Probleme surement un virus

Bonsoir,


Je te conseillerai de faire une analyse complète de ton système, et en ce qui concerne les pubs il existe des logiciels qui permettent de bloquer les "pop up"

Cordialement.

Quel logiciel je dois utiliser pour les "pop up"

Tu as plusieur plugin pour firefox qui bloque les pop up, mais vue que tes pub s'ouvrent avec IE ia peu de chance que ca fonctionne.

j'ai fais un analyse il a détecter quelque chose j'ai fais tous réparer j'ai antivir mais il ne va ma mieux.

Bonjour,

Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.

Double-clique sur RSIT.exe afin de lancer le programme.
(Sous Vista, il faut cliquer droit sur RSIT.exe et choisir Exécuter en tant qu'administrateur)

Clique sur Continue à l'écran Disclaimer.

Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

Note : les rapports sont sauvegardés dans le dossier C:\rsit.

j'ai fais un analyse il a détecter quelque chose j'ai fais tous réparer j'ai antivir mais il ne va ma mieux.

Logfile of random's system information tool 1.06 (written by random/random)
Run by Jean-Alexandre at 2010-01-01 20:19:18
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 114 GB (76%) free of 150 GB
Total RAM: 510 MB (9% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:20:11, on 2010-01-01
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\lxdncoms.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\Creative\Sound Blaster Live! 24-bit\Surround Mixer\CTSysVol.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
c:\docume~1\jean-a~1\applic~1\blahplus\pingremotesect.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Jean-Alexandre\Bureau\RSIT.exe
C:\Program Files\trend micro\Jean-Alexandre.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.ca/index.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.atcomet.com/m/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: BrowserHelper Class - {8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6} - C:\Program Files\SGPSA\SearchAssistant.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: Search Assistant - {F0626A63-410B-45E2-99A1-3F2475B2D695} - C:\Program Files\SGPSA\BHO.dll
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\Sound Blaster Live! 24-bit\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [axis love poll lite] C:\Documents and Settings\All Users\Application Data\each new axis love\LONG JOY.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Blue 1] C:\WINDOWS\system32\config\SYSTEM~1\APPLIC~1\BLAHPLUS\File Bold Mfcd.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown....
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/MessengerGamesContent/Gam...
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Ap...
O16 - DPF: {A1F2F2CE-06AF-483C-9F12-D3BAA72477D6} (BatchDownloader Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Ap...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab569...
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: lxdn_device - - C:\WINDOWS\system32\lxdncoms.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: L Ile Noyee Drivers Auto Removal (pr2ajbeb) (pr2ajbeb) - Micro Application - C:\WINDOWS\system32\pr2ajbeb.exe

--
End of file - 8943 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\B131D751918A475D.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5CA3D70E-1895-11CF-8E15-001234567890}]
DriveLetterAccess - C:\WINDOWS\system32\dla\tfswshx.dll [2004-12-06 118842]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}]
BrowserHelper Class - C:\Program Files\SGPSA\SearchAssistant.dll [2009-10-15 123904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F0626A63-410B-45E2-99A1-3F2475B2D695}]
Search Assistant - C:\Program Files\SGPSA\BHO.dll [2009-11-06 293376]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IntelMeM"=C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe [2003-09-03 221184]
"CTSysVol"=C:\Program Files\Creative\Sound Blaster Live! 24-bit\Surround Mixer\CTSysVol.exe [2003-09-17 57344]
"P17Helper"=Rundll32 P17.dll,P17Helper []
"UpdReg"=C:\WINDOWS\UpdReg.EXE [2000-05-11 90112]
"DVDLauncher"=C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe [2004-10-12 57344]
"UpdateManager"=C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe [2004-01-07 110592]
"dla"=C:\WINDOWS\system32\dla\tfswctrl.exe [2004-12-06 127035]
"DMXLauncher"=C:\Program Files\Dell\Media Experience\DMXLauncher.exe [2005-01-27 86016]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"igfxtray"=C:\WINDOWS\system32\igfxtray.exe [2005-09-20 94208]
"igfxhkcmd"=C:\WINDOWS\system32\hkcmd.exe [2005-09-20 77824]
"igfxpers"=C:\WINDOWS\system32\igfxpers.exe [2005-09-20 114688]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-09-05 417792]
"Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe /runcleanupscript []
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"Adobe ARM"=C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-10-28 141600]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"axis love poll lite"=C:\Documents and Settings\All Users\Application Data\each new axis love\LONG JOY.exe [2010-01-01 749568]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883856]
"Blue 1"=C:\WINDOWS\system32\config\SYSTEM [2010-01-01 5505024]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2006-11-03 204288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2005-09-20 135168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\BitComet\BitComet.exe"="C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet.exe"
"C:\WINDOWS\SYSTEM32\lxdncoms.exe"="C:\WINDOWS\SYSTEM32\lxdncoms.exe:*:Enabled:2600 Series Server"
"C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\lxdnpswx.exe"="C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\lxdnpswx.exe:*:Enabled rinter Status Window Interface"
"C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\lxdntime.exe"="C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\lxdntime.exe:*:Enabled:Lexmark Connect Time Executable"
"C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\lxdnjswx.exe"="C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\lxdnjswx.exe:*:Enabled:Job Status Window Interface"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\iMesh Applications\iMesh\iMesh.exe"="C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh"
"C:\WINDOWS\PCHEALTH\HELPCTR\BINARIES\helpctr.exe"="C:\WINDOWS\PCHEALTH\HELPCTR\BINARIES\helpctr.exe:*:Enabled:Assistance à distance - Windows Messenger et voix"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

======List of files/folders created in the last 1 months======

2010-01-01 20:19:18 ----D---- C:\rsit
2010-01-01 15:21:49 ----D---- C:\Program Files\BitTorrent
2009-12-31 20:40:34 ----D---- C:\Documents and Settings\Jean-Alexandre\Application Data\WinRAR
2009-12-31 16:46:56 ----D---- C:\Program Files\Micro Application
2009-12-31 16:25:35 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2009-12-31 16:25:35 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2009-12-31 16:25:34 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2009-12-31 16:25:28 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2009-12-31 16:25:27 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2009-12-31 16:25:27 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2009-12-31 16:25:26 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2009-12-31 16:25:26 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2009-12-31 16:25:26 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2009-12-31 16:25:25 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2009-12-31 16:25:25 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2009-12-31 16:25:24 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2009-12-31 16:25:20 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2009-12-28 22:39:55 ----D---- C:\Documents and Settings\Jean-Alexandre\Application Data\TigerPlayer
2009-12-28 22:37:08 ----D---- C:\Program Files\MpcStar
2009-12-26 00:57:30 ----D---- C:\Program Files\BLAHPLUS
2009-12-25 15:37:56 ----D---- C:\Program Files\IrfanView
2009-12-16 19:17:04 ----A---- C:\WINDOWS\system32\javaws.exe
2009-12-16 19:17:04 ----A---- C:\WINDOWS\system32\javaw.exe
2009-12-16 19:17:04 ----A---- C:\WINDOWS\system32\java.exe
2009-12-16 18:18:31 ----D---- C:\Documents and Settings\Jean-Alexandre\Application Data\Corel
2009-12-14 08:25:03 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2009-12-09 22:32:40 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2009-12-09 22:32:34 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2009-12-09 22:32:08 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2009-12-09 22:32:02 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2009-12-09 22:31:52 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$

======List of files/folders modified in the last 1 months======

2010-01-01 20:20:11 ----D---- C:\Program Files\trend micro
2010-01-01 20:19:20 ----D---- C:\WINDOWS\Prefetch
2010-01-01 20:07:29 ----D---- C:\Program Files\Mozilla Firefox
2010-01-01 19:48:19 ----D---- C:\WINDOWS\Temp
2010-01-01 19:47:24 ----D---- C:\WINDOWS\system32\CatRoot2
2010-01-01 15:21:49 ----RD---- C:\Program Files
2010-01-01 15:18:18 ----D---- C:\Program Files\BitComet
2010-01-01 01:59:13 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-12-31 19:56:18 ----D---- C:\WINDOWS\system32\DRIVERS
2009-12-31 19:56:11 ----D---- C:\WINDOWS\SYSTEM32
2009-12-31 16:54:40 ----D---- C:\WINDOWS
2009-12-31 16:51:03 ----D---- C:\WINDOWS\system32\DirectX
2009-12-31 16:25:35 ----HD---- C:\WINDOWS\INF
2009-12-28 22:35:55 ----D---- C:\Downloads
2009-12-28 21:25:13 ----D---- C:\Documents and Settings\Jean-Alexandre\Application Data\LimeWire
2009-12-26 00:58:38 ----SD---- C:\WINDOWS\Tasks
2009-12-26 00:58:38 ----D---- C:\Documents and Settings\Jean-Alexandre\Application Data\BLAHPLUS
2009-12-26 00:58:29 ----D---- C:\Documents and Settings\All Users\Application Data\each new axis love
2009-12-16 19:17:23 ----SHD---- C:\WINDOWS\Installer
2009-12-16 19:17:09 ----SHD---- C:\Config.Msi
2009-12-16 19:16:56 ----D---- C:\Program Files\Java
2009-12-15 08:33:42 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-12-15 08:33:36 ----D---- C:\Program Files\Fichiers communs
2009-12-14 08:26:32 ----D---- C:\WINDOWS\AppPatch
2009-12-14 08:25:10 ----A---- C:\WINDOWS\imsins.BAK
2009-12-14 08:25:06 ----RSHD---- C:\WINDOWS\system32\DLLCACHE
2009-12-14 08:24:36 ----HD---- C:\WINDOWS\$hf_mig$
2009-12-14 08:19:53 ----D---- C:\WINDOWS\SoftwareDistribution
2009-12-14 08:14:31 ----D---- C:\Program Files\Linksys
2009-12-12 18:02:55 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-12-10 09:12:31 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-12-09 22:32:25 ----D---- C:\Program Files\Internet Explorer
2009-12-09 20:04:35 ----D---- C:\Program Files\LimeWire

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 40576]
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14720]
R1 sscdbhk5;sscdbhk5; C:\WINDOWS\system32\drivers\sscdbhk5.sys [2004-07-14 5627]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-10-05 28520]
R1 ssrtln;ssrtln; C:\WINDOWS\system32\drivers\ssrtln.sys [2004-07-14 23545]
R1 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-05 12032]
R2 ASCTRM;ASCTRM; C:\WINDOWS\system32\drivers\ASCTRM.sys [2005-05-07 8552]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-12-10 56816]
R2 drvnddm;drvnddm; C:\WINDOWS\system32\drivers\drvnddm.sys [2004-11-23 40480]
R2 tfsnboio;tfsnboio; C:\WINDOWS\system32\dla\tfsnboio.sys [2004-12-06 25883]
R2 tfsncofs;tfsncofs; C:\WINDOWS\system32\dla\tfsncofs.sys [2004-12-06 34843]
R2 tfsndrct;tfsndrct; C:\WINDOWS\system32\dla\tfsndrct.sys [2004-12-06 4123]
R2 tfsndres;tfsndres; C:\WINDOWS\system32\dla\tfsndres.sys [2004-12-06 2271]
R2 tfsnifs;tfsnifs; C:\WINDOWS\system32\dla\tfsnifs.sys [2004-12-06 86586]
R2 tfsnopio;tfsnopio; C:\WINDOWS\system32\dla\tfsnopio.sys [2004-12-06 15227]
R2 tfsnpool;tfsnpool; C:\WINDOWS\system32\dla\tfsnpool.sys [2004-12-06 6363]
R2 tfsnudf;tfsnudf; C:\WINDOWS\system32\dla\tfsnudf.sys [2004-12-06 98714]
R2 tfsnudfa;tfsnudfa; C:\WINDOWS\system32\dla\tfsnudfa.sys [2004-12-06 100603]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\system32\DRIVERS\ctsfm2k.sys [2003-09-22 130192]
R3 E100B;Intel(R) PRO Adapter Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2004-02-10 154112]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-09-20 1302332]
R3 IntelC51;IntelC51; C:\WINDOWS\system32\DRIVERS\IntelC51.sys [2004-03-05 1233525]
R3 IntelC52;IntelC52; C:\WINDOWS\system32\DRIVERS\IntelC52.sys [2004-03-05 647929]
R3 IntelC53;IntelC53; C:\WINDOWS\system32\DRIVERS\IntelC53.sys [2004-06-15 61157]
R3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
R3 mohfilt;mohfilt; C:\WINDOWS\system32\DRIVERS\mohfilt.sys [2004-03-05 37048]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\DRIVERS\ctoss2k.sys [2003-09-22 178672]
R3 P17;Sound Blaster Live! 24-bit; C:\WINDOWS\system32\drivers\P17.sys [2004-06-09 840960]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 bvrp_pci;bvrp_pci; C:\WINDOWS\system32\drivers\bvrp_pci.sys []
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-03 1897408]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2009-08-28 40448]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-10-05 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-10-05 185089]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-08-28 144672]
R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 Creative Service for CDROM Access;Creative Service for CDROM Access; C:\WINDOWS\system32\CTsvcCDA.EXE [1999-12-13 44032]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 lxdn_device;lxdn_device; C:\WINDOWS\system32\lxdncoms.exe [2009-08-13 594600]
R2 WMDM PMSP Service;WMDM PMSP Service; C:\WINDOWS\system32\MsPMSPSv.exe [2000-06-26 53520]
R2 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2009-10-28 545568]
S2 pr2ajbeb;L Ile Noyee Drivers Auto Removal (pr2ajbeb); C:\WINDOWS\system32\pr2ajbeb.exe [2007-08-22 411000]
S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 NetSvc;Intel NCS NetService; C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe [2003-12-17 143360]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]

-----------------EOF-----------------

info.txt logfile of random's system information tool 1.06 2010-01-01 20:21:25

======Uninstall list======

-->"C:\Program Files\Creative\Sound Blaster Live! 24-bit\Program\Ctzapxx.EXE" /X /U /S /L:FRN
-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->C:\WINDOWS\system32\\MSIEXEC.EXE /I {09DA4F91-2A09-4232-AB8C-6BC740096DE3} REMOVE=UpdateMgrFeature
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}
-->MsiExec.exe /I{403EF592-953B-4794-BCEF-ECAB835C2095}
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{435E969D-867E-4364-8E74-3DC8A69C5BDB}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{435E969D-867E-4364-8E74-3DC8A69C5BDB}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{44DC86A0-248D-11D6-9BAF-0090271AF8A4}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{44DC86A0-248D-11D6-9BAF-0090271AF8A4}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5210ED6D-52A9-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5210ED6D-52A9-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5CDDF96A-BC34-4D72-9ABA-E1FFF0C39977}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67AEFC4C-69E4-11D7-85F4-00E018013273}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67AEFC4C-69E4-11D7-85F4-00E018013273}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7201B853-5833-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7201B853-5833-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7A900EAB-DA37-4554-AF19-9C337476D05D}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7A900EAB-DA37-4554-AF19-9C337476D05D}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A1185190-514F-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A1185190-514F-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AC157741-3285-4D6A-B934-9174587A3493}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AC157741-3285-4D6A-B934-9174587A3493}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C6866B7D-ACFD-4C49-B77B-3B2F8CF54B96}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C6866B7D-ACFD-4C49-B77B-3B2F8CF54B96}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DEBD7BF3-5856-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DEBD7BF3-5856-11D6-A285-00A0CC51B2FE}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F865C2FE-25E7-11D6-9BAF-0090271AF8A4}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F865C2FE-25E7-11D6-9BAF-0090271AF8A4}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB2292C6-1F0A-11D7-AB2D-0090271A23A2}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB2292C6-1F0A-11D7-AB2D-0090271A23A2}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FC0DD8AE-3DC0-11D7-AB2D-0090271A23A2}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FC0DD8AE-3DC0-11D7-AB2D-0090271A23A2}\setup.exe" -l0x40c /remove
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 9.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A92000000001}
Adobe Shockwave Player 11.5-->"C:\WINDOWS\system32\Adobe\Shockwave 11\uninstaller.exe"
Apple Application Support-->MsiExec.exe /I{B607C354-CD79-4D22-86D1-92DC94153F42}
Apple Mobile Device Support-->MsiExec.exe /I{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
BitTorrent-->C:\Program Files\BitTorrent\uninst.exe
Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
Classic PhoneTools-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E3436EE2-D5CB-4249-840B-3A0140CC34C3}\setup.exe" -l0x40c ControlPanel
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB976098-v2)-->"C:\WINDOWS\$NtUninstallKB976098-v2$\spuninst\spuninst.exe"
Creative MediaSource-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{56F3E1FF-54FE-4384-A153-6CCABA097814}\setup.exe" -l0x40c /remove
DAO-->MsiExec.exe /I{64116298-93C5-401D-B06C-39D8E3338508}
Dell Driver Reset Tool-->MsiExec.exe /I{5905F42D-3F5F-4916-ADA6-94A3646AEE76}
Dell Media Experience-->MsiExec.exe /I{AC0EE5B0-A8FB-4D0A-AF03-2EDC518F841B}
Dell Picture Studio - Dell Image Expert-->MsiExec.exe /I{151C555A-A9E7-4A2E-B6D7-165D04A3C956}
Farm Craft Deluxe-->"C:\Program Files\Zylom Games\Farm Craft Deluxe\GameInstlr.exe" --uninstall UnInstall.log
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
Intel(R) 537EP V9x DFV PCI Modem-->rundll32 IntelCci.dll,iSMUninstallation "Intel(R) 537EP V9x DFV PCI Modem"
Intel(R) Extreme Graphics 2 Driver-->RUNDLL32.EXE C:\WINDOWS\system32\ialmrem.dll,UninstallW2KIGfx PCI\VEN_8086&DEV_2572
Intel(R) PRO Network Adapters and Drivers-->Prounstl.exe
Intel(R) PROSet for Wired Connections-->MsiExec.exe /I{17334AAF-C9E7-483B-9F45-E3FCAF07FFA7}
IrfanView (remove only)-->C:\Program Files\IrfanView\iv_uninstall.exe
iTunes-->MsiExec.exe /I{D1A74FBB-CA8D-4CCA-9B89-BAAA436DB178}
Java(TM) 6 Update 17-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216016FF}
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
LimeWire 5.3.6-->"C:\Program Files\LimeWire\uninstall.exe"
MahJongg Mystery Deluxe-->"C:\Program Files\Zylom Games\MahJongg Mystery Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Media Player Codec Pack 3.9.0-->C:\WINDOWS\system32\C2MP\Uninst.exe
Messenger Plus! Live & Sponsor (CiD)-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Security Update (KB953297)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9L$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB974455)-->"C:\WINDOWS\ie8updates\KB974455-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB976325)-->"C:\WINDOWS\ie8updates\KB976325-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961371-v2)-->"C:\WINDOWS\$NtUninstallKB961371-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970430)-->"C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971961)-->"C:\WINDOWS\$NtUninstallKB971961$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB972260)-->"C:\WINDOWS\$NtUninstallKB972260$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973904)-->"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974455)-->"C:\WINDOWS\$NtUninstallKB974455$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB973874)-->"C:\WINDOWS\ie8updates\KB973874-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB976749)-->"C:\WINDOWS\ie8updates\KB976749-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955759)-->"C:\WINDOWS\$NtUninstallKB955759$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB971737)-->"C:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB973687)-->"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
Modem Event Monitor-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7A0EFAFB-AC4B-4B88-8C6B-6731BE88DB68}\setup.exe" -l0x40c
Modem Helper-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F142D56-3326-11D5-B229-002078017FBF}\setup.exe" -l0x40c ControlPanel
Modem On Hold-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F92ABBB-6BBF-11D5-B229-002078017FBF}\setup.exe" -l0x40c ControlPanelAnyText
Mozilla Firefox (3.5.6)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MpcStar 4.2-->C:\Program Files\MpcStar\uninst.exe
MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
OpenOffice.org 3.1-->MsiExec.exe /I{0FA44E79-CD7D-4E8D-A2EE-26FE05F509B6}
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Paint Shop Pro 7-->MsiExec.exe /I{D6DE02C7-1F47-11D4-9515-00105AE4B89A}
Photo Click-->MsiExec.exe /I{6E179C77-7335-458D-9537-4F4EAC0181ED}
Post-it® Software Notes Lite-->"C:\Program Files\3M\PSNLite\Uninstall.exe" -Prog"C:\Program Files\3M\PSNLite\PsnLite.exe" -INI"C:\Program Files\3M\PSNLite\uninst.ini"
PowerDVD 5.3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.exe" -uninstall
QuickTime-->MsiExec.exe /I{A429C2AE-EBF1-4F81-A221-1C115CAADDAD}
RealPlayer Basic-->C:\Program Files\Fichiers communs\Real\Update\\rnuninst.exe RealNetworks|RealPlayer|6.0
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Sonic DLA-->MsiExec.exe /I{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
Sonic MyDVD-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
Sonic RecordNow!-->MsiExec.exe /I{9541FED0-327F-4DF0-8B96-EF57EF622F19}
Sonic Update Manager-->MsiExec.exe /I{09DA4F91-2A09-4232-AB8C-6BC740096DE3}
Sound Blaster Live! 24-bit-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CEB481CC-F57C-4397-81A0-DADD22257047}\setup.exe" -l0x40c
Viewpoint Media Player-->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{ED00D08A-3C5F-488D-93A0-A04F21F23956}
Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
WordPerfect Office 12-->MsiExec.exe /I{C36E332D-1A46-44A3-940F-463689EAE08D}

======Security center information======

AV: AntiVir Desktop

======System event log======

Computer Name: ORDINATEUR
Event Code: 7036
Message: Le service Windows Installer est entré dans l'état : en cours d'exécution.

Record Number: 8784
Source Name: Service Control Manager
Time Written: 20091215083111.000000-300
Event Type: Informations
User:

Computer Name: ORDINATEUR
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Windows Installer.

Record Number: 8783
Source Name: Service Control Manager
Time Written: 20091215083111.000000-300
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: ORDINATEUR
Event Code: 7036
Message: Le service Service de l’iPod est entré dans l'état : en cours d'exécution.

Record Number: 8782
Source Name: Service Control Manager
Time Written: 20091215082815.000000-300
Event Type: Informations
User:

Computer Name: ORDINATEUR
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Service de l’iPod.

Record Number: 8781
Source Name: Service Control Manager
Time Written: 20091215082815.000000-300
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: ORDINATEUR
Event Code: 7036
Message: Le service Service COM de gravage de CD IMAPI est entré dans l'état : arrêté.

Record Number: 8780
Source Name: Service Control Manager
Time Written: 20091215082753.000000-300
Event Type: Informations
User:

=====Application event log=====

Computer Name: ORDINATEUR
Event Code: 1002
Message: Application bloquée iexplore.exe, version 8.0.6001.18702, module bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

Record Number: 1219
Source Name: Application Hang
Time Written: 20091119172157.000000-300
Event Type: erreur
User:

Computer Name: ORDINATEUR
Event Code: 4097
Message: L'application, C:\WINDOWS\ServicePackFiles\i386\mspaint.exe, a généré une erreur d'application
L'erreur s'est produite le 11/19/2009 à 16:11:18.890
L'exception générée était c0000005 à l'adresse 76334769 (IMM32)

Record Number: 1218
Source Name: DrWatson
Time Written: 20091119161118.000000-300
Event Type: Informations
User:

Computer Name: ORDINATEUR
Event Code: 1000
Message: Application défaillante mspaint.exe, version 5.1.2600.5512, module défaillant imm32.dll, version 5.1.2600.5512, adresse de défaillance 0x00014769.

Record Number: 1217
Source Name: Application Error
Time Written: 20091119161117.000000-300
Event Type: erreur
User:

Computer Name: ORDINATEUR
Event Code: 4097
Message: L'application, C:\WINDOWS\ServicePackFiles\i386\mspaint.exe, a généré une erreur d'application
L'erreur s'est produite le 11/19/2009 à 16:11:10.531
L'exception générée était c0000005 à l'adresse 76334769 (IMM32)

Record Number: 1216
Source Name: DrWatson
Time Written: 20091119161110.000000-300
Event Type: Informations
User:

Computer Name: ORDINATEUR
Event Code: 1000
Message: Application défaillante mspaint.exe, version 5.1.2600.5512, module défaillant imm32.dll, version 5.1.2600.5512, adresse de défaillance 0x00014769.

Record Number: 1215
Source Name: Application Error
Time Written: 20091119161107.000000-300
Event Type: erreur
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\PROGRA~1\FICHIE~1\SONICS~1\;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 1, GenuineIntel
"PROCESSOR_REVISION"=0401
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip

-----------------EOF-----------------

Télécharge Lop S&D (par Eric_71) sur ton Bureau.

Puis double-clique sur Lop S&D présent sur ton Bureau.
(Sous Vista, il faut cliquer droit sur Lop S&D et choisir Exécuter en tant qu'administrateur)

Sélectionne la langue souhaitée, puis choisis l'option 1 (Recherche).

Patiente jusqu'à la fin du scan.

Poste le rapport généré (C:\lopR.txt).

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) 4 CPU 2.80GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A02
USER : Jean-Alexandre ( Administrator )
BOOT : Normal boot
Antivirus : AntiVir Desktop 9.0.1.32 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:146 Go (Free:111 Go)
D:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 2010-01-01|20:28 )

--------------------\\ Listing des dossiers dans APPLIC~1

[2009-10-21|15:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009-10-26|19:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[2009-10-30|18:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[2009-10-21|15:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[2009-10-04|19:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[2005-05-07|07:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
[2009-12-26|00:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\each new axis love
[2009-10-22|05:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[2009-10-30|20:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[2009-10-05|20:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[2009-11-11|15:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Norton
[2009-11-10|22:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NortonInstaller
[2005-05-07|06:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[2009-11-10|22:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[2009-11-10|18:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
[2009-10-04|17:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[2009-11-03|11:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom


[2005-05-07|07:04] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Creative
[2005-05-07|06:36] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[2005-05-07|06:36] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[2005-05-07|07:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sonic
[2005-05-07|06:59] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
[2005-05-07|07:06] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[2009-10-14|15:10] C:\DOCUME~1\JEAN-A~1\APPLIC~1\3M
[2009-10-15|16:39] C:\DOCUME~1\JEAN-A~1\APPLIC~1\Adobe
[2009-11-14|17:56] C:\DOCUME~1\JEAN-A~1\APPLIC~1\Apple Computer
[2009-12-26|00:58] C:\DOCUME~1\JEAN-A~1\APPLIC~1\BLAHPLUS
[2009-12-16|18:18] C:\DOCUME~1\JEAN-A~1\APPLIC~1\Corel
[2005-05-07|07:04] C:\DOCUME~1\JEAN-A~1\APPLIC~1\Creative
[2005-05-07|06:36] C:\DOCUME~1\JEAN-A~1\APPLIC~1\Identities
[2009-12-28|21:25] C:\DOCUME~1\JEAN-A~1\APPLIC~1\LimeWire
[2009-10-04|12:00] C:\DOCUME~1\JEAN-A~1\APPLIC~1\Macromedia
[2009-10-22|05:47] C:\DOCUME~1\JEAN-A~1\APPLIC~1\Malwarebytes
[2009-10-26|05:52] C:\DOCUME~1\JEAN-A~1\APPLIC~1\Microsoft
[2009-10-04|11:56] C:\DOCUME~1\JEAN-A~1\APPLIC~1\Mozilla
[2009-10-19|11:18] C:\DOCUME~1\JEAN-A~1\APPLIC~1\OpenOffice.org
[2005-05-07|07:11] C:\DOCUME~1\JEAN-A~1\APPLIC~1\Sonic
[2005-05-07|06:59] C:\DOCUME~1\JEAN-A~1\APPLIC~1\Sun
[2005-05-07|07:06] C:\DOCUME~1\JEAN-A~1\APPLIC~1\Symantec
[2009-12-28|22:44] C:\DOCUME~1\JEAN-A~1\APPLIC~1\TigerPlayer
[2009-12-31|20:40] C:\DOCUME~1\JEAN-A~1\APPLIC~1\WinRAR

[2009-10-04|17:19] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[2009-10-14|15:10] C:\DOCUME~1\MARC-A~1\APPLIC~1\3M
[2009-10-12|17:00] C:\DOCUME~1\MARC-A~1\APPLIC~1\Adobe
[2009-10-30|18:19] C:\DOCUME~1\MARC-A~1\APPLIC~1\Apple Computer
[2005-05-07|07:04] C:\DOCUME~1\MARC-A~1\APPLIC~1\Creative
[2005-05-07|06:36] C:\DOCUME~1\MARC-A~1\APPLIC~1\Identities
[2009-11-18|16:44] C:\DOCUME~1\MARC-A~1\APPLIC~1\iMeshMediabarTb
[2009-12-31|23:35] C:\DOCUME~1\MARC-A~1\APPLIC~1\LimeWire
[2009-10-09|09:29] C:\DOCUME~1\MARC-A~1\APPLIC~1\Macromedia
[2009-10-22|17:41] C:\DOCUME~1\MARC-A~1\APPLIC~1\Malwarebytes
[2009-11-18|16:15] C:\DOCUME~1\MARC-A~1\APPLIC~1\Microsoft
[2009-10-09|09:29] C:\DOCUME~1\MARC-A~1\APPLIC~1\Mozilla
[2009-10-16|15:16] C:\DOCUME~1\MARC-A~1\APPLIC~1\OpenOffice.org
[2005-05-07|07:11] C:\DOCUME~1\MARC-A~1\APPLIC~1\Sonic
[2005-05-07|06:59] C:\DOCUME~1\MARC-A~1\APPLIC~1\Sun
[2005-05-07|07:06] C:\DOCUME~1\MARC-A~1\APPLIC~1\Symantec
[2009-10-21|18:59] C:\DOCUME~1\MARC-A~1\APPLIC~1\WinRAR

[2005-05-07|06:36] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft


--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[2010-01-01 20:00][--ah-----] C:\WINDOWS\tasks\B131D751918A475D.job
[2009-12-30 16:02][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010-01-01 19:47][--ah-----] C:\WINDOWS\tasks\SA.DAT
[2004-08-05 12:00][-r-h-----] C:\WINDOWS\tasks\DESKTOP.INI

( B131D751918A475D.job )=( c:\docume~1\jean-a~1\applic~1\blahplus\pingremotesect.exe )

--------------------\\ Listing des dossiers dans C:\Program Files

[2009-10-14|11:09] C:\Program Files\3M
[2009-10-25|13:42] C:\Program Files\Adobe
[2009-10-21|15:30] C:\Program Files\Apple Software Update
[2009-10-04|19:40] C:\Program Files\Avira
[2010-01-01|15:18] C:\Program Files\BitComet
[2010-01-01|15:21] C:\Program Files\BitTorrent
[2009-12-26|00:57] C:\Program Files\BLAHPLUS
[2009-10-21|15:31] C:\Program Files\Bonjour
[2005-05-07|07:00] C:\Program Files\Classic PhoneTools
[2005-05-07|06:36] C:\Program Files\ComPlus Applications
[2005-05-07|07:01] C:\Program Files\Creative
[2005-05-07|07:02] C:\Program Files\CyberLink
[2005-05-07|07:04] C:\Program Files\Dell
[2005-05-07|07:02] C:\Program Files\Dell Computer
[2009-11-27|16:17] C:\Program Files\Fast Browser Search
[2009-12-15|08:33] C:\Program Files\Fichiers communs
[2005-05-07|07:10] C:\Program Files\InstallShield Installation Information
[2005-05-07|07:00] C:\Program Files\Intel
[2009-12-09|22:32] C:\Program Files\Internet Explorer
[2009-11-12|18:14] C:\Program Files\iPod
[2009-12-25|15:37] C:\Program Files\IrfanView
[2009-11-12|18:15] C:\Program Files\iTunes
[2005-05-07|07:02] C:\Program Files\Jasc Software Inc
[2009-12-16|19:16] C:\Program Files\Java
[2009-10-16|11:43] C:\Program Files\JRE
[2009-12-09|20:04] C:\Program Files\LimeWire
[2009-12-14|08:14] C:\Program Files\Linksys
[2009-10-08|15:46] C:\Program Files\Messenger
[2009-11-07|16:57] C:\Program Files\Messenger Plus! Live
[2009-12-31|16:46] C:\Program Files\Micro Application
[2009-11-04|14:29] C:\Program Files\Microsoft
[2009-10-06|21:48] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[2005-05-07|06:36] C:\Program Files\microsoft frontpage
[2005-05-07|07:00] C:\Program Files\Modem Helper
[2005-05-07|07:00] C:\Program Files\Modem On Hold
[2009-10-08|15:43] C:\Program Files\Movie Maker
[2010-01-01|20:07] C:\Program Files\Mozilla Firefox
[2009-12-29|15:10] C:\Program Files\MpcStar
[2009-10-08|09:45] C:\Program Files\MSN
[2005-05-07|06:36] C:\Program Files\MSN Gaming Zone
[2009-10-08|15:39] C:\Program Files\NetMeeting
[2005-05-07|07:03] C:\Program Files\Nullsoft
[2009-10-16|11:43] C:\Program Files\OpenOffice.org 3
[2009-10-08|15:50] C:\Program Files\Outlook Express
[2009-10-21|15:31] C:\Program Files\QuickTime
[2005-05-07|07:03] C:\Program Files\Real
[2005-05-07|06:36] C:\Program Files\Services en ligne
[2009-11-27|16:17] C:\Program Files\SGPSA
[2005-05-07|07:05] C:\Program Files\Sonic
[2010-01-01|20:20] C:\Program Files\trend micro
[2005-05-07|06:36] C:\Program Files\Uninstall Information
[2005-05-07|07:03] C:\Program Files\Viewpoint
[2009-11-04|14:29] C:\Program Files\Windows Live
[2009-10-04|17:14] C:\Program Files\Windows Live SkyDrive
[2009-10-16|18:18] C:\Program Files\Windows Media Connect 2
[2009-10-16|18:18] C:\Program Files\Windows Media Player
[2009-10-11|09:37] C:\Program Files\Windows NT
[2005-05-07|06:36] C:\Program Files\WindowsUpdate
[2009-10-04|17:22] C:\Program Files\WinRAR
[2005-05-07|07:09] C:\Program Files\WordPerfect Office 12
[2005-05-07|06:36] C:\Program Files\XEROX
[2009-11-03|11:54] C:\Program Files\Zylom Games

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[2009-10-25|13:43] C:\Program Files\Fichiers communs\Adobe
[2005-05-07|07:03] C:\Program Files\Fichiers communs\AOL
[2009-11-12|18:14] C:\Program Files\Fichiers communs\Apple
[2005-05-07|07:09] C:\Program Files\Fichiers communs\Borland Shared
[2005-05-07|07:09] C:\Program Files\Fichiers communs\Corel
[2005-05-07|07:09] C:\Program Files\Fichiers communs\InstallShield
[2009-11-04|14:29] C:\Program Files\Fichiers communs\Microsoft Shared
[2005-05-07|06:36] C:\Program Files\Fichiers communs\MSSoap
[2005-05-07|06:36] C:\Program Files\Fichiers communs\ODBC
[2005-05-07|07:03] C:\Program Files\Fichiers communs\Real
[2005-05-07|06:36] C:\Program Files\Fichiers communs\Services
[2005-05-07|07:04] C:\Program Files\Fichiers communs\Sonic
[2005-05-07|07:05] C:\Program Files\Fichiers communs\Sonic Shared
[2005-05-07|06:36] C:\Program Files\Fichiers communs\SpeechEngines
[2009-10-04|11:54] C:\Program Files\Fichiers communs\Symantec Shared
[2009-10-08|15:39] C:\Program Files\Fichiers communs\System
[2009-10-04|17:11] C:\Program Files\Fichiers communs\Windows Live

--------------------\\ Process

( 50 Processes )

IEXPLORE.EXE ~ [PID:3816]
IEXPLORE.EXE ~ [PID:3856]

--------------------\\ Recherche avec S_Lop

C:\DOCUME~1\JEAN-A~1\LOCALS~1\Temp\bisC3.exe
C:\DOCUME~1\JEAN-A~1\LOCALS~1\Temp\bisDF.exe

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Each New Axis Love
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Each New Axis Love\LONG JOY.dat
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Each New Axis Love\LONG JOY.exe
C:\DOCUME~1\JEAN-A~1\APPLIC~1\blahplus
C:\DOCUME~1\JEAN-A~1\APPLIC~1\blahplus\bgegdhlp.exe
C:\DOCUME~1\JEAN-A~1\APPLIC~1\blahplus\dopusdeo.exe
C:\DOCUME~1\JEAN-A~1\APPLIC~1\blahplus\File Bold Mfcd.exe
C:\DOCUME~1\JEAN-A~1\APPLIC~1\blahplus\pingremotesect.exe
C:\DOCUME~1\JEAN-A~1\APPLIC~1\blahplus\SoftwareRectInfoKnob.exe
C:\DOCUME~1\JEAN-A~1\APPLIC~1\blahplus\votwabkg.exe
C:\Program Files\blahplus
C:\DOCUME~1\JEAN-A~1\LOCALS~1\Temp\nsp3E.tmp
C:\DOCUME~1\JEAN-A~1\LOCALS~1\Temp\nsx15.tmp
C:\DOCUME~1\JEAN-A~1\LOCALS~1\Temp\sta26.exe
C:\DOCUME~1\JEAN-A~1\Cookies\jean-alexandre@bigpoint[2].txt
C:\DOCUME~1\JEAN-A~1\Cookies\jean-alexandre@us.darkorbit.bigpoint[2].txt
C:\DOCUME~1\JEAN-A~1\Cookies\jean-alexandre@cotedazurpalace[1].txt
C:\DOCUME~1\JEAN-A~1\Cookies\jean-alexandre@cotedazurpalace[2].txt
C:\DOCUME~1\JEAN-A~1\Cookies\jean-alexandre@serve.cotedazurpalace[1].txt
C:\DOCUME~1\JEAN-A~1\Cookies\jean-alexandre@serve.cotedazurpalace[2].txt
C:\DOCUME~1\JEAN-A~1\Cookies\jean-alexandre@www.cotedazurpalace[1].txt
C:\DOCUME~1\JEAN-A~1\Cookies\jean-alexandre@www.cotedazurpalace[2].txt
C:\DOCUME~1\JEAN-A~1\Cookies\jean-alexandre@partypoker[1].txt
C:\DOCUME~1\JEAN-A~1\Cookies\jean-alexandre@partypoker[2].txt
C:\DOCUME~1\JEAN-A~1\Cookies\jean-alexandre@partypoker[3].txt
C:\DOCUME~1\JEAN-A~1\Cookies\jean-alexandre@www.partypoker[1].txt
C:\WINDOWS\Tasks\B131D751918A475D.job

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Blue 1"="C:\\WINDOWS\\system32\\config\\SYSTEM~1\\APPLIC~1\\BLAHPLUS\\File Bold Mfcd.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"axis love poll lite"="C:\\Documents and Settings\\All Users\\Application Data\\each new axis love\\LONG JOY.exe"

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-01 20:41:45
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\JEAN-A~1\Mes documents\Ma musique\Eminem ft. Dr. Dre & 50 Cent - Crack A Bottle.mp3


[F:746][D:36]-> C:\DOCUME~1\JEAN-A~1\LOCALS~1\Temp
[F:242][D:0]-> C:\DOCUME~1\JEAN-A~1\Cookies
[F:920][D:6]-> C:\DOCUME~1\JEAN-A~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 2010-01-01|20:45 - Option : [1]

--------------------\\ Fin du rapport a 20:45:27

Relance Lop S&D.
(Sous Vista, il faut cliquer droit sur Lop S&D et choisir Exécuter en tant qu'administrateur)

Choisis cette fois-ci l'option 2 (Suppression).

Ne ferme pas la fenêtre lors de la suppression !

Poste le rapport généré (C:\lopR.txt).

(Si le Bureau ne réapparaît pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) 4 CPU 2.80GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A02
USER : Jean-Alexandre ( Administrator )
BOOT : Normal boot
Antivirus : AntiVir Desktop 9.0.1.32 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:146 Go (Free:111 Go)
D:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 2010-01-01|20:52 )


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Each New Axis Love\LONG JOY.dat
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Each New Axis Love\LONG JOY.exe
Supprime! - C:\DOCUME~1\JEAN-A~1\APPLIC~1\blahplus\bgegdhlp.exe
Supprime! - C:\DOCUME~1\JEAN-A~1\APPLIC~1\blahplus\dopusdeo.exe
Supprime! - C:\DOCUME~1\JEAN-A~1\APPLIC~1\blahplus\File Bold Mfcd.exe
Supprime! - C:\DOCUME~1\JEAN-A~1\APPLIC~1\blahplus\pingremotesect.exe
Supprime! - C:\DOCUME~1\JEAN-A~1\APPLIC~1\blahplus\SoftwareRectInfoKnob.exe
Supprime! - C:\DOCUME~1\JEAN-A~1\APPLIC~1\blahplus\votwabkg.exe
Supprime! - C:\DOCUME~1\JEAN-A~1\LOCALS~1\Temp\nsp3E.tmp
Supprime! - C:\DOCUME~1\JEAN-A~1\LOCALS~1\Temp\nsx15.tmp
Supprime! - C:\DOCUME~1\JEAN-A~1\LOCALS~1\Temp\sta26.exe
Supprime! - C:\DOCUME~1\JEAN-A~1\Cookies\jean-alexandre@bigpoint[2].txt
Supprime! - C:\DOCUME~1\JEAN-A~1\Cookies\jean-alexandre@us.darkorbit.bigpoint[2].txt
Supprime! - C:\DOCUME~1\JEAN-A~1\Cookies\jean-alexandre@cotedazurpalace[1].txt
Supprime! - C:\DOCUME~1\JEAN-A~1\Cookies\jean-alexandre@cotedazurpalace[2].txt
Supprime! - C:\DOCUME~1\JEAN-A~1\Cookies\jean-alexandre@serve.cotedazurpalace[1].txt
Supprime! - C:\DOCUME~1\JEAN-A~1\Cookies\jean-alexandre@serve.cotedazurpalace[2].txt
Supprime! - C:\DOCUME~1\JEAN-A~1\Cookies\jean-alexandre@www.cotedazurpalace[1].txt
Supprime! - C:\DOCUME~1\JEAN-A~1\Cookies\jean-alexandre@www.cotedazurpalace[2].txt
Supprime! - C:\DOCUME~1\JEAN-A~1\Cookies\jean-alexandre@partypoker[1].txt
Supprime! - C:\DOCUME~1\JEAN-A~1\Cookies\jean-alexandre@partypoker[2].txt
Supprime! - C:\DOCUME~1\JEAN-A~1\Cookies\jean-alexandre@partypoker[3].txt
Supprime! - C:\DOCUME~1\JEAN-A~1\Cookies\jean-alexandre@www.partypoker[1].txt
Supprime! - C:\WINDOWS\Tasks\B131D751918A475D.job
Supprime! - C:\DOCUME~1\JEAN-A~1\LOCALS~1\Temp\bisC3.exe
Supprime! - C:\DOCUME~1\JEAN-A~1\LOCALS~1\Temp\bisDF.exe
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Each New Axis Love
Supprime! - C:\DOCUME~1\JEAN-A~1\APPLIC~1\blahplus
Supprime! - C:\Program Files\blahplus

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

Supprime! - C:\Program Files\Viewpoint

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans APPLIC~1

[2009-10-21|15:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009-10-26|19:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[2009-10-30|18:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[2009-10-21|15:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[2009-10-04|19:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[2005-05-07|07:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
[2009-10-22|05:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[2009-10-30|20:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[2009-10-05|20:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[2009-11-11|15:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Norton
[2009-11-10|22:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NortonInstaller
[2005-05-07|06:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[2009-11-10|22:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[2009-11-10|18:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
[2009-10-04|17:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[2009-11-03|11:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom


[2005-05-07|07:04] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Creative
[2005-05-07|06:36] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[2005-05-07|06:36] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[2005-05-07|07:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sonic
[2005-05-07|06:59] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
[2005-05-07|07:06] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[2009-10-14|15:10] C:\DOCUME~1\JEAN-A~1\APPLIC~1\3M
[2009-10-15|16:39] C:\DOCUME~1\JEAN-A~1\APPLIC~1\Adobe
[2009-11-14|17:56] C:\DOCUME~1\JEAN-A~1\APPLIC~1\Apple Computer
[2009-12-16|18:18] C:\DOCUME~1\JEAN-A~1\APPLIC~1\Corel
[2005-05-07|07:04] C:\DOCUME~1\JEAN-A~1\APPLIC~1\Creative
[2005-05-07|06:36] C:\DOCUME~1\JEAN-A~1\APPLIC~1\Identities
[2009-12-28|21:25] C:\DOCUME~1\JEAN-A~1\APPLIC~1\LimeWire
[2009-10-04|12:00] C:\DOCUME~1\JEAN-A~1\APPLIC~1\Macromedia
[2009-10-22|05:47] C:\DOCUME~1\JEAN-A~1\APPLIC~1\Malwarebytes
[2009-10-26|05:52] C:\DOCUME~1\JEAN-A~1\APPLIC~1\Microsoft
[2009-10-04|11:56] C:\DOCUME~1\JEAN-A~1\APPLIC~1\Mozilla
[2009-10-19|11:18] C:\DOCUME~1\JEAN-A~1\APPLIC~1\OpenOffice.org
[2005-05-07|07:11] C:\DOCUME~1\JEAN-A~1\APPLIC~1\Sonic
[2005-05-07|06:59] C:\DOCUME~1\JEAN-A~1\APPLIC~1\Sun
[2005-05-07|07:06] C:\DOCUME~1\JEAN-A~1\APPLIC~1\Symantec
[2009-12-28|22:44] C:\DOCUME~1\JEAN-A~1\APPLIC~1\TigerPlayer
[2009-12-31|20:40] C:\DOCUME~1\JEAN-A~1\APPLIC~1\WinRAR

[2009-10-04|17:19] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[2009-10-14|15:10] C:\DOCUME~1\MARC-A~1\APPLIC~1\3M
[2009-10-12|17:00] C:\DOCUME~1\MARC-A~1\APPLIC~1\Adobe
[2009-10-30|18:19] C:\DOCUME~1\MARC-A~1\APPLIC~1\Apple Computer
[2005-05-07|07:04] C:\DOCUME~1\MARC-A~1\APPLIC~1\Creative
[2005-05-07|06:36] C:\DOCUME~1\MARC-A~1\APPLIC~1\Identities
[2009-11-18|16:44] C:\DOCUME~1\MARC-A~1\APPLIC~1\iMeshMediabarTb
[2009-12-31|23:35] C:\DOCUME~1\MARC-A~1\APPLIC~1\LimeWire
[2009-10-09|09:29] C:\DOCUME~1\MARC-A~1\APPLIC~1\Macromedia
[2009-10-22|17:41] C:\DOCUME~1\MARC-A~1\APPLIC~1\Malwarebytes
[2009-11-18|16:15] C:\DOCUME~1\MARC-A~1\APPLIC~1\Microsoft
[2009-10-09|09:29] C:\DOCUME~1\MARC-A~1\APPLIC~1\Mozilla
[2009-10-16|15:16] C:\DOCUME~1\MARC-A~1\APPLIC~1\OpenOffice.org
[2005-05-07|07:11] C:\DOCUME~1\MARC-A~1\APPLIC~1\Sonic
[2005-05-07|06:59] C:\DOCUME~1\MARC-A~1\APPLIC~1\Sun
[2005-05-07|07:06] C:\DOCUME~1\MARC-A~1\APPLIC~1\Symantec
[2009-10-21|18:59] C:\DOCUME~1\MARC-A~1\APPLIC~1\WinRAR

[2005-05-07|06:36] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft


--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[2009-12-30 16:02][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010-01-01 19:47][--ah-----] C:\WINDOWS\tasks\SA.DAT
[2004-08-05 12:00][-r-h-----] C:\WINDOWS\tasks\DESKTOP.INI

--------------------\\ Listing des dossiers dans C:\Program Files

[2009-10-14|11:09] C:\Program Files\3M
[2009-10-25|13:42] C:\Program Files\Adobe
[2009-10-21|15:30] C:\Program Files\Apple Software Update
[2009-10-04|19:40] C:\Program Files\Avira
[2010-01-01|15:18] C:\Program Files\BitComet
[2010-01-01|15:21] C:\Program Files\BitTorrent
[2009-10-21|15:31] C:\Program Files\Bonjour
[2005-05-07|07:00] C:\Program Files\Classic PhoneTools
[2005-05-07|06:36] C:\Program Files\ComPlus Applications
[2005-05-07|07:01] C:\Program Files\Creative
[2005-05-07|07:02] C:\Program Files\CyberLink
[2005-05-07|07:04] C:\Program Files\Dell
[2005-05-07|07:02] C:\Program Files\Dell Computer
[2009-11-27|16:17] C:\Program Files\Fast Browser Search
[2009-12-15|08:33] C:\Program Files\Fichiers communs
[2005-05-07|07:10] C:\Program Files\InstallShield Installation Information
[2005-05-07|07:00] C:\Program Files\Intel
[2009-12-09|22:32] C:\Program Files\Internet Explorer
[2009-11-12|18:14] C:\Program Files\iPod
[2009-12-25|15:37] C:\Program Files\IrfanView
[2009-11-12|18:15] C:\Program Files\iTunes
[2005-05-07|07:02] C:\Program Files\Jasc Software Inc
[2009-12-16|19:16] C:\Program Files\Java
[2009-10-16|11:43] C:\Program Files\JRE
[2009-12-09|20:04] C:\Program Files\LimeWire
[2009-12-14|08:14] C:\Program Files\Linksys
[2009-10-08|15:46] C:\Program Files\Messenger
[2009-11-07|16:57] C:\Program Files\Messenger Plus! Live
[2009-12-31|16:46] C:\Program Files\Micro Application
[2009-11-04|14:29] C:\Program Files\Microsoft
[2009-10-06|21:48] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[2005-05-07|06:36] C:\Program Files\microsoft frontpage
[2005-05-07|07:00] C:\Program Files\Modem Helper
[2005-05-07|07:00] C:\Program Files\Modem On Hold
[2009-10-08|15:43] C:\Program Files\Movie Maker
[2010-01-01|20:07] C:\Program Files\Mozilla Firefox
[2009-12-29|15:10] C:\Program Files\MpcStar
[2009-10-08|09:45] C:\Program Files\MSN
[2005-05-07|06:36] C:\Program Files\MSN Gaming Zone
[2009-10-08|15:39] C:\Program Files\NetMeeting
[2005-05-07|07:03] C:\Program Files\Nullsoft
[2009-10-16|11:43] C:\Program Files\OpenOffice.org 3
[2009-10-08|15:50] C:\Program Files\Outlook Express
[2009-10-21|15:31] C:\Program Files\QuickTime
[2005-05-07|07:03] C:\Program Files\Real
[2005-05-07|06:36] C:\Program Files\Services en ligne
[2009-11-27|16:17] C:\Program Files\SGPSA
[2005-05-07|07:05] C:\Program Files\Sonic
[2010-01-01|20:20] C:\Program Files\trend micro
[2005-05-07|06:36] C:\Program Files\Uninstall Information
[2009-11-04|14:29] C:\Program Files\Windows Live
[2009-10-04|17:14] C:\Program Files\Windows Live SkyDrive
[2009-10-16|18:18] C:\Program Files\Windows Media Connect 2
[2009-10-16|18:18] C:\Program Files\Windows Media Player
[2009-10-11|09:37] C:\Program Files\Windows NT
[2005-05-07|06:36] C:\Program Files\WindowsUpdate
[2009-10-04|17:22] C:\Program Files\WinRAR
[2005-05-07|07:09] C:\Program Files\WordPerfect Office 12
[2005-05-07|06:36] C:\Program Files\XEROX
[2009-11-03|11:54] C:\Program Files\Zylom Games

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[2009-10-25|13:43] C:\Program Files\Fichiers communs\Adobe
[2005-05-07|07:03] C:\Program Files\Fichiers communs\AOL
[2009-11-12|18:14] C:\Program Files\Fichiers communs\Apple
[2005-05-07|07:09] C:\Program Files\Fichiers communs\Borland Shared
[2005-05-07|07:09] C:\Program Files\Fichiers communs\Corel
[2005-05-07|07:09] C:\Program Files\Fichiers communs\InstallShield
[2009-11-04|14:29] C:\Program Files\Fichiers communs\Microsoft Shared
[2005-05-07|06:36] C:\Program Files\Fichiers communs\MSSoap
[2005-05-07|06:36] C:\Program Files\Fichiers communs\ODBC
[2005-05-07|07:03] C:\Program Files\Fichiers communs\Real
[2005-05-07|06:36] C:\Program Files\Fichiers communs\Services
[2005-05-07|07:04] C:\Program Files\Fichiers communs\Sonic
[2005-05-07|07:05] C:\Program Files\Fichiers communs\Sonic Shared
[2005-05-07|06:36] C:\Program Files\Fichiers communs\SpeechEngines
[2009-10-04|11:54] C:\Program Files\Fichiers communs\Symantec Shared
[2009-10-08|15:39] C:\Program Files\Fichiers communs\System
[2009-10-04|17:11] C:\Program Files\Fichiers communs\Windows Live

--------------------\\ Process

( 44 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-01 20:53:56
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\JEAN-A~1\Mes documents\Ma musique\Eminem ft. Dr. Dre & 50 Cent - Crack A Bottle.mp3


[F:741][D:35]-> C:\DOCUME~1\JEAN-A~1\LOCALS~1\Temp
[F:230][D:0]-> C:\DOCUME~1\JEAN-A~1\Cookies
[F:920][D:6]-> C:\DOCUME~1\JEAN-A~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 2010-01-01|20:45 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 2010-01-01|20:54 - Option : [2]

--------------------\\ Fin du rapport a 20:54:37

Télécharge Ad-Remover (de Cyrildu17 / C_XX) sur ton Bureau.

/!\ Déconnecte-toi et ferme toutes applications en cours /!\

Double-clique sur AD-R situé sur ton Bureau pour le lancer.
(Sous Vista, il faut cliquer droit sur AD-R et choisir Exécuter en tant qu'administrateur)

Choisis la langue F pour français.

Au menu principal, choisis l'option L.

/!\ Laisse travailler l'outil /!\

Poste le rapport qui apparaît à la fin (C:\Ad-Report-CLEAN.log).

(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

Note : "Process.exe", une composante de l'outil, est détectée par certains antivirus (AntiVir, Kaspersky, etc.) comme étant un RiskTool. Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.

.
======= RAPPORT D'AD-REMOVER 1.1.4.6_F | UNIQUEMENT XP/VISTA/7 =======
.
Mit à jour par C_XX le 26.12.2009 à 20:47
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 21:00:40, 2010-01-01 | Mode Normal | Option: CLEAN
Exécuté de: C:\Program Files\Ad-Remover\
Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
Nom du PC: ORDINATEUR | Utilisateur actuel: Jean-Alexandre

Bonnes fêtes de fin d'année à vous tous  
.
============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
.

C:\Program Files\Mozilla FireFox\searchplugins\iMeshWebSearch.xml
C:\Program Files\Fast Browser Search
C:\Program Files\SGPSA
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia

(!) -- Fichiers temporaires supprimés.

.
HKCU\Software\Microsoft\Internet Explorer\LowRegistry\BHO iMesh
HKCU\software\microsoft\internet explorer\searchscopes\{1FF3B1B3-4AE8-41B6-A042-45BDCD4B920A}
HKCU\software\microsoft\internet explorer\searchscopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59}
HKLM\software\classes\AxMetaStream.MetaStreamCtl
HKLM\software\classes\AxMetaStream.MetaStreamCtl.1
HKLM\software\classes\AxMetaStream.MetaStreamCtlSecondary
HKLM\software\classes\AxMetaStream.MetaStreamCtlSecondary.1
HKLM\Software\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}
HKLM\Software\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
HKLM\Software\Classes\CLSID\{1BB22D38-A411-4B13-A746-C2A4F4EC7344}
HKLM\Software\Classes\CLSID\{27BF8F8D-58B8-D41C-F913-B7EEB57EF6F6}
HKLM\Software\Classes\CLSID\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
HKLM\Software\Classes\CLSID\{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}
HKLM\Software\Classes\CLSID\{F0626A63-410B-45E2-99A1-3F2475B2D695}
HKLM\Software\Classes\CLSID\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
HKLM\Software\Classes\TypeLib\{4F7D1B07-6203-41F0-947B-A29CC9ECD9B0}
HKLM\Software\Classes\TypeLib\{96F7FABC-5789-EFA4-B6ED-1272F4C1D27B}
HKLM\Software\Classes\TypeLib\{9DBB28C1-1925-11D3-A498-00104B6EB52E}
HKLM\software\MetaStream
HKLM\Software\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}
HKLM\Software\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F0626A63-410B-45E2-99A1-3F2475B2D695}
HKLM\software\Trymedia Systems
HKLM\software\Viewpoint
.
============== Scan additionnel ==============
.
.
* Mozilla FireFox Version 3.5.6 [fr] *
.
Nom du profil: 2ng4tzsx.default (Jean-Alexandre)
.
(JEAN-A~1, prefs.js) Browser.download.dir, C:\Documents and Settings\Jean-Alexandre\Bureau
(JEAN-A~1, prefs.js) Browser.startup.homepage, hxxp://www.google.ca/
(JEAN-A~1, prefs.js) Extensions.enabledItems, {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}:6.0.16,{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17,jqs@sun.com:1.0,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.6
.
.
* Internet Explorer Version 8.0.6001.18702 *
.
[HKEY_CURRENT_USER\..\Internet Explorer\Main]
.
Do404Search: 01000000
Local Page: C:\WINDOWS\system32\blank.htm
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnh...
Enable Browser Extensions: yes
Default_search_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
.
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnh...
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\WINDOWS\system32\blank.htm
Start Page: hxxp://fr.msn.com/
Search bar: hxxp://search.msn.com/spbasic.htm
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
.
Tabs: res://ieframe.dll/tabswelcome.htm
.
===================================
.
4128 Octet(s) - C:\Ad-Report-CLEAN[1].log
.
0 Fichier(s) - C:\DOCUME~1\JEAN-A~1\LOCALS~1\Temp
1 Fichier(s) - C:\WINDOWS\Temp
0 Fichier(s) - C:\WINDOWS\Prefetch
.
18 Fichier(s) - C:\Program Files\Ad-Remover\BACKUP
55 Fichier(s) - C:\Program Files\Ad-Remover\QUARANTINE
.
Fin à: 21:04:10 | 2010-01-01 - CLEAN[1]
.
============== E.O.F ==============
.

Désinstalle Ad-Remover.

Télécharge Malwarebytes' Anti-Malware (MBAM) sur ton Bureau.

Double-clique sur le fichier téléchargé pour lancer le processus d'installation.

Dans l'onglet Mise à jour, clique sur le bouton Recherche de mise à jour : si le pare-feu demande l'autorisation à MBAM de se connecter à Internet, accepte.

Une fois la mise à jour terminée, rends-toi dans l'onglet Recherche.

Sélectionne Exécuter un examen rapide.

Clique sur Rechercher. L'analyse démarre.

A la fin de l'analyse, un message s'affiche :

Citation :

L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.

Clique sur OK pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.

Ferme tes navigateurs.

Si des malwares ont été détectés, clique sur Afficher les résultats.

Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre infectés et en mettre une copie dans la quarantaine.

MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport dans ta prochaine réponse.

Malwarebytes' Anti-Malware 1.43
Version de la base de données: 3471
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

2010-01-01 21:45:32
mbam-log-2010-01-01 (21-45-32).txt

Type de recherche: Examen rapide
Eléments examinés: 122043
Temps écoulé: 18 minute(s), 2 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Plus de souci ?

Refais un scan RSIT et poste le rapport log.

Logfile of random's system information tool 1.06 (written by random/random)
Run by Jean-Alexandre at 2010-01-02 22:10:10
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 114 GB (76%) free of 150 GB
Total RAM: 510 MB (42% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:10:25, on 2010-01-02
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\lxdncoms.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\Creative\Sound Blaster Live! 24-bit\Surround Mixer\CTSysVol.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Jean-Alexandre\Bureau\RSIT.exe
C:\Program Files\trend micro\Jean-Alexandre.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\Sound Blaster Live! 24-bit\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown....
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/MessengerGamesContent/Gam...
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Ap...
O16 - DPF: {A1F2F2CE-06AF-483C-9F12-D3BAA72477D6} (BatchDownloader Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Ap...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab569...
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: lxdn_device - - C:\WINDOWS\system32\lxdncoms.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: L Ile Noyee Drivers Auto Removal (pr2ajbeb) (pr2ajbeb) - Micro Application - C:\WINDOWS\system32\pr2ajbeb.exe

--
End of file - 7844 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5CA3D70E-1895-11CF-8E15-001234567890}]
DriveLetterAccess - C:\WINDOWS\system32\dla\tfswshx.dll [2004-12-06 118842]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IntelMeM"=C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe [2003-09-03 221184]
"CTSysVol"=C:\Program Files\Creative\Sound Blaster Live! 24-bit\Surround Mixer\CTSysVol.exe [2003-09-17 57344]
"P17Helper"=Rundll32 P17.dll,P17Helper []
"UpdReg"=C:\WINDOWS\UpdReg.EXE [2000-05-11 90112]
"DVDLauncher"=C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe [2004-10-12 57344]
"UpdateManager"=C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe [2004-01-07 110592]
"dla"=C:\WINDOWS\system32\dla\tfswctrl.exe [2004-12-06 127035]
"DMXLauncher"=C:\Program Files\Dell\Media Experience\DMXLauncher.exe [2005-01-27 86016]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"igfxtray"=C:\WINDOWS\system32\igfxtray.exe [2005-09-20 94208]
"igfxhkcmd"=C:\WINDOWS\system32\hkcmd.exe [2005-09-20 77824]
"igfxpers"=C:\WINDOWS\system32\igfxpers.exe [2005-09-20 114688]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-09-05 417792]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"Adobe ARM"=C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-10-28 141600]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883856]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2006-11-03 204288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2005-09-20 135168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\BitComet\BitComet.exe"="C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet.exe"
"C:\WINDOWS\SYSTEM32\lxdncoms.exe"="C:\WINDOWS\SYSTEM32\lxdncoms.exe:*:Enabled:2600 Series Server"
"C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\lxdnpswx.exe"="C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\lxdnpswx.exe:*:Enabled rinter Status Window Interface"
"C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\lxdntime.exe"="C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\lxdntime.exe:*:Enabled:Lexmark Connect Time Executable"
"C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\lxdnjswx.exe"="C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\lxdnjswx.exe:*:Enabled:Job Status Window Interface"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\iMesh Applications\iMesh\iMesh.exe"="C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh"
"C:\WINDOWS\PCHEALTH\HELPCTR\BINARIES\helpctr.exe"="C:\WINDOWS\PCHEALTH\HELPCTR\BINARIES\helpctr.exe:*:Enabled:Assistance à distance - Windows Messenger et voix"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{70ca2a73-b363-11de-944b-0013203f8cd7}]
shell\AutoRun\command - C:\Program Files\iMesh Applications\iMesh\iMesh.exe


======List of files/folders created in the last 1 months======

2010-01-01 21:21:37 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-01-01 21:00:38 ----D---- C:\Program Files\Ad-Remover
2010-01-01 20:28:21 ----A---- C:\lopR.txt
2010-01-01 20:27:54 ----D---- C:\Lop SD
2010-01-01 20:19:18 ----D---- C:\rsit
2010-01-01 15:21:49 ----D---- C:\Program Files\BitTorrent
2009-12-31 20:40:34 ----D---- C:\Documents and Settings\Jean-Alexandre\Application Data\WinRAR
2009-12-31 16:46:56 ----D---- C:\Program Files\Micro Application
2009-12-31 16:25:35 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2009-12-31 16:25:35 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2009-12-31 16:25:34 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2009-12-31 16:25:28 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2009-12-31 16:25:27 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2009-12-31 16:25:27 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2009-12-31 16:25:26 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2009-12-31 16:25:26 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2009-12-31 16:25:26 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2009-12-31 16:25:25 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2009-12-31 16:25:25 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2009-12-31 16:25:24 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2009-12-31 16:25:20 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2009-12-28 22:39:55 ----D---- C:\Documents and Settings\Jean-Alexandre\Application Data\TigerPlayer
2009-12-28 22:37:08 ----D---- C:\Program Files\MpcStar
2009-12-25 15:37:56 ----D---- C:\Program Files\IrfanView
2009-12-16 19:17:04 ----A---- C:\WINDOWS\system32\javaws.exe
2009-12-16 19:17:04 ----A---- C:\WINDOWS\system32\javaw.exe
2009-12-16 19:17:04 ----A---- C:\WINDOWS\system32\java.exe
2009-12-16 18:18:31 ----D---- C:\Documents and Settings\Jean-Alexandre\Application Data\Corel
2009-12-14 08:25:03 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2009-12-09 22:32:40 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2009-12-09 22:32:34 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2009-12-09 22:32:08 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2009-12-09 22:32:02 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2009-12-09 22:31:52 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$

======List of files/folders modified in the last 1 months======

2010-01-02 22:10:18 ----D---- C:\WINDOWS\Prefetch
2010-01-02 22:10:13 ----D---- C:\Program Files\trend micro
2010-01-02 22:09:42 ----D---- C:\Program Files\Mozilla Firefox
2010-01-02 22:09:34 ----D---- C:\Documents and Settings\Jean-Alexandre\Application Data\LimeWire
2010-01-02 22:00:33 ----D---- C:\Program Files\LimeWire
2010-01-02 21:02:00 ----D---- C:\WINDOWS\Temp
2010-01-02 21:01:43 ----D---- C:\WINDOWS\system32\CatRoot2
2010-01-02 19:44:39 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-01-01 21:21:40 ----D---- C:\WINDOWS\system32\DRIVERS
2010-01-01 21:21:37 ----RD---- C:\Program Files
2010-01-01 20:52:36 ----SD---- C:\WINDOWS\Tasks
2010-01-01 15:18:18 ----D---- C:\Program Files\BitComet
2009-12-31 19:56:11 ----D---- C:\WINDOWS\SYSTEM32
2009-12-31 16:54:40 ----D---- C:\WINDOWS
2009-12-31 16:51:03 ----D---- C:\WINDOWS\system32\DirectX
2009-12-31 16:25:35 ----HD---- C:\WINDOWS\INF
2009-12-28 22:35:55 ----D---- C:\Downloads
2009-12-16 19:17:23 ----SHD---- C:\WINDOWS\Installer
2009-12-16 19:17:09 ----SHD---- C:\Config.Msi
2009-12-16 19:16:56 ----D---- C:\Program Files\Java
2009-12-15 08:33:42 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-12-15 08:33:36 ----D---- C:\Program Files\Fichiers communs
2009-12-14 08:26:32 ----D---- C:\WINDOWS\AppPatch
2009-12-14 08:25:10 ----A---- C:\WINDOWS\imsins.BAK
2009-12-14 08:25:06 ----RSHD---- C:\WINDOWS\system32\DLLCACHE
2009-12-14 08:24:36 ----HD---- C:\WINDOWS\$hf_mig$
2009-12-14 08:19:53 ----D---- C:\WINDOWS\SoftwareDistribution
2009-12-14 08:14:31 ----D---- C:\Program Files\Linksys
2009-12-12 18:02:55 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-12-10 09:12:31 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-12-09 22:32:25 ----D---- C:\Program Files\Internet Explorer

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 40576]
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14720]
R1 sscdbhk5;sscdbhk5; C:\WINDOWS\system32\drivers\sscdbhk5.sys [2004-07-14 5627]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-10-05 28520]
R1 ssrtln;ssrtln; C:\WINDOWS\system32\drivers\ssrtln.sys [2004-07-14 23545]
R1 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-05 12032]
R2 ASCTRM;ASCTRM; C:\WINDOWS\system32\drivers\ASCTRM.sys [2005-05-07 8552]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-12-10 56816]
R2 drvnddm;drvnddm; C:\WINDOWS\system32\drivers\drvnddm.sys [2004-11-23 40480]
R2 tfsnboio;tfsnboio; C:\WINDOWS\system32\dla\tfsnboio.sys [2004-12-06 25883]
R2 tfsncofs;tfsncofs; C:\WINDOWS\system32\dla\tfsncofs.sys [2004-12-06 34843]
R2 tfsndrct;tfsndrct; C:\WINDOWS\system32\dla\tfsndrct.sys [2004-12-06 4123]
R2 tfsndres;tfsndres; C:\WINDOWS\system32\dla\tfsndres.sys [2004-12-06 2271]
R2 tfsnifs;tfsnifs; C:\WINDOWS\system32\dla\tfsnifs.sys [2004-12-06 86586]
R2 tfsnopio;tfsnopio; C:\WINDOWS\system32\dla\tfsnopio.sys [2004-12-06 15227]
R2 tfsnpool;tfsnpool; C:\WINDOWS\system32\dla\tfsnpool.sys [2004-12-06 6363]
R2 tfsnudf;tfsnudf; C:\WINDOWS\system32\dla\tfsnudf.sys [2004-12-06 98714]
R2 tfsnudfa;tfsnudfa; C:\WINDOWS\system32\dla\tfsnudfa.sys [2004-12-06 100603]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\system32\DRIVERS\ctsfm2k.sys [2003-09-22 130192]
R3 E100B;Intel(R) PRO Adapter Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2004-02-10 154112]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-09-20 1302332]
R3 IntelC51;IntelC51; C:\WINDOWS\system32\DRIVERS\IntelC51.sys [2004-03-05 1233525]
R3 IntelC52;IntelC52; C:\WINDOWS\system32\DRIVERS\IntelC52.sys [2004-03-05 647929]
R3 IntelC53;IntelC53; C:\WINDOWS\system32\DRIVERS\IntelC53.sys [2004-06-15 61157]
R3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
R3 mohfilt;mohfilt; C:\WINDOWS\system32\DRIVERS\mohfilt.sys [2004-03-05 37048]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\DRIVERS\ctoss2k.sys [2003-09-22 178672]
R3 P17;Sound Blaster Live! 24-bit; C:\WINDOWS\system32\drivers\P17.sys [2004-06-09 840960]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 bvrp_pci;bvrp_pci; C:\WINDOWS\system32\drivers\bvrp_pci.sys []
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-03 1897408]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2009-08-28 40448]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-10-05 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-10-05 185089]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-08-28 144672]
R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 Creative Service for CDROM Access;Creative Service for CDROM Access; C:\WINDOWS\system32\CTsvcCDA.EXE [1999-12-13 44032]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 lxdn_device;lxdn_device; C:\WINDOWS\system32\lxdncoms.exe [2009-08-13 594600]
R2 WMDM PMSP Service;WMDM PMSP Service; C:\WINDOWS\system32\MsPMSPSv.exe [2000-06-26 53520]
R2 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2009-10-28 545568]
S2 pr2ajbeb;L Ile Noyee Drivers Auto Removal (pr2ajbeb); C:\WINDOWS\system32\pr2ajbeb.exe [2007-08-22 411000]
S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 NetSvc;Intel NCS NetService; C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe [2003-12-17 143360]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]

-----------------EOF-----------------

Ok et pour ma question ?

Oui tous va bien plus de souci merci  

1/

Désinstalle HijackThis.

Télécharge ToolsCleaner2 sur ton Bureau.

Double-clique sur ToolsCleaner2.exe pour le lancer.

Clique sur Recherche et laisse le scan agir.

Clique sur Suppression pour finaliser.

Tu peux, si tu le souhaites, te servir des Options Facultatives.

Clique sur Quitter pour obtenir le rapport.

Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).


2/

Télécharge et installe CCleaner Slim.

Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....

Va dans Nettoyeur, choisis Analyser. Une fois terminé, lance le nettoyage.


3/

Il est nécessaire de désactiver puis réactiver la restauration système pour la purger.


==Prévention==

Pour supprimer les popups d'AntiVir : Lien

Conserve MBAM. Il te servira à scanner les fichiers douteux en complément de l'antivirus et scanne le disque dur régulièrement.

Vérifie que les mises à jour automatiques sont bien activées (Menu Démarrer, clique droit sur Poste de travail, Propriétés, onglet Mises à jour automatiques).

Par rapport au P2P : Lien

Voici un dossier complet (A lire avec Adobe Reader ou Foxit Reader) : Lien


==Problème résolu ?==

--> Si tu estimes que ton problème est résolu, ajoute [Résolu] au titre. Pour cela :

Clique, dans ton premier message, sur le bouton Editer .

Ajoute la mention [Résolu] devant le titre.

Clique ensuite sur Valider votre message.


Sois plus vigilant(e) sur Internet