-18 10:04:08 ----D---- C:\Program Files\DIFX
2009-12-18 10:03:30 ----D---- C:\WINDOWS\system32\AGEIA
2009-12-18 10:03:28 ----D---- C:\Program Files\AGEIA Technologies
2009-12-18 10:03:05 ----D---- C:\Program Files\Fichiers communs\Wise Installation Wizard
2009-12-18 09:34:54 ----D---- C:\Program Files\Borderland
2009-12-15 20:45:20 ----SHD---- C:\Config.Msi
2009-12-15 00:29:30 ----D---- C:\Program Files\CCleaner
2009-12-15 00:02:05 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2009-12-09 13:06:36 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2009-12-09 13:06:21 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2009-12-09 13:05:38 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2009-12-09 13:03:52 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2009-12-09 13:03:35 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2009-11-25 13:03:10 ----HDC---- C:\WINDOWS\$NtUninstallKB976098-v2$
2009-11-25 13:02:40 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
======List of files/folders modified in the last 1 months======
2009-12-24 18:11:00 ----D---- C:\WINDOWS
2009-12-24 18:10:55 ----RD---- C:\Program Files
2009-12-24 17:55:13 ----D---- C:\Documents and Settings\Administrateur\Application Data\EoRezo
2009-12-24 17:54:48 ----D---- C:\Program Files\Mozilla Firefox
2009-12-24 17:53:38 ----D---- C:\WINDOWS\Temp
2009-12-24 17:53:38 ----D---- C:\WINDOWS\system32
2009-12-24 17:52:48 ----D---- C:\Program Files\EoRezo
2009-12-24 17:52:32 ----SHD---- C:\WINDOWS\CSC
2009-12-24 17:52:32 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-12-24 04:40:31 ----D---- C:\WINDOWS\system32\drivers
2009-12-24 03:57:04 ----D---- C:\WINDOWS\Prefetch
2009-12-23 22:24:54 ----D---- C:\Program Files\Atmosphere Deluxe
2009-12-23 22:18:48 ----D---- C:\Program Files\Eset
2009-12-23 22:14:48 ----A---- C:\WINDOWS\system32\imon.dll
2009-12-23 08:39:31 ----D---- C:\Documents and Settings\Administrateur\Application Data\uTorrent
2009-12-22 11:14:37 ----D---- C:\WINDOWS\system32\CatRoot2
2009-12-22 11:14:23 ----D---- C:\Program Files\Warcraft III Demo
2009-12-21 08:07:38 ----D---- C:\Program Files\VCW VicMan's Photo Editor
2009-12-21 07:04:22 ----D---- C:\WINDOWS\security
2009-12-20 19:35:09 ----A---- C:\WINDOWS\NeroDigital.ini
2009-12-20 19:00:39 ----HD---- C:\WINDOWS\inf
2009-12-20 19:00:37 ----D---- C:\Program Files\Movie Maker
2009-12-20 17:17:23 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-12-20 17:16:50 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-12-20 17:10:39 ----HD---- C:\Program Files\InstallShield Installation Information
2009-12-20 17:09:02 ----D---- C:\WINDOWS\system
2009-12-20 11:08:12 ----D---- C:\telechargement reload paradise
2009-12-19 13:00:23 ----SHD---- C:\WINDOWS\Installer
2009-12-19 13:00:23 ----D---- C:\WINDOWS\WinSxS
2009-12-19 11:33:18 ----D---- C:\WINDOWS\system32\DirectX
2009-12-19 11:32:08 ----RSH---- C:\boot.ini
2009-12-18 10:04:36 ----D---- C:\WINDOWS\Microsoft.NET
2009-12-18 10:04:06 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-12-18 10:03:05 ----D---- C:\Program Files\Fichiers communs
2009-12-15 20:46:37 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-12-15 20:46:35 ----SD---- C:\WINDOWS\Tasks
2009-12-15 07:43:27 ----D---- C:\Program Files\ewido anti-malware
2009-12-15 07:42:51 ----D---- C:\WINDOWS\Minidump
2009-12-15 07:42:51 ----D---- C:\WINDOWS\Debug
2009-12-15 01:01:17 ----D---- C:\Documents and Settings\Administrateur\Application Data\16ISOWARN
2009-12-14 23:58:51 ----D---- C:\Program Files\eMule
2009-12-09 13:06:12 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2009-12-09 13:05:37 ----HD---- C:\WINDOWS\$hf_mig$
2009-12-09 13:05:13 ----D---- C:\WINDOWS\system32\fr-fr
2009-12-09 13:05:13 ----D---- C:\Program Files\Internet Explorer
2009-12-09 13:04:54 ----D---- C:\WINDOWS\ie7updates
2009-12-07 20:00:31 ----D---- C:\Program Files\RomStation
2009-12-01 21:06:19 ----A---- C:\WINDOWS\system32\MRT.exe
2009-11-28 08:47:52 ----AC---- C:\WINDOWS\ODBC.INI
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 AmdK7;Pilote de processeur AMD K7; C:\WINDOWS\System32\DRIVERS\amdk7.sys [2008-04-14 41856]
R1 ewido security suite driver;ewido security suite driver; \??\C:\Program Files\ewido anti-malware\guard.sys []
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2002-08-30 12032]
R2 AMON;AMON; \??\C:\WINDOWS\system32\drivers\amon.sys []
R2 hardlock;hardlock; \??\C:\WINDOWS\system32\drivers\hardlock.sys []
R2 hardlock;hardlock; \??\C:\WINDOWS\system32\drivers\hardlock.sys []
R2 Haspnt;Haspnt; \??\C:\WINDOWS\system32\drivers\Haspnt.sys []
R2 MASPINT;MASPINT; C:\WINDOWS\system32\drivers\MASPINT.sys [2000-03-29 8096]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2006-05-19 4007552]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 FETND5BV;VIA Rhine-Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\System32\DRIVERS\fetnd5bv.sys [2005-11-16 42496]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2008-04-17 15464]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 Mtlmnt5;Mtlmnt5; C:\WINDOWS\System32\DRIVERS\Mtlmnt5.sys [2004-04-01 126686]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2006-03-09 3650368]
R3 Slntamr;Smart Link 56K Modem Driver; C:\WINDOWS\System32\DRIVERS\slntamr.sys [2004-04-01 404990]
R3 SlWdmSup;SlWdmSup; C:\WINDOWS\System32\DRIVERS\SlWdmSup.sys [2004-01-28 13240]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbscan;Pilote de scanneur USB; C:\WINDOWS\System32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 whfltr2k;WheelMouse USB Lower Filter Driver; C:\WINDOWS\system32\DRIVERS\whfltr2k.sys [2007-01-25 6784]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 FETNDIS;Pilote NT de carte VIA PCI 10/100Mo Fast Ethernet; C:\WINDOWS\System32\DRIVERS\fetnd5.sys [2001-08-17 27165]
S3 MSTEE;Convertisseur en T/site-à -site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 Mtlstrm;Mtlstrm; C:\WINDOWS\System32\DRIVERS\Mtlstrm.sys [2004-01-28 1309184]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NtMtlFax;NtMtlFax; C:\WINDOWS\System32\DRIVERS\NtMtlFax.sys [2004-01-28 180360]
S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCAMPR5.SYS []
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []
S3 PIXMC10;JVC Communication PIX-MC10 Driver; C:\WINDOWS\System32\Drivers\pixmc10c.sys [2002-09-27 31232]
S3 PIXMC10A;JVC PIX-MC10 Audio Capture; C:\WINDOWS\System32\Drivers\pixmc10a.sys [2002-10-04 28060]
S3 PIXMC10V;JVC PIX-MC10 Video Capture; C:\WINDOWS\System32\Drivers\pixmc10v.sys [2002-11-28 22652]
S3 SIWIO;SIWIO; \??\C:\WINDOWS\TEMP\SiwIo.sys []
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SlNtHal;SlNtHal; C:\WINDOWS\System32\DRIVERS\Slnthal.sys [2004-01-28 95424]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 EPSONStatusAgent2;EPSON Printer Status Agent2; C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe [2001-08-09 90112]
R2 ewido security suite control;ewido security suite control; C:\Program Files\ewido anti-malware\ewidoctrl.exe [2005-11-30 13888]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe [2006-10-19 61440]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2007-12-03 869672]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\System32\nvsvc32.exe [2006-03-09 143436]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 SLService;SmartLinkService; C:\WINDOWS\system32\slserv.exe [2004-01-08 73796]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2008-09-10 536872]
S2 gupdate1ca19b16c1c692c;Service Google Update (gupdate1ca19b16c1c692c); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-08-10 133104]
S2 NOD32krn;NOD32 Kernel Service; C:\Program Files\Eset\nod32krn.exe [2009-12-23 495616]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-29 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe [2007-12-13 447784]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S4 ewido security suite guard;ewido security suite guard; C:\Program Files\ewido anti-malware\ewidoguard.exe [2005-12-18 151616]
-----------------EOF-----------------
info-bloc note :
info.txt logfile of random's system information tool 1.06 2009-12-24 18:11:14
======Uninstall list======
-->C:\Program Files\Nero\Nero8\\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
-->C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
-->C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->C:\WINDOWS\UNRecode.exe /UNINSTALL
-->MsiExec /X{D56B0E27-4A3E-46C9-B5C1-D93D580C099C}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Acrobat 4.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 4.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 4.0\NT\Uninst.dll"
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 9.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A92000000001}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
Camera RAW Plug-In for EPSON Creativity Suite-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8DAC1AE4-33D1-4A78-8A42-00E09EDECC3E}\SETUP.EXE" -l0x40c UNINST
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB976098-v2)-->"C:\WINDOWS\$NtUninstallKB976098-v2$\spuninst\spuninst.exe"
Digital Photo Navigator 1.0-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B7EF4BD8-CA13-11D5-AE3D-005004B8E30C}\setup.exe" -l0x9
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Plus DirectShow Filters-->C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
DVD Decoder Pak for Windows XP-->MsiExec.exe /X{92C5DB3D-9D6F-4324-BB11-57825F4C2635}
eDrawings 2005-->MsiExec.exe /I{97917FA0-00C5-4351-AD6B-87AB99C52792}
eMule-->"C:\Program Files\eMule\Uninstall.exe"
eoEngine 9.1-->"C:\Program Files\EoRezo\unins000.exe"
EPSON Attach To Email-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{20C45B32-5AB6-46A4-94EF-58950CAF05E5} /l1033 ADDREMOVEDLG
EPSON Copy Utility 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67EDD823-135A-4D59-87BD-950616D6E857}\SETUP.EXE" -l0x40c -UnInstall
EPSON Easy Photo Print-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B66E665A-DF96-4C38-9422-C7F74BC1B4E5}\SETUP.EXE" -l0x40c UNINST
EPSON File Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2EB81825-E9EE-44F4-8F51-1240C3898DC6}\Setup.exe" -l0x40c UNINST
EPSON Logiciel imprimante-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
EPSON Scan Assistant-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}\Setup.exe" -l0x40c -u
EPSON Scan-->C:\Program Files\epson\escndv\setup\setup.exe /r
EPSON SMART PANEL for Scanner-->C:\WINDOWS\unin040c.exe -f"C:\Program Files\EPSON\EPSON SMART PANEL for Scanner\DeIsL1.isu"
EPSON Web-To-Page-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}\SETUP.EXE" -l0x40c -anything
ESDX6000_CX5900 Guide util.-->C:\Program Files\EPSON\TPMANUAL\ESDX6000_CX5900\USE_G\DOCUNINS.EXE
ewido anti-malware-->C:\Program Files\ewido anti-malware\Uninstall.exe
Gaming Mouse-->"C:\Program Files\Gaming Mouse\uninstall.exe"
Gestionnaire de périphériques de Windows Live-->MsiExec.exe /X{6530EB5E-F2BE-45D3-906B-E4AFFF2D1588}
Google Chrome-->"C:\Program Files\Google\Chrome\Application\3.0.195.38\Installer\setup.exe" --uninstall --system-level
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_9DE96A29E721D90A.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
ImageMixer With VCD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5AA18C57-381C-4C99-8FE6-5EB1CB0A5BC0}\setup.exe"
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
iTunes-->MsiExec.exe /I{41B9E2CF-0B3F-442A-B5B3-592A4A355634}
IZArc 3.7-->"C:\Program Files\IZArc\unins000.exe"
Java(TM) 6 Update 4-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160040}
Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
Lame ACM MP3 Codec-->"C:\WINDOWS\IFinst26.exe" -UC:\Program Files\Lame MP3 Codec\IFU8.inf
Lame ACM MP3 Codec-->C:\WINDOWS\system32\rundll32.exe setupapi,InstallHinfSection Remove_LameMP3 132 C:\WINDOWS\INF\LameACM.inf
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Ludiclub.com-->C:\WINDOWS\system32\GKSUI20.EXE C:\Program Files\Ludiclub\UninstallC075.DAT
Malware Defense-->C:\Program Files\Malware Defense\Uninstall.exe
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft .NET Framework 1.1 Security Update (KB953297)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft LifeChat-->MsiExec.exe /X{66039B36-96AE-40D1-8A32-071F7A61B738}
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0015-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0019-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0044-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}
Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
Microsoft Office Outlook Connector-->MsiExec.exe /I{95120000-0122-040C-0000-0000000FF1CE}
Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office Professional Plus 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {14809F99-C601-4D4A-9391-F1E8FAA964C5}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9}
Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft Search Enhancement Pack-->MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
MicroStaff WINASPI-->C:\MWASPI\uninst.exe
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 8 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 9 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB969897)-->"C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB972260)-->"C:\WINDOWS\ie7updates\KB972260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB974455)-->"C:\WINDOWS\ie7updates\KB974455-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB976325)-->"C:\WINDOWS\ie7updates\KB976325-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB913433)-->C:\WINDOWS\System32\MacroMed\Flash\genuinst.exe C:\WINDOWS\System32\MacroMed\Flash\KB913433.inf
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970430)-->"C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971961)-->"C:\WINDOWS\$NtUninstallKB971961$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973904)-->"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 7 (KB976749)-->"C:\WINDOWS\ie7updates\KB976749-IE7\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB971737)-->"C:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB973687)-->"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
MKV To AVI With Subtitle version 1.0-->"C:\Program Files\mkvtoavis\unins000.exe"
Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Mozilla Firefox (3.5.6)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
Multi Media France Toolbar-->C:\PROGRA~1\MULTI_~1\UNWISE.EXE C:\PROGRA~1\MULTI_~1\INSTALL.LOG
Nero 8-->MsiExec.exe /X{5FCCD531-1B38-4A94-924C-127F722F1036}
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
NOD32 Antivirus System-->C:\Program Files\Eset\Setup\setup.exe /UNINSTALL
NOD32 FiX v1.9-->"C:\Program Files\Eset\unins000.exe"
NVIDIA Drivers-->C:\WINDOWS\System32\nvudisp.exe UninstallGUI
NVIDIA PhysX v8.10.29-->MsiExec.exe /X{D56B0E27-4A3E-46C9-B5C1-D93D580C099C}
OGA Notifier 2.0.0048.0-->MsiExec.exe /I{B2544A03-10D0-4E5E-BA69-0362FFC20D18}
OpenOffice.org Installer 1.0-->MsiExec.exe /X{3A2AF807-9F9F-43C9-A24A-17B617238B74}
Autres pages sur : windows security alert
Lassé par la pub ? Créez un compte
Meilleure solution
1/
Désinstalle HijackThis.
Télécharge ToolsCleaner2 sur ton Bureau.
Double-clique sur ToolsCleaner2.exe pour le lancer.
Clique sur Recherche et laisse le scan agir.
Clique sur Suppression pour finaliser.
Tu peux, si tu le souhaites, te servir des Options Facultatives.
Clique sur Quitter pour obtenir le rapport.
Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).
2/
Télécharge et installe CCleaner Slim.
Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
Va dans Nettoyeur, choisis Analyser. Une fois terminé, lance le nettoyage.
3/
Il est nécessaire de désactiver puis réactiver la restauration système pour la purger.
==Prévention==
Conserve MBAM. Il te servira à scanner les fichiers douteux en complément de l'antivirus et scanne le disque dur régulièrement.
Vérifie que les mises à jour automatiques sont bien activées (Menu Démarrer, clique droit sur Poste de travail, Propriétés, onglet Mises à jour automatiques).
Par rapport au P2P : Lien
Voici un dossier complet (A lire avec Adobe Reader ou Foxit Reader) : Lien
==Problème résolu ?==
--> Si tu estimes que ton problème est résolu, ajoute [Résolu] au titre. Pour cela :
Clique, dans ton premier message, sur le bouton Editer
.
Ajoute la mention [Résolu] devant le titre.
Clique ensuite sur Valider votre message.
Sois plus vigilant(e) sur Internet
2/
3/
==Prévention==
Conserve MBAM. Il te servira à scanner les fichiers douteux en complément de l'antivirus et scanne le disque dur régulièrement.
Vérifie que les mises à jour automatiques sont bien activées (Menu Démarrer, clique droit sur Poste de travail, Propriétés, onglet Mises à jour automatiques).
Par rapport au P2P : Lien
Voici un dossier complet (A lire avec Adobe Reader ou Foxit Reader) : Lien
==Problème résolu ?==
--> Si tu estimes que ton problème est résolu, ajoute [Résolu] au titre. Pour cela :
.Sois plus vigilant(e) sur Internet
Bonjour,
Désinstalle eoEngine.
Télécharge Malwarebytes' Anti-Malware (MBAM) sur ton Bureau.
Double-clique sur le fichier téléchargé pour lancer le processus d'installation.
Dans l'onglet Mise à jour, clique sur le bouton Recherche de mise à jour : si le pare-feu demande l'autorisation à MBAM de se connecter à Internet, accepte.
Une fois la mise à jour terminée, rends-toi dans l'onglet Recherche.
Sélectionne Exécuter un examen rapide.
Clique sur Rechercher. L'analyse démarre.
A la fin de l'analyse, un message s'affiche :
Clique sur OK pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.
Ferme tes navigateurs.
Si des malwares ont été détectés, clique sur Afficher les résultats.
Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre infectés et en mettre une copie dans la quarantaine.
MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport dans ta prochaine réponse.
Citation :
L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.
bonjour et merci de me repondre
je viens de desinstallé eo Engine
je telecharge Malwarebytes MBAM avec le lien
mais je ne peux pas l'ouvrir je suis en conflit avec le centre d'alerte et malware defence qui s'installe et que désinstalle tous les jours...
l'icone de MBAM est bien sur mon bureau mais je n'arrive pas à l'ouvrir...
que faire ???
je viens de desinstallé eo Engine
je telecharge Malwarebytes MBAM avec le lien
mais je ne peux pas l'ouvrir je suis en conflit avec le centre d'alerte et malware defence qui s'installe et que désinstalle tous les jours...
l'icone de MBAM est bien sur mon bureau mais je n'arrive pas à l'ouvrir...
que faire ???
[#ff0000]/!\ Désactive tes protections résidentes (Antivirus, etc...) /!\[/#f]
Télécharge ComboFix ([#ff0000]sUBs[/#f]) sur ton Bureau.
Double-clique sur ComboFix.exe (le .exe n'est pas forcément visible) afin de le lancer.
Il va te demander d'installer la console de récupération : accepte.
Lorsque la recherche sera terminée, un rapport apparaîtra. Poste ce rapport (C:\Combofix.txt) dans ta prochaine réponse.
Pour t'aider : Un guide et un tutoriel sur l'utilisation de ComboFix
Pour t'aider : Un guide et un tutoriel sur l'utilisation de ComboFix
Même prbleme qu'avec MBAM;une fenetre security center alert me demande
" do you want to block this suspicious software ?"
les boutons KEEP BLOCKING et UNBLOCK sont grisés et ne peuvent pas être activé ...
je ne peux qu'activé ENABLE PROTECTION quime charcge Malware defence...
et je ne sais pas comment la désactiver
je suis perdu...!!?
" do you want to block this suspicious software ?"
les boutons KEEP BLOCKING et UNBLOCK sont grisés et ne peuvent pas être activé ...
je ne peux qu'activé ENABLE PROTECTION quime charcge Malware defence...
et je ne sais pas comment la désactiver
je suis perdu...!!?
http://www.bleepingcomputer.com/virus-removal/remove-ma...
step 15
j'ai réussis a le lancer comme ça
step 15
j'ai réussis a le lancer comme ça
ok rusol cela fonctionne merci beaucoup
Destrio5 voici le rapport de MBAM
Malwarebytes' Anti-Malware 1.42
Version de la base de données: 3441
Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13
28/12/2009 00:27:27
mbam-log-2009-12-28 (00-27-27).txt
Type de recherche: Examen complet (C:\|)
Eléments examinés: 211843
Temps écoulé: 38 minute(s), 33 second(s)
Processus mémoire infecté(s): 1
Module(s) mémoire infecté(s): 2
Clé(s) du Registre infectée(s): 8
Valeur(s) du Registre infectée(s): 5
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 27
Fichier(s) infecté(s): 11
Processus mémoire infecté(s):
C:\Documents and Settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\SoftwareUpdateHP.exe (Rogue.Eorezo) -> Unloaded process successfully.
Module(s) mémoire infecté(s):
\\?\globalroot\systemroot\system32\H8SRTurvpwqtiej.dll (Trojan.FakeAlert) -> Delete on reboot.
C:\Program Files\Malware Defense\mdext.dll (Trojan.FakeAlert) -> Delete on reboot.
Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{d5792aa9-d373-4039-8670-2cdab6a71f15} (Trojan.Swizzor) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{d5792aa9-d373-4039-8670-2cdab6a71f15} (Trojan.Swizzor) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Malware Defense (Rogue.MalwareDefense) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\H8SRT (Rootkit.TDSS) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\fcn (Rogue.Residue) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\WakeNet (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\EoRezo (Rogue.Eorezo) -> Quarantined and deleted successfully.
Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\softwarehelper (Rogue.Eorezo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\malware defense (Rogue.MalwareDefense) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\nofolderoptions (Hijack.FolderOptions) -> Delete on reboot.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\tok-cirrhatus (Worm.Brontok) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\richtx64.exe (Trojan.Agent) -> Quarantined and deleted successfully.
Elément(s) de données du Registre infecté(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions (Hijack.FolderOptions) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
Dossier(s) infecté(s):
C:\Program Files\BitDownload (Trojan.Swizzor) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-1 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-10 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-11 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-12 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-13 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-14 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-15 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-16 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-2 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-21 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-22 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-23 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-26 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-27 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-28 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-29 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-3 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-30 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-31 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-4 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-5 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-6 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-7 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-8 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-9 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Program Files\malware Defense (Rogue.MalwareDefense) -> Delete on reboot.
Fichier(s) infecté(s):
\\?\globalroot\systemroot\system32\H8SRTurvpwqtiej.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\SoftwareUpdateHP.exe (Rogue.Eorezo) -> Quarantined and deleted successfully.
C:\Program Files\Malware Defense\mdext.dll (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur\Local Settings\Temp\richtx64.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\SoftwareUpdate.exe (Rogue.Eorezo) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Temp\Installer.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Temp\wscsvc32.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Program Files\Malware Defense\uninstall.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\krl32mainweq.dll (Trojan.DNSChanger) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\msfflk_nav.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\msfflk_navps.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
Destrio5 voici le rapport de MBAM
Malwarebytes' Anti-Malware 1.42
Version de la base de données: 3441
Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13
28/12/2009 00:27:27
mbam-log-2009-12-28 (00-27-27).txt
Type de recherche: Examen complet (C:\|)
Eléments examinés: 211843
Temps écoulé: 38 minute(s), 33 second(s)
Processus mémoire infecté(s): 1
Module(s) mémoire infecté(s): 2
Clé(s) du Registre infectée(s): 8
Valeur(s) du Registre infectée(s): 5
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 27
Fichier(s) infecté(s): 11
Processus mémoire infecté(s):
C:\Documents and Settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\SoftwareUpdateHP.exe (Rogue.Eorezo) -> Unloaded process successfully.
Module(s) mémoire infecté(s):
\\?\globalroot\systemroot\system32\H8SRTurvpwqtiej.dll (Trojan.FakeAlert) -> Delete on reboot.
C:\Program Files\Malware Defense\mdext.dll (Trojan.FakeAlert) -> Delete on reboot.
Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{d5792aa9-d373-4039-8670-2cdab6a71f15} (Trojan.Swizzor) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{d5792aa9-d373-4039-8670-2cdab6a71f15} (Trojan.Swizzor) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Malware Defense (Rogue.MalwareDefense) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\H8SRT (Rootkit.TDSS) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\fcn (Rogue.Residue) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\WakeNet (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\EoRezo (Rogue.Eorezo) -> Quarantined and deleted successfully.
Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\softwarehelper (Rogue.Eorezo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\malware defense (Rogue.MalwareDefense) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\nofolderoptions (Hijack.FolderOptions) -> Delete on reboot.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\tok-cirrhatus (Worm.Brontok) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\richtx64.exe (Trojan.Agent) -> Quarantined and deleted successfully.
Elément(s) de données du Registre infecté(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions (Hijack.FolderOptions) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
Dossier(s) infecté(s):
C:\Program Files\BitDownload (Trojan.Swizzor) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-1 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-10 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-11 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-12 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-13 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-14 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-15 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-16 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-2 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-21 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-22 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-23 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-26 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-27 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-28 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-29 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-3 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-30 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-31 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-4 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-5 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-6 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-7 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-8 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Bron.tok-17-9 (Worm.Brontok) -> Quarantined and deleted successfully.
C:\Program Files\malware Defense (Rogue.MalwareDefense) -> Delete on reboot.
Fichier(s) infecté(s):
\\?\globalroot\systemroot\system32\H8SRTurvpwqtiej.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\SoftwareUpdateHP.exe (Rogue.Eorezo) -> Quarantined and deleted successfully.
C:\Program Files\Malware Defense\mdext.dll (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur\Local Settings\Temp\richtx64.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\SoftwareUpdate.exe (Rogue.Eorezo) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Temp\Installer.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Temp\wscsvc32.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Program Files\Malware Defense\uninstall.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\krl32mainweq.dll (Trojan.DNSChanger) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\msfflk_nav.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\msfflk_navps.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
Avec killrootkit c'est mieux
ouf enfin le rapport et après ??
ComboFix 09-12-28.06 - Administrateur 29/12/2009 19:05:37.1.1 - x86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.1535.1195 [GMT 1:00]
Lancé depuis: c:\documents and settings\Administrateur\Bureau\killrootkit.exe
AV: NOD32 Antivirus System 2.50 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
* Un antivirus résident est actif
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\Administrateur\Local Settings\Application Data\Bron.tok.A17.em.bin
c:\documents and settings\Administrateur\Local Settings\Application Data\Kosong.Bron.Tok.txt
c:\documents and settings\Administrateur\Local Settings\Application Data\ListHost17.txt
c:\windows\system32\drivers\H8SRToyxrywqjuh.sys
c:\windows\system32\H8SRTaojydjempm.dll
c:\windows\system32\H8SRToedoqawvsw.dat
c:\windows\system32\H8SRTurvpwqtiej.dll
c:\windows\system32\krl32mainweq.dll
c:\windows\system32\srcr.dat
c:\windows\system32\TT.EXE
.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Service_H8SRTd.sys
-------\Legacy_H8SRTd.sys
((((((((((((((((((((((((((((( Fichiers créés du 2009-11-28 au 2009-12-29 ))))))))))))))))))))))))))))))))))))
.
2009-12-27 22:43 . 2009-12-27 22:43 -------- d-----w- c:\documents and settings\Administrateur\Application Data\Malwarebytes
2009-12-27 22:34 . 2009-12-03 15:14 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-27 22:34 . 2009-12-27 22:34 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-12-27 22:34 . 2009-12-27 23:32 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-12-27 22:34 . 2009-12-03 15:13 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-12-24 17:10 . 2009-12-24 17:11 -------- d-----w- c:\program files\trend micro
2009-12-24 17:10 . 2009-12-24 17:11 -------- d-----w- C:\rsit
2009-12-22 10:14 . 2009-12-22 10:14 12825 ----a-w- c:\windows\W3DemoUnin.dat
2009-12-22 10:14 . 2009-12-22 10:14 2829 ----a-w- c:\windows\W3DemoUnin.pif
2009-12-22 10:14 . 2009-12-22 10:14 126976 ----a-w- c:\windows\W3DemoUnin.exe
2009-12-21 06:59 . 2009-12-21 06:59 -------- d-----w- c:\windows\Cache
2009-12-20 16:17 . 2008-04-13 19:39 5504 -c--a-w- c:\windows\system32\dllcache\mstee.sys
2009-12-20 16:17 . 2008-04-13 19:39 5504 ----a-w- c:\windows\system32\drivers\MSTEE.sys
2009-12-20 16:17 . 2008-04-13 19:46 10880 -c--a-w- c:\windows\system32\dllcache\ndisip.sys
2009-12-20 16:17 . 2008-04-13 19:46 10880 ----a-w- c:\windows\system32\drivers\NdisIP.sys
2009-12-20 16:17 . 2008-04-13 19:46 15232 -c--a-w- c:\windows\system32\dllcache\streamip.sys
2009-12-20 16:17 . 2008-04-13 19:46 15232 ----a-w- c:\windows\system32\drivers\StreamIP.sys
2009-12-20 16:17 . 2008-04-13 19:46 11136 -c--a-w- c:\windows\system32\dllcache\slip.sys
2009-12-20 16:17 . 2008-04-13 19:46 11136 ----a-w- c:\windows\system32\drivers\SLIP.sys
2009-12-20 16:17 . 2008-04-13 19:46 19200 -c--a-w- c:\windows\system32\dllcache\wstcodec.sys
2009-12-20 16:17 . 2008-04-13 19:46 19200 ----a-w- c:\windows\system32\drivers\WSTCODEC.SYS
2009-12-20 16:17 . 2008-04-13 19:46 85248 -c--a-w- c:\windows\system32\dllcache\nabtsfec.sys
2009-12-20 16:17 . 2008-04-13 19:46 85248 ----a-w- c:\windows\system32\drivers\NABTSFEC.sys
2009-12-20 16:16 . 2008-04-13 19:46 17024 -c--a-w- c:\windows\system32\dllcache\ccdecode.sys
2009-12-20 16:16 . 2008-04-13 19:46 17024 ----a-w- c:\windows\system32\drivers\CCDECODE.sys
2009-12-20 16:16 . 2002-10-03 23:14 28060 ----a-r- c:\windows\system32\drivers\pixmc10a.sys
2009-12-20 16:16 . 2002-05-08 20:12 102400 ----a-r- c:\windows\system32\MpvpxX86.dll
2009-12-20 16:16 . 2002-05-08 20:12 98304 ----a-r- c:\windows\system32\MpvpxSSE.dll
2009-12-20 16:16 . 2002-05-08 20:12 102400 ----a-r- c:\windows\system32\MpvpxMMX.dll
2009-12-20 16:16 . 2002-11-28 01:13 22652 ----a-r- c:\windows\system32\drivers\pixmc10v.sys
2009-12-20 16:16 . 2008-04-14 03:33 54784 -c--a-w- c:\windows\system32\dllcache\vfwwdm32.dll
2009-12-20 16:16 . 2008-04-14 03:33 54784 ----a-w- c:\windows\system32\vfwwdm32.dll
2009-12-20 16:15 . 2002-09-27 19:42 31232 ----a-r- c:\windows\system32\drivers\pixmc10c.sys
2009-12-20 16:10 . 2009-12-20 16:28 -------- d-----w- c:\program files\Digital Photo Navigator 1.0
2009-12-20 16:09 . 2009-12-20 16:09 -------- d-----w- C:\MWASPI
2009-12-20 16:09 . 2000-03-29 16:11 8096 ------w- c:\windows\system32\drivers\MASPINT.SYS
2009-12-20 16:09 . 1999-10-22 16:58 4030 ------w- c:\windows\system\WINASPI.DLL
2009-12-20 16:09 . 1997-06-11 18:01 30208 ------w- c:\windows\system32\WNASPI32.DLL
2009-12-20 16:09 . 1997-02-28 02:00 2486 ------w- c:\windows\system\AS16POST.BIN
2009-12-20 16:06 . 2009-12-20 16:06 -------- d-----w- c:\program files\PIXELA
2009-12-19 10:57 . 2009-12-19 10:57 -------- d-sh--w- c:\documents and settings\All Users\Application Data\SecuROM
2009-12-18 10:27 . 2009-12-19 11:03 -------- d-----w- c:\program files\Nouveau dossier
2009-12-18 09:04 . 2007-03-15 15:57 443752 ----a-w- c:\windows\system32\d3dx10_33.dll
2009-12-18 09:03 . 2009-12-18 09:03 -------- d-----w- c:\windows\system32\AGEIA
2009-12-18 09:03 . 2009-12-18 09:03 -------- d-----w- c:\program files\AGEIA Technologies
2009-12-18 09:03 . 2009-12-18 09:03 -------- d-----w- c:\program files\Fichiers communs\Wise Installation Wizard
2009-12-18 08:34 . 2009-12-19 11:04 -------- d-----w- c:\program files\Borderland
2009-12-14 23:29 . 2009-12-14 23:30 -------- d-----w- c:\program files\CCleaner
2009-12-14 23:02 . 2009-11-02 19:42 195456 ------w- c:\windows\system32\MpSigStub.exe
2009-12-11 19:02 . 2009-12-14 23:12 4181 ----a-w- c:\documents and settings\Administrateur\Local Settings\Application Data\msfflk.dat
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-12-28 21:36 . 2009-07-27 19:57 -------- d-----w- c:\program files\Eset
2009-12-28 19:33 . 2009-07-27 20:01 270336 ----a-w- c:\windows\system32\imon.dll
2009-12-28 19:33 . 2009-07-27 20:01 502208 ----a-w- c:\windows\system32\drivers\amon.sys
2009-12-26 23:38 . 2009-12-26 23:38 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.61\itstv.exe
2009-12-26 12:34 . 2009-12-26 12:34 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.60\itstv.exe
2009-12-26 00:25 . 2009-07-12 11:20 -------- d-----w- c:\documents and settings\Administrateur\Application Data\EoRezo
2009-12-25 19:14 . 2009-08-01 10:08 -------- d-----w- c:\documents and settings\Administrateur\Application Data\uTorrent
2009-12-25 17:13 . 2009-12-25 17:13 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.59\itstv.exe
2009-12-24 07:00 . 2009-12-24 07:00 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.58\itstv.exe
2009-12-23 21:24 . 2009-07-27 13:34 -------- d-----w- c:\program files\Atmosphere Deluxe
2009-12-23 02:08 . 2009-12-23 02:08 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.57\itstv.exe
2009-12-22 10:14 . 2009-06-02 19:24 -------- d-----w- c:\program files\Warcraft III Demo
2009-12-22 09:08 . 2009-12-22 09:08 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.56\itstv.exe
2009-12-21 07:07 . 2007-01-05 12:16 -------- d-----w- c:\program files\VCW VicMan's Photo Editor
2009-12-21 02:46 . 2009-12-21 02:46 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.55\itstv.exe
2009-12-20 16:16 . 2002-08-30 12:00 64492 ----a-w- c:\windows\system32\perfc00C.dat
2009-12-20 16:16 . 2002-08-30 12:00 447772 ----a-w- c:\windows\system32\perfh00C.dat
2009-12-20 16:10 . 2006-06-01 11:18 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-12-19 23:46 . 2009-12-19 23:46 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.54\itstv.exe
2009-12-19 09:45 . 2009-12-19 09:45 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.53\itstv.exe
2009-12-18 09:04 . 2009-12-18 09:04 -------- d-----w- c:\program files\DIFX
2009-12-18 00:45 . 2009-12-18 00:45 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.52\itstv.exe
2009-12-16 23:44 . 2009-12-16 23:44 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.51\itstv.exe
2009-12-16 05:44 . 2009-12-16 05:44 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.50\itstv.exe
2009-12-15 06:43 . 2006-06-15 07:32 -------- d-----w- c:\program files\ewido anti-malware
2009-12-15 00:01 . 2007-06-06 12:51 -------- d-----w- c:\documents and settings\Administrateur\Application Data\16ISOWARN
2009-12-14 23:44 . 2009-12-14 23:44 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.49\itstv.exe
2009-12-14 22:58 . 2006-06-14 13:07 -------- d-----w- c:\program files\eMule
2009-12-13 23:43 . 2009-12-13 23:43 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.48\itstv.exe
2009-12-13 01:55 . 2009-12-13 01:55 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.47\itstv.exe
2009-12-12 01:03 . 2009-12-12 01:03 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.46\itstv.exe
2009-12-11 00:02 . 2009-12-11 00:02 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.45\itstv.exe
2009-12-10 16:02 . 2009-12-10 16:02 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.44\itstv.exe
2009-12-09 12:06 . 2009-10-31 07:53 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-12-07 19:00 . 2009-11-13 09:50 -------- d-----w- c:\program files\RomStation
2009-12-07 01:56 . 2009-12-07 01:56 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.43\itstv.exe
2009-12-05 07:49 . 2009-12-05 07:49 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.42\itstv.exe
2009-12-03 04:48 . 2009-12-03 04:48 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.41\itstv.exe
2009-12-02 14:48 . 2009-12-02 14:48 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.40\itstv.exe
2009-11-29 01:46 . 2009-11-29 01:46 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.39\itstv.exe
2009-11-27 22:46 . 2009-11-27 22:46 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.38\itstv.exe
2009-11-25 00:37 . 2009-11-25 00:37 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.37\itstv.exe
2009-11-24 08:50 . 2009-11-24 08:50 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.36\itstv.exe
2009-11-19 23:48 . 2009-11-19 23:48 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.35\itstv.exe
2009-11-18 23:48 . 2009-11-18 23:48 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.34\itstv.exe
2009-11-18 09:30 . 2009-11-18 09:30 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.33\itstv.exe
2009-11-17 00:29 . 2009-11-17 00:29 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.32\itstv.exe
2009-11-15 23:56 . 2009-11-15 23:56 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.31\itstv.exe
2009-11-15 00:56 . 2009-11-15 00:56 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.30\itstv.exe
2009-11-14 00:57 . 2009-11-14 00:57 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.29\itstv.exe
2009-11-13 11:57 . 2009-11-13 11:57 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.28\itstv.exe
2009-11-13 10:11 . 2006-06-01 11:29 -------- d-----w- c:\program files\Fichiers communs\Adobe
2009-11-12 03:35 . 2009-11-12 03:35 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.27\itstv.exe
2009-11-10 03:36 . 2009-11-10 03:36 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.26\itstv.exe
2009-11-08 04:55 . 2009-11-08 04:55 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.25\itstv.exe
2009-11-08 03:14 . 2006-06-07 13:26 72576 -c--a-w- c:\documents and settings\Administrateur\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-11-08 02:41 . 2009-10-31 08:03 -------- d-----w- c:\program files\Microsoft Works
2009-11-07 10:51 . 2009-11-06 07:44 -------- d-----w- c:\program files\Microsoft Silverlight
2009-11-06 09:21 . 2009-11-06 09:21 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.24\itstv.exe
2009-11-06 07:44 . 2009-11-06 07:41 -------- d-----w- c:\program files\Microsoft
2009-11-06 07:44 . 2009-11-06 07:44 -------- d-----w- c:\program files\Microsoft Office Outlook Connector
2009-11-06 07:43 . 2009-07-29 16:36 -------- d-----w- c:\program files\Windows Live
2009-11-06 07:43 . 2009-11-06 07:43 -------- d-----w- c:\program files\Microsoft Sync Framework
2009-11-04 10:33 . 2009-11-04 10:33 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.23\itstv.exe
2009-11-02 11:03 . 2009-11-02 11:03 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.22\itstv.exe
2009-10-31 08:03 . 2009-10-31 08:03 -------- d-----w- c:\program files\MSBuild
2009-10-31 08:01 . 2009-10-31 08:01 -------- d-----w- c:\program files\Microsoft.NET
2009-10-31 00:26 . 2009-10-31 00:27 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.21\itstv.exe
2009-10-30 02:31 . 2009-10-30 02:31 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.20\itstv.exe
2009-10-29 07:44 . 2006-02-24 13:21 832512 ----a-w- c:\windows\system32\wininet.dll
2009-10-29 07:44 . 2004-08-19 23:09 78336 ----a-w- c:\windows\system32\ieencode.dll
2009-10-29 07:44 . 2002-08-30 12:00 17408 ------w- c:\windows\system32\corpol.dll
2009-10-27 19:02 . 2009-10-27 19:02 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.19\itstv.exe
2009-10-24 23:37 . 2009-10-24 23:37 20480 -c--a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.18\itstv.exe
2009-10-23 20:32 . 2009-10-23 20:32 20480 -c--a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.17\itstv.exe
2009-10-21 05:39 . 2004-08-19 23:09 75776 ----a-w- c:\windows\system32\strmfilt.dll
2009-10-21 05:39 . 2004-08-19 23:09 25088 ----a-w- c:\windows\system32\httpapi.dll
2009-10-20 16:20 . 2004-08-04 06:00 265728 ------w- c:\windows\system32\drivers\http.sys
2009-10-18 13:38 . 2009-10-18 13:38 20480 -c--a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.16\itstv.exe
2009-10-15 09:37 . 2009-10-15 09:37 20480 -c--a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.15\itstv.exe
2009-10-13 10:33 . 2002-08-30 12:00 271360 ----a-w- c:\windows\system32\oakley.dll
2009-10-12 13:39 . 2002-08-30 12:00 79872 ----a-w- c:\windows\system32\raschap.dll
2009-10-12 13:39 . 2002-08-30 12:00 150528 ----a-w- c:\windows\system32\rastls.dll
2009-10-12 12:00 . 2009-10-12 12:00 20480 -c--a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.14\itstv.exe
2009-10-08 17:14 . 2009-10-08 17:14 20480 -c--a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.13\itstv.exe
2009-10-05 15:22 . 2009-10-05 15:22 20480 -c--a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.12\itstv.exe
2009-10-03 08:26 . 2009-10-03 08:26 20480 -c--a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.11\itstv.exe
2008-04-01 07:03 . 2008-04-01 06:35 229 ----a-w- c:\program files\www.eMule-island.com.url
2007-12-20 21:51 . 2008-04-01 06:35 195568888 ----a-w- c:\program files\Nero-8.2.8.0_fra_trial.exe
2007-02-19 16:11 . 2007-02-19 16:11 144 -c--a-w- c:\program files\VirtualDub.jobs
2007-02-14 15:02 . 2007-02-14 15:02 1304425 -c--a-w- c:\program files\VirtualDub-1.7.1.zip
2007-02-06 20:28 . 2007-02-15 12:32 234263 -c--a-w- c:\program files\VirtualDub.chm
2007-02-06 20:24 . 2007-02-15 12:32 915968 ----a-w- c:\program files\VirtualDub.exe
2007-02-06 20:24 . 2007-02-15 12:32 195969 -c--a-w- c:\program files\VirtualDub.vdi
2007-02-06 20:22 . 2007-02-15 12:32 33792 ----a-w- c:\program files\auxsetup.exe
2007-02-06 20:22 . 2007-02-15 12:32 8704 ----a-w- c:\program files\vdub.exe
2007-02-06 20:22 . 2007-02-15 12:32 31232 ----a-w- c:\program files\vdremote.dll
2007-02-06 20:22 . 2007-02-15 12:32 29696 ----a-w- c:\program files\vdicmdrv.dll
2007-02-06 20:21 . 2007-02-15 12:32 25088 ----a-w- c:\program files\vdsvrlnk.dll
2006-06-02 14:57 . 2006-06-02 14:57 774144 ----a-w- c:\program files\RngInterstitial.dll
2006-06-02 14:57 . 2006-06-02 14:57 112640 -c--a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
2006-05-03 09:06 . 2009-08-12 09:21 163328 --sh--r- c:\windows\system32\flvDX.dll
2007-02-21 10:47 . 2009-08-12 09:21 31232 -csh--r- c:\windows\system32\msfDX.dll
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-03-28 68856]
"WindowsLivePhone"="c:\program files\Windows Live\Device Manager\msgrdvmn.exe" [2008-12-22 787816]
"RomStation"="c:\program files\RomStation\RomStation.exe" [2009-12-17 949760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\System32\NvCpl.dll" [2006-03-09 7561216]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
"NeroFilterCheck"="c:\program files\Fichiers communs\Nero\Lib\NeroCheck.exe" [2007-03-01 153136]
"NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2007-12-03 2213160]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-09-06 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-09-10 289576]
"nwiz"="nwiz.exe" [2006-03-09 1519616]
"nod32kui"="c:\program files\Eset\nod32kui.exe" [2009-12-28 917504]
"LifeChat"="c:\program files\Microsoft LifeChat\LifeChat.exe" [2008-08-21 267296]
"WindowsLivePhone"="c:\program files\Windows Live\Device Manager\msgrdvmn.exe" [2008-12-22 787816]
"ISUSPM"="c:\program files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe" [2006-03-20 213936]
"WheelMouse"="c:\xtreme~1\wh_exec.exe" [2008-10-08 98304]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2009-10-06 198160]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]
"Adobe ARM"="c:\program files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" [2009-09-04 935288]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]
c:\documents and settings\CE cablitec\Menu D‚marrer\Programmes\D‚marrage\
reminder-Enregistrement du produit ScanSoft.lnk - c:\program files\TextBridge Pro 8.0\Ereg\REMIND32.EXE [2006-6-1 67584]
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"%windir%\\system32\\sessmgr.exe"=
R1 ewido security suite driver;ewido security suite driver;c:\program files\ewido anti-malware\guard.sys [30/12/2005 12:12 3072]
R3 whfltr2k;WheelMouse USB Lower Filter Driver;c:\windows\system32\drivers\whfltr2k.sys [25/01/2007 23:45 6784]
S2 gupdate1ca19b16c1c692c;Service Google Update (gupdate1ca19b16c1c692c);c:\program files\Google\Update\GoogleUpdate.exe [10/08/2009 12:55 133104]
S3 PIXMC10;JVC Communication PIX-MC10 Driver;c:\windows\system32\drivers\pixmc10c.sys [20/12/2009 17:15 31232]
S3 PIXMC10A;JVC PIX-MC10 Audio Capture;c:\windows\system32\drivers\pixmc10a.sys [20/12/2009 17:16 28060]
S3 PIXMC10V;JVC PIX-MC10 Video Capture;c:\windows\system32\drivers\pixmc10v.sys [20/12/2009 17:16 22652]
S3 SIWIO;SIWIO;\??\c:\windows\TEMP\SiwIo.sys --> c:\windows\TEMP\SiwIo.sys [?]
--- Autres Services/Pilotes en mémoire ---
*NewlyCreated* - ALG
.
------- Examen supplémentaire -------
.
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uStart Page = hxxp://y.lo.st
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = <local>
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Consulter les dictionnaires (SYSTRAN) - c:\program files\SYSTRAN\6\\GUIres.dll/lookup.js
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Traduire (SYSTRAN) - c:\program files\SYSTRAN\6\\GUIres.dll/translate.js
LSP: imon.dll
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
DPF: {9DF1C00D-8426-4337-972C-DC042D19A916} - hxxp://webtv.guidetv.orange.fr/resources/OCS_8971.cab
FF - ProfilePath - c:\documents and settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\mlz328fj.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://y.lo.st
FF - component: c:\program files\Mozilla Firefox\components\GoogleDesktopMozilla.dll
FF - component: c:\program files\real\realplayer\browserrecord\firefox\ext\components\nprpffbrowserrecordext.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npgcplug.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npracplug.dll
FF - plugin: c:\program files\Real\RealArcade\Plugins\Mozilla\npracplug.dll
---- PARAMETRES FIREFOX ----
FF - user.js: yahoo.homepage.dontask - true.
- - - - ORPHELINS SUPPRIMES - - - -
HKCU-Run-BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} - c:\program files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
HKCU-Run-MealRdr - c:\docume~1\ADMINI~1\APPLIC~1\16ISOW~1\Dale Eggs.exe
HKLM-Run-EoEngine - (no file)
AddRemove-Sitesurfregs - c:\docume~1\ADMINI~1\APPLIC~1\16ISOW~1\Dale Eggs.exe
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-29 19:19
Windows 5.1.2600 Service Pack 3 NTFS
Recherche de processus cachés ...
Recherche d'éléments en démarrage automatique cachés ...
Recherche de fichiers cachés ...
Scan terminé avec succès
Fichiers cachés: 0
**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\€–€|ÿÿÿÿÀ•€|ù•9~*]
"C040AC1900063D11C8EF10054038389C"="C?\\WINDOWS\\System32\\FM20ENU.DLL"
.
--------------------- DLLs chargées dans les processus actifs ---------------------
- - - - - - - > 'lsass.exe'(764)
c:\windows\system32\imon.dll
c:\program files\Eset\pr_imon.dll
- - - - - - - > 'explorer.exe'(3496)
c:\windows\system32\nview.dll
c:\windows\system32\NVWRSFR.DLL
c:\xtreme~1\wh_hook.dll
c:\windows\system32\eappprxy.dll
c:\windows\system32\nvwddi.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
c:\program files\ewido anti-malware\ewidoctrl.exe
c:\program files\Fichiers communs\LightScribe\LSSrvc.exe
c:\program files\Nero\Nero8\Nero BackItUp\NBService.exe
c:\program files\Eset\nod32krn.exe
c:\windows\System32\nvsvc32.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\windows\system32\rundll32.exe
c:\program files\iPod\bin\iPodService.exe
c:\program files\Java\jre1.6.0_07\bin\jucheck.exe
.
**************************************************************************
.
Heure de fin: 2009-12-29 19:25:36 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-12-29 18:25
Avant-CF: 18Â 715Â 815Â 936 octets libres
Après-CF: 18 861 871 104 octets libres
WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel" /fastdetect /NoExecute=OptIn /usepmtimer
- - End Of File - - 66AADF7F7C12CCF309CD6DD8BE78DC67
ouf enfin le rapport et après ??
ComboFix 09-12-28.06 - Administrateur 29/12/2009 19:05:37.1.1 - x86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.1535.1195 [GMT 1:00]
Lancé depuis: c:\documents and settings\Administrateur\Bureau\killrootkit.exe
AV: NOD32 Antivirus System 2.50 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
* Un antivirus résident est actif
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\Administrateur\Local Settings\Application Data\Bron.tok.A17.em.bin
c:\documents and settings\Administrateur\Local Settings\Application Data\Kosong.Bron.Tok.txt
c:\documents and settings\Administrateur\Local Settings\Application Data\ListHost17.txt
c:\windows\system32\drivers\H8SRToyxrywqjuh.sys
c:\windows\system32\H8SRTaojydjempm.dll
c:\windows\system32\H8SRToedoqawvsw.dat
c:\windows\system32\H8SRTurvpwqtiej.dll
c:\windows\system32\krl32mainweq.dll
c:\windows\system32\srcr.dat
c:\windows\system32\TT.EXE
.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Service_H8SRTd.sys
-------\Legacy_H8SRTd.sys
((((((((((((((((((((((((((((( Fichiers créés du 2009-11-28 au 2009-12-29 ))))))))))))))))))))))))))))))))))))
.
2009-12-27 22:43 . 2009-12-27 22:43 -------- d-----w- c:\documents and settings\Administrateur\Application Data\Malwarebytes
2009-12-27 22:34 . 2009-12-03 15:14 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-27 22:34 . 2009-12-27 22:34 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-12-27 22:34 . 2009-12-27 23:32 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-12-27 22:34 . 2009-12-03 15:13 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-12-24 17:10 . 2009-12-24 17:11 -------- d-----w- c:\program files\trend micro
2009-12-24 17:10 . 2009-12-24 17:11 -------- d-----w- C:\rsit
2009-12-22 10:14 . 2009-12-22 10:14 12825 ----a-w- c:\windows\W3DemoUnin.dat
2009-12-22 10:14 . 2009-12-22 10:14 2829 ----a-w- c:\windows\W3DemoUnin.pif
2009-12-22 10:14 . 2009-12-22 10:14 126976 ----a-w- c:\windows\W3DemoUnin.exe
2009-12-21 06:59 . 2009-12-21 06:59 -------- d-----w- c:\windows\Cache
2009-12-20 16:17 . 2008-04-13 19:39 5504 -c--a-w- c:\windows\system32\dllcache\mstee.sys
2009-12-20 16:17 . 2008-04-13 19:39 5504 ----a-w- c:\windows\system32\drivers\MSTEE.sys
2009-12-20 16:17 . 2008-04-13 19:46 10880 -c--a-w- c:\windows\system32\dllcache\ndisip.sys
2009-12-20 16:17 . 2008-04-13 19:46 10880 ----a-w- c:\windows\system32\drivers\NdisIP.sys
2009-12-20 16:17 . 2008-04-13 19:46 15232 -c--a-w- c:\windows\system32\dllcache\streamip.sys
2009-12-20 16:17 . 2008-04-13 19:46 15232 ----a-w- c:\windows\system32\drivers\StreamIP.sys
2009-12-20 16:17 . 2008-04-13 19:46 11136 -c--a-w- c:\windows\system32\dllcache\slip.sys
2009-12-20 16:17 . 2008-04-13 19:46 11136 ----a-w- c:\windows\system32\drivers\SLIP.sys
2009-12-20 16:17 . 2008-04-13 19:46 19200 -c--a-w- c:\windows\system32\dllcache\wstcodec.sys
2009-12-20 16:17 . 2008-04-13 19:46 19200 ----a-w- c:\windows\system32\drivers\WSTCODEC.SYS
2009-12-20 16:17 . 2008-04-13 19:46 85248 -c--a-w- c:\windows\system32\dllcache\nabtsfec.sys
2009-12-20 16:17 . 2008-04-13 19:46 85248 ----a-w- c:\windows\system32\drivers\NABTSFEC.sys
2009-12-20 16:16 . 2008-04-13 19:46 17024 -c--a-w- c:\windows\system32\dllcache\ccdecode.sys
2009-12-20 16:16 . 2008-04-13 19:46 17024 ----a-w- c:\windows\system32\drivers\CCDECODE.sys
2009-12-20 16:16 . 2002-10-03 23:14 28060 ----a-r- c:\windows\system32\drivers\pixmc10a.sys
2009-12-20 16:16 . 2002-05-08 20:12 102400 ----a-r- c:\windows\system32\MpvpxX86.dll
2009-12-20 16:16 . 2002-05-08 20:12 98304 ----a-r- c:\windows\system32\MpvpxSSE.dll
2009-12-20 16:16 . 2002-05-08 20:12 102400 ----a-r- c:\windows\system32\MpvpxMMX.dll
2009-12-20 16:16 . 2002-11-28 01:13 22652 ----a-r- c:\windows\system32\drivers\pixmc10v.sys
2009-12-20 16:16 . 2008-04-14 03:33 54784 -c--a-w- c:\windows\system32\dllcache\vfwwdm32.dll
2009-12-20 16:16 . 2008-04-14 03:33 54784 ----a-w- c:\windows\system32\vfwwdm32.dll
2009-12-20 16:15 . 2002-09-27 19:42 31232 ----a-r- c:\windows\system32\drivers\pixmc10c.sys
2009-12-20 16:10 . 2009-12-20 16:28 -------- d-----w- c:\program files\Digital Photo Navigator 1.0
2009-12-20 16:09 . 2009-12-20 16:09 -------- d-----w- C:\MWASPI
2009-12-20 16:09 . 2000-03-29 16:11 8096 ------w- c:\windows\system32\drivers\MASPINT.SYS
2009-12-20 16:09 . 1999-10-22 16:58 4030 ------w- c:\windows\system\WINASPI.DLL
2009-12-20 16:09 . 1997-06-11 18:01 30208 ------w- c:\windows\system32\WNASPI32.DLL
2009-12-20 16:09 . 1997-02-28 02:00 2486 ------w- c:\windows\system\AS16POST.BIN
2009-12-20 16:06 . 2009-12-20 16:06 -------- d-----w- c:\program files\PIXELA
2009-12-19 10:57 . 2009-12-19 10:57 -------- d-sh--w- c:\documents and settings\All Users\Application Data\SecuROM
2009-12-18 10:27 . 2009-12-19 11:03 -------- d-----w- c:\program files\Nouveau dossier
2009-12-18 09:04 . 2007-03-15 15:57 443752 ----a-w- c:\windows\system32\d3dx10_33.dll
2009-12-18 09:03 . 2009-12-18 09:03 -------- d-----w- c:\windows\system32\AGEIA
2009-12-18 09:03 . 2009-12-18 09:03 -------- d-----w- c:\program files\AGEIA Technologies
2009-12-18 09:03 . 2009-12-18 09:03 -------- d-----w- c:\program files\Fichiers communs\Wise Installation Wizard
2009-12-18 08:34 . 2009-12-19 11:04 -------- d-----w- c:\program files\Borderland
2009-12-14 23:29 . 2009-12-14 23:30 -------- d-----w- c:\program files\CCleaner
2009-12-14 23:02 . 2009-11-02 19:42 195456 ------w- c:\windows\system32\MpSigStub.exe
2009-12-11 19:02 . 2009-12-14 23:12 4181 ----a-w- c:\documents and settings\Administrateur\Local Settings\Application Data\msfflk.dat
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-12-28 21:36 . 2009-07-27 19:57 -------- d-----w- c:\program files\Eset
2009-12-28 19:33 . 2009-07-27 20:01 270336 ----a-w- c:\windows\system32\imon.dll
2009-12-28 19:33 . 2009-07-27 20:01 502208 ----a-w- c:\windows\system32\drivers\amon.sys
2009-12-26 23:38 . 2009-12-26 23:38 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.61\itstv.exe
2009-12-26 12:34 . 2009-12-26 12:34 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.60\itstv.exe
2009-12-26 00:25 . 2009-07-12 11:20 -------- d-----w- c:\documents and settings\Administrateur\Application Data\EoRezo
2009-12-25 19:14 . 2009-08-01 10:08 -------- d-----w- c:\documents and settings\Administrateur\Application Data\uTorrent
2009-12-25 17:13 . 2009-12-25 17:13 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.59\itstv.exe
2009-12-24 07:00 . 2009-12-24 07:00 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.58\itstv.exe
2009-12-23 21:24 . 2009-07-27 13:34 -------- d-----w- c:\program files\Atmosphere Deluxe
2009-12-23 02:08 . 2009-12-23 02:08 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.57\itstv.exe
2009-12-22 10:14 . 2009-06-02 19:24 -------- d-----w- c:\program files\Warcraft III Demo
2009-12-22 09:08 . 2009-12-22 09:08 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.56\itstv.exe
2009-12-21 07:07 . 2007-01-05 12:16 -------- d-----w- c:\program files\VCW VicMan's Photo Editor
2009-12-21 02:46 . 2009-12-21 02:46 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.55\itstv.exe
2009-12-20 16:16 . 2002-08-30 12:00 64492 ----a-w- c:\windows\system32\perfc00C.dat
2009-12-20 16:16 . 2002-08-30 12:00 447772 ----a-w- c:\windows\system32\perfh00C.dat
2009-12-20 16:10 . 2006-06-01 11:18 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-12-19 23:46 . 2009-12-19 23:46 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.54\itstv.exe
2009-12-19 09:45 . 2009-12-19 09:45 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.53\itstv.exe
2009-12-18 09:04 . 2009-12-18 09:04 -------- d-----w- c:\program files\DIFX
2009-12-18 00:45 . 2009-12-18 00:45 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.52\itstv.exe
2009-12-16 23:44 . 2009-12-16 23:44 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.51\itstv.exe
2009-12-16 05:44 . 2009-12-16 05:44 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.50\itstv.exe
2009-12-15 06:43 . 2006-06-15 07:32 -------- d-----w- c:\program files\ewido anti-malware
2009-12-15 00:01 . 2007-06-06 12:51 -------- d-----w- c:\documents and settings\Administrateur\Application Data\16ISOWARN
2009-12-14 23:44 . 2009-12-14 23:44 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.49\itstv.exe
2009-12-14 22:58 . 2006-06-14 13:07 -------- d-----w- c:\program files\eMule
2009-12-13 23:43 . 2009-12-13 23:43 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.48\itstv.exe
2009-12-13 01:55 . 2009-12-13 01:55 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.47\itstv.exe
2009-12-12 01:03 . 2009-12-12 01:03 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.46\itstv.exe
2009-12-11 00:02 . 2009-12-11 00:02 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.45\itstv.exe
2009-12-10 16:02 . 2009-12-10 16:02 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.44\itstv.exe
2009-12-09 12:06 . 2009-10-31 07:53 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-12-07 19:00 . 2009-11-13 09:50 -------- d-----w- c:\program files\RomStation
2009-12-07 01:56 . 2009-12-07 01:56 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.43\itstv.exe
2009-12-05 07:49 . 2009-12-05 07:49 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.42\itstv.exe
2009-12-03 04:48 . 2009-12-03 04:48 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.41\itstv.exe
2009-12-02 14:48 . 2009-12-02 14:48 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.40\itstv.exe
2009-11-29 01:46 . 2009-11-29 01:46 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.39\itstv.exe
2009-11-27 22:46 . 2009-11-27 22:46 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.38\itstv.exe
2009-11-25 00:37 . 2009-11-25 00:37 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.37\itstv.exe
2009-11-24 08:50 . 2009-11-24 08:50 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.36\itstv.exe
2009-11-19 23:48 . 2009-11-19 23:48 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.35\itstv.exe
2009-11-18 23:48 . 2009-11-18 23:48 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.34\itstv.exe
2009-11-18 09:30 . 2009-11-18 09:30 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.33\itstv.exe
2009-11-17 00:29 . 2009-11-17 00:29 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.32\itstv.exe
2009-11-15 23:56 . 2009-11-15 23:56 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.31\itstv.exe
2009-11-15 00:56 . 2009-11-15 00:56 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.30\itstv.exe
2009-11-14 00:57 . 2009-11-14 00:57 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.29\itstv.exe
2009-11-13 11:57 . 2009-11-13 11:57 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.28\itstv.exe
2009-11-13 10:11 . 2006-06-01 11:29 -------- d-----w- c:\program files\Fichiers communs\Adobe
2009-11-12 03:35 . 2009-11-12 03:35 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.27\itstv.exe
2009-11-10 03:36 . 2009-11-10 03:36 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.26\itstv.exe
2009-11-08 04:55 . 2009-11-08 04:55 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.25\itstv.exe
2009-11-08 03:14 . 2006-06-07 13:26 72576 -c--a-w- c:\documents and settings\Administrateur\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-11-08 02:41 . 2009-10-31 08:03 -------- d-----w- c:\program files\Microsoft Works
2009-11-07 10:51 . 2009-11-06 07:44 -------- d-----w- c:\program files\Microsoft Silverlight
2009-11-06 09:21 . 2009-11-06 09:21 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.24\itstv.exe
2009-11-06 07:44 . 2009-11-06 07:41 -------- d-----w- c:\program files\Microsoft
2009-11-06 07:44 . 2009-11-06 07:44 -------- d-----w- c:\program files\Microsoft Office Outlook Connector
2009-11-06 07:43 . 2009-07-29 16:36 -------- d-----w- c:\program files\Windows Live
2009-11-06 07:43 . 2009-11-06 07:43 -------- d-----w- c:\program files\Microsoft Sync Framework
2009-11-04 10:33 . 2009-11-04 10:33 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.23\itstv.exe
2009-11-02 11:03 . 2009-11-02 11:03 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.22\itstv.exe
2009-10-31 08:03 . 2009-10-31 08:03 -------- d-----w- c:\program files\MSBuild
2009-10-31 08:01 . 2009-10-31 08:01 -------- d-----w- c:\program files\Microsoft.NET
2009-10-31 00:26 . 2009-10-31 00:27 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.21\itstv.exe
2009-10-30 02:31 . 2009-10-30 02:31 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.20\itstv.exe
2009-10-29 07:44 . 2006-02-24 13:21 832512 ----a-w- c:\windows\system32\wininet.dll
2009-10-29 07:44 . 2004-08-19 23:09 78336 ----a-w- c:\windows\system32\ieencode.dll
2009-10-29 07:44 . 2002-08-30 12:00 17408 ------w- c:\windows\system32\corpol.dll
2009-10-27 19:02 . 2009-10-27 19:02 20480 ----a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.19\itstv.exe
2009-10-24 23:37 . 2009-10-24 23:37 20480 -c--a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.18\itstv.exe
2009-10-23 20:32 . 2009-10-23 20:32 20480 -c--a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.17\itstv.exe
2009-10-21 05:39 . 2004-08-19 23:09 75776 ----a-w- c:\windows\system32\strmfilt.dll
2009-10-21 05:39 . 2004-08-19 23:09 25088 ----a-w- c:\windows\system32\httpapi.dll
2009-10-20 16:20 . 2004-08-04 06:00 265728 ------w- c:\windows\system32\drivers\http.sys
2009-10-18 13:38 . 2009-10-18 13:38 20480 -c--a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.16\itstv.exe
2009-10-15 09:37 . 2009-10-15 09:37 20480 -c--a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.15\itstv.exe
2009-10-13 10:33 . 2002-08-30 12:00 271360 ----a-w- c:\windows\system32\oakley.dll
2009-10-12 13:39 . 2002-08-30 12:00 79872 ----a-w- c:\windows\system32\raschap.dll
2009-10-12 13:39 . 2002-08-30 12:00 150528 ----a-w- c:\windows\system32\rastls.dll
2009-10-12 12:00 . 2009-10-12 12:00 20480 -c--a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.14\itstv.exe
2009-10-08 17:14 . 2009-10-08 17:14 20480 -c--a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.13\itstv.exe
2009-10-05 15:22 . 2009-10-05 15:22 20480 -c--a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.12\itstv.exe
2009-10-03 08:26 . 2009-10-03 08:26 20480 -c--a-w- c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.11\itstv.exe
2008-04-01 07:03 . 2008-04-01 06:35 229 ----a-w- c:\program files\www.eMule-island.com.url
2007-12-20 21:51 . 2008-04-01 06:35 195568888 ----a-w- c:\program files\Nero-8.2.8.0_fra_trial.exe
2007-02-19 16:11 . 2007-02-19 16:11 144 -c--a-w- c:\program files\VirtualDub.jobs
2007-02-14 15:02 . 2007-02-14 15:02 1304425 -c--a-w- c:\program files\VirtualDub-1.7.1.zip
2007-02-06 20:28 . 2007-02-15 12:32 234263 -c--a-w- c:\program files\VirtualDub.chm
2007-02-06 20:24 . 2007-02-15 12:32 915968 ----a-w- c:\program files\VirtualDub.exe
2007-02-06 20:24 . 2007-02-15 12:32 195969 -c--a-w- c:\program files\VirtualDub.vdi
2007-02-06 20:22 . 2007-02-15 12:32 33792 ----a-w- c:\program files\auxsetup.exe
2007-02-06 20:22 . 2007-02-15 12:32 8704 ----a-w- c:\program files\vdub.exe
2007-02-06 20:22 . 2007-02-15 12:32 31232 ----a-w- c:\program files\vdremote.dll
2007-02-06 20:22 . 2007-02-15 12:32 29696 ----a-w- c:\program files\vdicmdrv.dll
2007-02-06 20:21 . 2007-02-15 12:32 25088 ----a-w- c:\program files\vdsvrlnk.dll
2006-06-02 14:57 . 2006-06-02 14:57 774144 ----a-w- c:\program files\RngInterstitial.dll
2006-06-02 14:57 . 2006-06-02 14:57 112640 -c--a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
2006-05-03 09:06 . 2009-08-12 09:21 163328 --sh--r- c:\windows\system32\flvDX.dll
2007-02-21 10:47 . 2009-08-12 09:21 31232 -csh--r- c:\windows\system32\msfDX.dll
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-03-28 68856]
"WindowsLivePhone"="c:\program files\Windows Live\Device Manager\msgrdvmn.exe" [2008-12-22 787816]
"RomStation"="c:\program files\RomStation\RomStation.exe" [2009-12-17 949760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\System32\NvCpl.dll" [2006-03-09 7561216]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
"NeroFilterCheck"="c:\program files\Fichiers communs\Nero\Lib\NeroCheck.exe" [2007-03-01 153136]
"NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2007-12-03 2213160]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-09-06 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-09-10 289576]
"nwiz"="nwiz.exe" [2006-03-09 1519616]
"nod32kui"="c:\program files\Eset\nod32kui.exe" [2009-12-28 917504]
"LifeChat"="c:\program files\Microsoft LifeChat\LifeChat.exe" [2008-08-21 267296]
"WindowsLivePhone"="c:\program files\Windows Live\Device Manager\msgrdvmn.exe" [2008-12-22 787816]
"ISUSPM"="c:\program files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe" [2006-03-20 213936]
"WheelMouse"="c:\xtreme~1\wh_exec.exe" [2008-10-08 98304]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2009-10-06 198160]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]
"Adobe ARM"="c:\program files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" [2009-09-04 935288]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]
c:\documents and settings\CE cablitec\Menu D‚marrer\Programmes\D‚marrage\
reminder-Enregistrement du produit ScanSoft.lnk - c:\program files\TextBridge Pro 8.0\Ereg\REMIND32.EXE [2006-6-1 67584]
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"%windir%\\system32\\sessmgr.exe"=
R1 ewido security suite driver;ewido security suite driver;c:\program files\ewido anti-malware\guard.sys [30/12/2005 12:12 3072]
R3 whfltr2k;WheelMouse USB Lower Filter Driver;c:\windows\system32\drivers\whfltr2k.sys [25/01/2007 23:45 6784]
S2 gupdate1ca19b16c1c692c;Service Google Update (gupdate1ca19b16c1c692c);c:\program files\Google\Update\GoogleUpdate.exe [10/08/2009 12:55 133104]
S3 PIXMC10;JVC Communication PIX-MC10 Driver;c:\windows\system32\drivers\pixmc10c.sys [20/12/2009 17:15 31232]
S3 PIXMC10A;JVC PIX-MC10 Audio Capture;c:\windows\system32\drivers\pixmc10a.sys [20/12/2009 17:16 28060]
S3 PIXMC10V;JVC PIX-MC10 Video Capture;c:\windows\system32\drivers\pixmc10v.sys [20/12/2009 17:16 22652]
S3 SIWIO;SIWIO;\??\c:\windows\TEMP\SiwIo.sys --> c:\windows\TEMP\SiwIo.sys [?]
--- Autres Services/Pilotes en mémoire ---
*NewlyCreated* - ALG
.
------- Examen supplémentaire -------
.
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uStart Page = hxxp://y.lo.st
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = <local>
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Consulter les dictionnaires (SYSTRAN) - c:\program files\SYSTRAN\6\\GUIres.dll/lookup.js
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Traduire (SYSTRAN) - c:\program files\SYSTRAN\6\\GUIres.dll/translate.js
LSP: imon.dll
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
DPF: {9DF1C00D-8426-4337-972C-DC042D19A916} - hxxp://webtv.guidetv.orange.fr/resources/OCS_8971.cab
FF - ProfilePath - c:\documents and settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\mlz328fj.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://y.lo.st
FF - component: c:\program files\Mozilla Firefox\components\GoogleDesktopMozilla.dll
FF - component: c:\program files\real\realplayer\browserrecord\firefox\ext\components\nprpffbrowserrecordext.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npgcplug.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npracplug.dll
FF - plugin: c:\program files\Real\RealArcade\Plugins\Mozilla\npracplug.dll
---- PARAMETRES FIREFOX ----
FF - user.js: yahoo.homepage.dontask - true.
- - - - ORPHELINS SUPPRIMES - - - -
HKCU-Run-BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} - c:\program files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
HKCU-Run-MealRdr - c:\docume~1\ADMINI~1\APPLIC~1\16ISOW~1\Dale Eggs.exe
HKLM-Run-EoEngine - (no file)
AddRemove-Sitesurfregs - c:\docume~1\ADMINI~1\APPLIC~1\16ISOW~1\Dale Eggs.exe
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-29 19:19
Windows 5.1.2600 Service Pack 3 NTFS
Recherche de processus cachés ...
Recherche d'éléments en démarrage automatique cachés ...
Recherche de fichiers cachés ...
Scan terminé avec succès
Fichiers cachés: 0
**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\€–€|ÿÿÿÿÀ•€|ù•9~*]
"C040AC1900063D11C8EF10054038389C"="C?\\WINDOWS\\System32\\FM20ENU.DLL"
.
--------------------- DLLs chargées dans les processus actifs ---------------------
- - - - - - - > 'lsass.exe'(764)
c:\windows\system32\imon.dll
c:\program files\Eset\pr_imon.dll
- - - - - - - > 'explorer.exe'(3496)
c:\windows\system32\nview.dll
c:\windows\system32\NVWRSFR.DLL
c:\xtreme~1\wh_hook.dll
c:\windows\system32\eappprxy.dll
c:\windows\system32\nvwddi.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
c:\program files\ewido anti-malware\ewidoctrl.exe
c:\program files\Fichiers communs\LightScribe\LSSrvc.exe
c:\program files\Nero\Nero8\Nero BackItUp\NBService.exe
c:\program files\Eset\nod32krn.exe
c:\windows\System32\nvsvc32.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\windows\system32\rundll32.exe
c:\program files\iPod\bin\iPodService.exe
c:\program files\Java\jre1.6.0_07\bin\jucheck.exe
.
**************************************************************************
.
Heure de fin: 2009-12-29 19:25:36 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-12-29 18:25
Avant-CF: 18Â 715Â 815Â 936 octets libres
Après-CF: 18 861 871 104 octets libres
WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel" /fastdetect /NoExecute=OptIn /usepmtimer
- - End Of File - - 66AADF7F7C12CCF309CD6DD8BE78DC67
C'est mieux ?
Télécharge Ad-Remover (de Cyrildu17 / C_XX) sur ton Bureau.
/!\ Déconnecte-toi et ferme toutes applications en cours /!\
Double-clique sur AD-R situé sur ton Bureau pour le lancer.
(Sous Vista, il faut cliquer droit sur AD-R et choisir Exécuter en tant qu'administrateur)
Choisis la langue F pour français.
Au menu principal, choisis l'option L.
/!\ Laisse travailler l'outil /!\
Poste le rapport qui apparaît à la fin (C:\Ad-Report-CLEAN.log).
(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)
Note : "Process.exe", une composante de l'outil, est détectée par certains antivirus (AntiVir, Kaspersky, etc.) comme étant un RiskTool. Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
/!\ Déconnecte-toi et ferme toutes applications en cours /!\
(Sous Vista, il faut cliquer droit sur AD-R et choisir Exécuter en tant qu'administrateur)
/!\ Laisse travailler l'outil /!\
(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)
Note : "Process.exe", une composante de l'outil, est détectée par certains antivirus (AntiVir, Kaspersky, etc.) comme étant un RiskTool. Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
c'est mieux dans le sens que j'arrive enfin a avoir des rapports...
mais ca ne me parle pas
.
======= RAPPORT D'AD-REMOVER 1.1.4.6_F | UNIQUEMENT XP/VISTA/7 =======
.
Mit à jour par C_XX le 26.12.2009 à 20:47
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à : 18:42:44, 31/12/2009 | Mode Normal | Option: CLEAN
Exécuté de: C:\Program Files\Ad-Remover\
Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
Nom du PC: CE | Utilisateur actuel: Administrateur
Bonnes fêtes de fin d'année à vous tous
.
============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
.
C:\Program Files\AskTBar
C:\DOCUME~1\ADMINI~1\APPLIC~1\EoRezo
(!) -- Fichiers temporaires supprimés.
.
HKCU\software\EoRezo
HKCU\software\Grand Virtual
.
============== Scan additionnel ==============
.
.
* Mozilla FireFox Version 3.5.6 [fr] *
.
Nom du profil: mlz328fj.default (Administrateur)
.
(ADMINI~1, Invalidprefs.js) Browser.download.lastDir, C:\Documents and Settings\Administrateur\Mes documents\Mes images
(ADMINI~1, Invalidprefs.js) Browser.search.selectedEngine, Google
(ADMINI~1, Invalidprefs.js) Browser.startup.homepage, hxxp://y.lo.st
(ADMINI~1, Invalidprefs.js) Extensions.enabledItems, {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.0,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.5
.
(ADMINI~1, Invalidprefs.js) EFFACE - Browser.startup.homepage, hxxp://y.lo.st
.
(ADMINI~1, prefs.js) Browser.download.lastDir, C:\Documents and Settings\Administrateur\Mes documents\Mes images
(ADMINI~1, prefs.js) Browser.search.selectedEngine, Google
(ADMINI~1, prefs.js) Browser.startup.homepage, hxxp://y.lo.st
(ADMINI~1, prefs.js) Extensions.enabledItems, {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.0,{635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.5.4.20081105,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.6
.
(ADMINI~1, prefs.js) EFFACE - Browser.startup.homepage, hxxp://y.lo.st
.
.
.
* Internet Explorer Version 7.0.5730.13 *
.
[HKEY_CURRENT_USER\..\Internet Explorer\Main]
.
Do404Search: 01000000
Local Page: C:\WINDOWS\system32\blank.htm
Show_ToolBar: yes
Enable Browser Extensions: yes
Use Search Asst: no
Start Page: hxxp://fr.msn.com/
Use Custom Search URL: 1 (0x1)
Default_search_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Default_page_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnh...
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
.
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnh...
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: %SystemRoot%\system32\blank.htm
Start Page: hxxp://fr.msn.com/
Search bar: hxxp://search.msn.com/spbasic.htm
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
.
Tabs: res://ieframe.dll/tabswelcome.htm
.
============== Suspect (Cracks, Serials, ...) ==============
.
C:\Documents and Settings\Administrateur\Application Data\uTorrent\Kingdom Hearts 358-2 DAYS Patch‚.nds.torrent
C:\Documents and Settings\Administrateur\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Clone DVD - Clone CD and Any DVD + cracks april 2007.rar
C:\Documents and Settings\Administrateur\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\SetupAnyDVD6090.exe
C:\Documents and Settings\Administrateur\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Slysoft_1.38.exe
C:\Documents and Settings\Administrateur\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\slysoft120306.exe
.
===================================
.
3760 Octet(s) - C:\Ad-Report-CLEAN[1].log
.
0 Fichier(s) - C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp
0 Fichier(s) - C:\WINDOWS\Temp
9 Fichier(s) - C:\WINDOWS\Prefetch
.
19 Fichier(s) - C:\Program Files\Ad-Remover\BACKUP
78 Fichier(s) - C:\Program Files\Ad-Remover\QUARANTINE
.
Fin à : 18:49:35 | 31/12/2009 - CLEAN[1]
.
============== E.O.F ==============
.
mais ca ne me parle pas
.
======= RAPPORT D'AD-REMOVER 1.1.4.6_F | UNIQUEMENT XP/VISTA/7 =======
.
Mit à jour par C_XX le 26.12.2009 à 20:47
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à : 18:42:44, 31/12/2009 | Mode Normal | Option: CLEAN
Exécuté de: C:\Program Files\Ad-Remover\
Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
Nom du PC: CE | Utilisateur actuel: Administrateur
Bonnes fêtes de fin d'année à vous tous
.
============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
.
C:\Program Files\AskTBar
C:\DOCUME~1\ADMINI~1\APPLIC~1\EoRezo
(!) -- Fichiers temporaires supprimés.
.
HKCU\software\EoRezo
HKCU\software\Grand Virtual
.
============== Scan additionnel ==============
.
.
* Mozilla FireFox Version 3.5.6 [fr] *
.
Nom du profil: mlz328fj.default (Administrateur)
.
(ADMINI~1, Invalidprefs.js) Browser.download.lastDir, C:\Documents and Settings\Administrateur\Mes documents\Mes images
(ADMINI~1, Invalidprefs.js) Browser.search.selectedEngine, Google
(ADMINI~1, Invalidprefs.js) Browser.startup.homepage, hxxp://y.lo.st
(ADMINI~1, Invalidprefs.js) Extensions.enabledItems, {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.0,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.5
.
(ADMINI~1, Invalidprefs.js) EFFACE - Browser.startup.homepage, hxxp://y.lo.st
.
(ADMINI~1, prefs.js) Browser.download.lastDir, C:\Documents and Settings\Administrateur\Mes documents\Mes images
(ADMINI~1, prefs.js) Browser.search.selectedEngine, Google
(ADMINI~1, prefs.js) Browser.startup.homepage, hxxp://y.lo.st
(ADMINI~1, prefs.js) Extensions.enabledItems, {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.0,{635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.5.4.20081105,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.6
.
(ADMINI~1, prefs.js) EFFACE - Browser.startup.homepage, hxxp://y.lo.st
.
.
.
* Internet Explorer Version 7.0.5730.13 *
.
[HKEY_CURRENT_USER\..\Internet Explorer\Main]
.
Do404Search: 01000000
Local Page: C:\WINDOWS\system32\blank.htm
Show_ToolBar: yes
Enable Browser Extensions: yes
Use Search Asst: no
Start Page: hxxp://fr.msn.com/
Use Custom Search URL: 1 (0x1)
Default_search_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Default_page_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnh...
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
.
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnh...
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: %SystemRoot%\system32\blank.htm
Start Page: hxxp://fr.msn.com/
Search bar: hxxp://search.msn.com/spbasic.htm
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
.
Tabs: res://ieframe.dll/tabswelcome.htm
.
============== Suspect (Cracks, Serials, ...) ==============
.
C:\Documents and Settings\Administrateur\Application Data\uTorrent\Kingdom Hearts 358-2 DAYS Patch‚.nds.torrent
C:\Documents and Settings\Administrateur\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Clone DVD - Clone CD and Any DVD + cracks april 2007.rar
C:\Documents and Settings\Administrateur\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\SetupAnyDVD6090.exe
C:\Documents and Settings\Administrateur\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Slysoft_1.38.exe
C:\Documents and Settings\Administrateur\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\slysoft120306.exe
.
===================================
.
3760 Octet(s) - C:\Ad-Report-CLEAN[1].log
.
0 Fichier(s) - C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp
0 Fichier(s) - C:\WINDOWS\Temp
9 Fichier(s) - C:\WINDOWS\Prefetch
.
19 Fichier(s) - C:\Program Files\Ad-Remover\BACKUP
78 Fichier(s) - C:\Program Files\Ad-Remover\QUARANTINE
.
Fin à : 18:49:35 | 31/12/2009 - CLEAN[1]
.
============== E.O.F ==============
.
- Ad-Remover
- Java(TM) 6 Update 4
- Java(TM) 6 Update 5
- Java(TM) 6 Update 7
Plus de souci ?
d'abord bonne année et merci de t'interresser aux autres...
j'ai plus les "gros soucis " de départ mais j'attend ton diag avec le rapport suivant:
Logfile of random's system information tool 1.06 (written by random/random)
Run by Administrateur at 2010-01-01 04:10:29
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 17 GB (11%) free of 153 GB
Total RAM: 1535 MB (58% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 04:10:34, on 01/01/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16945)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Microsoft LifeChat\LifeChat.exe
C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\RSIT.exe
C:\Program Files\trend micro\Administrateur.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll (file missing)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Multi_Media_France toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMult.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Multi_Media_France toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMult.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: SYSTRAN Toolbar - {95daa571-4def-4a6d-97d8-98a346672a24} - mscoree.dll (file missing)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [LifeChat] "C:\Program Files\Microsoft LifeChat\LifeChat.exe"
O4 - HKLM\..\Run: [WindowsLivePhone] C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe /AutoRun
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKLM\..\Run: [WheelMouse] C:\XTREME~1\wh_exec.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [WindowsLivePhone] "C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe" /AutoRun
O4 - HKCU\..\Run: [RomStation] "C:\Program Files\RomStation\RomStation.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Consulter les dictionnaires (SYSTRAN) - res://C:\Program Files\SYSTRAN\6\\GUIres.dll/lookup.js
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Traduire (SYSTRAN) - res://C:\Program Files\SYSTRAN\6\\GUIres.dll/translate.js
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {9DF1C00D-8426-4337-972C-DC042D19A916} (FTMediaPlayer Class) - http://webtv.guidetv.orange.fr/resources/OCS_8971.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = domvelocar.local
O17 - HKLM\Software\..\Telephony: DomainName = domvelocar.local
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = domvelocar.local
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = domvelocar.local
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: Service Google Update (gupdate1ca19b16c1c692c) (gupdate1ca19b16c1c692c) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
--
End of file - 9800 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\BD4240DE9E8DF182.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - c:\program files\real\realplayer\rpbrowserrecordplugin.dll [2009-10-06 329312]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7009fcd4-05be-44f4-9583-93fe419ab7b0}]
Multi_Media_France toolbar - C:\Program Files\Multi_Media_France\tbMult.dll [2007-06-18 1383448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-10 259696]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2009-11-13 764912]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll [2009-04-29 470512]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-01-01 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-01-01 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
EpsonToolBandKicker Class - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7009fcd4-05be-44f4-9583-93fe419ab7b0} - Multi_Media_France toolbar - C:\Program Files\Multi_Media_France\tbMult.dll [2007-06-18 1383448]
{EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-10 259696]
{95daa571-4def-4a6d-97d8-98a346672a24} - SYSTRAN Toolbar - C:\WINDOWS\system32\mscoree.dll [2006-12-22 271360]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\System32\NvCpl.dll [2006-03-09 7561216]
"NeroFilterCheck"=C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe [2007-03-01 153136]
"NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2007-12-03 2213160]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2008-09-06 413696]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-09-10 289576]
"nwiz"=nwiz.exe /install []
"nod32kui"=C:\Program Files\Eset\nod32kui.exe [2009-12-28 917504]
"LifeChat"=C:\Program Files\Microsoft LifeChat\LifeChat.exe [2008-08-21 267296]
"WindowsLivePhone"=C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe [2008-12-22 787816]
"ISUSPM"=C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe [2006-03-20 213936]
"WheelMouse"=C:\XTREME~1\wh_exec.exe [2008-10-08 98304]
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2009-10-06 198160]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"Adobe ARM"=C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2010-01-01 149280]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-03-28 68856]
"WindowsLivePhone"=C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe [2008-12-22 787816]
"RomStation"=C:\Program Files\RomStation\RomStation.exe [2009-12-17 949760]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2008-09-05 267304]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{54D9498B-CF93-414F-8984-8CE7FDE0D391}"=C:\Program Files\ewido anti-malware\shellhook.dll [2004-09-30 39488]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoBandCustomize"=0
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDrives"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\tactical ops 3.5\Infogrames\Tactical Ops\System\TacticalOps.exe"="C:\Program Files\tactical ops 3.5\Infogrames\Tactical Ops\System\TacticalOps.exe:*:Enabled:TacticalOps"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
======File associations======
.scr - open - C:\Program Files\VCW VicMan's Photo Editor\vcwphoto.exe %1
.scr - install -
.scr - config -
======List of files/folders created in the last 1 months======
2010-01-01 04:09:33 ----A---- C:\WINDOWS\system32\javaws.exe
2010-01-01 04:09:33 ----A---- C:\WINDOWS\system32\javaw.exe
2010-01-01 04:09:33 ----A---- C:\WINDOWS\system32\deploytk.dll
2010-01-01 04:09:32 ----A---- C:\WINDOWS\system32\java.exe
2009-12-31 18:49:00 ----SHD---- C:\RECYCLER
2009-12-31 18:42:39 ----D---- C:\Program Files\Ad-Remover
2009-12-29 19:25:39 ----D---- C:\WINDOWS\temp
2009-12-29 19:25:36 ----A---- C:\ComboFix.txt
2009-12-29 18:58:51 ----A---- C:\Boot.bak
2009-12-29 18:58:43 ----RASHD---- C:\cmdcons
2009-12-29 18:56:45 ----A---- C:\WINDOWS\zip.exe
2009-12-29 18:56:45 ----A---- C:\WINDOWS\SWXCACLS.exe
2009-12-29 18:56:45 ----A---- C:\WINDOWS\SWSC.exe
2009-12-29 18:56:45 ----A---- C:\WINDOWS\SWREG.exe
2009-12-29 18:56:45 ----A---- C:\WINDOWS\sed.exe
2009-12-29 18:56:45 ----A---- C:\WINDOWS\PEV.exe
2009-12-29 18:56:45 ----A---- C:\WINDOWS\NIRCMD.exe
2009-12-29 18:56:45 ----A---- C:\WINDOWS\MBR.exe
2009-12-29 18:56:45 ----A---- C:\WINDOWS\grep.exe
2009-12-29 18:50:01 ----D---- C:\WINDOWS\ERDNT
2009-12-28 19:13:49 ----D---- C:\Qoobox
2009-12-27 23:43:31 ----D---- C:\Documents and Settings\Administrateur\Application Data\Malwarebytes
2009-12-27 23:34:04 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-12-27 23:34:03 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-12-24 18:10:55 ----D---- C:\Program Files\trend micro
2009-12-24 18:10:54 ----D---- C:\rsit
2009-12-23 07:18:21 ----A---- C:\Documents and Settings\All Users\Application Data\sysReserve.ini
2009-12-22 11:14:22 ----A---- C:\WINDOWS\W3DemoUnin.exe
2009-12-21 07:59:15 ----D---- C:\WINDOWS\Cache
2009-12-20 17:28:40 ----D---- C:\Documents and Settings\Administrateur\Application Data\Help
2009-12-20 17:16:20 ----RA---- C:\WINDOWS\system32\MpvpxX86.dll
2009-12-20 17:16:20 ----RA---- C:\WINDOWS\system32\MpvpxSSE.dll
2009-12-20 17:16:19 ----RA---- C:\WINDOWS\system32\MpvpxMMX.dll
2009-12-20 17:16:16 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2009-12-20 17:10:39 ----D---- C:\Program Files\Digital Photo Navigator 1.0
2009-12-20 17:09:02 ----N---- C:\WINDOWS\system32\WNASPI32.DLL
2009-12-20 17:09:02 ----D---- C:\MWASPI
2009-12-20 17:09:02 ----A---- C:\WINDOWS\msfsetup.ini
2009-12-20 17:06:54 ----D---- C:\Program Files\PIXELA
2009-12-19 11:57:07 ----SHD---- C:\Documents and Settings\All Users\Application Data\SecuROM
2009-12-18 11:27:17 ----D---- C:\Program Files\Nouveau dossier
2009-12-18 10:05:34 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2009-12-18 10:05:34 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2009-12-18 10:05:33 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2009-12-18 10:05:32 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2009-12-18 10:05:32 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2009-12-18 10:05:32 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2009-12-18 10:05:31 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2009-12-18 10:05:30 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2009-12-18 10:05:30 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2009-12-18 10:05:30 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2009-12-18 10:05:29 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2009-12-18 10:05:29 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2009-12-18 10:05:28 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2009-12-18 10:05:27 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2009-12-18 10:05:27 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2009-12-18 10:05:27 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2009-12-18 10:05:26 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2009-12-18 10:05:24 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2009-12-18 10:05:24 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2009-12-18 10:05:24 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2009-12-18 10:05:23 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2009-12-18 10:05:23 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2009-12-18 10:05:23 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2009-12-18 10:05:22 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2009-12-18 10:05:21 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2009-12-18 10:05:21 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2009-12-18 10:05:21 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2009-12-18 10:05:20 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2009-12-18 10:05:19 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2009-12-18 10:05:19 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2009-12-18 10:05:18 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2009-12-18 10:05:18 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2009-12-18 10:05:17 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2009-12-18 10:05:16 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2009-12-18 10:05:15 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2009-12-18 10:05:14 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2009-12-18 10:05:13 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2009-12-18 10:05:12 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2009-12-18 10:05:12 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2009-12-18 10:05:11 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2009-12-18 10:05:10 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2009-12-18 10:05:10 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2009-12-18 10:05:09 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2009-12-18 10:05:09 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2009-12-18 10:05:08 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2009-12-18 10:05:07 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2009-12-18 10:05:04 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2009-12-18 10:04:57 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2009-12-18 10:04:57 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2009-12-18 10:04:48 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2009-12-18 10:04:48 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2009-12-18 10:04:47 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2009-12-18 10:04:46 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2009-12-18 10:04:46 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2009-12-18 10:04:46 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2009-12-18 10:04:45 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2009-12-18 10:04:45 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2009-12-18 10:04:45 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2009-12-18 10:04:45 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2009-12-18 10:04:44 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2009-12-18 10:04:35 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2009-12-18 10:04:35 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2009-12-18 10:04:34 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2009-12-18 10:04:33 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2009-12-18 10:04:32 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2009-12-18 10:04:32 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2009-12-18 10:04:31 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2009-12-18 10:04:31 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2009-12-18 10:04:16 ----D---- C:\WINDOWS\Logs
2009-12-18 10:04:08 ----D---- C:\Program Files\DIFX
2009-12-18 10:03:30 ----D---- C:\WINDOWS\system32\AGEIA
2009-12-18 10:03:28 ----D---- C:\Program Files\AGEIA Technologies
2009-12-18 10:03:05 ----D---- C:\Program Files\Fichiers communs\Wise Installation Wizard
2009-12-18 09:34:54 ----D---- C:\Program Files\Borderland
2009-12-15 00:29:30 ----D---- C:\Program Files\CCleaner
2009-12-15 00:02:05 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2009-12-09 13:06:36 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2009-12-09 13:06:21 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2009-12-09 13:05:38 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2009-12-09 13:03:52 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2009-12-09 13:03:35 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
======List of files/folders modified in the last 1 months======
2010-01-01 04:10:27 ----D---- C:\WINDOWS\Prefetch
2010-01-01 04:09:33 ----D---- C:\WINDOWS\system32
2010-01-01 04:09:12 ----SHD---- C:\WINDOWS\Installer
2010-01-01 04:09:09 ----D---- C:\Program Files\Java
2010-01-01 04:04:39 ----D---- C:\Documents and Settings\Administrateur\Application Data\uTorrent
2010-01-01 04:04:18 ----D---- C:\Program Files\Fichiers communs
2010-01-01 04:00:06 ----D---- C:\WINDOWS
2010-01-01 03:56:59 ----D---- C:\Program Files\Mozilla Firefox
2009-12-31 18:47:29 ----RD---- C:\Program Files
2009-12-31 07:06:25 ----A---- C:\WINDOWS\NeroDigital.ini
2009-12-31 03:00:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-12-29 20:04:30 ----D---- C:\telechargement reload paradise
2009-12-29 19:25:40 ----D---- C:\WINDOWS\system32\drivers
2009-12-29 19:24:24 ----D---- C:\WINDOWS\system32\CatRoot2
2009-12-29 19:19:47 ----A---- C:\WINDOWS\system.ini
2009-12-29 19:10:37 ----D---- C:\WINDOWS\AppPatch
2009-12-29 19:05:45 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-12-29 18:58:51 ----RASH---- C:\boot.ini
2009-12-28 23:39:32 ----D---- C:\WINDOWS\Debug
2009-12-28 23:26:38 ----SHD---- C:\WINDOWS\CSC
2009-12-28 22:36:38 ----D---- C:\Program Files\Eset
2009-12-28 20:33:19 ----A---- C:\WINDOWS\system32\imon.dll
2009-12-28 00:32:13 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2009-12-23 22:24:54 ----D---- C:\Program Files\Atmosphere Deluxe
2009-12-22 11:14:23 ----D---- C:\Program Files\Warcraft III Demo
2009-12-21 08:07:38 ----D---- C:\Program Files\VCW VicMan's Photo Editor
2009-12-21 07:04:22 ----D---- C:\WINDOWS\security
2009-12-20 19:00:39 ----HD---- C:\WINDOWS\inf
2009-12-20 19:00:37 ----D---- C:\Program Files\Movie Maker
2009-12-20 17:16:50 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-12-20 17:10:39 ----HD---- C:\Program Files\InstallShield Installation Information
2009-12-20 17:09:02 ----D---- C:\WINDOWS\system
2009-12-19 13:00:23 ----D---- C:\WINDOWS\WinSxS
2009-12-19 11:33:18 ----D---- C:\WINDOWS\system32\DirectX
2009-12-18 10:04:36 ----D---- C:\WINDOWS\Microsoft.NET
2009-12-18 10:04:06 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-12-15 20:46:37 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-12-15 20:46:35 ----SD---- C:\WINDOWS\Tasks
2009-12-15 07:43:27 ----D---- C:\Program Files\ewido anti-malware
2009-12-15 07:42:51 ----D---- C:\WINDOWS\Minidump
2009-12-15 01:01:17 ----D---- C:\Documents and Settings\Administrateur\Application Data\16ISOWARN
2009-12-14 23:58:51 ----D---- C:\Program Files\eMule
2009-12-09 13:06:12 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2009-12-09 13:05:37 ----HD---- C:\WINDOWS\$hf_mig$
2009-12-09 13:05:13 ----D---- C:\WINDOWS\system32\fr-fr
2009-12-09 13:05:13 ----D---- C:\Program Files\Internet Explorer
2009-12-09 13:04:54 ----D---- C:\WINDOWS\ie7updates
2009-12-07 20:00:31 ----D---- C:\Program Files\RomStation
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 AmdK7;Pilote de processeur AMD K7; C:\WINDOWS\System32\DRIVERS\amdk7.sys [2008-04-14 41856]
R1 ewido security suite driver;ewido security suite driver; \??\C:\Program Files\ewido anti-malware\guard.sys []
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2002-08-30 12032]
R2 AMON;AMON; \??\C:\WINDOWS\system32\drivers\amon.sys []
R2 hardlock;hardlock; \??\C:\WINDOWS\system32\drivers\hardlock.sys []
R2 Haspnt;Haspnt; \??\C:\WINDOWS\system32\drivers\Haspnt.sys []
R2 MASPINT;MASPINT; C:\WINDOWS\system32\drivers\MASPINT.sys [2000-03-29 8096]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2006-05-19 4007552]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 catchme;catchme; \??\C:\killrootkit\catchme.sys []
R3 FETND5BV;VIA Rhine-Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\System32\DRIVERS\fetnd5bv.sys [2005-11-16 42496]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2008-04-17 15464]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 Mtlmnt5;Mtlmnt5; C:\WINDOWS\System32\DRIVERS\Mtlmnt5.sys [2004-04-01 126686]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2006-03-09 3650368]
R3 Slntamr;Smart Link 56K Modem Driver; C:\WINDOWS\System32\DRIVERS\slntamr.sys [2004-04-01 404990]
R3 SlWdmSup;SlWdmSup; C:\WINDOWS\System32\DRIVERS\SlWdmSup.sys [2004-01-28 13240]
R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbscan;Pilote de scanneur USB; C:\WINDOWS\System32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 whfltr2k;WheelMouse USB Lower Filter Driver; C:\WINDOWS\system32\DRIVERS\whfltr2k.sys [2007-01-25 6784]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 FETNDIS;Pilote NT de carte VIA PCI 10/100Mo Fast Ethernet; C:\WINDOWS\System32\DRIVERS\fetnd5.sys [2001-08-17 27165]
S3 mbr;mbr; \??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\mbr.sys []
S3 MSTEE;Convertisseur en T/site-à -site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 Mtlstrm;Mtlstrm; C:\WINDOWS\System32\DRIVERS\Mtlstrm.sys [2004-01-28 1309184]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NtMtlFax;NtMtlFax; C:\WINDOWS\System32\DRIVERS\NtMtlFax.sys [2004-01-28 180360]
S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCAMPR5.SYS []
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []
S3 PIXMC10;JVC Communication PIX-MC10 Driver; C:\WINDOWS\System32\Drivers\pixmc10c.sys [2002-09-27 31232]
S3 PIXMC10A;JVC PIX-MC10 Audio Capture; C:\WINDOWS\System32\Drivers\pixmc10a.sys [2002-10-04 28060]
S3 PIXMC10V;JVC PIX-MC10 Video Capture; C:\WINDOWS\System32\Drivers\pixmc10v.sys [2002-11-28 22652]
S3 SIWIO;SIWIO; \??\C:\WINDOWS\TEMP\SiwIo.sys []
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SlNtHal;SlNtHal; C:\WINDOWS\System32\DRIVERS\Slnthal.sys [2004-01-28 95424]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 EPSONStatusAgent2;EPSON Printer Status Agent2; C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe [2001-08-09 90112]
R2 ewido security suite control;ewido security suite control; C:\Program Files\ewido anti-malware\ewidoctrl.exe [2005-11-30 13888]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-01-01 153376]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe [2006-10-19 61440]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2007-12-03 869672]
R2 NOD32krn;NOD32 Kernel Service; C:\Program Files\Eset\nod32krn.exe [2009-12-28 495616]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\System32\nvsvc32.exe [2006-03-09 143436]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2008-09-10 536872]
S2 gupdate1ca19b16c1c692c;Service Google Update (gupdate1ca19b16c1c692c); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-08-10 133104]
S2 SLService;SmartLinkService; C:\WINDOWS\system32\slserv.exe [2004-01-08 73796]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-29 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe [2007-12-13 447784]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S4 ewido security suite guard;ewido security suite guard; C:\Program Files\ewido anti-malware\ewidoguard.exe [2005-12-18 151616]
-----------------EOF-----------------
j'ai plus les "gros soucis " de départ mais j'attend ton diag avec le rapport suivant:
Logfile of random's system information tool 1.06 (written by random/random)
Run by Administrateur at 2010-01-01 04:10:29
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 17 GB (11%) free of 153 GB
Total RAM: 1535 MB (58% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 04:10:34, on 01/01/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16945)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Microsoft LifeChat\LifeChat.exe
C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\RSIT.exe
C:\Program Files\trend micro\Administrateur.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll (file missing)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Multi_Media_France toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMult.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Multi_Media_France toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMult.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: SYSTRAN Toolbar - {95daa571-4def-4a6d-97d8-98a346672a24} - mscoree.dll (file missing)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [LifeChat] "C:\Program Files\Microsoft LifeChat\LifeChat.exe"
O4 - HKLM\..\Run: [WindowsLivePhone] C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe /AutoRun
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKLM\..\Run: [WheelMouse] C:\XTREME~1\wh_exec.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [WindowsLivePhone] "C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe" /AutoRun
O4 - HKCU\..\Run: [RomStation] "C:\Program Files\RomStation\RomStation.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Consulter les dictionnaires (SYSTRAN) - res://C:\Program Files\SYSTRAN\6\\GUIres.dll/lookup.js
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Traduire (SYSTRAN) - res://C:\Program Files\SYSTRAN\6\\GUIres.dll/translate.js
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {9DF1C00D-8426-4337-972C-DC042D19A916} (FTMediaPlayer Class) - http://webtv.guidetv.orange.fr/resources/OCS_8971.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = domvelocar.local
O17 - HKLM\Software\..\Telephony: DomainName = domvelocar.local
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = domvelocar.local
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = domvelocar.local
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: Service Google Update (gupdate1ca19b16c1c692c) (gupdate1ca19b16c1c692c) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
--
End of file - 9800 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\BD4240DE9E8DF182.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - c:\program files\real\realplayer\rpbrowserrecordplugin.dll [2009-10-06 329312]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7009fcd4-05be-44f4-9583-93fe419ab7b0}]
Multi_Media_France toolbar - C:\Program Files\Multi_Media_France\tbMult.dll [2007-06-18 1383448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-10 259696]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2009-11-13 764912]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll [2009-04-29 470512]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-01-01 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-01-01 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
EpsonToolBandKicker Class - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7009fcd4-05be-44f4-9583-93fe419ab7b0} - Multi_Media_France toolbar - C:\Program Files\Multi_Media_France\tbMult.dll [2007-06-18 1383448]
{EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-10 259696]
{95daa571-4def-4a6d-97d8-98a346672a24} - SYSTRAN Toolbar - C:\WINDOWS\system32\mscoree.dll [2006-12-22 271360]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\System32\NvCpl.dll [2006-03-09 7561216]
"NeroFilterCheck"=C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe [2007-03-01 153136]
"NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2007-12-03 2213160]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2008-09-06 413696]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-09-10 289576]
"nwiz"=nwiz.exe /install []
"nod32kui"=C:\Program Files\Eset\nod32kui.exe [2009-12-28 917504]
"LifeChat"=C:\Program Files\Microsoft LifeChat\LifeChat.exe [2008-08-21 267296]
"WindowsLivePhone"=C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe [2008-12-22 787816]
"ISUSPM"=C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe [2006-03-20 213936]
"WheelMouse"=C:\XTREME~1\wh_exec.exe [2008-10-08 98304]
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2009-10-06 198160]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"Adobe ARM"=C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2010-01-01 149280]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-03-28 68856]
"WindowsLivePhone"=C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe [2008-12-22 787816]
"RomStation"=C:\Program Files\RomStation\RomStation.exe [2009-12-17 949760]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2008-09-05 267304]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{54D9498B-CF93-414F-8984-8CE7FDE0D391}"=C:\Program Files\ewido anti-malware\shellhook.dll [2004-09-30 39488]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoBandCustomize"=0
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDrives"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\tactical ops 3.5\Infogrames\Tactical Ops\System\TacticalOps.exe"="C:\Program Files\tactical ops 3.5\Infogrames\Tactical Ops\System\TacticalOps.exe:*:Enabled:TacticalOps"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
======File associations======
.scr - open - C:\Program Files\VCW VicMan's Photo Editor\vcwphoto.exe %1
.scr - install -
.scr - config -
======List of files/folders created in the last 1 months======
2010-01-01 04:09:33 ----A---- C:\WINDOWS\system32\javaws.exe
2010-01-01 04:09:33 ----A---- C:\WINDOWS\system32\javaw.exe
2010-01-01 04:09:33 ----A---- C:\WINDOWS\system32\deploytk.dll
2010-01-01 04:09:32 ----A---- C:\WINDOWS\system32\java.exe
2009-12-31 18:49:00 ----SHD---- C:\RECYCLER
2009-12-31 18:42:39 ----D---- C:\Program Files\Ad-Remover
2009-12-29 19:25:39 ----D---- C:\WINDOWS\temp
2009-12-29 19:25:36 ----A---- C:\ComboFix.txt
2009-12-29 18:58:51 ----A---- C:\Boot.bak
2009-12-29 18:58:43 ----RASHD---- C:\cmdcons
2009-12-29 18:56:45 ----A---- C:\WINDOWS\zip.exe
2009-12-29 18:56:45 ----A---- C:\WINDOWS\SWXCACLS.exe
2009-12-29 18:56:45 ----A---- C:\WINDOWS\SWSC.exe
2009-12-29 18:56:45 ----A---- C:\WINDOWS\SWREG.exe
2009-12-29 18:56:45 ----A---- C:\WINDOWS\sed.exe
2009-12-29 18:56:45 ----A---- C:\WINDOWS\PEV.exe
2009-12-29 18:56:45 ----A---- C:\WINDOWS\NIRCMD.exe
2009-12-29 18:56:45 ----A---- C:\WINDOWS\MBR.exe
2009-12-29 18:56:45 ----A---- C:\WINDOWS\grep.exe
2009-12-29 18:50:01 ----D---- C:\WINDOWS\ERDNT
2009-12-28 19:13:49 ----D---- C:\Qoobox
2009-12-27 23:43:31 ----D---- C:\Documents and Settings\Administrateur\Application Data\Malwarebytes
2009-12-27 23:34:04 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-12-27 23:34:03 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-12-24 18:10:55 ----D---- C:\Program Files\trend micro
2009-12-24 18:10:54 ----D---- C:\rsit
2009-12-23 07:18:21 ----A---- C:\Documents and Settings\All Users\Application Data\sysReserve.ini
2009-12-22 11:14:22 ----A---- C:\WINDOWS\W3DemoUnin.exe
2009-12-21 07:59:15 ----D---- C:\WINDOWS\Cache
2009-12-20 17:28:40 ----D---- C:\Documents and Settings\Administrateur\Application Data\Help
2009-12-20 17:16:20 ----RA---- C:\WINDOWS\system32\MpvpxX86.dll
2009-12-20 17:16:20 ----RA---- C:\WINDOWS\system32\MpvpxSSE.dll
2009-12-20 17:16:19 ----RA---- C:\WINDOWS\system32\MpvpxMMX.dll
2009-12-20 17:16:16 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2009-12-20 17:10:39 ----D---- C:\Program Files\Digital Photo Navigator 1.0
2009-12-20 17:09:02 ----N---- C:\WINDOWS\system32\WNASPI32.DLL
2009-12-20 17:09:02 ----D---- C:\MWASPI
2009-12-20 17:09:02 ----A---- C:\WINDOWS\msfsetup.ini
2009-12-20 17:06:54 ----D---- C:\Program Files\PIXELA
2009-12-19 11:57:07 ----SHD---- C:\Documents and Settings\All Users\Application Data\SecuROM
2009-12-18 11:27:17 ----D---- C:\Program Files\Nouveau dossier
2009-12-18 10:05:34 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2009-12-18 10:05:34 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2009-12-18 10:05:33 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2009-12-18 10:05:32 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2009-12-18 10:05:32 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2009-12-18 10:05:32 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2009-12-18 10:05:31 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2009-12-18 10:05:30 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2009-12-18 10:05:30 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2009-12-18 10:05:30 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2009-12-18 10:05:29 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2009-12-18 10:05:29 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2009-12-18 10:05:28 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2009-12-18 10:05:27 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2009-12-18 10:05:27 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2009-12-18 10:05:27 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2009-12-18 10:05:26 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2009-12-18 10:05:24 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2009-12-18 10:05:24 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2009-12-18 10:05:24 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2009-12-18 10:05:23 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2009-12-18 10:05:23 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2009-12-18 10:05:23 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2009-12-18 10:05:22 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2009-12-18 10:05:21 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2009-12-18 10:05:21 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2009-12-18 10:05:21 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2009-12-18 10:05:20 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2009-12-18 10:05:19 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2009-12-18 10:05:19 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2009-12-18 10:05:18 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2009-12-18 10:05:18 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2009-12-18 10:05:17 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2009-12-18 10:05:16 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2009-12-18 10:05:15 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2009-12-18 10:05:14 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2009-12-18 10:05:13 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2009-12-18 10:05:12 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2009-12-18 10:05:12 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2009-12-18 10:05:11 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2009-12-18 10:05:10 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2009-12-18 10:05:10 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2009-12-18 10:05:09 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2009-12-18 10:05:09 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2009-12-18 10:05:08 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2009-12-18 10:05:07 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2009-12-18 10:05:04 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2009-12-18 10:04:57 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2009-12-18 10:04:57 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2009-12-18 10:04:48 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2009-12-18 10:04:48 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2009-12-18 10:04:47 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2009-12-18 10:04:46 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2009-12-18 10:04:46 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2009-12-18 10:04:46 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2009-12-18 10:04:45 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2009-12-18 10:04:45 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2009-12-18 10:04:45 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2009-12-18 10:04:45 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2009-12-18 10:04:44 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2009-12-18 10:04:35 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2009-12-18 10:04:35 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2009-12-18 10:04:34 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2009-12-18 10:04:33 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2009-12-18 10:04:32 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2009-12-18 10:04:32 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2009-12-18 10:04:31 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2009-12-18 10:04:31 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2009-12-18 10:04:16 ----D---- C:\WINDOWS\Logs
2009-12-18 10:04:08 ----D---- C:\Program Files\DIFX
2009-12-18 10:03:30 ----D---- C:\WINDOWS\system32\AGEIA
2009-12-18 10:03:28 ----D---- C:\Program Files\AGEIA Technologies
2009-12-18 10:03:05 ----D---- C:\Program Files\Fichiers communs\Wise Installation Wizard
2009-12-18 09:34:54 ----D---- C:\Program Files\Borderland
2009-12-15 00:29:30 ----D---- C:\Program Files\CCleaner
2009-12-15 00:02:05 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2009-12-09 13:06:36 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2009-12-09 13:06:21 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2009-12-09 13:05:38 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2009-12-09 13:03:52 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2009-12-09 13:03:35 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
======List of files/folders modified in the last 1 months======
2010-01-01 04:10:27 ----D---- C:\WINDOWS\Prefetch
2010-01-01 04:09:33 ----D---- C:\WINDOWS\system32
2010-01-01 04:09:12 ----SHD---- C:\WINDOWS\Installer
2010-01-01 04:09:09 ----D---- C:\Program Files\Java
2010-01-01 04:04:39 ----D---- C:\Documents and Settings\Administrateur\Application Data\uTorrent
2010-01-01 04:04:18 ----D---- C:\Program Files\Fichiers communs
2010-01-01 04:00:06 ----D---- C:\WINDOWS
2010-01-01 03:56:59 ----D---- C:\Program Files\Mozilla Firefox
2009-12-31 18:47:29 ----RD---- C:\Program Files
2009-12-31 07:06:25 ----A---- C:\WINDOWS\NeroDigital.ini
2009-12-31 03:00:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-12-29 20:04:30 ----D---- C:\telechargement reload paradise
2009-12-29 19:25:40 ----D---- C:\WINDOWS\system32\drivers
2009-12-29 19:24:24 ----D---- C:\WINDOWS\system32\CatRoot2
2009-12-29 19:19:47 ----A---- C:\WINDOWS\system.ini
2009-12-29 19:10:37 ----D---- C:\WINDOWS\AppPatch
2009-12-29 19:05:45 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-12-29 18:58:51 ----RASH---- C:\boot.ini
2009-12-28 23:39:32 ----D---- C:\WINDOWS\Debug
2009-12-28 23:26:38 ----SHD---- C:\WINDOWS\CSC
2009-12-28 22:36:38 ----D---- C:\Program Files\Eset
2009-12-28 20:33:19 ----A---- C:\WINDOWS\system32\imon.dll
2009-12-28 00:32:13 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2009-12-23 22:24:54 ----D---- C:\Program Files\Atmosphere Deluxe
2009-12-22 11:14:23 ----D---- C:\Program Files\Warcraft III Demo
2009-12-21 08:07:38 ----D---- C:\Program Files\VCW VicMan's Photo Editor
2009-12-21 07:04:22 ----D---- C:\WINDOWS\security
2009-12-20 19:00:39 ----HD---- C:\WINDOWS\inf
2009-12-20 19:00:37 ----D---- C:\Program Files\Movie Maker
2009-12-20 17:16:50 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-12-20 17:10:39 ----HD---- C:\Program Files\InstallShield Installation Information
2009-12-20 17:09:02 ----D---- C:\WINDOWS\system
2009-12-19 13:00:23 ----D---- C:\WINDOWS\WinSxS
2009-12-19 11:33:18 ----D---- C:\WINDOWS\system32\DirectX
2009-12-18 10:04:36 ----D---- C:\WINDOWS\Microsoft.NET
2009-12-18 10:04:06 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-12-15 20:46:37 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-12-15 20:46:35 ----SD---- C:\WINDOWS\Tasks
2009-12-15 07:43:27 ----D---- C:\Program Files\ewido anti-malware
2009-12-15 07:42:51 ----D---- C:\WINDOWS\Minidump
2009-12-15 01:01:17 ----D---- C:\Documents and Settings\Administrateur\Application Data\16ISOWARN
2009-12-14 23:58:51 ----D---- C:\Program Files\eMule
2009-12-09 13:06:12 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2009-12-09 13:05:37 ----HD---- C:\WINDOWS\$hf_mig$
2009-12-09 13:05:13 ----D---- C:\WINDOWS\system32\fr-fr
2009-12-09 13:05:13 ----D---- C:\Program Files\Internet Explorer
2009-12-09 13:04:54 ----D---- C:\WINDOWS\ie7updates
2009-12-07 20:00:31 ----D---- C:\Program Files\RomStation
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 AmdK7;Pilote de processeur AMD K7; C:\WINDOWS\System32\DRIVERS\amdk7.sys [2008-04-14 41856]
R1 ewido security suite driver;ewido security suite driver; \??\C:\Program Files\ewido anti-malware\guard.sys []
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2002-08-30 12032]
R2 AMON;AMON; \??\C:\WINDOWS\system32\drivers\amon.sys []
R2 hardlock;hardlock; \??\C:\WINDOWS\system32\drivers\hardlock.sys []
R2 Haspnt;Haspnt; \??\C:\WINDOWS\system32\drivers\Haspnt.sys []
R2 MASPINT;MASPINT; C:\WINDOWS\system32\drivers\MASPINT.sys [2000-03-29 8096]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2006-05-19 4007552]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 catchme;catchme; \??\C:\killrootkit\catchme.sys []
R3 FETND5BV;VIA Rhine-Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\System32\DRIVERS\fetnd5bv.sys [2005-11-16 42496]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2008-04-17 15464]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 Mtlmnt5;Mtlmnt5; C:\WINDOWS\System32\DRIVERS\Mtlmnt5.sys [2004-04-01 126686]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2006-03-09 3650368]
R3 Slntamr;Smart Link 56K Modem Driver; C:\WINDOWS\System32\DRIVERS\slntamr.sys [2004-04-01 404990]
R3 SlWdmSup;SlWdmSup; C:\WINDOWS\System32\DRIVERS\SlWdmSup.sys [2004-01-28 13240]
R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbscan;Pilote de scanneur USB; C:\WINDOWS\System32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 whfltr2k;WheelMouse USB Lower Filter Driver; C:\WINDOWS\system32\DRIVERS\whfltr2k.sys [2007-01-25 6784]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 FETNDIS;Pilote NT de carte VIA PCI 10/100Mo Fast Ethernet; C:\WINDOWS\System32\DRIVERS\fetnd5.sys [2001-08-17 27165]
S3 mbr;mbr; \??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\mbr.sys []
S3 MSTEE;Convertisseur en T/site-à -site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 Mtlstrm;Mtlstrm; C:\WINDOWS\System32\DRIVERS\Mtlstrm.sys [2004-01-28 1309184]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NtMtlFax;NtMtlFax; C:\WINDOWS\System32\DRIVERS\NtMtlFax.sys [2004-01-28 180360]
S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCAMPR5.SYS []
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []
S3 PIXMC10;JVC Communication PIX-MC10 Driver; C:\WINDOWS\System32\Drivers\pixmc10c.sys [2002-09-27 31232]
S3 PIXMC10A;JVC PIX-MC10 Audio Capture; C:\WINDOWS\System32\Drivers\pixmc10a.sys [2002-10-04 28060]
S3 PIXMC10V;JVC PIX-MC10 Video Capture; C:\WINDOWS\System32\Drivers\pixmc10v.sys [2002-11-28 22652]
S3 SIWIO;SIWIO; \??\C:\WINDOWS\TEMP\SiwIo.sys []
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SlNtHal;SlNtHal; C:\WINDOWS\System32\DRIVERS\Slnthal.sys [2004-01-28 95424]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 EPSONStatusAgent2;EPSON Printer Status Agent2; C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe [2001-08-09 90112]
R2 ewido security suite control;ewido security suite control; C:\Program Files\ewido anti-malware\ewidoctrl.exe [2005-11-30 13888]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-01-01 153376]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe [2006-10-19 61440]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2007-12-03 869672]
R2 NOD32krn;NOD32 Kernel Service; C:\Program Files\Eset\nod32krn.exe [2009-12-28 495616]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\System32\nvsvc32.exe [2006-03-09 143436]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2008-09-10 536872]
S2 gupdate1ca19b16c1c692c;Service Google Update (gupdate1ca19b16c1c692c); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-08-10 133104]
S2 SLService;SmartLinkService; C:\WINDOWS\system32\slserv.exe [2004-01-08 73796]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-29 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe [2007-12-13 447784]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S4 ewido security suite guard;ewido security suite guard; C:\Program Files\ewido anti-malware\ewidoguard.exe [2005-12-18 151616]
-----------------EOF-----------------
Je vois une trace de l'infection Lop/Swizzor.
Télécharge Lop S&D (par Eric_71) sur ton Bureau.
Puis double-clique sur Lop S&D présent sur ton Bureau.
(Sous Vista, il faut cliquer droit sur Lop S&D et choisir Exécuter en tant qu'administrateur)
Sélectionne la langue souhaitée, puis choisis l'option 1 (Recherche).
Patiente jusqu'Ã la fin du scan.
Poste le rapport généré (C:\lopR.txt).
(Sous Vista, il faut cliquer droit sur Lop S&D et choisir Exécuter en tant qu'administrateur)
je suis blazé par les ressources que tu as ...
tu es vraiment un tueur dans ce domaine !!
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 3000+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Administrateur ( Administrator )
BOOT : Normal boot
Antivirus : NOD32 Antivirus System 2.50 2.50 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:149 Go (Free:16 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
F:\ (USB)
H:\ (Local Disk) - FAT32 - Total:372 Go (Free:25 Go)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 01/01/2010|11:42 )
--------------------\\ Listing des dossiers dans APPLIC~1
[15/12/2009|01:01] C:\DOCUME~1\ADMINI~1\APPLIC~1\16ISOWARN
[28/05/2008|11:59] C:\DOCUME~1\ADMINI~1\APPLIC~1\AccurateRip
[28/08/2009|17:40] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
[25/01/2007|13:31] C:\DOCUME~1\ADMINI~1\APPLIC~1\Ahead
[07/05/2008|11:45] C:\DOCUME~1\ADMINI~1\APPLIC~1\Apple Computer
[10/08/2009|17:16] C:\DOCUME~1\ADMINI~1\APPLIC~1\AVS4YOU
[04/09/2008|12:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\Azureus
[29/11/2007|13:29] C:\DOCUME~1\ADMINI~1\APPLIC~1\dBpoweramp
[06/12/2007|12:53] C:\DOCUME~1\ADMINI~1\APPLIC~1\DivX
[05/01/2007|13:18] C:\DOCUME~1\ADMINI~1\APPLIC~1\Droppix
[12/11/2008|14:14] C:\DOCUME~1\ADMINI~1\APPLIC~1\dvdcss
[04/12/2007|13:57] C:\DOCUME~1\ADMINI~1\APPLIC~1\DWGEditor
[22/08/2007|13:06] C:\DOCUME~1\ADMINI~1\APPLIC~1\EPSON
[21/06/2006|12:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\Google
[27/07/2009|20:53] C:\DOCUME~1\ADMINI~1\APPLIC~1\gtopala
[20/12/2009|17:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\Help
[03/02/2009|13:43] C:\DOCUME~1\ADMINI~1\APPLIC~1\Icone
[17/08/2009|11:44] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[26/07/2007|13:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\InstallShield
[15/06/2006|08:46] C:\DOCUME~1\ADMINI~1\APPLIC~1\Lavasoft
[28/02/2008|01:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\LimeWire
[02/06/2006|15:39] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
[27/12/2009|23:43] C:\DOCUME~1\ADMINI~1\APPLIC~1\Malwarebytes
[17/11/2009|20:50] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[03/11/2009|23:40] C:\DOCUME~1\ADMINI~1\APPLIC~1\Mozilla
[19/08/2008|15:36] C:\DOCUME~1\ADMINI~1\APPLIC~1\MSN6
[01/04/2008|08:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\Nero
[11/10/2009|15:34] C:\DOCUME~1\ADMINI~1\APPLIC~1\Office Genuine Advantage
[06/10/2009|17:38] C:\DOCUME~1\ADMINI~1\APPLIC~1\Real
[30/06/2006|11:53] C:\DOCUME~1\ADMINI~1\APPLIC~1\SlySoft
[05/12/2007|08:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\SolidWorks
[14/04/2008|12:32] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun
[24/08/2009|00:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\SYSTRAN
[01/06/2006|15:06] C:\DOCUME~1\ADMINI~1\APPLIC~1\Talkback
[30/07/2009|20:57] C:\DOCUME~1\ADMINI~1\APPLIC~1\teamspeak2
[01/01/2010|11:38] C:\DOCUME~1\ADMINI~1\APPLIC~1\uTorrent
[16/06/2006|15:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\vlc
[11/08/2009|23:27] C:\DOCUME~1\ADMINI~1\APPLIC~1\Xilisoft Corporation
[29/09/2008|07:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[13/11/2009|12:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[25/01/2007|13:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[02/07/2007|12:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[30/05/2007|14:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[10/08/2009|17:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[18/06/2008|12:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[05/01/2007|13:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Droppix
[12/09/2007|12:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[26/07/2007|12:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EPSON
[27/01/2009|10:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[10/08/2009|10:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\great coal love default
[24/08/2009|00:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[27/12/2009|23:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[15/12/2009|20:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[09/12/2009|13:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[19/08/2008|15:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[01/04/2008|08:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
[01/06/2006|13:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[11/10/2009|15:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Office Genuine Advantage
[06/10/2009|17:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Real
[19/12/2009|11:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SecuROM
[15/06/2006|08:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[01/08/2009|15:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TransWarnStupidBook
[26/07/2007|13:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
[15/06/2006|07:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[31/05/2006|15:46] C:\DOCUME~1\CECABL~1\APPLIC~1\Identities
[01/06/2006|12:18] C:\DOCUME~1\CECABL~1\APPLIC~1\Microsoft
[31/05/2006|15:41] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[05/12/2006|13:18] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[31/05/2006|15:41] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[01/01/2010 11:23][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[31/12/2009 12:23][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[01/01/2010 11:00][--ah-----] C:\WINDOWS\tasks\BD4240DE9E8DF182.job
[29/12/2009 19:14][--ah-----] C:\WINDOWS\tasks\SA.DAT
[30/08/2002 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
( BD4240DE9E8DF182.job )=( c:\docume~1\admini~1\applic~1\16isow~1\SHOWTONSFIND.exe )
--------------------\\ Listing des dossiers dans C:\Program Files
[22/07/2009|09:01] C:\Program Files\16ISOWARN
[03/10/2009|08:30] C:\Program Files\Adobe
[01/01/2010|04:01] C:\Program Files\Ad-Remover
[18/12/2009|10:03] C:\Program Files\AGEIA Technologies
[01/04/2008|07:50] C:\Program Files\Ahead
[29/09/2008|07:42] C:\Program Files\Apple Software Update
[23/12/2009|22:24] C:\Program Files\Atmosphere Deluxe
[15/02/2007|13:32] C:\Program Files\aviproxy
[30/07/2009|20:15] C:\Program Files\AviSynth 2.5
[12/08/2009|07:59] C:\Program Files\AVS4YOU
[19/12/2009|12:04] C:\Program Files\Borderland
[15/12/2009|00:30] C:\Program Files\CCleaner
[31/05/2006|15:39] C:\Program Files\ComPlus Applications
[30/07/2009|20:17] C:\Program Files\CoverPro
[18/12/2009|10:04] C:\Program Files\DIFX
[20/12/2009|17:28] C:\Program Files\Digital Photo Navigator 1.0
[30/07/2009|20:52] C:\Program Files\directx
[13/08/2009|13:35] C:\Program Files\DivX
[05/01/2007|13:18] C:\Program Files\Droppix
[10/08/2009|13:59] C:\Program Files\emulateur nds
[09/09/2009|18:12] C:\Program Files\emulators
[14/12/2009|23:58] C:\Program Files\eMule
[01/08/2008|19:07] C:\Program Files\eMule0.49b-Sources
[26/07/2007|13:05] C:\Program Files\EPSON
[12/08/2009|10:17] C:\Program Files\eRightSoft
[28/12/2009|22:36] C:\Program Files\Eset
[15/12/2009|07:43] C:\Program Files\ewido anti-malware
[01/01/2010|04:04] C:\Program Files\Fichiers communs
[28/08/2009|17:37] C:\Program Files\Gaming Mouse
[10/08/2009|12:58] C:\Program Files\Google
[01/08/2009|16:10] C:\Program Files\Hitman Pro
[29/11/2007|13:18] C:\Program Files\Illustrate
[20/12/2009|17:10] C:\Program Files\InstallShield Installation Information
[12/11/2008|14:17] C:\Program Files\InterActual
[09/12/2009|13:05] C:\Program Files\Internet Explorer
[29/09/2008|07:40] C:\Program Files\iPod
[29/09/2008|07:40] C:\Program Files\iTunes
[27/07/2009|21:07] C:\Program Files\IZArc
[01/01/2010|04:09] C:\Program Files\Java
[20/12/2007|22:46] C:\Program Files\Keygen
[02/05/2007|12:05] C:\Program Files\Lame MP3 Codec
[02/03/2009|00:03] C:\Program Files\Ludiclub
[28/12/2009|00:32] C:\Program Files\Malwarebytes' Anti-Malware
[15/10/2008|13:56] C:\Program Files\Messenger
[06/11/2009|08:44] C:\Program Files\Microsoft
[31/05/2006|15:42] C:\Program Files\microsoft frontpage
[31/07/2009|15:43] C:\Program Files\Microsoft LifeChat
[31/10/2009|09:02] C:\Program Files\Microsoft Office
[06/11/2009|08:44] C:\Program Files\Microsoft Office Outlook Connector
[07/11/2009|11:51] C:\Program Files\Microsoft Silverlight
[06/11/2009|08:43] C:\Program Files\Microsoft Sync Framework
[31/10/2009|09:02] C:\Program Files\Microsoft Visual Studio
[08/11/2009|03:41] C:\Program Files\Microsoft Works
[31/10/2009|09:01] C:\Program Files\Microsoft.NET
[09/04/2008|14:02] C:\Program Files\mkvtoavis
[20/12/2009|19:00] C:\Program Files\Movie Maker
[01/01/2010|11:40] C:\Program Files\Mozilla Firefox
[31/10/2009|09:03] C:\Program Files\MSBuild
[28/10/2009|18:19] C:\Program Files\MSECache
[31/05/2006|15:39] C:\Program Files\MSN
[31/05/2006|15:39] C:\Program Files\MSN Gaming Zone
[03/12/2007|13:00] C:\Program Files\MSXML 4.0
[12/07/2007|16:18] C:\Program Files\Multi_Media_France
[01/04/2008|08:08] C:\Program Files\Nero
[15/10/2008|12:38] C:\Program Files\NetMeeting
[19/12/2009|12:03] C:\Program Files\Nouveau dossier
[29/10/2009|00:20] C:\Program Files\Office Pro 2007
[24/09/2009|19:21] C:\Program Files\Orange
[14/08/2009|00:31] C:\Program Files\Outlook Express
[20/12/2009|17:06] C:\Program Files\PIXELA
[30/10/2007|11:00] C:\Program Files\PKR
[15/02/2007|13:32] C:\Program Files\plugins
[22/11/2007|13:27] C:\Program Files\Pochette Express 2
[29/09/2008|07:39] C:\Program Files\QuickTime
[02/06/2006|15:57] C:\Program Files\Real
[01/06/2006|12:18] C:\Program Files\Realtek AC97
[04/12/2007|12:49] C:\Program Files\Ripp-it_AM
[15/03/2009|12:04] C:\Program Files\Risk
[07/12/2009|20:00] C:\Program Files\RomStation
[02/05/2007|12:04] C:\Program Files\Samsung
[08/12/2008|14:50] C:\Program Files\Securitoo
[31/05/2006|15:40] C:\Program Files\Services en ligne
[18/10/2007|16:03] C:\Program Files\SlySoft
[30/07/2009|20:43] C:\Program Files\SolidWorks
[01/06/2006|13:56] C:\Program Files\Spybot - Search & Destroy
[15/10/2008|14:11] C:\Program Files\Sun
[04/09/2009|07:58] C:\Program Files\supernes emulateur plus roms pack de 400 jeux
[24/08/2009|00:06] C:\Program Files\systran
[30/07/2009|19:47] C:\Program Files\tactical ops 3.4
[07/08/2009|20:11] C:\Program Files\tactical ops 3.5
[30/07/2009|20:43] C:\Program Files\TeamSpeak3
[01/06/2006|12:27] C:\Program Files\TextBridge Pro 8.0
[10/07/2007|12:29] C:\Program Files\TomTom DesktopSuite
[01/01/2010|04:10] C:\Program Files\trend micro
[31/05/2006|15:46] C:\Program Files\Uninstall Information
[01/08/2009|11:08] C:\Program Files\uTorrent
[21/12/2009|08:07] C:\Program Files\VCW VicMan's Photo Editor
[16/06/2006|15:25] C:\Program Files\VideoLAN
[30/07/2009|20:44] C:\Program Files\Vuze
[22/12/2009|11:14] C:\Program Files\Warcraft III Demo
[06/11/2009|08:43] C:\Program Files\Windows Live
[29/07/2009|17:37] C:\Program Files\Windows Live SkyDrive
[05/12/2006|12:49] C:\Program Files\Windows Media Connect 2
[15/10/2008|12:37] C:\Program Files\Windows Media Player
[15/10/2008|12:37] C:\Program Files\Windows NT
[07/01/2008|13:39] C:\Program Files\Windows XP Fun Pack
[01/06/2006|12:33] C:\Program Files\WindowsUpdate
[01/06/2006|15:12] C:\Program Files\WinRAR
[31/05/2006|15:42] C:\Program Files\xerox
[11/08/2009|23:26] C:\Program Files\Xilisoft
[10/08/2009|11:19] C:\Program Files\Xilisoft Video Converter Ultimate v5.1.26.0624
[30/07/2009|20:46] C:\Program Files\YesMessenger
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[13/11/2009|11:11] C:\Program Files\Fichiers communs\Adobe
[01/04/2008|07:50] C:\Program Files\Fichiers communs\Ahead
[30/04/2009|17:50] C:\Program Files\Fichiers communs\Apple
[12/08/2009|07:59] C:\Program Files\Fichiers communs\AVSMedia
[30/07/2009|20:42] C:\Program Files\Fichiers communs\Bluebeam Software
[31/10/2009|09:17] C:\Program Files\Fichiers communs\DESIGNER
[10/08/2009|12:55] C:\Program Files\Fichiers communs\DivX Shared
[08/01/2007|08:08] C:\Program Files\Fichiers communs\Droppix
[04/12/2007|13:57] C:\Program Files\Fichiers communs\eDrawings2005
[01/06/2006|12:40] C:\Program Files\Fichiers communs\EPSON
[26/07/2007|13:09] C:\Program Files\Fichiers communs\InstallShield
[05/01/2007|13:18] C:\Program Files\Fichiers communs\LightScribe
[08/11/2009|03:42] C:\Program Files\Fichiers communs\Microsoft Shared
[31/05/2006|15:40] C:\Program Files\Fichiers communs\MSSoap
[01/04/2008|08:11] C:\Program Files\Fichiers communs\Nero
[31/05/2006|15:13] C:\Program Files\Fichiers communs\ODBC
[06/10/2009|17:38] C:\Program Files\Fichiers communs\Real
[31/05/2006|15:40] C:\Program Files\Fichiers communs\Services
[04/12/2007|13:51] C:\Program Files\Fichiers communs\Solidworks Data
[31/05/2006|15:13] C:\Program Files\Fichiers communs\SpeechEngines
[06/11/2009|08:44] C:\Program Files\Fichiers communs\System
[29/07/2009|17:00] C:\Program Files\Fichiers communs\Windows Live
[18/12/2009|10:03] C:\Program Files\Fichiers communs\Wise Installation Wizard
[01/06/2006|12:27] C:\Program Files\Fichiers communs\Xerox Shared
[06/10/2009|17:38] C:\Program Files\Fichiers communs\xing shared
--------------------\\ Process
( 39 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\DOCUME~1\ALLUSE~1\APPLIC~1\great coal love default
C:\DOCUME~1\ALLUSE~1\APPLIC~1\great coal love default\mail junk.dat
C:\DOCUME~1\ADMINI~1\APPLIC~1\16isow~1
C:\Program Files\16isow~1
C:\Program Files\Multi_Media_France
C:\Program Files\Multi_Media_France\INSTALL.LOG
C:\Program Files\Multi_Media_France\tbMult.dll
C:\Program Files\Multi_Media_France\toolbar.cfg
C:\Program Files\Multi_Media_France\UNWISE.EXE
C:\Program Files\Multi_Media_France\UNWISE.INI
C:\Program Files\Multi_Media_France
C:\Program Files\Multi_Media_France\INSTALL.LOG
C:\Program Files\Multi_Media_France\tbMult.dll
C:\Program Files\Multi_Media_France\toolbar.cfg
C:\Program Files\Multi_Media_France\UNWISE.EXE
C:\Program Files\Multi_Media_France\UNWISE.INI
C:\WINDOWS\Tasks\BD4240DE9E8DF182.job
--------------------\\ Verification du Registre
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-01 11:43:33
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Clone DVD - Clone CD and Any DVD + cracks april 2007.rar
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\GRAB A GRAND.html
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Read Me.html
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\SetupAnyDVD6090.exe
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\slysoft120306.exe
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Slysoft_1.38.exe
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\THE REPORT.html
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\THE SYSTEM TO COPY.html
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Torrent downloaded from Demonoid.com.txt
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\WATCH THIS.html
C:\DOCUME~1\ADMINI~1\Mes documents\Xilisoft Corporation\Video Converter Ultimate\crack.js
[F:9][D:6]-> C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp
[F:3][D:0]-> C:\DOCUME~1\ADMINI~1\Cookies
[F:3][D:4]-> C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 01/01/2010|11:44 - Option : [1]
--------------------\\ Fin du rapport a 11:44:54
tu es vraiment un tueur dans ce domaine !!
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 3000+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Administrateur ( Administrator )
BOOT : Normal boot
Antivirus : NOD32 Antivirus System 2.50 2.50 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:149 Go (Free:16 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
F:\ (USB)
H:\ (Local Disk) - FAT32 - Total:372 Go (Free:25 Go)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 01/01/2010|11:42 )
--------------------\\ Listing des dossiers dans APPLIC~1
[15/12/2009|01:01] C:\DOCUME~1\ADMINI~1\APPLIC~1\16ISOWARN
[28/05/2008|11:59] C:\DOCUME~1\ADMINI~1\APPLIC~1\AccurateRip
[28/08/2009|17:40] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
[25/01/2007|13:31] C:\DOCUME~1\ADMINI~1\APPLIC~1\Ahead
[07/05/2008|11:45] C:\DOCUME~1\ADMINI~1\APPLIC~1\Apple Computer
[10/08/2009|17:16] C:\DOCUME~1\ADMINI~1\APPLIC~1\AVS4YOU
[04/09/2008|12:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\Azureus
[29/11/2007|13:29] C:\DOCUME~1\ADMINI~1\APPLIC~1\dBpoweramp
[06/12/2007|12:53] C:\DOCUME~1\ADMINI~1\APPLIC~1\DivX
[05/01/2007|13:18] C:\DOCUME~1\ADMINI~1\APPLIC~1\Droppix
[12/11/2008|14:14] C:\DOCUME~1\ADMINI~1\APPLIC~1\dvdcss
[04/12/2007|13:57] C:\DOCUME~1\ADMINI~1\APPLIC~1\DWGEditor
[22/08/2007|13:06] C:\DOCUME~1\ADMINI~1\APPLIC~1\EPSON
[21/06/2006|12:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\Google
[27/07/2009|20:53] C:\DOCUME~1\ADMINI~1\APPLIC~1\gtopala
[20/12/2009|17:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\Help
[03/02/2009|13:43] C:\DOCUME~1\ADMINI~1\APPLIC~1\Icone
[17/08/2009|11:44] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[26/07/2007|13:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\InstallShield
[15/06/2006|08:46] C:\DOCUME~1\ADMINI~1\APPLIC~1\Lavasoft
[28/02/2008|01:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\LimeWire
[02/06/2006|15:39] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
[27/12/2009|23:43] C:\DOCUME~1\ADMINI~1\APPLIC~1\Malwarebytes
[17/11/2009|20:50] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[03/11/2009|23:40] C:\DOCUME~1\ADMINI~1\APPLIC~1\Mozilla
[19/08/2008|15:36] C:\DOCUME~1\ADMINI~1\APPLIC~1\MSN6
[01/04/2008|08:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\Nero
[11/10/2009|15:34] C:\DOCUME~1\ADMINI~1\APPLIC~1\Office Genuine Advantage
[06/10/2009|17:38] C:\DOCUME~1\ADMINI~1\APPLIC~1\Real
[30/06/2006|11:53] C:\DOCUME~1\ADMINI~1\APPLIC~1\SlySoft
[05/12/2007|08:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\SolidWorks
[14/04/2008|12:32] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun
[24/08/2009|00:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\SYSTRAN
[01/06/2006|15:06] C:\DOCUME~1\ADMINI~1\APPLIC~1\Talkback
[30/07/2009|20:57] C:\DOCUME~1\ADMINI~1\APPLIC~1\teamspeak2
[01/01/2010|11:38] C:\DOCUME~1\ADMINI~1\APPLIC~1\uTorrent
[16/06/2006|15:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\vlc
[11/08/2009|23:27] C:\DOCUME~1\ADMINI~1\APPLIC~1\Xilisoft Corporation
[29/09/2008|07:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[13/11/2009|12:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[25/01/2007|13:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[02/07/2007|12:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[30/05/2007|14:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[10/08/2009|17:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[18/06/2008|12:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[05/01/2007|13:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Droppix
[12/09/2007|12:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[26/07/2007|12:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EPSON
[27/01/2009|10:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[10/08/2009|10:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\great coal love default
[24/08/2009|00:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[27/12/2009|23:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[15/12/2009|20:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[09/12/2009|13:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[19/08/2008|15:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[01/04/2008|08:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
[01/06/2006|13:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[11/10/2009|15:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Office Genuine Advantage
[06/10/2009|17:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Real
[19/12/2009|11:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SecuROM
[15/06/2006|08:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[01/08/2009|15:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TransWarnStupidBook
[26/07/2007|13:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
[15/06/2006|07:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[31/05/2006|15:46] C:\DOCUME~1\CECABL~1\APPLIC~1\Identities
[01/06/2006|12:18] C:\DOCUME~1\CECABL~1\APPLIC~1\Microsoft
[31/05/2006|15:41] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[05/12/2006|13:18] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[31/05/2006|15:41] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[01/01/2010 11:23][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[31/12/2009 12:23][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[01/01/2010 11:00][--ah-----] C:\WINDOWS\tasks\BD4240DE9E8DF182.job
[29/12/2009 19:14][--ah-----] C:\WINDOWS\tasks\SA.DAT
[30/08/2002 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
( BD4240DE9E8DF182.job )=( c:\docume~1\admini~1\applic~1\16isow~1\SHOWTONSFIND.exe )
--------------------\\ Listing des dossiers dans C:\Program Files
[22/07/2009|09:01] C:\Program Files\16ISOWARN
[03/10/2009|08:30] C:\Program Files\Adobe
[01/01/2010|04:01] C:\Program Files\Ad-Remover
[18/12/2009|10:03] C:\Program Files\AGEIA Technologies
[01/04/2008|07:50] C:\Program Files\Ahead
[29/09/2008|07:42] C:\Program Files\Apple Software Update
[23/12/2009|22:24] C:\Program Files\Atmosphere Deluxe
[15/02/2007|13:32] C:\Program Files\aviproxy
[30/07/2009|20:15] C:\Program Files\AviSynth 2.5
[12/08/2009|07:59] C:\Program Files\AVS4YOU
[19/12/2009|12:04] C:\Program Files\Borderland
[15/12/2009|00:30] C:\Program Files\CCleaner
[31/05/2006|15:39] C:\Program Files\ComPlus Applications
[30/07/2009|20:17] C:\Program Files\CoverPro
[18/12/2009|10:04] C:\Program Files\DIFX
[20/12/2009|17:28] C:\Program Files\Digital Photo Navigator 1.0
[30/07/2009|20:52] C:\Program Files\directx
[13/08/2009|13:35] C:\Program Files\DivX
[05/01/2007|13:18] C:\Program Files\Droppix
[10/08/2009|13:59] C:\Program Files\emulateur nds
[09/09/2009|18:12] C:\Program Files\emulators
[14/12/2009|23:58] C:\Program Files\eMule
[01/08/2008|19:07] C:\Program Files\eMule0.49b-Sources
[26/07/2007|13:05] C:\Program Files\EPSON
[12/08/2009|10:17] C:\Program Files\eRightSoft
[28/12/2009|22:36] C:\Program Files\Eset
[15/12/2009|07:43] C:\Program Files\ewido anti-malware
[01/01/2010|04:04] C:\Program Files\Fichiers communs
[28/08/2009|17:37] C:\Program Files\Gaming Mouse
[10/08/2009|12:58] C:\Program Files\Google
[01/08/2009|16:10] C:\Program Files\Hitman Pro
[29/11/2007|13:18] C:\Program Files\Illustrate
[20/12/2009|17:10] C:\Program Files\InstallShield Installation Information
[12/11/2008|14:17] C:\Program Files\InterActual
[09/12/2009|13:05] C:\Program Files\Internet Explorer
[29/09/2008|07:40] C:\Program Files\iPod
[29/09/2008|07:40] C:\Program Files\iTunes
[27/07/2009|21:07] C:\Program Files\IZArc
[01/01/2010|04:09] C:\Program Files\Java
[20/12/2007|22:46] C:\Program Files\Keygen
[02/05/2007|12:05] C:\Program Files\Lame MP3 Codec
[02/03/2009|00:03] C:\Program Files\Ludiclub
[28/12/2009|00:32] C:\Program Files\Malwarebytes' Anti-Malware
[15/10/2008|13:56] C:\Program Files\Messenger
[06/11/2009|08:44] C:\Program Files\Microsoft
[31/05/2006|15:42] C:\Program Files\microsoft frontpage
[31/07/2009|15:43] C:\Program Files\Microsoft LifeChat
[31/10/2009|09:02] C:\Program Files\Microsoft Office
[06/11/2009|08:44] C:\Program Files\Microsoft Office Outlook Connector
[07/11/2009|11:51] C:\Program Files\Microsoft Silverlight
[06/11/2009|08:43] C:\Program Files\Microsoft Sync Framework
[31/10/2009|09:02] C:\Program Files\Microsoft Visual Studio
[08/11/2009|03:41] C:\Program Files\Microsoft Works
[31/10/2009|09:01] C:\Program Files\Microsoft.NET
[09/04/2008|14:02] C:\Program Files\mkvtoavis
[20/12/2009|19:00] C:\Program Files\Movie Maker
[01/01/2010|11:40] C:\Program Files\Mozilla Firefox
[31/10/2009|09:03] C:\Program Files\MSBuild
[28/10/2009|18:19] C:\Program Files\MSECache
[31/05/2006|15:39] C:\Program Files\MSN
[31/05/2006|15:39] C:\Program Files\MSN Gaming Zone
[03/12/2007|13:00] C:\Program Files\MSXML 4.0
[12/07/2007|16:18] C:\Program Files\Multi_Media_France
[01/04/2008|08:08] C:\Program Files\Nero
[15/10/2008|12:38] C:\Program Files\NetMeeting
[19/12/2009|12:03] C:\Program Files\Nouveau dossier
[29/10/2009|00:20] C:\Program Files\Office Pro 2007
[24/09/2009|19:21] C:\Program Files\Orange
[14/08/2009|00:31] C:\Program Files\Outlook Express
[20/12/2009|17:06] C:\Program Files\PIXELA
[30/10/2007|11:00] C:\Program Files\PKR
[15/02/2007|13:32] C:\Program Files\plugins
[22/11/2007|13:27] C:\Program Files\Pochette Express 2
[29/09/2008|07:39] C:\Program Files\QuickTime
[02/06/2006|15:57] C:\Program Files\Real
[01/06/2006|12:18] C:\Program Files\Realtek AC97
[04/12/2007|12:49] C:\Program Files\Ripp-it_AM
[15/03/2009|12:04] C:\Program Files\Risk
[07/12/2009|20:00] C:\Program Files\RomStation
[02/05/2007|12:04] C:\Program Files\Samsung
[08/12/2008|14:50] C:\Program Files\Securitoo
[31/05/2006|15:40] C:\Program Files\Services en ligne
[18/10/2007|16:03] C:\Program Files\SlySoft
[30/07/2009|20:43] C:\Program Files\SolidWorks
[01/06/2006|13:56] C:\Program Files\Spybot - Search & Destroy
[15/10/2008|14:11] C:\Program Files\Sun
[04/09/2009|07:58] C:\Program Files\supernes emulateur plus roms pack de 400 jeux
[24/08/2009|00:06] C:\Program Files\systran
[30/07/2009|19:47] C:\Program Files\tactical ops 3.4
[07/08/2009|20:11] C:\Program Files\tactical ops 3.5
[30/07/2009|20:43] C:\Program Files\TeamSpeak3
[01/06/2006|12:27] C:\Program Files\TextBridge Pro 8.0
[10/07/2007|12:29] C:\Program Files\TomTom DesktopSuite
[01/01/2010|04:10] C:\Program Files\trend micro
[31/05/2006|15:46] C:\Program Files\Uninstall Information
[01/08/2009|11:08] C:\Program Files\uTorrent
[21/12/2009|08:07] C:\Program Files\VCW VicMan's Photo Editor
[16/06/2006|15:25] C:\Program Files\VideoLAN
[30/07/2009|20:44] C:\Program Files\Vuze
[22/12/2009|11:14] C:\Program Files\Warcraft III Demo
[06/11/2009|08:43] C:\Program Files\Windows Live
[29/07/2009|17:37] C:\Program Files\Windows Live SkyDrive
[05/12/2006|12:49] C:\Program Files\Windows Media Connect 2
[15/10/2008|12:37] C:\Program Files\Windows Media Player
[15/10/2008|12:37] C:\Program Files\Windows NT
[07/01/2008|13:39] C:\Program Files\Windows XP Fun Pack
[01/06/2006|12:33] C:\Program Files\WindowsUpdate
[01/06/2006|15:12] C:\Program Files\WinRAR
[31/05/2006|15:42] C:\Program Files\xerox
[11/08/2009|23:26] C:\Program Files\Xilisoft
[10/08/2009|11:19] C:\Program Files\Xilisoft Video Converter Ultimate v5.1.26.0624
[30/07/2009|20:46] C:\Program Files\YesMessenger
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[13/11/2009|11:11] C:\Program Files\Fichiers communs\Adobe
[01/04/2008|07:50] C:\Program Files\Fichiers communs\Ahead
[30/04/2009|17:50] C:\Program Files\Fichiers communs\Apple
[12/08/2009|07:59] C:\Program Files\Fichiers communs\AVSMedia
[30/07/2009|20:42] C:\Program Files\Fichiers communs\Bluebeam Software
[31/10/2009|09:17] C:\Program Files\Fichiers communs\DESIGNER
[10/08/2009|12:55] C:\Program Files\Fichiers communs\DivX Shared
[08/01/2007|08:08] C:\Program Files\Fichiers communs\Droppix
[04/12/2007|13:57] C:\Program Files\Fichiers communs\eDrawings2005
[01/06/2006|12:40] C:\Program Files\Fichiers communs\EPSON
[26/07/2007|13:09] C:\Program Files\Fichiers communs\InstallShield
[05/01/2007|13:18] C:\Program Files\Fichiers communs\LightScribe
[08/11/2009|03:42] C:\Program Files\Fichiers communs\Microsoft Shared
[31/05/2006|15:40] C:\Program Files\Fichiers communs\MSSoap
[01/04/2008|08:11] C:\Program Files\Fichiers communs\Nero
[31/05/2006|15:13] C:\Program Files\Fichiers communs\ODBC
[06/10/2009|17:38] C:\Program Files\Fichiers communs\Real
[31/05/2006|15:40] C:\Program Files\Fichiers communs\Services
[04/12/2007|13:51] C:\Program Files\Fichiers communs\Solidworks Data
[31/05/2006|15:13] C:\Program Files\Fichiers communs\SpeechEngines
[06/11/2009|08:44] C:\Program Files\Fichiers communs\System
[29/07/2009|17:00] C:\Program Files\Fichiers communs\Windows Live
[18/12/2009|10:03] C:\Program Files\Fichiers communs\Wise Installation Wizard
[01/06/2006|12:27] C:\Program Files\Fichiers communs\Xerox Shared
[06/10/2009|17:38] C:\Program Files\Fichiers communs\xing shared
--------------------\\ Process
( 39 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\DOCUME~1\ALLUSE~1\APPLIC~1\great coal love default
C:\DOCUME~1\ALLUSE~1\APPLIC~1\great coal love default\mail junk.dat
C:\DOCUME~1\ADMINI~1\APPLIC~1\16isow~1
C:\Program Files\16isow~1
C:\Program Files\Multi_Media_France
C:\Program Files\Multi_Media_France\INSTALL.LOG
C:\Program Files\Multi_Media_France\tbMult.dll
C:\Program Files\Multi_Media_France\toolbar.cfg
C:\Program Files\Multi_Media_France\UNWISE.EXE
C:\Program Files\Multi_Media_France\UNWISE.INI
C:\Program Files\Multi_Media_France
C:\Program Files\Multi_Media_France\INSTALL.LOG
C:\Program Files\Multi_Media_France\tbMult.dll
C:\Program Files\Multi_Media_France\toolbar.cfg
C:\Program Files\Multi_Media_France\UNWISE.EXE
C:\Program Files\Multi_Media_France\UNWISE.INI
C:\WINDOWS\Tasks\BD4240DE9E8DF182.job
--------------------\\ Verification du Registre
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-01 11:43:33
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Clone DVD - Clone CD and Any DVD + cracks april 2007.rar
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\GRAB A GRAND.html
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Read Me.html
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\SetupAnyDVD6090.exe
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\slysoft120306.exe
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Slysoft_1.38.exe
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\THE REPORT.html
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\THE SYSTEM TO COPY.html
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Torrent downloaded from Demonoid.com.txt
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\WATCH THIS.html
C:\DOCUME~1\ADMINI~1\Mes documents\Xilisoft Corporation\Video Converter Ultimate\crack.js
[F:9][D:6]-> C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp
[F:3][D:0]-> C:\DOCUME~1\ADMINI~1\Cookies
[F:3][D:4]-> C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 01/01/2010|11:44 - Option : [1]
--------------------\\ Fin du rapport a 11:44:54
Bingo.
Relance Lop S&D.
(Sous Vista, il faut cliquer droit sur Lop S&D et choisir Exécuter en tant qu'administrateur)
Choisis cette fois-ci l'option 2 (Suppression).
Ne ferme pas la fenêtre lors de la suppression !
Poste le rapport généré (C:\lopR.txt).
(Si le Bureau ne réapparaît pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)
(Sous Vista, il faut cliquer droit sur Lop S&D et choisir Exécuter en tant qu'administrateur)
(Si le Bureau ne réapparaît pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)
bingo
cela veut dire que tous dangers est ecartés...?
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 3000+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Administrateur ( Administrator )
BOOT : Normal boot
Antivirus : NOD32 Antivirus System 2.50 2.50 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:149 Go (Free:13 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 01/01/2010|12:59 )
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\great coal love default\mail junk.dat
Supprime! - C:\Program Files\Multi_Media_France\INSTALL.LOG
Echec ! - C:\Program Files\Multi_Media_France\tbMult.dll
Supprime! - C:\Program Files\Multi_Media_France\toolbar.cfg
Supprime! - C:\Program Files\Multi_Media_France\UNWISE.EXE
Supprime! - C:\Program Files\Multi_Media_France\UNWISE.INI
Echec ! - C:\Program Files\Multi_Media_France\tbMult.dll
Supprime! - C:\WINDOWS\Tasks\BD4240DE9E8DF182.job
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\great coal love default
Supprime! - C:\DOCUME~1\ADMINI~1\APPLIC~1\16isow~1
Supprime! - C:\Program Files\16isow~1
Echec ! - C:\Program Files\Multi_Media_France
Echec ! - C:\Program Files\Multi_Media_France
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ DEUXIEME PASSAGE
Echec ! - C:\Program Files\Multi_Media_France\tbMult.dll
Echec ! - C:\Program Files\Multi_Media_France\tbMult.dll
Echec ! - C:\Program Files\Multi_Media_France
Echec ! - C:\Program Files\Multi_Media_France
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans APPLIC~1
[28/05/2008|11:59] C:\DOCUME~1\ADMINI~1\APPLIC~1\AccurateRip
[28/08/2009|17:40] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
[25/01/2007|13:31] C:\DOCUME~1\ADMINI~1\APPLIC~1\Ahead
[07/05/2008|11:45] C:\DOCUME~1\ADMINI~1\APPLIC~1\Apple Computer
[10/08/2009|17:16] C:\DOCUME~1\ADMINI~1\APPLIC~1\AVS4YOU
[04/09/2008|12:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\Azureus
[29/11/2007|13:29] C:\DOCUME~1\ADMINI~1\APPLIC~1\dBpoweramp
[06/12/2007|12:53] C:\DOCUME~1\ADMINI~1\APPLIC~1\DivX
[05/01/2007|13:18] C:\DOCUME~1\ADMINI~1\APPLIC~1\Droppix
[12/11/2008|14:14] C:\DOCUME~1\ADMINI~1\APPLIC~1\dvdcss
[04/12/2007|13:57] C:\DOCUME~1\ADMINI~1\APPLIC~1\DWGEditor
[22/08/2007|13:06] C:\DOCUME~1\ADMINI~1\APPLIC~1\EPSON
[21/06/2006|12:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\Google
[27/07/2009|20:53] C:\DOCUME~1\ADMINI~1\APPLIC~1\gtopala
[20/12/2009|17:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\Help
[03/02/2009|13:43] C:\DOCUME~1\ADMINI~1\APPLIC~1\Icone
[17/08/2009|11:44] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[26/07/2007|13:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\InstallShield
[15/06/2006|08:46] C:\DOCUME~1\ADMINI~1\APPLIC~1\Lavasoft
[28/02/2008|01:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\LimeWire
[02/06/2006|15:39] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
[27/12/2009|23:43] C:\DOCUME~1\ADMINI~1\APPLIC~1\Malwarebytes
[17/11/2009|20:50] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[03/11/2009|23:40] C:\DOCUME~1\ADMINI~1\APPLIC~1\Mozilla
[19/08/2008|15:36] C:\DOCUME~1\ADMINI~1\APPLIC~1\MSN6
[01/04/2008|08:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\Nero
[11/10/2009|15:34] C:\DOCUME~1\ADMINI~1\APPLIC~1\Office Genuine Advantage
[06/10/2009|17:38] C:\DOCUME~1\ADMINI~1\APPLIC~1\Real
[30/06/2006|11:53] C:\DOCUME~1\ADMINI~1\APPLIC~1\SlySoft
[05/12/2007|08:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\SolidWorks
[14/04/2008|12:32] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun
[24/08/2009|00:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\SYSTRAN
[01/06/2006|15:06] C:\DOCUME~1\ADMINI~1\APPLIC~1\Talkback
[30/07/2009|20:57] C:\DOCUME~1\ADMINI~1\APPLIC~1\teamspeak2
[01/01/2010|12:58] C:\DOCUME~1\ADMINI~1\APPLIC~1\uTorrent
[16/06/2006|15:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\vlc
[11/08/2009|23:27] C:\DOCUME~1\ADMINI~1\APPLIC~1\Xilisoft Corporation
[29/09/2008|07:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[13/11/2009|12:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[25/01/2007|13:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[02/07/2007|12:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[30/05/2007|14:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[10/08/2009|17:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[18/06/2008|12:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[05/01/2007|13:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Droppix
[12/09/2007|12:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[26/07/2007|12:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EPSON
[27/01/2009|10:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[24/08/2009|00:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[27/12/2009|23:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[15/12/2009|20:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[09/12/2009|13:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[19/08/2008|15:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[01/04/2008|08:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
[01/06/2006|13:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[11/10/2009|15:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Office Genuine Advantage
[06/10/2009|17:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Real
[19/12/2009|11:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SecuROM
[15/06/2006|08:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[01/08/2009|15:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TransWarnStupidBook
[26/07/2007|13:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
[15/06/2006|07:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[31/05/2006|15:46] C:\DOCUME~1\CECABL~1\APPLIC~1\Identities
[01/06/2006|12:18] C:\DOCUME~1\CECABL~1\APPLIC~1\Microsoft
[31/05/2006|15:41] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[05/12/2006|13:18] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[31/05/2006|15:41] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[01/01/2010 12:23][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[01/01/2010 12:23][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[29/12/2009 19:14][--ah-----] C:\WINDOWS\tasks\SA.DAT
[30/08/2002 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[03/10/2009|08:30] C:\Program Files\Adobe
[01/01/2010|04:01] C:\Program Files\Ad-Remover
[18/12/2009|10:03] C:\Program Files\AGEIA Technologies
[01/04/2008|07:50] C:\Program Files\Ahead
[29/09/2008|07:42] C:\Program Files\Apple Software Update
[15/02/2007|13:32] C:\Program Files\aviproxy
[30/07/2009|20:15] C:\Program Files\AviSynth 2.5
[12/08/2009|07:59] C:\Program Files\AVS4YOU
[15/12/2009|00:30] C:\Program Files\CCleaner
[31/05/2006|15:39] C:\Program Files\ComPlus Applications
[30/07/2009|20:17] C:\Program Files\CoverPro
[18/12/2009|10:04] C:\Program Files\DIFX
[20/12/2009|17:28] C:\Program Files\Digital Photo Navigator 1.0
[30/07/2009|20:52] C:\Program Files\directx
[13/08/2009|13:35] C:\Program Files\DivX
[05/01/2007|13:18] C:\Program Files\Droppix
[10/08/2009|13:59] C:\Program Files\emulateur nds
[09/09/2009|18:12] C:\Program Files\emulators
[14/12/2009|23:58] C:\Program Files\eMule
[01/08/2008|19:07] C:\Program Files\eMule0.49b-Sources
[26/07/2007|13:05] C:\Program Files\EPSON
[12/08/2009|10:17] C:\Program Files\eRightSoft
[28/12/2009|22:36] C:\Program Files\Eset
[15/12/2009|07:43] C:\Program Files\ewido anti-malware
[01/01/2010|04:04] C:\Program Files\Fichiers communs
[28/08/2009|17:37] C:\Program Files\Gaming Mouse
[10/08/2009|12:58] C:\Program Files\Google
[01/08/2009|16:10] C:\Program Files\Hitman Pro
[29/11/2007|13:18] C:\Program Files\Illustrate
[20/12/2009|17:10] C:\Program Files\InstallShield Installation Information
[12/11/2008|14:17] C:\Program Files\InterActual
[09/12/2009|13:05] C:\Program Files\Internet Explorer
[29/09/2008|07:40] C:\Program Files\iPod
[29/09/2008|07:40] C:\Program Files\iTunes
[27/07/2009|21:07] C:\Program Files\IZArc
[01/01/2010|04:09] C:\Program Files\Java
[20/12/2007|22:46] C:\Program Files\Keygen
[02/05/2007|12:05] C:\Program Files\Lame MP3 Codec
[02/03/2009|00:03] C:\Program Files\Ludiclub
[28/12/2009|00:32] C:\Program Files\Malwarebytes' Anti-Malware
[15/10/2008|13:56] C:\Program Files\Messenger
[06/11/2009|08:44] C:\Program Files\Microsoft
[31/05/2006|15:42] C:\Program Files\microsoft frontpage
[31/07/2009|15:43] C:\Program Files\Microsoft LifeChat
[31/10/2009|09:02] C:\Program Files\Microsoft Office
[06/11/2009|08:44] C:\Program Files\Microsoft Office Outlook Connector
[07/11/2009|11:51] C:\Program Files\Microsoft Silverlight
[06/11/2009|08:43] C:\Program Files\Microsoft Sync Framework
[31/10/2009|09:02] C:\Program Files\Microsoft Visual Studio
[08/11/2009|03:41] C:\Program Files\Microsoft Works
[31/10/2009|09:01] C:\Program Files\Microsoft.NET
[09/04/2008|14:02] C:\Program Files\mkvtoavis
[20/12/2009|19:00] C:\Program Files\Movie Maker
[01/01/2010|11:52] C:\Program Files\Mozilla Firefox
[31/10/2009|09:03] C:\Program Files\MSBuild
[28/10/2009|18:19] C:\Program Files\MSECache
[31/05/2006|15:39] C:\Program Files\MSN
[31/05/2006|15:39] C:\Program Files\MSN Gaming Zone
[03/12/2007|13:00] C:\Program Files\MSXML 4.0
[01/01/2010|12:59] C:\Program Files\Multi_Media_France
[01/04/2008|08:08] C:\Program Files\Nero
[15/10/2008|12:38] C:\Program Files\NetMeeting
[19/12/2009|12:03] C:\Program Files\Nouveau dossier
[29/10/2009|00:20] C:\Program Files\Office Pro 2007
[24/09/2009|19:21] C:\Program Files\Orange
[14/08/2009|00:31] C:\Program Files\Outlook Express
[20/12/2009|17:06] C:\Program Files\PIXELA
[30/10/2007|11:00] C:\Program Files\PKR
[15/02/2007|13:32] C:\Program Files\plugins
[22/11/2007|13:27] C:\Program Files\Pochette Express 2
[29/09/2008|07:39] C:\Program Files\QuickTime
[02/06/2006|15:57] C:\Program Files\Real
[01/06/2006|12:18] C:\Program Files\Realtek AC97
[04/12/2007|12:49] C:\Program Files\Ripp-it_AM
[15/03/2009|12:04] C:\Program Files\Risk
[07/12/2009|20:00] C:\Program Files\RomStation
[02/05/2007|12:04] C:\Program Files\Samsung
[08/12/2008|14:50] C:\Program Files\Securitoo
[31/05/2006|15:40] C:\Program Files\Services en ligne
[18/10/2007|16:03] C:\Program Files\SlySoft
[30/07/2009|20:43] C:\Program Files\SolidWorks
[01/06/2006|13:56] C:\Program Files\Spybot - Search & Destroy
[15/10/2008|14:11] C:\Program Files\Sun
[04/09/2009|07:58] C:\Program Files\supernes emulateur plus roms pack de 400 jeux
[24/08/2009|00:06] C:\Program Files\systran
[30/07/2009|19:47] C:\Program Files\tactical ops 3.4
[07/08/2009|20:11] C:\Program Files\tactical ops 3.5
[30/07/2009|20:43] C:\Program Files\TeamSpeak3
[01/06/2006|12:27] C:\Program Files\TextBridge Pro 8.0
[10/07/2007|12:29] C:\Program Files\TomTom DesktopSuite
[01/01/2010|04:10] C:\Program Files\trend micro
[31/05/2006|15:46] C:\Program Files\Uninstall Information
[01/08/2009|11:08] C:\Program Files\uTorrent
[21/12/2009|08:07] C:\Program Files\VCW VicMan's Photo Editor
[16/06/2006|15:25] C:\Program Files\VideoLAN
[30/07/2009|20:44] C:\Program Files\Vuze
[22/12/2009|11:14] C:\Program Files\Warcraft III Demo
[06/11/2009|08:43] C:\Program Files\Windows Live
[29/07/2009|17:37] C:\Program Files\Windows Live SkyDrive
[05/12/2006|12:49] C:\Program Files\Windows Media Connect 2
[15/10/2008|12:37] C:\Program Files\Windows Media Player
[15/10/2008|12:37] C:\Program Files\Windows NT
[07/01/2008|13:39] C:\Program Files\Windows XP Fun Pack
[01/06/2006|12:33] C:\Program Files\WindowsUpdate
[01/06/2006|15:12] C:\Program Files\WinRAR
[31/05/2006|15:42] C:\Program Files\xerox
[11/08/2009|23:26] C:\Program Files\Xilisoft
[10/08/2009|11:19] C:\Program Files\Xilisoft Video Converter Ultimate v5.1.26.0624
[30/07/2009|20:46] C:\Program Files\YesMessenger
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[13/11/2009|11:11] C:\Program Files\Fichiers communs\Adobe
[01/04/2008|07:50] C:\Program Files\Fichiers communs\Ahead
[30/04/2009|17:50] C:\Program Files\Fichiers communs\Apple
[12/08/2009|07:59] C:\Program Files\Fichiers communs\AVSMedia
[30/07/2009|20:42] C:\Program Files\Fichiers communs\Bluebeam Software
[31/10/2009|09:17] C:\Program Files\Fichiers communs\DESIGNER
[10/08/2009|12:55] C:\Program Files\Fichiers communs\DivX Shared
[08/01/2007|08:08] C:\Program Files\Fichiers communs\Droppix
[04/12/2007|13:57] C:\Program Files\Fichiers communs\eDrawings2005
[01/06/2006|12:40] C:\Program Files\Fichiers communs\EPSON
[26/07/2007|13:09] C:\Program Files\Fichiers communs\InstallShield
[05/01/2007|13:18] C:\Program Files\Fichiers communs\LightScribe
[08/11/2009|03:42] C:\Program Files\Fichiers communs\Microsoft Shared
[31/05/2006|15:40] C:\Program Files\Fichiers communs\MSSoap
[01/04/2008|08:11] C:\Program Files\Fichiers communs\Nero
[31/05/2006|15:13] C:\Program Files\Fichiers communs\ODBC
[06/10/2009|17:38] C:\Program Files\Fichiers communs\Real
[31/05/2006|15:40] C:\Program Files\Fichiers communs\Services
[04/12/2007|13:51] C:\Program Files\Fichiers communs\Solidworks Data
[31/05/2006|15:13] C:\Program Files\Fichiers communs\SpeechEngines
[06/11/2009|08:44] C:\Program Files\Fichiers communs\System
[29/07/2009|17:00] C:\Program Files\Fichiers communs\Windows Live
[18/12/2009|10:03] C:\Program Files\Fichiers communs\Wise Installation Wizard
[01/06/2006|12:27] C:\Program Files\Fichiers communs\Xerox Shared
[06/10/2009|17:38] C:\Program Files\Fichiers communs\xing shared
--------------------\\ Process
( 40 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\Program Files\Multi_Media_France
C:\Program Files\Multi_Media_France\tbMult.dll
C:\Program Files\Multi_Media_France
C:\Program Files\Multi_Media_France\tbMult.dll
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-01 13:00:16
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Clone DVD - Clone CD and Any DVD + cracks april 2007.rar
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\GRAB A GRAND.html
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Read Me.html
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\SetupAnyDVD6090.exe
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\slysoft120306.exe
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Slysoft_1.38.exe
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\THE REPORT.html
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\THE SYSTEM TO COPY.html
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Torrent downloaded from Demonoid.com.txt
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\WATCH THIS.html
C:\DOCUME~1\ADMINI~1\Mes documents\Xilisoft Corporation\Video Converter Ultimate\crack.js
[F:11][D:6]-> C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp
[F:3][D:0]-> C:\DOCUME~1\ADMINI~1\Cookies
[F:3][D:4]-> C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 01/01/2010|11:44 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 01/01/2010|13:01 - Option : [2]
--------------------\\ Fin du rapport a 13:01:19
cela veut dire que tous dangers est ecartés...?
--------------------\\ Lop S&D 4.2.5-0 XP/Vista
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 3000+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Administrateur ( Administrator )
BOOT : Normal boot
Antivirus : NOD32 Antivirus System 2.50 2.50 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:149 Go (Free:13 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 01/01/2010|12:59 )
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\great coal love default\mail junk.dat
Supprime! - C:\Program Files\Multi_Media_France\INSTALL.LOG
Echec ! - C:\Program Files\Multi_Media_France\tbMult.dll
Supprime! - C:\Program Files\Multi_Media_France\toolbar.cfg
Supprime! - C:\Program Files\Multi_Media_France\UNWISE.EXE
Supprime! - C:\Program Files\Multi_Media_France\UNWISE.INI
Echec ! - C:\Program Files\Multi_Media_France\tbMult.dll
Supprime! - C:\WINDOWS\Tasks\BD4240DE9E8DF182.job
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\great coal love default
Supprime! - C:\DOCUME~1\ADMINI~1\APPLIC~1\16isow~1
Supprime! - C:\Program Files\16isow~1
Echec ! - C:\Program Files\Multi_Media_France
Echec ! - C:\Program Files\Multi_Media_France
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ DEUXIEME PASSAGE
Echec ! - C:\Program Files\Multi_Media_France\tbMult.dll
Echec ! - C:\Program Files\Multi_Media_France\tbMult.dll
Echec ! - C:\Program Files\Multi_Media_France
Echec ! - C:\Program Files\Multi_Media_France
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
--------------------\\ Listing des dossiers dans APPLIC~1
[28/05/2008|11:59] C:\DOCUME~1\ADMINI~1\APPLIC~1\AccurateRip
[28/08/2009|17:40] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
[25/01/2007|13:31] C:\DOCUME~1\ADMINI~1\APPLIC~1\Ahead
[07/05/2008|11:45] C:\DOCUME~1\ADMINI~1\APPLIC~1\Apple Computer
[10/08/2009|17:16] C:\DOCUME~1\ADMINI~1\APPLIC~1\AVS4YOU
[04/09/2008|12:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\Azureus
[29/11/2007|13:29] C:\DOCUME~1\ADMINI~1\APPLIC~1\dBpoweramp
[06/12/2007|12:53] C:\DOCUME~1\ADMINI~1\APPLIC~1\DivX
[05/01/2007|13:18] C:\DOCUME~1\ADMINI~1\APPLIC~1\Droppix
[12/11/2008|14:14] C:\DOCUME~1\ADMINI~1\APPLIC~1\dvdcss
[04/12/2007|13:57] C:\DOCUME~1\ADMINI~1\APPLIC~1\DWGEditor
[22/08/2007|13:06] C:\DOCUME~1\ADMINI~1\APPLIC~1\EPSON
[21/06/2006|12:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\Google
[27/07/2009|20:53] C:\DOCUME~1\ADMINI~1\APPLIC~1\gtopala
[20/12/2009|17:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\Help
[03/02/2009|13:43] C:\DOCUME~1\ADMINI~1\APPLIC~1\Icone
[17/08/2009|11:44] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[26/07/2007|13:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\InstallShield
[15/06/2006|08:46] C:\DOCUME~1\ADMINI~1\APPLIC~1\Lavasoft
[28/02/2008|01:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\LimeWire
[02/06/2006|15:39] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
[27/12/2009|23:43] C:\DOCUME~1\ADMINI~1\APPLIC~1\Malwarebytes
[17/11/2009|20:50] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[03/11/2009|23:40] C:\DOCUME~1\ADMINI~1\APPLIC~1\Mozilla
[19/08/2008|15:36] C:\DOCUME~1\ADMINI~1\APPLIC~1\MSN6
[01/04/2008|08:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\Nero
[11/10/2009|15:34] C:\DOCUME~1\ADMINI~1\APPLIC~1\Office Genuine Advantage
[06/10/2009|17:38] C:\DOCUME~1\ADMINI~1\APPLIC~1\Real
[30/06/2006|11:53] C:\DOCUME~1\ADMINI~1\APPLIC~1\SlySoft
[05/12/2007|08:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\SolidWorks
[14/04/2008|12:32] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun
[24/08/2009|00:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\SYSTRAN
[01/06/2006|15:06] C:\DOCUME~1\ADMINI~1\APPLIC~1\Talkback
[30/07/2009|20:57] C:\DOCUME~1\ADMINI~1\APPLIC~1\teamspeak2
[01/01/2010|12:58] C:\DOCUME~1\ADMINI~1\APPLIC~1\uTorrent
[16/06/2006|15:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\vlc
[11/08/2009|23:27] C:\DOCUME~1\ADMINI~1\APPLIC~1\Xilisoft Corporation
[29/09/2008|07:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[13/11/2009|12:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[25/01/2007|13:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[02/07/2007|12:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[30/05/2007|14:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[10/08/2009|17:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[18/06/2008|12:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[05/01/2007|13:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Droppix
[12/09/2007|12:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[26/07/2007|12:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EPSON
[27/01/2009|10:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[24/08/2009|00:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[27/12/2009|23:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[15/12/2009|20:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[09/12/2009|13:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[19/08/2008|15:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[01/04/2008|08:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
[01/06/2006|13:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[11/10/2009|15:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Office Genuine Advantage
[06/10/2009|17:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Real
[19/12/2009|11:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SecuROM
[15/06/2006|08:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[01/08/2009|15:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TransWarnStupidBook
[26/07/2007|13:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
[15/06/2006|07:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[31/05/2006|15:46] C:\DOCUME~1\CECABL~1\APPLIC~1\Identities
[01/06/2006|12:18] C:\DOCUME~1\CECABL~1\APPLIC~1\Microsoft
[31/05/2006|15:41] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[05/12/2006|13:18] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[31/05/2006|15:41] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks
[01/01/2010 12:23][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[01/01/2010 12:23][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[29/12/2009 19:14][--ah-----] C:\WINDOWS\tasks\SA.DAT
[30/08/2002 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
--------------------\\ Listing des dossiers dans C:\Program Files
[03/10/2009|08:30] C:\Program Files\Adobe
[01/01/2010|04:01] C:\Program Files\Ad-Remover
[18/12/2009|10:03] C:\Program Files\AGEIA Technologies
[01/04/2008|07:50] C:\Program Files\Ahead
[29/09/2008|07:42] C:\Program Files\Apple Software Update
[15/02/2007|13:32] C:\Program Files\aviproxy
[30/07/2009|20:15] C:\Program Files\AviSynth 2.5
[12/08/2009|07:59] C:\Program Files\AVS4YOU
[15/12/2009|00:30] C:\Program Files\CCleaner
[31/05/2006|15:39] C:\Program Files\ComPlus Applications
[30/07/2009|20:17] C:\Program Files\CoverPro
[18/12/2009|10:04] C:\Program Files\DIFX
[20/12/2009|17:28] C:\Program Files\Digital Photo Navigator 1.0
[30/07/2009|20:52] C:\Program Files\directx
[13/08/2009|13:35] C:\Program Files\DivX
[05/01/2007|13:18] C:\Program Files\Droppix
[10/08/2009|13:59] C:\Program Files\emulateur nds
[09/09/2009|18:12] C:\Program Files\emulators
[14/12/2009|23:58] C:\Program Files\eMule
[01/08/2008|19:07] C:\Program Files\eMule0.49b-Sources
[26/07/2007|13:05] C:\Program Files\EPSON
[12/08/2009|10:17] C:\Program Files\eRightSoft
[28/12/2009|22:36] C:\Program Files\Eset
[15/12/2009|07:43] C:\Program Files\ewido anti-malware
[01/01/2010|04:04] C:\Program Files\Fichiers communs
[28/08/2009|17:37] C:\Program Files\Gaming Mouse
[10/08/2009|12:58] C:\Program Files\Google
[01/08/2009|16:10] C:\Program Files\Hitman Pro
[29/11/2007|13:18] C:\Program Files\Illustrate
[20/12/2009|17:10] C:\Program Files\InstallShield Installation Information
[12/11/2008|14:17] C:\Program Files\InterActual
[09/12/2009|13:05] C:\Program Files\Internet Explorer
[29/09/2008|07:40] C:\Program Files\iPod
[29/09/2008|07:40] C:\Program Files\iTunes
[27/07/2009|21:07] C:\Program Files\IZArc
[01/01/2010|04:09] C:\Program Files\Java
[20/12/2007|22:46] C:\Program Files\Keygen
[02/05/2007|12:05] C:\Program Files\Lame MP3 Codec
[02/03/2009|00:03] C:\Program Files\Ludiclub
[28/12/2009|00:32] C:\Program Files\Malwarebytes' Anti-Malware
[15/10/2008|13:56] C:\Program Files\Messenger
[06/11/2009|08:44] C:\Program Files\Microsoft
[31/05/2006|15:42] C:\Program Files\microsoft frontpage
[31/07/2009|15:43] C:\Program Files\Microsoft LifeChat
[31/10/2009|09:02] C:\Program Files\Microsoft Office
[06/11/2009|08:44] C:\Program Files\Microsoft Office Outlook Connector
[07/11/2009|11:51] C:\Program Files\Microsoft Silverlight
[06/11/2009|08:43] C:\Program Files\Microsoft Sync Framework
[31/10/2009|09:02] C:\Program Files\Microsoft Visual Studio
[08/11/2009|03:41] C:\Program Files\Microsoft Works
[31/10/2009|09:01] C:\Program Files\Microsoft.NET
[09/04/2008|14:02] C:\Program Files\mkvtoavis
[20/12/2009|19:00] C:\Program Files\Movie Maker
[01/01/2010|11:52] C:\Program Files\Mozilla Firefox
[31/10/2009|09:03] C:\Program Files\MSBuild
[28/10/2009|18:19] C:\Program Files\MSECache
[31/05/2006|15:39] C:\Program Files\MSN
[31/05/2006|15:39] C:\Program Files\MSN Gaming Zone
[03/12/2007|13:00] C:\Program Files\MSXML 4.0
[01/01/2010|12:59] C:\Program Files\Multi_Media_France
[01/04/2008|08:08] C:\Program Files\Nero
[15/10/2008|12:38] C:\Program Files\NetMeeting
[19/12/2009|12:03] C:\Program Files\Nouveau dossier
[29/10/2009|00:20] C:\Program Files\Office Pro 2007
[24/09/2009|19:21] C:\Program Files\Orange
[14/08/2009|00:31] C:\Program Files\Outlook Express
[20/12/2009|17:06] C:\Program Files\PIXELA
[30/10/2007|11:00] C:\Program Files\PKR
[15/02/2007|13:32] C:\Program Files\plugins
[22/11/2007|13:27] C:\Program Files\Pochette Express 2
[29/09/2008|07:39] C:\Program Files\QuickTime
[02/06/2006|15:57] C:\Program Files\Real
[01/06/2006|12:18] C:\Program Files\Realtek AC97
[04/12/2007|12:49] C:\Program Files\Ripp-it_AM
[15/03/2009|12:04] C:\Program Files\Risk
[07/12/2009|20:00] C:\Program Files\RomStation
[02/05/2007|12:04] C:\Program Files\Samsung
[08/12/2008|14:50] C:\Program Files\Securitoo
[31/05/2006|15:40] C:\Program Files\Services en ligne
[18/10/2007|16:03] C:\Program Files\SlySoft
[30/07/2009|20:43] C:\Program Files\SolidWorks
[01/06/2006|13:56] C:\Program Files\Spybot - Search & Destroy
[15/10/2008|14:11] C:\Program Files\Sun
[04/09/2009|07:58] C:\Program Files\supernes emulateur plus roms pack de 400 jeux
[24/08/2009|00:06] C:\Program Files\systran
[30/07/2009|19:47] C:\Program Files\tactical ops 3.4
[07/08/2009|20:11] C:\Program Files\tactical ops 3.5
[30/07/2009|20:43] C:\Program Files\TeamSpeak3
[01/06/2006|12:27] C:\Program Files\TextBridge Pro 8.0
[10/07/2007|12:29] C:\Program Files\TomTom DesktopSuite
[01/01/2010|04:10] C:\Program Files\trend micro
[31/05/2006|15:46] C:\Program Files\Uninstall Information
[01/08/2009|11:08] C:\Program Files\uTorrent
[21/12/2009|08:07] C:\Program Files\VCW VicMan's Photo Editor
[16/06/2006|15:25] C:\Program Files\VideoLAN
[30/07/2009|20:44] C:\Program Files\Vuze
[22/12/2009|11:14] C:\Program Files\Warcraft III Demo
[06/11/2009|08:43] C:\Program Files\Windows Live
[29/07/2009|17:37] C:\Program Files\Windows Live SkyDrive
[05/12/2006|12:49] C:\Program Files\Windows Media Connect 2
[15/10/2008|12:37] C:\Program Files\Windows Media Player
[15/10/2008|12:37] C:\Program Files\Windows NT
[07/01/2008|13:39] C:\Program Files\Windows XP Fun Pack
[01/06/2006|12:33] C:\Program Files\WindowsUpdate
[01/06/2006|15:12] C:\Program Files\WinRAR
[31/05/2006|15:42] C:\Program Files\xerox
[11/08/2009|23:26] C:\Program Files\Xilisoft
[10/08/2009|11:19] C:\Program Files\Xilisoft Video Converter Ultimate v5.1.26.0624
[30/07/2009|20:46] C:\Program Files\YesMessenger
--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs
[13/11/2009|11:11] C:\Program Files\Fichiers communs\Adobe
[01/04/2008|07:50] C:\Program Files\Fichiers communs\Ahead
[30/04/2009|17:50] C:\Program Files\Fichiers communs\Apple
[12/08/2009|07:59] C:\Program Files\Fichiers communs\AVSMedia
[30/07/2009|20:42] C:\Program Files\Fichiers communs\Bluebeam Software
[31/10/2009|09:17] C:\Program Files\Fichiers communs\DESIGNER
[10/08/2009|12:55] C:\Program Files\Fichiers communs\DivX Shared
[08/01/2007|08:08] C:\Program Files\Fichiers communs\Droppix
[04/12/2007|13:57] C:\Program Files\Fichiers communs\eDrawings2005
[01/06/2006|12:40] C:\Program Files\Fichiers communs\EPSON
[26/07/2007|13:09] C:\Program Files\Fichiers communs\InstallShield
[05/01/2007|13:18] C:\Program Files\Fichiers communs\LightScribe
[08/11/2009|03:42] C:\Program Files\Fichiers communs\Microsoft Shared
[31/05/2006|15:40] C:\Program Files\Fichiers communs\MSSoap
[01/04/2008|08:11] C:\Program Files\Fichiers communs\Nero
[31/05/2006|15:13] C:\Program Files\Fichiers communs\ODBC
[06/10/2009|17:38] C:\Program Files\Fichiers communs\Real
[31/05/2006|15:40] C:\Program Files\Fichiers communs\Services
[04/12/2007|13:51] C:\Program Files\Fichiers communs\Solidworks Data
[31/05/2006|15:13] C:\Program Files\Fichiers communs\SpeechEngines
[06/11/2009|08:44] C:\Program Files\Fichiers communs\System
[29/07/2009|17:00] C:\Program Files\Fichiers communs\Windows Live
[18/12/2009|10:03] C:\Program Files\Fichiers communs\Wise Installation Wizard
[01/06/2006|12:27] C:\Program Files\Fichiers communs\Xerox Shared
[06/10/2009|17:38] C:\Program Files\Fichiers communs\xing shared
--------------------\\ Process
( 40 Processes )
... OK !
--------------------\\ Recherche avec S_Lop
Aucun fichier / dossier Lop trouvé !
--------------------\\ Recherche de Fichiers / Dossiers Lop
C:\Program Files\Multi_Media_France
C:\Program Files\Multi_Media_France\tbMult.dll
C:\Program Files\Multi_Media_France
C:\Program Files\Multi_Media_France\tbMult.dll
--------------------\\ Verification du Registre
..... OK !
--------------------\\ Verification du fichier Hosts
Fichier Hosts PROPRE
--------------------\\ Recherche de fichiers avec Catchme
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-01 13:00:16
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Clone DVD - Clone CD and Any DVD + cracks april 2007.rar
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\GRAB A GRAND.html
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Read Me.html
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\SetupAnyDVD6090.exe
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\slysoft120306.exe
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Slysoft_1.38.exe
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\THE REPORT.html
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\THE SYSTEM TO COPY.html
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\Torrent downloaded from Demonoid.com.txt
C:\DOCUME~1\ADMINI~1\Mes documents\sylvain\Clone DVD - Clone CD and Any DVD + cracks april 2007\WATCH THIS.html
C:\DOCUME~1\ADMINI~1\Mes documents\Xilisoft Corporation\Video Converter Ultimate\crack.js
[F:11][D:6]-> C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp
[F:3][D:0]-> C:\DOCUME~1\ADMINI~1\Cookies
[F:3][D:4]-> C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMPOR~1\content.IE5
1 - "C:\Lop SD\LopR_1.txt" - 01/01/2010|11:44 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 01/01/2010|13:01 - Option : [2]
--------------------\\ Fin du rapport a 13:01:19
Merci
tu vraiment un killer
voici mopn dernier rapport
[ Rapport ToolsCleaner version 2.3.11 (par A.Rothstein & dj QUIOU) ]
--> Recherche:
C:\Combofix.txt: trouvé !
C:\lopR.txt: trouvé !
C:\Lop SD: trouvé !
C:\Qoobox: trouvé !
C:\Rsit: trouvé !
C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\LopSD.exe: trouvé !
C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\ComboFix.exe: trouvé !
C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\Ad-R.exe: trouvé !
C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\Rsit.exe: trouvé !
C:\Lop SD\catchme.exe: trouvé !
C:\Lop SD\catchme.log: trouvé !
C:\Program Files\Ad-remover: trouvé !
C:\Program Files\trend micro\HijackThis.exe: trouvé !
C:\Program Files\trend micro\hijackthis.log: trouvé !
C:\Qoobox\Quarantine\catchme.log: trouvé !
C:\WINDOWS\mbr.exe: trouvé !
---------------------------------
--> Suppression:
C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\LopSD.exe: supprimé !
C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\ComboFix.exe: supprimé !
C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\Ad-R.exe: supprimé !
C:\Lop SD\catchme.exe: supprimé !
C:\Program Files\trend micro\HijackThis.exe: supprimé !
C:\Combofix.txt: supprimé !
C:\lopR.txt: supprimé !
C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\Rsit.exe: supprimé !
C:\Lop SD\catchme.log: supprimé !
C:\Program Files\trend micro\hijackthis.log: supprimé !
C:\Qoobox\Quarantine\catchme.log: supprimé !
C:\WINDOWS\mbr.exe: supprimé !
C:\Lop SD: supprimé !
C:\Qoobox: supprimé !
C:\Rsit: supprimé !
C:\Program Files\Ad-remover: ERREUR DE SUPPRESSION !!
tu vraiment un killer
voici mopn dernier rapport
[ Rapport ToolsCleaner version 2.3.11 (par A.Rothstein & dj QUIOU) ]
--> Recherche:
C:\Combofix.txt: trouvé !
C:\lopR.txt: trouvé !
C:\Lop SD: trouvé !
C:\Qoobox: trouvé !
C:\Rsit: trouvé !
C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\LopSD.exe: trouvé !
C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\ComboFix.exe: trouvé !
C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\Ad-R.exe: trouvé !
C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\Rsit.exe: trouvé !
C:\Lop SD\catchme.exe: trouvé !
C:\Lop SD\catchme.log: trouvé !
C:\Program Files\Ad-remover: trouvé !
C:\Program Files\trend micro\HijackThis.exe: trouvé !
C:\Program Files\trend micro\hijackthis.log: trouvé !
C:\Qoobox\Quarantine\catchme.log: trouvé !
C:\WINDOWS\mbr.exe: trouvé !
---------------------------------
--> Suppression:
C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\LopSD.exe: supprimé !
C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\ComboFix.exe: supprimé !
C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\Ad-R.exe: supprimé !
C:\Lop SD\catchme.exe: supprimé !
C:\Program Files\trend micro\HijackThis.exe: supprimé !
C:\Combofix.txt: supprimé !
C:\lopR.txt: supprimé !
C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\Rsit.exe: supprimé !
C:\Lop SD\catchme.log: supprimé !
C:\Program Files\trend micro\hijackthis.log: supprimé !
C:\Qoobox\Quarantine\catchme.log: supprimé !
C:\WINDOWS\mbr.exe: supprimé !
C:\Lop SD: supprimé !
C:\Qoobox: supprimé !
C:\Rsit: supprimé !
C:\Program Files\Ad-remover: ERREUR DE SUPPRESSION !!
Lassé par la pub ? Créez un compte
- Contenus similaires :
- ForumVirus sécurity alert
- Forum[Résolu] Security center alert win32.brontok
- ForumProblème Malware Defense et Windows Security Alert
- ForumAvira infecté, Firefox aussi, Windows security bloque tout
- ForumWindows security alert !!! Bloque au démarage ... Help !!!
- ForumWindows Restore Security alert: icones
- Forum[Résolu] Virus Windows Security Alert
- ForumVirus windows security alert
- ForumInfection Windows security alert
- Voir plus