plantage total [ résolu]

Bonjour, j'ai un petit soucis avec mon pc depuis 1 semaine
Je me promène tranquillement sur internet via firefox 3.05 et puis tout d'un coup .... le pc plante, je suis obligé de l'arrêter en restant appuyé sur le bouton car la souris ne bouge plus, plus de raccourci ......
Voici un log hijackthis, j'ai déjà passé un coup de spyboot, antivir et ad aware, mais je ne trouve pas la cause du problème Quelqu'un pourrais m'aider ?

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:47:15, on 19/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

EDITION MODERATEUR : Règle du forum à respecter :

Pas de rapport avant qu'il n'en soit demandé un !

Veuillez lire l'article suivant :
http://forum.telecharger.01net.com/telecharger/securite_virus_et_assimiles/a_(...)

Merci d'en prendre connaissance.

oups désolé Y-a-t-il quand même quelqu'un pour m'aider ?

Salut fire24


On va vérifier cela, télécharge RSIT (de random/random) sur le bureau ici :
http://images.malwareremoval.com/random/RSIT.exe

- Double clique sur RSIT.exe qui est sur le bureau
- Clique sur Continue dans la fenêtre
- RSIT téléchargera HijackThis si il n’est pas présent où détecté, alors il faudra accepter la licence
- Poste le contenue des deux rapports, log.txt et info.txt à la fin de l’analyse


@++

voici le log


Logfile of random's system information tool 1.05 (written by random/random)
Run by Ben at 2009-01-20 13:49:55
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 4 GB (14%) free of 31 GB
Total RAM: 2046 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:50:08, on 20/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\cFosSpeed\spd.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Apps\Softex\OmniPass\Omniserv.exe
C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\Program Files\TeamViewer\Version4\TeamViewer.exe
C:\WINDOWS\system32\dllhost.exe
C:\Apps\Softex\OmniPass\OPXPApp.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Apps\Softex\OmniPass\scureapp.exe
C:\apps\ABoard\ABoard.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\cFosSpeed\cFosSpeed.exe
C:\apps\ABoard\AOSD.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\RocketDock\RocketDock.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
D:\Documents and Settings\Ben\Bureau\RSIT.exe
D:\Documents and Settings\Ben\Bureau\Ben.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/keyword/%s
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 131.246.191.42:3124
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [OmniPass] C:\Apps\Softex\OmniPass\scureapp.exe
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [PD0630 STISvc] RunDLL32.exe P0630Pin.dll,RunDLL32EP 513
O4 - HKLM\..\Run: [cFosSpeed] C:\Program Files\cFosSpeed\cFosSpeed.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: cFosSpeed System Service (cFosSpeedS) - cFos Software GmbH - C:\Program Files\cFosSpeed\spd.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Google Desktop Manager 5.8.809.23506 (GoogleDesktopManager-092308-165331) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Imapi Helper - Alex Feinman - C:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Softex OmniPass Service (omniserv) - Softex Inc. - C:\Apps\Softex\OmniPass\Omniserv.exe
O23 - Service: TeamViewer 4 (TeamViewer4) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

--
End of file - 10714 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\Extension de garantie.job
C:\WINDOWS\tasks\GlaryInitialize.job
C:\WINDOWS\tasks\Maintenance en 1 clic.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
Click-to-Call BHO - C:\Program Files\Windows Live\Messenger\wlchtc.dll [2008-12-02 73040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2009-01-11 320920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2008-11-18 408952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2008-09-28 2403392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll [2008-11-19 737776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-01-11 34816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-01-11 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
EpsonToolBandKicker Class - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll [2008-09-28 2403392]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-10 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-10 455168]
"ehTray"=C:\WINDOWS\ehome\ehtray.exe [2005-09-29 67584]
"High Definition Audio Property Page Shortcut"=C:\WINDOWS\system32\HDAShCut.exe [2005-01-07 61952]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2005-12-09 15691264]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-01-11 136600]
"OmniPass"=C:\Apps\Softex\OmniPass\scureapp.exe [2006-01-30 1978368]
"ACTIVBOARD"=c:\apps\ABoard\ABoard.exe [2003-05-02 24576]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2008-12-02 13680640]
"nwiz"=nwiz.exe /install []
"PD0630 STISvc"=C:\WINDOWS\system32\P0630Pin.dll [2005-06-05 36864]
"cFosSpeed"=C:\Program Files\cFosSpeed\cFosSpeed.exe [2007-10-24 854992]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
"avgnt"=C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008-06-12 266497]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2008-12-02 86016]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"=C:\Program Files\RocketDock\RocketDock.exe [2007-09-02 495616]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"SuperCopier2.exe"=C:\Program Files\SuperCopier2\SuperCopier2.exe [2006-07-07 1052672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DetectorApp]
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe [2005-10-20 102400]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2008-11-17 30192]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2008-11-20 290088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-11-19 68856]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UnlockerAssistant]
C:\Program Files\Unlocker\UnlockerAssistant.exe [2008-05-02 15872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"MSSQL$SQLEXPRESS"=2

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OPXPGina]
C:\Apps\Softex\OmniPass\opxpgina.dll [2006-01-30 49152]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"MemCheckBoxInRunDlg"=1
"NoSMBalloonTip"=1
"NoDesktopCleanupWizard"=1
"NoWelcomeScreen"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%ProgramFiles%\AOL 9.0\aol.exe"="%ProgramFiles%\AOL 9.0\aol.exe:*:Enabled:AOL"
"%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\logo_ubi.exe"="%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\logo_ubi.exe:*:Enabled:SPLINTER CELL PANDORA"
"%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\pandora.exe"="%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\pandora.exe:*:Enabled:PANDORA"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\APPS\Inventime\my.exe"="C:\APPS\Inventime\my.exe:*:Enabled:INVENTIME"
"D:\Documents and Settings\Ben\Local Settings\Temp\WZSE0.TMP\SymNRT.exe"="D:\Documents and Settings\Ben\Local Settings\Temp\WZSE0.TMP\SymNRT.exe:*:Enabled:Norton Removal Tool"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\SightSpeed\SightSpeed.exe"="C:\Program Files\SightSpeed\SightSpeed.exe:*:Enabled:SightSpeed"
"C:\Program Files\aMSN\bin\wish.exe"="C:\Program Files\aMSN\bin\wish.exe:*:Enabled:Wish Application"
"C:\Program Files\DAP\DAP.exe"="C:\Program Files\DAP\DAP.exe:*:Enabled:Download Accelerator Plus (DAP)"
"D:\Documents and Settings\Ben\Local Settings\Temp\Rar$EX00.656\PortableZMWS\ZMWS\ZazouMiniWebServer.exe"="D:\Documents and Settings\Ben\Local Settings\Temp\Rar$EX00.656\PortableZMWS\ZMWS\ZazouMiniWebServer.exe:*:Enabled:ZazouMiniWebServer"
"D:\Documents and Settings\Ben\Local Settings\Temp\Rar$EX00.656\PortableZMWS\ZMWS\mysql\bin\mysqld-max.exe"="D:\Documents and Settings\Ben\Local Settings\Temp\Rar$EX00.656\PortableZMWS\ZMWS\mysql\bin\mysqld-max.exe:*:Enabled:mysqld-max"
"D:\Documents and Settings\Ben\Local Settings\Temp\Rar$EX01.656\PortableZMWS\ZMWS\ZazouMiniWebServer.exe"="D:\Documents and Settings\Ben\Local Settings\Temp\Rar$EX01.656\PortableZMWS\ZMWS\ZazouMiniWebServer.exe:*:Enabled:ZazouMiniWebServer"
"C:\Program Files\Microsoft Games\Age of Empires II\age2_x1\AGE2_X1.ICD"="C:\Program Files\Microsoft Games\Age of Empires II\age2_x1\AGE2_X1.ICD:*:Enabled:Age of Empires II Expansion"
"C:\Program Files\SEGA\SEGA Rally\SEGA Rally.exe"="C:\Program Files\SEGA\SEGA Rally\SEGA Rally.exe:*:Enabled:SEGA Rally"
"C:\Program Files\SEGA\SEGA Rally\SEGA Rally_SSE1.exe"="C:\Program Files\SEGA\SEGA Rally\SEGA Rally_SSE1.exe:*:Enabled:SEGA Rally"
"C:\Program Files\Microsoft Games\Age of Empires II\EMPIRES2.ICD"="C:\Program Files\Microsoft Games\Age of Empires II\EMPIRES2.ICD:*:Enabled:Age of Empires II"
"C:\Program Files\MultiProxy\MProxy.exe"="C:\Program Files\MultiProxy\MProxy.exe:*:Enabled:MultiProxy personal proxy server"
"D:\Documents and Settings\Ben\Local Settings\Temp\Rar$EX00.125\Charon.exe"="D:\Documents and Settings\Ben\Local Settings\Temp\Rar$EX00.125\Charon.exe:*:Enabled:Charon - A proxy checking / scanning program."
"D:\Documents and Settings\Ben\Local Settings\Temp\RarSFX0\ProxySwitcher.exe"="D:\Documents and Settings\Ben\Local Settings\Temp\RarSFX0\ProxySwitcher.exe:*:Enabled:Proxy Switcher"
"D:\Documents and Settings\All Users\Application Data\NexonUS\NGM\NGM.exe"="D:\Documents and Settings\All Users\Application Data\NexonUS\NGM\NGM.exe:*:Enabled:Nexon Game Manager"
"C:\Nexon\Combat Arms\CombatArms.exe"="C:\Nexon\Combat Arms\CombatArms.exe:*Enabled:CombatArms.exe"
"C:\Nexon\Combat Arms\Engine.exe"="C:\Nexon\Combat Arms\Engine.exe:*Enabled:Engine.exe"
"C:\Program Files\Microsoft Games\Age of Empires III\age3.exe"="C:\Program Files\Microsoft Games\Age of Empires III\age3.exe:*:Enabled:Age of Empires 3"
"C:\Program Files\Participatory Culture Foundation\Miro\xulrunner\python\Miro_Downloader.exe"="C:\Program Files\Participatory Culture Foundation\Miro\xulrunner\python\Miro_Downloader.exe:*:Enabled:Miro_Downloader"
"D:\Documents and Settings\All Users\Application Data\NexonEU\NGM\NGM.exe"="D:\Documents and Settings\All Users\Application Data\NexonEU\NGM\NGM.exe:*:Enabled:Nexon Game Manager"
"C:\Nexon\Combat Arms EU\CombatArms.exe"="C:\Nexon\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe"
"C:\Nexon\Combat Arms EU\Engine.exe"="C:\Nexon\Combat Arms EU\Engine.exe:*Enabled:Engine.exe"
"C:\Nexon\Combat Arms EU\NMService.exe"="C:\Nexon\Combat Arms EU\NMService.exe:*:Enabled:Nexon Messenger Core"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"D:\Documents and Settings\Ben\Bureau\freezer.exe"="D:\Documents and Settings\Ben\Bureau\freezer.exe:*:Enabled:freezer"
"C:\Program Files\Ubisoft\Gearbox Software\Brothers in Arms - Hell's Highway\Binaries\biahh.exe"="C:\Program Files\Ubisoft\Gearbox Software\Brothers in Arms - Hell's Highway\Binaries\biahh.exe:*:Enabled:biahh"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\Teamspeak2_RC2\server_windows.exe"="C:\Program Files\Teamspeak2_RC2\server_windows.exe:*:Enabled:Server"
"C:\Program Files\TeamViewer3\TeamViewer.exe"="C:\Program Files\TeamViewer3\TeamViewer.exe:*:Enabled:Application de pilotage à distance TeamViewer"
"D:\rockstar social club\Rockstar Games Social Club\RGSCLauncher.exe"="D:\rockstar social club\Rockstar Games Social Club\RGSCLauncher.exe:*:Enabled:Rockstar Games Social Club"
"D:\Rockstar Game\Grand Theft Auto IV\GTAIV.exe"="D:\Rockstar Game\Grand Theft Auto IV\GTAIV.exe:*:Enabled:Grand Theft Auto IV"
"D:\Rockstar Game\Grand Theft Auto IV\LaunchGTAIV.exe"="D:\Rockstar Game\Grand Theft Auto IV\LaunchGTAIV.exe:*:Enabled:Grand Theft Auto IV"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"D:\call of duty\iw3mp.exe"="D:\call of duty\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM)"
"C:\Program Files\ma-config.com\maconfservice.exe"="C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice"
"C:\Program Files\Ubisoft\Ghost Recon Advanced Warfighter\graw.exe"="C:\Program Files\Ubisoft\Ghost Recon Advanced Warfighter\graw.exe:*:Enabled:graw"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\Unreal Tournament 3\Binaries\UT3.exe"="C:\Program Files\Unreal Tournament 3\Binaries\UT3.exe:*:Enabled:Unreal Tournament 3"
"D:\Documents and Settings\Ben\Mes documents\freezer.exe"="D:\Documents and Settings\Ben\Mes documents\freezer.exe:*:Enabled:freezer"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"D:\Documents and Settings\Ben\Bureau\HandyCache\HandyCache.exe"="D:\Documents and Settings\Ben\Bureau\HandyCache\HandyCache.exe:*:Enabled:HTTP Proxy server with cache"
"D:\dune\DUNE2000.DAT"="D:\dune\DUNE2000.DAT:*:Enabled:Dune2000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Nexon\Combat Arms\CombatArms.exe"="C:\Nexon\Combat Arms\CombatArms.exe:*Enabled:CombatArms.exe"
"C:\Nexon\Combat Arms\Engine.exe"="C:\Nexon\Combat Arms\Engine.exe:*Enabled:Engine.exe"
"C:\Nexon\Combat Arms EU\CombatArms.exe"="C:\Nexon\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe"
"C:\Nexon\Combat Arms EU\Engine.exe"="C:\Nexon\Combat Arms EU\Engine.exe:*Enabled:Engine.exe"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{79976a30-e3cd-11dd-b039-0016e61fb21c}]
shell\AutoRun\command - L:\start.exe
shell\FramaKey\command - L:\start.exe


======File associations======

.js - edit -
.js - open -

======List of files/folders created in the last 1 months======

2009-01-20 13:49:55 ----D---- C:\rsit
2009-01-19 17:44:33 ----D---- C:\Program Files\SuperCopier2
2009-01-19 00:13:50 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-01-18 16:40:09 ----D---- C:\WINDOWS\system32\logs
2009-01-18 16:40:01 ----A---- C:\WINDOWS\ntbtlog.txt
2009-01-18 13:58:58 ----D---- C:\Program Files\Lavasoft
2009-01-17 18:04:16 ----D---- C:\Program Files\TeamViewer
2009-01-17 10:44:32 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-01-14 18:29:57 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-01-12 19:26:42 ----D---- D:\Documents and Settings\Ben\Application Data\GlarySoft
2009-01-12 19:21:57 ----D---- C:\Program Files\Glary Utilities
2009-01-11 17:39:08 ----A---- C:\WINDOWS\system32\javaws.exe
2009-01-11 17:39:08 ----A---- C:\WINDOWS\system32\javaw.exe
2009-01-11 17:39:08 ----A---- C:\WINDOWS\system32\java.exe
2009-01-11 17:39:08 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-01-06 21:39:53 ----A---- C:\WINDOWS\uninst.exe
2009-01-06 19:03:48 ----D---- C:\Program Files\Steam
2009-01-04 12:22:23 ----D---- C:\Program Files\uTorrent
2009-01-03 21:51:01 ----D---- D:\Documents and Settings\Ben\Application Data\CyberLink
2008-12-27 18:14:32 ----D---- D:\Documents and Settings\Ben\Application Data\InstallShield Installation Information
2008-12-27 17:57:08 ----D---- C:\Program Files\Unreal Tournament 3
2008-12-27 17:56:46 ----D---- C:\WINDOWS\45235788142C44BE8A4DDDE9A84492E5.TMP
2008-12-26 15:53:34 ----D---- C:\Program Files\Bonjour
2008-12-25 21:03:54 ----D---- C:\Program Files\BeeThink SpyDetector_2.0
2008-12-25 11:42:18 ----A---- C:\WINDOWS\system32\GEARAspi.dll
2008-12-25 11:41:54 ----D---- C:\Program Files\iPod
2008-12-25 11:41:52 ----D---- D:\Documents and Settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2008-12-25 11:41:52 ----D---- C:\Program Files\iTunes
2008-12-25 11:41:30 ----D---- C:\Program Files\Apple Software Update
2008-12-25 11:40:57 ----D---- C:\Program Files\Fichiers communs\Apple
2008-12-25 11:30:45 ----D---- C:\Program Files\iGnuteel
2008-12-23 17:41:21 ----D---- C:\Program Files\WarRock
2008-12-22 23:55:18 ----D---- D:\Documents and Settings\Ben\Application Data\Opera
2008-12-22 23:54:56 ----D---- C:\Program Files\Opera
2008-12-22 14:51:25 ----D---- C:\Program Files\Image Mender

======List of files/folders modified in the last 1 months======

2009-01-20 13:48:50 ----D---- C:\Program Files\Mozilla Firefox
2009-01-20 13:48:42 ----D---- C:\WINDOWS\system32\Lang
2009-01-20 13:48:07 ----D---- C:\Program Files\cFosSpeed
2009-01-20 13:47:33 ----D---- C:\WINDOWS\Registration
2009-01-20 13:47:29 ----D---- C:\WINDOWS\Temp
2009-01-20 13:47:23 ----D---- C:\WINDOWS\system32\CatRoot2
2009-01-20 13:47:19 ----D---- C:\WINDOWS
2009-01-19 17:44:33 ----D---- C:\Program Files
2009-01-19 00:15:56 ----D---- C:\Program Files\Mozilla Thunderbird
2009-01-18 16:41:07 ----AD---- C:\WINDOWS\system32
2009-01-18 16:19:33 ----D---- D:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-01-18 16:19:30 ----D---- C:\WINDOWS\Debug
2009-01-18 14:02:08 ----D---- C:\WINDOWS\Prefetch
2009-01-18 13:59:44 ----SHD---- C:\WINDOWS\Installer
2009-01-18 13:58:58 ----D---- C:\WINDOWS\system32\drivers
2009-01-18 13:58:42 ----D---- C:\Program Files\Fichiers communs\Wise Installation Wizard
2009-01-17 18:42:21 ----D---- C:\Program Files\TeamViewer3
2009-01-17 18:07:56 ----D---- D:\Documents and Settings\Ben\Application Data\TeamViewer
2009-01-16 13:59:09 ----HD---- C:\WINDOWS\inf
2009-01-14 18:29:59 ----RSHD---- C:\WINDOWS\system32\dllcache
2009-01-14 18:29:56 ----HD---- C:\WINDOWS\$hf_mig$
2009-01-14 18:29:06 ----D---- C:\WINDOWS\system32\Restore
2009-01-14 18:28:57 ----SHD---- C:\System Volume Information
2009-01-12 19:22:02 ----SD---- C:\WINDOWS\Tasks
2009-01-11 17:38:52 ----D---- C:\Program Files\Java
2009-01-10 02:35:28 ----A---- C:\WINDOWS\system32\MRT.exe
2009-01-06 14:29:00 ----D---- D:\Documents and Settings\Ben\Application Data\uTorrent
2009-01-01 15:59:06 ----RASH---- C:\BOOT.INI
2009-01-01 15:59:06 ----A---- C:\WINDOWS\win.ini
2009-01-01 15:59:06 ----A---- C:\WINDOWS\system.ini
2008-12-27 17:56:59 ----D---- C:\WINDOWS\system32\DirectX
2008-12-27 14:11:48 ----SD---- D:\Documents and Settings\Ben\Application Data\Microsoft
2008-12-27 14:00:59 ----D---- D:\Documents and Settings\All Users\Application Data\Microsoft Help
2008-12-25 11:42:18 ----DC---- C:\WINDOWS\system32\DRVSTORE
2008-12-25 11:41:19 ----D---- C:\WINDOWS\system32\ReinstallBackups
2008-12-25 11:40:57 ----D---- C:\Program Files\Fichiers communs
2008-12-25 10:28:52 ----HD---- C:\Program Files\InstallShield Installation Information
2008-12-24 17:30:07 ----D---- D:\Documents and Settings\All Users\Application Data\ma-config.com
2008-12-24 17:30:07 ----D---- C:\Program Files\ma-config.com
2008-12-24 02:49:03 ----HD---- C:\WINDOWS\system32\GroupPolicy
2008-12-24 02:17:10 ----D---- C:\Program Files\TuneUp Utilities 2008
2008-12-22 23:44:15 ----RSD---- C:\WINDOWS\Fonts

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2008-12-09 75072]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2007-11-08 21248]
R2 symlcbrd;symlcbrd; \??\C:\WINDOWS\system32\drivers\symlcbrd.sys []
R3 3xHybrid;3xHybrid service; C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2006-04-17 825600]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 avgntflt;avgntflt; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys []
R3 cFosSpeed;cFosSpeed Miniport; C:\WINDOWS\system32\DRIVERS\cfosspeed.sys [2007-10-24 706512]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2008-04-17 15464]
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2005-12-09 4123136]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-12-02 6209536]
R3 P0630VID;Creative WebCam Live!; C:\WINDOWS\system32\DRIVERS\P0630Vid.sys [2005-06-06 91841]
R3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2006-02-27 81408]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 X10Hid;X10 Hid Device; C:\WINDOWS\System32\Drivers\x10hid.sys [2005-11-28 7040]
R3 XUIF;X10 USB Wireless Transceiver; C:\WINDOWS\System32\Drivers\x10ufx2.sys [2005-05-19 17792]
S3 ab38pwj7;ab38pwj7; C:\WINDOWS\system32\drivers\ab38pwj7.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 cpuz131;cpuz131; \??\D:\DOCUME~1\Ben\LOCALS~1\Temp\cpuz131\cpuz_x32.sys []
S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys []
S3 EagleNT;EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys []
S3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\HdAudio.sys [2005-01-07 145920]
S3 MHNDRV;Pilote MHN; C:\WINDOWS\system32\DRIVERS\mhndrv.sys [2004-08-10 11008]
S3 MPE;Filtre BDA MPE; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-13 15232]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nm;Pilote du Moniteur réseau; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2008-04-13 40320]
S3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2008-11-07 32000]
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys []
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 mchInjDrv;mchInjDrv; \??\D:\DOCUME~1\Ben\LOCALS~1\Temp\mc24.tmp []
S4 sr;Pilote de filtre de restauration système; C:\WINDOWS\system32\DRIVERS\sr.sys [2008-04-14 73600]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirScheduler;Planificateur Avira AntiVir Personal - Free Antivirus; C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe [2008-10-15 68865]
R2 AntiVirService;Avira AntiVir Personal - Free Antivirus Guard; C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe [2008-10-15 151297]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-11-07 132424]
R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 cFosSpeedS;cFosSpeed System Service; C:\Program Files\cFosSpeed\spd.exe [2007-10-24 310224]
R2 ehRecvr;Media Center Receiver Service; C:\WINDOWS\eHome\ehRecvr.exe [2006-10-09 237568]
R2 ehSched;Service de planification Media Center; C:\WINDOWS\eHome\ehSched.exe [2005-08-05 103424]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-01-11 152984]
R2 McrdSvc;Media Center Extender Service; C:\WINDOWS\ehome\mcrdsvc.exe [2005-08-05 99328]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2008-12-02 163908]
R2 omniserv;Softex OmniPass Service; C:\Apps\Softex\OmniPass\Omniserv.exe [2006-01-30 32768]
R2 SQLWriter;Enregistreur VSS SQL Server; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2007-02-10 89968]
R2 TeamViewer4;TeamViewer 4; C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe [2009-01-08 185640]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe [2005-01-31 49152]
R2 USBDeviceService;USBDeviceService; C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe [2005-10-20 90112]
R2 UxTuneUp;TuneUp Extension de thème; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 x10nets;X10 Device Network Service; C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe [2001-11-12 20480]
S3 aawservice;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe [2009-01-18 611664]
S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2007-10-09 36864]
S3 getPlus(R) Helper;getPlus(R) Helper; C:\Program Files\NOS\bin\getPlus_HelperSvc.exe [2008-08-29 33752]
S3 GoogleDesktopManager-092308-165331;Google Desktop Manager 5.8.809.23506; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2008-11-17 30192]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-09-28 138168]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2007-10-11 864256]
S3 Imapi Helper;Imapi Helper; C:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe [2006-01-04 163840]
S3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2008-11-20 536872]
S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2008-12-19 195752]
S3 MHN;MHN; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\WINDOWS\System32\TuneUpDefragService.exe [2008-11-21 355584]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2008-02-26 29183504]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2005-10-14 45272]
S4 msvsmon80;Débogueur distant Visual Studio 2005; C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x86\msvsmon.exe [2006-12-02 2805000]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2007-10-11 122880]
S4 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2008-12-07 66872]
S4 SQLBrowser;SQL Server Browser; C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2007-02-10 242544]

-----------------EOF-----------------

puis l'info

info.txt logfile of random's system information tool 1.05 2009-01-20 13:50:13

======Uninstall list======

-->"c:\apps\skype\phone\unins000.exe"
-->C:\PROGRA~1\GOTOSO~1\VADERE~1\UNWISE.EXE C:\PROGRA~1\GOTOSO~1\VADERE~1\INSTALL.LOG
-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
-->C:\Program Files\Fichiers communs\AOL\Screensaver\uninst_ygpss.exe
-->C:\Program Files\Fichiers communs\Real\Update\\rnuninst.exe RealNetworks|RealPlayer|6.0
-->C:\Program Files\Learn2.com\StRunner\stuninst.exe
-->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205}
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382}
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629}
-->MsiExec /X{AC54E544-3E42-443C-A91D-A00A6974C592}
-->msiexec.exe /I {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
-->MsiExec.exe /I{8B543A39-9401-44F4-B572-069E64C15189}
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F9CFBD8-8F77-4DCD-8CB5-CDD5F653C872}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4D0803DB-8FC8-4C97-AE1F-1C3DCA357B01}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{513D9FB1-27A2-44E4-8F2D-77A6737921A5}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5AFA4872-16B2-419E-ADCA-8E96E739115D}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{80426743-0CC7-4967-BFEC-10DE08D1B6F3}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{80426743-0CC7-4967-BFEC-10DE08D1B6F3}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A82F10CB-18B5-4EAC-AEF2-FA49CD565626}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E5ABA5FD-EE3D-4F15-895D-B32321E6C96B}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F4E57F49-84B4-4CF2-B0A1-8CA1752BDF7E}\setup.exe" -l0x40c
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {5A2F65A4-808F-4A1E-973E-92E17824982D}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {430971B1-C31E-45DA-81E0-72C095BAB72C}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {B3F4DC34-7F60-4B7C-A79F-1C13012D99D4}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {F7A31780-33C4-4E39-951A-5EC9B91D7BF1}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-00A1-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
ABBYY FineReader 6.0 Sprint-->MsiExec.exe /I{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}
Ad-Aware-->MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
Adobe Shockwave Player 11-->C:\WINDOWS\system32\adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log
Analyseur MSXML 6.0-->MsiExec.exe /I{5903C48B-E953-47B8-A651-B9222C483057}
Apple Mobile Device Support-->MsiExec.exe /I{EC4455AB-F155-4CC1-A4C5-88F3777F9886}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Ashampoo Burning Studio 6 FREE-->"C:\Program Files\Ashampoo\Ashampoo Burning Studio 6 FREE\unins000.exe"
Assistant de connexion Windows Live-->MsiExec.exe /I{D6E592B3-67DA-4BBB-9783-E1838FB253A2}
AusLogics Disk Defrag 1.4-->"C:\Program Files\AusLogics Disk Defrag\unins000.exe"
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE
Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
Call of Duty(R) 4 - Modern Warfare(TM)-->C:\Program Files\InstallShield Installation Information\{E48469CC-635E-4FD5-A122-1497C286D217}\setup.exe -runfromtemp -l0x040c
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
cFosSpeed v4.05-->"C:\Program Files\cFosSpeed\setup.exe" -uninstall
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Codeur Windows Media Série 9-->MsiExec.exe /I{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
Correctif n° 2 pour Windows XP Édition Media Center 2005-->C:\WINDOWS\$NtUninstallKB900325$\spuninst\spuninst.exe
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Creative Photo Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{513D9FB1-27A2-44E4-8F2D-77A6737921A5}\setup.exe" -l0x40c /remove
Creative WebCam Center-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E5ABA5FD-EE3D-4F15-895D-B32321E6C96B}\setup.exe" -l0x40c /remove
Creative WebCam Live! Driver (1.02.03.0606)-->C:\WINDOWS\CtDrvIns.exe -uninstall -script Pd0630.uns -unsext NT -plugin P0630Pin.dll -pluginres P0630Pin.crl
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
Dune 2000-->d:\dune\Uninstll.exe C:\WINDOWS\UNINST.EXE -fd:\dune\DeIsL1.isu
EPSON Attach To Email-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{20C45B32-5AB6-46A4-94EF-58950CAF05E5} /l1033 ADDREMOVEDLG
EPSON Copy Utility 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67EDD823-135A-4D59-87BD-950616D6E857}\SETUP.EXE" -l0x40c -UnInstall
EPSON Easy Photo Print-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BC69DDB8-4840-4D9B-BB31-0D4DB2BA1312}\SETUP.EXE" -l0x40c UNINST
EPSON File Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E86BC406-944E-41F6-ADE6-2C136734C96B}\Setup.exe" -l0x40c UNINST
EPSON Logiciel imprimante-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
EPSON Scan Assistant-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}\Setup.exe" -l0x40c -u
EPSON Scan-->C:\Program Files\epson\escndv\setup\setup.exe /r
EPSON Web-To-Page-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}\SETUP.EXE" -l0x40c -anything
ESDX4000_4050_CX3900-->C:\Program Files\EPSON\TPMANUAL\ESDX4000_4050_CX3900\USE_G\DOCUNINS.EXE
EVEREST Home Edition v2.20-->"C:\Program Files\Lavalys\EVEREST Home Edition\unins000.exe"
Fichiers de prise en charge de l'installation de Microsoft SQL Server (Français)-->MsiExec.exe /X{3380F354-C5F7-4E71-8F51-EEE6C3F06C62}
GDR 3068 for SQL Server Database Services 2005 ENU (KB948109)-->C:\WINDOWS\SQL9_KB948109_ENU\Hotfix.exe /Uninstall
GDR 3068 for SQL Server Tools and Workstation Components 2005 ENU (KB948109)-->C:\WINDOWS\SQLTools9_KB948109_ENU\Hotfix.exe /Uninstall
Glary Utilities Pro 2.9.0.518-->"C:\Program Files\Glary Utilities\unins000.exe"
Google Desktop-->C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar1.dll"
Grand Theft Auto IV-->"C:\Program Files\InstallShield Installation Information\{579BA58C-F33D-4970-9953-B94B43768AC3}\setup.exe" -runfromtemp -l0x040c -removeonly
High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"D:\Documents and Settings\Ben\Bureau\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Hotfix for Windows Media Player 10 (KB903157)-->"C:\WINDOWS\$NtUninstallKB903157$\spuninst\spuninst.exe"
iGnuteel 0.8.1-->"C:\Program Files\iGnuteel\unins000.exe"
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{3CCB732A-E472-4CF9-B1EE-F18365341FE0}
ISO Recorder-->MsiExec.exe /I{DFC6573E-124D-4026-BFA4-B433C9D3FF21}
iTunes-->MsiExec.exe /I{318AB667-3230-41B5-A617-CB3BF748D371}
J2SE Runtime Environment 5.0 Update 4-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150040}
Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Ma-Config.com-->MsiExec.exe /X{EC7FE2ED-F305-41B7-90B8-3DAE9E35307A}
Macromedia Shockwave Player-->MsiExec.exe /X{7D1D6A24-65D4-454C-8815-4F08A5FFF12C}
Manuel d'utilisation de Creative WebCam Live! (Français)-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Creative\Creative WebCam\Manuel d'utilisation de Creative WebCam Live!\French\CTManual.isu"
MCE Software Encoder 1.0-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7655E113-C306-11D9-A373-0050BAE317E1}\setup.exe" -uninstall
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft .NET Framework 3.0 French Language Pack-->MsiExec.exe /X{E3C080B0-23F5-49AF-89F8-8E8DBC89E659}
Microsoft .NET Framework 3.0 Service Pack 1-->MsiExec.exe /I{2BA00471-0328-3743-93BD-FA813353A783}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Device Emulator version 1.0 - FRA-->MsiExec.exe /X{F6E08BCD-8411-4943-85B6-C8F79AC613AC}
Microsoft Document Explorer 2005 Language Pack - FRA-->MsiExec.exe /X{A0EEDF22-8A8A-45C3-9571-FCCE846ABAED}
Microsoft Document Explorer 2005-->C:\Program Files\Fichiers communs\Microsoft Shared\Help 8\Microsoft Document Explorer 2005\install.exe
Microsoft Document Explorer 2005-->MsiExec.exe /X{44D4AF75-6870-41F5-9181-662EA05507E1}
Microsoft Games for Windows - LIVE -->MsiExec.exe /X{4AA3D64E-9EC3-4B0F-AB91-5885AC55641F}
Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{FD052FB9-FE90-4438-B355-15EDC89D8FB1}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office Home and Student 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
Microsoft Office Language Pack 2007 Service Pack 1 (SP1)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {EC50B538-CBE1-42E6-B7FE-87AA540AADFB}
Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
Microsoft Office OneNote MUI (French) 2007-->MsiExec.exe /X{90120000-00A1-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Express Edition (SQLEXPRESS)-->MsiExec.exe /I{480DBB60-F0B6-45F2-B26F-1A2E11197791}
Microsoft SQL Server 2005 Mobile [FRA] Developer Tools-->MsiExec.exe /X{8BBF1F9B-846E-412E-A291-D471E5BED251}
Microsoft SQL Server 2005 Tools Express Edition-->MsiExec.exe /I{3F59A7E0-BC01-4435-9E93-C7D7015C21DA}
Microsoft SQL Server 2005-->"C:\Program Files\Microsoft SQL Server\90\Setup Bootstrap\ARPWrapper.exe" /Remove
Microsoft SQL Server Native Client-->MsiExec.exe /I{9C7E944F-4502-40B8-A0AB-66B2FA9EE829}
Microsoft SQL Server VSS Writer-->MsiExec.exe /I{75FF1600-6330-43FA-9022-E0835BF20778}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual J# 2.0 Redistributable Package-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft Visual J# 2.0 Redistributable Package\install.exe
Microsoft Visual Studio 2005 Professional - Français Service Pack 1 (KB926607)-->C:\WINDOWS\system32\msiexec.exe /promptrestart /uninstall {673539D1-18E1-4B9D-B2C7-A4A547688B89} /package {D061040C-EAF9-4F1B-B0CA-060A31115151}
Microsoft Visual Studio 2005 Professional - Français-->C:\Program Files\Microsoft Visual Studio 8\Microsoft Visual Studio 2005 Professional Edition - FRA\setup.exe
Mise à jour de sécurité pour le Codeur Windows Media (KB954156)-->"C:\WINDOWS\$NtUninstallKB954156_WM9L$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923689)-->"C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956390)-->"C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958215)-->"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960714)-->"C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuninst.exe"
Mise à jour pour Lecteur Windows Media 10 (KB910393)-->"C:\WINDOWS\$NtUninstallKB910393$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
Module de prise en charge linguistique de Microsoft Document Explorer 2005 - FRA-->C:\Program Files\Fichiers communs\Microsoft Shared\Help 8\Microsoft Document Explorer 2005 Language Pack - FRA\install.exe
Module de prise en charge linguistique de Microsoft Visual J# 2.0 Redistributable - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Module de prise en charge linguistique de Microsoft Visual J# 2.0 Redistributable - FRA\install.exe
Module de prise en charge linguistique du français de Microsoft .NET Framework 3.0-->C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 French Language Pack\setup.exe
Mozilla Firefox (3.0.5)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
Mozilla Thunderbird (2.0.0.19)-->C:\Program Files\Mozilla Thunderbird\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
nLite 1.4.9.1-->"C:\Program Files\nLite\unins000.exe"
Notepad++-->C:\Program Files\Notepad++\uninstall.exe
NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI
NVIDIA PhysX v8.10.13-->MsiExec.exe /X{AC54E544-3E42-443C-A91D-A00A6974C592}
OpenESAD 1.01-->"C:\Program Files\OpenESAD\unins000.exe"
PhotoFiltre Studio-->"C:\Program Files\PhotoFiltre Studio\Uninst.exe"
PIF DESIGNER-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B90450DF-E781-46FD-B1F1-0C86DA40E443}\SETUP.EXE" -l0x40c anything
PowerDVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe" -uninstall
PunkBuster Services-->C:\WINDOWS\system32\pbsvc.exe -u
QuickTime-->MsiExec.exe /I{F958CA02-BB40-4007-894B-258729456EE4}
REALTEK GbE & FE Ethernet PCI NIC Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}\SETUP.exe" -l0x40c -removeonly
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x40c -removeonly
RocketDock 1.3.5-->"C:\Program Files\RocketDock\unins000.exe"
Rockstar Games Social Club-->"C:\Program Files\InstallShield Installation Information\{08B3869E-D282-424C-9AFC-870E04A4BA14}\setup.exe" -runfromtemp -l0x040c -removeonly
Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
Security Update for 2007 Microsoft Office System (KB958439)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {6491B8AA-D11C-4648-A461-6234B31EB7E2}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for Microsoft Office Excel 2007 (KB958437)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {648FC016-2D6B-4A16-8D87-404533642F4B}
Security Update for Microsoft Office OneNote 2007 (KB950130)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {F1B2401C-B610-4BF2-AA1C-52C55827A8F4}
Security Update for Microsoft Office PowerPoint 2007 (KB951338)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {558B709B-821B-4FC5-90FC-9A8890641E77}
Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
Security Update for Microsoft Office system 2007 (KB956828)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {885E081B-72BD-4E76-8E98-30B4BE468FAC}
Security Update for Microsoft Office Word 2007 (KB956358)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {4551666D-0FD6-4C69-8A81-1C6F2E64517C}
Security Update pour Microsoft Visual Studio 2005 Professional - Français (KB937061)-->C:\WINDOWS\system32\msiexec.exe /promptrestart /uninstall {94E2AAC1-CAE5-4F73-B0D1-C471BA1F8E2A} /package {D061040C-EAF9-4F1B-B0CA-060A31115151}
Security Update pour Microsoft Visual Studio 2005 Professional - Français (KB947738)-->C:\WINDOWS\system32\msiexec.exe /promptrestart /uninstall {66DA9ADD-B1C4-4891-84D6-706E216B411B} /package {D061040C-EAF9-4F1B-B0CA-060A31115151}
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
SightSpeed (remove only)-->C:\Program Files\SightSpeed\uninst.exe
SmartSound Quicktracks Plugin-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}
Sonic Encoders-->MsiExec.exe /I{9941F0AA-B903-4AF4-A055-83A9815CC011}
Sonic Express Labeler-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
Sonic MyDVD LE-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
Sonic RecordNow Audio-->MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382}
Sonic RecordNow Copy-->MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629}
Sonic RecordNow Data-->MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205}
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
SuperCopier2-->"C:\Program Files\SuperCopier2\SC2Uninst.exe"
TeamSpeak Client-->"C:\Program Files\TeamSpeak3\unins000.exe"
TeamViewer 3-->C:\Program Files\TeamViewer3\uninstall.exe
TeamViewer 4-->C:\Program Files\TeamViewer\Version4\uninstall.exe
TuneUp Utilities 2008-->MsiExec.exe /I{5888428E-699C-4E71-BF71-94EE06B497DA}
Ulead PhotoImpact 10 SE-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5A065EA0-0EEC-4E94-A2A0-40812576C122}\setup.exe" -l0x40c
Ulead VideoStudio 9.0 SE DVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8EAB2384-C794-40ED-A9DD-3270A0D2BB76}\setup.exe" -l0x40c
Unlocker 1.8.7-->C:\Program Files\Unlocker\uninst.exe
Unreal Tournament 3-->MsiExec.exe /X{BFA90209-7AFF-4DB6-8E4B-E57305751AD7}
Update for Office 2007 (KB946691)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {A420F522-7395-4872-9882-C591B4B92278}
Utilitaire Effets vidéos avancés-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4D0803DB-8FC8-4C97-AE1F-1C3DCA357B01}\setup.exe" -l0x40c /remove
WarRock-->C:\Program Files\InstallShield Installation Information\{00D15456-F679-4AD4-8BD2-56450D4C3F72}\setup.exe -runfromtemp -l0x0009 -removeonly
Windows Live Call-->MsiExec.exe /I{01523985-2098-43AF-9C97-12B07BE02A9B}
Windows Live Communications Platform-->MsiExec.exe /I{F69E83CF-B440-43F8-89E6-6EA80712109B}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
Windows Presentation Foundation Language Pack (FRA)-->MsiExec.exe /X{6901DD22-527A-41EF-9059-E81FEDE9E494}
Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Windows Workflow Foundation FR Language Pack-->MsiExec.exe /I{B84C141C-9A13-44BE-9A69-301D7B11D836}
Windows XP Media Center Edition 2005 KB908246-->"C:\WINDOWS\$NtUninstallKB908246$\spuninst\spuninst.exe"
Windows XP Media Center Edition 2005 KB925766-->"C:\WINDOWS\$NtUninstallKB925766$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
X10 Hardware(TM)-->C:\WINDOWS\UNWISE.EXE C:\PROGRA~1\X10HAR~1\Install.log
XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"

======Hosts File======

127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com

======Security center information======

AV: Avira AntiVir PersonalEdition Classic

System event log

Computer Name: BENJAMIN
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Service de la passerelle de la couche Application.

Record Number: 7739
Source Name: Service Control Manager
Time Written: 20081222141953.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: BENJAMIN
Event Code: 7036
Message: Le service Application système COM+ est entré dans l'état : en cours d'exécution.

Record Number: 7738
Source Name: Service Control Manager
Time Written: 20081222141953.000000+060
Event Type: Informations
User:

Computer Name: BENJAMIN
Event Code: 7036
Message: Le service NLA (Network Location Awareness) est entré dans l'état : en cours d'exécution.

Record Number: 7737
Source Name: Service Control Manager
Time Written: 20081222141953.000000+060
Event Type: Informations
User:

Computer Name: BENJAMIN
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service NLA (Network Location Awareness).

Record Number: 7736
Source Name: Service Control Manager
Time Written: 20081222141952.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: BENJAMIN
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Application système COM+.

Record Number: 7735
Source Name: Service Control Manager
Time Written: 20081222141952.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Application event log

Computer Name: BENJAMIN
Event Code: 4099
Message: Échec de l'ouverture de services.

Record Number: 5
Source Name: WmiAdapter
Time Written: 20090117092153.000000+060
Event Type: erreur
User: BUILTIN\Administrateurs

Computer Name: BENJAMIN
Event Code: 4096
Message: Le service AntiVir a bien démarré!

Record Number: 4
Source Name: Avira AntiVir
Time Written: 20090117092139.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: BENJAMIN
Event Code: 0
Message:
Record Number: 3
Source Name: USBDeviceService
Time Written: 20090117092138.000000+060
Event Type: Informations
User:

Computer Name: BENJAMIN
Event Code: 1
Message:
Record Number: 2
Source Name: Bonjour Service
Time Written: 20090117092138.000000+060
Event Type: Informations
User:

Computer Name: BENJAMIN
Event Code: 4
Message: Le prochain téléchargement des listes TV récentes dans le Guide des programmes TV est pour le 1/18/2009 8:24:57.

Record Number: 1
Source Name: Media Center Scheduler
Time Written: 20090117092135.000000+060
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Apps\Softex\OmniPass;C:\Program Files\Fichiers communs\Ulead Systems\MPEG;C:\Program Files\Microsoft SQL Server\90\Tools\binn\;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 6 Stepping 4, GenuineIntel
"PROCESSOR_REVISION"=0604
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"SonicCentral"=C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\
"VS80COMNTOOLS"=C:\Program Files\Microsoft Visual Studio 8\Common7\Tools\
"CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip
"RGSCLauncher"=D:\rockstar social club\Rockstar Games Social Club
"RGSC"=D:\rockstar social club\Rockstar Games Social Club\1_0_0_0

-----------------EOF-----------------

quelle est la prochaine étape ?

Salut fire24


Télécharge combofix.exe (de sUBs) sur le bureau :

http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe

Important Désactive ton Antivirus et antispyware avant le scan avec Combofix :
http://forum.pcastuces.com/desactiver_les_protections_residentes-f31s4.htm


==> Sauvegarde ton travail et ferme toutes les fenêtres actives, il peut y avoir un redémarrage du PC. Ne lance aucun programme tant que Combofix n’est pas fini. <==

Double clique sur combofix.exe, clique sur OUI et valide par Entrée

Il te sera demandé d’installer la console si elle n’est pas installer, clique sur NON

Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

NOTE : Le rapport se trouve également ici : C:\ Combofix.txt

Combofix est détecté par certains antivirus comme une infection, ne pas en tenir compte, il s'agit d'un faux positif, continue la procédure


@++

voici le log:


ComboFix 09-01-20.05 - Ben 2009-01-21 18:14:53.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.2046.1493 [GMT 1:00]
Lancé depuis: d:\documents and settings\Ben\Bureau\ComboFix.exe
AV: Avira AntiVir PersonalEdition Classic *On-access scanning disabled* (Updated)
* Un nouveau point de restauration a été créé
.
Les fichiers ci-dessous ont été désactivés pendant l'exécution:
c:\program files\SuperCopier2\SC2Hook.dll


(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

d:\documents and settings\Benjamin\Application Data\inst.exe

.
((((((((((((((((((((((((((((( Fichiers créés du 2008-12-21 au 2009-01-21 ))))))))))))))))))))))))))))))))))))
.

2009-01-20 14:24 . 2009-01-21 18:19 <REP> d-------- d:\documents and settings\Ben\Application Data\Hamachi
2009-01-20 14:23 . 2009-01-20 14:24 <REP> d-------- c:\program files\Hamachi
2009-01-20 14:23 . 2009-01-20 14:23 25,280 --a------ c:\windows\system32\drivers\hamachi.sys
2009-01-20 13:59 . 2009-01-20 13:59 <REP> d-------- C:\Wbanq
2009-01-20 13:49 . 2009-01-20 13:50 <REP> d-------- C:\rsit
2009-01-19 17:44 . 2009-01-21 18:18 <REP> d-------- c:\program files\SuperCopier2
2009-01-18 16:41 . 2009-01-18 16:41 720 --a------ c:\windows\system32\history.aaw
2009-01-18 16:40 . 2009-01-18 16:41 <REP> d-------- c:\windows\system32\logs
2009-01-18 16:40 . 2009-01-18 16:41 3,616 --a------ c:\windows\system32\settings.aaw
2009-01-18 13:58 . 2009-01-18 13:58 <REP> d-------- c:\program files\Lavasoft
2009-01-18 13:25 . 2009-01-18 13:25 <REP> d-------- d:\documents and settings\LocalService\Application Data\TeamViewer
2009-01-17 18:04 . 2009-01-17 18:04 <REP> d-------- c:\program files\TeamViewer
2009-01-17 10:44 . 2009-01-18 14:02 <REP> d-------- c:\program files\Spybot - Search & Destroy
2009-01-12 19:26 . 2009-01-12 19:26 <REP> d-------- d:\documents and settings\Ben\Application Data\GlarySoft
2009-01-12 19:21 . 2009-01-12 19:22 <REP> d-------- c:\program files\Glary Utilities
2009-01-11 17:39 . 2009-01-11 17:38 410,984 --a------ c:\windows\system32\deploytk.dll
2009-01-06 21:39 . 1997-04-08 20:08 299,520 --a------ c:\windows\uninst.exe
2009-01-06 19:03 . 2009-01-08 22:46 <REP> d-------- c:\program files\Steam
2009-01-06 17:04 . 2009-01-06 17:04 <REP> d-------- d:\documents and settings\Ben\WINDOWS
2009-01-06 14:27 . 2009-01-06 14:27 3,532 --a------ C:\drmHeader.bin
2009-01-04 12:22 . 2009-01-04 12:22 <REP> d-------- c:\program files\uTorrent
2009-01-03 21:51 . 2009-01-03 21:51 <REP> d-------- d:\documents and settings\Ben\Application Data\CyberLink
2008-12-27 18:14 . 2008-12-27 18:14 <REP> d-------- d:\documents and settings\Ben\Application Data\InstallShield Installation Information
2008-12-27 17:57 . 2008-12-27 17:57 <REP> d-------- c:\program files\Unreal Tournament 3
2008-12-27 17:56 . 2008-12-27 17:56 <REP> d-------- c:\windows\45235788142C44BE8A4DDDE9A84492E5.TMP
2008-12-26 15:53 . 2008-12-26 15:53 <REP> d-------- c:\program files\Bonjour
2008-12-25 21:03 . 2008-12-25 21:14 <REP> d-------- c:\program files\BeeThink SpyDetector_2.0
2008-12-25 21:03 . 2007-12-03 10:15 17,408 --a------ c:\windows\system32\drivers\nfilter.sys
2008-12-25 11:42 . 2008-04-17 13:12 107,368 --a------ c:\windows\system32\GEARAspi.dll
2008-12-25 11:42 . 2008-04-17 13:12 15,464 --a------ c:\windows\system32\drivers\GEARAspiWDM.sys
2008-12-25 11:41 . 2008-12-25 11:42 <REP> d-------- d:\documents and settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2008-12-25 11:41 . 2008-12-25 11:42 <REP> d-------- c:\program files\iTunes
2008-12-25 11:41 . 2008-12-25 11:41 <REP> d-------- c:\program files\iPod
2008-12-25 11:41 . 2008-12-25 11:41 <REP> d-------- c:\program files\Apple Software Update
2008-12-25 11:41 . 2008-11-07 14:23 32,000 --a------ c:\windows\system32\drivers\usbaapl.sys
2008-12-25 11:40 . 2008-12-25 11:41 <REP> d-------- c:\program files\Fichiers communs\Apple
2008-12-25 11:30 . 2008-12-25 11:30 <REP> d-------- c:\program files\iGnuteel
2008-12-23 17:41 . 2009-01-17 16:37 <REP> d-------- c:\program files\WarRock
2008-12-22 23:54 . 2008-12-24 02:30 <REP> d-------- c:\program files\Opera
2008-12-22 14:51 . 2008-12-22 14:52 <REP> d-------- c:\program files\Image Mender

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-01-21 17:19 --------- d-----w c:\program files\cFosSpeed
2009-01-20 12:51 --------- d-----w c:\program files\Mozilla Thunderbird
2009-01-18 15:19 --------- d-----w d:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-01-18 12:58 --------- d-----w c:\program files\Fichiers communs\Wise Installation Wizard
2009-01-17 17:42 --------- d-----w c:\program files\TeamViewer3
2009-01-17 17:07 --------- d-----w d:\documents and settings\Ben\Application Data\TeamViewer
2009-01-11 16:38 --------- d-----w c:\program files\Java
2009-01-06 13:29 --------- d-----w d:\documents and settings\Ben\Application Data\uTorrent
2008-12-27 13:00 --------- d-----w d:\documents and settings\All Users\Application Data\Microsoft Help
2008-12-25 09:28 --------- d--h--w c:\program files\InstallShield Installation Information
2008-12-24 16:30 --------- d-----w d:\documents and settings\All Users\Application Data\ma-config.com
2008-12-24 16:30 --------- d-----w c:\program files\ma-config.com
2008-12-24 01:17 --------- d-----w c:\program files\TuneUp Utilities 2008
2008-12-20 21:31 --------- d-----w c:\program files\Microsoft
2008-12-16 18:05 --------- d-----w c:\program files\Ashampoo
2008-12-16 18:00 --------- d-----w d:\documents and settings\Ben\Application Data\Ashampoo
2008-12-16 18:00 --------- d-----w d:\documents and settings\All Users\Application Data\ashampoo
2008-12-14 10:16 --------- d-----w c:\program files\Fichiers communs\Merge Modules
2008-12-14 10:15 --------- d-----w c:\program files\Microsoft Visual Studio 8
2008-12-13 23:12 --------- d-----w c:\program files\AGEIA Technologies
2008-12-13 23:10 --------- d-----w c:\program files\Microsoft Silverlight
2008-12-12 22:16 --------- d-----w c:\program files\nLite
2008-12-11 10:57 333,952 ----a-w c:\windows\system32\drivers\srv.sys
2008-12-10 17:00 --------- d-----w d:\documents and settings\Ben\Application Data\teamspeak2
2008-12-09 18:31 --------- d-----w d:\documents and settings\Ben\Application Data\DAEMON Tools
2008-12-09 18:24 --------- d-----w c:\program files\BankPerfect
2008-12-08 19:07 --------- d-----w c:\program files\Microsoft Games for Windows - LIVE
2008-12-08 17:58 --------- d-----w c:\program files\Reference Assemblies
2008-12-08 16:39 --------- d-----w c:\program files\Google
2008-12-07 21:19 138,464 ----a-w c:\windows\system32\drivers\PnkBstrK.sys
2008-12-06 21:53 --------- d-----w d:\documents and settings\Ben\Application Data\Apple Computer
2008-12-06 21:52 --------- d-----w d:\documents and settings\All Users\Application Data\Apple Computer
2008-12-06 21:50 --------- d-----w c:\program files\QuickTime
2008-12-06 15:03 --------- d-----w d:\documents and settings\Ben\Application Data\FileZilla
2008-12-05 19:39 --------- d-----w d:\documents and settings\All Users\Application Data\Avira
2008-12-05 19:39 --------- d-----w c:\program files\Avira
2008-12-02 22:11 6,209,536 ----a-w c:\windows\system32\drivers\nv4_mini.sys
2008-11-30 10:36 --------- d-----w c:\program files\DivX
2008-11-27 20:09 22,328 ----a-w d:\documents and settings\Ben\Application Data\PnkBstrK.sys
2008-11-23 18:12 --------- d-----w c:\program files\AusLogics Disk Defrag
2008-06-09 15:59 47,360 ----a-w d:\documents and settings\Benjamin\Application Data\pcouffin.sys
2008-05-07 16:49 22,328 ----a-w d:\documents and settings\Benjamin\Application Data\PnkBstrK.sys
2008-04-05 12:34 87,608 ----a-w d:\documents and settings\Benjamin\Application Data\ezpinst.exe
2008-11-17 16:53 122,880 ----a-w c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"="c:\program files\RocketDock\RocketDock.exe" [2007-09-02 495616]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"SuperCopier2.exe"="c:\program files\SuperCopier2\SuperCopier2.exe" [2006-07-07 1052672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-10 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-10 455168]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-09-29 67584]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-01-11 136600]
"OmniPass"="c:\apps\Softex\OmniPass\scureapp.exe" [2006-01-30 1978368]
"ACTIVBOARD"="c:\apps\ABoard\ABoard.exe" [2003-05-02 24576]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-12-02 13680640]
"cFosSpeed"="c:\program files\cFosSpeed\cFosSpeed.exe" [2007-10-24 854992]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
"avgnt"="c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-12-02 86016]
"High Definition Audio Property Page Shortcut"="HDAShCut.exe" [2005-01-07 c:\windows\system32\HdAShCut.exe]
"RTHDCPL"="RTHDCPL.EXE" [2005-12-09 c:\windows\RTHDCPL.exe]
"nwiz"="nwiz.exe" [2008-12-02 c:\windows\system32\nwiz.exe]
"PD0630 STISvc"="P0630Pin.dll" [2005-06-05 c:\windows\system32\P0630Pin.dll]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

d:\documents and settings\Ben\Menu D‚marrer\Programmes\D‚marrage\
hamachi.lnk - c:\program files\Hamachi\hamachi.exe [2009-01-20 624416]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"MemCheckBoxInRunDlg"= 1 (0x1)
"NoSMBalloonTip"= 1 (0x1)
"NoWelcomeScreen"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\OPXPGina]
2006-01-30 07:53 49152 c:\apps\Softex\OmniPass\OPXPGina.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.dvacm"= c:\progra~1\FICHIE~1\ULEADS~1\Vio\Dvacm.acm
"msacm.mpegacm"= c:\progra~1\FICHIE~1\ULEADS~1\MPEG\mpegacm.acm
"msacm.ulmp3acm"= c:\progra~1\FICHIE~1\ULEADS~1\MPEG\ulmp3acm.acm

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DetectorApp]
--a------ 2005-10-20 05:15 102400 c:\program files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]
--a------ 2008-11-17 17:53 30192 c:\program files\Google\Google Desktop Search\GoogleDesktop.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
--a------ 2008-11-20 13:20 290088 c:\program files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
--a------ 2008-11-19 18:04 68856 c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UnlockerAssistant]
--a------ 2008-05-02 05:15 15872 c:\program files\Unlocker\UnlockerAssistant.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"MSSQL$SQLEXPRESS"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"DisablePagingExecutive"=dword:00000001
"SecondLevelDataCache"=dword:00000200

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%ProgramFiles%\\AOL 9.0\\aol.exe"=
"%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\logo_ubi.exe"=
"%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\pandora.exe"=
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\SightSpeed\\SightSpeed.exe"=
"c:\\Program Files\\MultiProxy\\MProxy.exe"=
"d:\\Documents and Settings\\All Users\\Application Data\\NexonUS\\NGM\\NGM.exe"=
"d:\\Documents and Settings\\All Users\\Application Data\\NexonEU\\NGM\\NGM.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\TeamViewer3\\TeamViewer.exe"=
"d:\\rockstar social club\\Rockstar Games Social Club\\RGSCLauncher.exe"=
"d:\\Rockstar Game\\Grand Theft Auto IV\\GTAIV.exe"=
"d:\\Rockstar Game\\Grand Theft Auto IV\\LaunchGTAIV.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"d:\\call of duty\\iw3mp.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Unreal Tournament 3\\Binaries\\UT3.exe"=
"d:\\Documents and Settings\\Ben\\Mes documents\\freezer.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"d:\\dune\\DUNE2000.DAT"=

R0 tffsport;M-Systems DiskOnChip 2000;c:\windows\system32\drivers\tffsport.sys [2008-09-22 149376]
R3 3xHybrid;3xHybrid service;c:\windows\system32\drivers\3xHybrid.sys [2008-09-20 825600]
R3 P0630VID;Creative WebCam Live!;c:\windows\system32\drivers\P0630Vid.sys [2008-09-20 91841]
R3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\drivers\teamviewervpn.sys [2008-01-07 25088]
R3 X10Hid;X10 Hid Device;c:\windows\system32\drivers\x10hid.sys [2008-09-20 7040]
R4 TeamViewer4;TeamViewer 4;c:\program files\TeamViewer\Version4\TeamViewer_Service.exe [2009-01-08 185640]
S3 cpuz131;cpuz131;\??\d:\docume~1\Ben\LOCALS~1\Temp\cpuz131\cpuz_x32.sys --> d:\docume~1\Ben\LOCALS~1\Temp\cpuz131\cpuz_x32.sys [?]
S3 getPlus(R) Helper;getPlus(R) Helper;c:\program files\NOS\bin\getPlus_HelperSvc.exe [2008-09-24 33752]
S3 GoogleDesktopManager-092308-165331;Google Desktop Manager 5.8.809.23506;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2008-11-17 30192]
S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2008-12-19 195752]
S4 msvsmon80;Débogueur distant Visual Studio 2005;c:\program files\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x86\msvsmon.exe [2006-12-02 2805000]

--- Autres Services/Pilotes en mémoire ---

*Deregistered* - mchInjDrv

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{79976a30-e3cd-11dd-b039-0016e61fb21c}]
\Shell\AutoRun\command - L:\start.exe
\Shell\FramaKey\command - L:\start.exe
.
Contenu du dossier 'Tâches planifiées'

2009-01-16 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]

2009-01-20 c:\windows\Tasks\Extension de garantie.job
- c:\apps\SMP\PBCARNOT.EXE [2005-11-09 12:55]

2009-01-21 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2008-12-29 12:51]

2009-01-16 c:\windows\Tasks\Maintenance en 1 clic.job
- c:\program files\TuneUp Utilities 2008\OneClick.exe [2008-06-20 09:23]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/
uInternet Settings,ProxyServer = 131.246.191.42:3124
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://www.google.fr/keyword/%s
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
FF - ProfilePath - d:\documents and settings\Ben\Application Data\Mozilla\Firefox\Profiles\4blpqd47.default\
FF - prefs.js: browser.startup.homepage - www.google.fr
FF - component: c:\program files\Mozilla Firefox\components\GoogleDesktopMozilla.dll
FF - plugin: c:\program files\ma-config.com\nphardwaredetection.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
FF - plugin: d:\documents and settings\All Users\Application Data\NexonEU\NGM\npNxGameeu.dll
FF - plugin: d:\documents and settings\All Users\Application Data\NexonUS\NGM\npNxGameUS.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-21 18:19:22
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\mchInjDrv]
"ImagePath"="\??\d:\docume~1\Ben\LOCALS~1\Temp\mc23.tmp"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_USERS\S-1-5-21-1800410295-3937380895-3126607305-1005\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:f3,ce,c3,e3,3b,bf,dd,1f,27,bf,8c,d0,2c,3a,14,d5,32,14,5d,ce,ab,0e,52,
c4,5b,23,ad,70,c9,6b,6c,38,e0,a3,cb,cf,ce,60,0c,04,e1,21,87,53,c3,8b,92,ac,\
"??"=hex:a8,c3,5e,b4,6f,74,72,43,a3,7a,bd,8e,7d,f8,66,71

[HKEY_USERS\S-1-5-21-1800410295-3937380895-3126607305-1005\Software\SecuROM\License information*]
"datasecu"=hex:f9,9b,ae,83,03,6c,0f,79,96,6f,25,e4,0c,9b,b2,bd,0a,69,22,82,b7,
f6,e7,b1,73,78,9d,0b,3d,f1,77,6d,47,9a,d5,af,50,9f,69,77,17,42,77,8b,65,b8,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(1288)
c:\apps\Softex\OmniPass\opxpgina.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\Avira\AntiVir PersonalEdition Classic\sched.exe
c:\program files\Avira\AntiVir PersonalEdition Classic\avguard.exe
c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\cFosSpeed\spd.exe
c:\windows\ehome\ehrecvr.exe
c:\windows\ehome\ehSched.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\nvsvc32.exe
c:\apps\Softex\OmniPass\OmniServ.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe
c:\program files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
c:\program files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
c:\program files\Common Files\X10\Common\X10nets.exe
c:\windows\ehome\mcrdsvc.exe
c:\windows\system32\dllhost.exe
c:\apps\Softex\OmniPass\OPXPApp.exe
c:\windows\system32\rundll32.exe
c:\apps\ABOARD\AOSD.EXE
c:\windows\system32\rundll32.exe
c:\windows\ehome\ehmsas.exe
.
**************************************************************************
.
Heure de fin: 2009-01-21 18:22:23 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-01-21 17:22:19

Avant-CF: 4 338 909 184 octets libres
Après-CF: 4,207,366,144 octets libres

294 --- E O F --- 2009-01-14 17:30:03

Salut fire24


- Clique sur le menu démarrer/Exécuter, tape notepad à l’invite de commande et OK.

- Copie/colle ce qui est en citation ci-dessous dans le Bloc-Notes :



- Enregistre ce fichier sur le bureau (Impératif)

-Nom du fichier : CFScript.txt
-Type du fichier : tous les fichiers

- Clique sur Enregistrer et quitte le Bloc Notes

Important Désactive ton Antivirus et antispyware avant de faire le glisser/déposer

- Fait un glisser/déposer de ce fichier CFScript sur le fichier ComboFix.exe sur le bureau, comme sur cette capture (l’icône est un lion) :



* Patiente le temps du scan. Le bureau va disparaître à plusieurs reprises: c'est normal!
Ne touche à rien tant que le scan n'est pas terminé.
* Une fois le scan achevé, un rapport va s'afficher: poste son contenu.
* Si le fichier ne s'ouvre pas, il se trouve ici > C:\ ComboFix.txt



@++

voici le log

ComboFix 09-01-20.05 - Ben 2009-01-22 17:14:24.2 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.2046.1512 [GMT 1:00]
Lancé depuis: D:\Documents and Settings\Ben\Bureau\ComboFix.exe
Commutateurs utilisés :: D:\Documents and Settings\Ben\Bureau\CFScript.txt.txt
AV: Avira AntiVir PersonalEdition Classic *On-access scanning disabled* (Updated)
* Un nouveau point de restauration a été créé
.
Les fichiers ci-dessous ont été désactivés pendant l'exécution:
C:\Program Files\SuperCopier2\SC2Hook.dll


((((((((((((((((((((((((((((( Fichiers créés du 2008-12-22 au 2009-01-22 ))))))))))))))))))))))))))))))))))))
.

2009-01-20 14:24 . 2009-01-22 17:11 <REP> d-------- D:\Documents and Settings\Ben\Application Data\Hamachi
2009-01-20 14:23 . 2009-01-20 14:24 <REP> d-------- C:\Program Files\Hamachi
2009-01-20 14:23 . 2009-01-20 14:23 25,280 --a------ C:\WINDOWS\system32\drivers\hamachi.sys
2009-01-20 13:59 . 2009-01-20 13:59 <REP> d-------- C:\Wbanq
2009-01-20 13:49 . 2009-01-20 13:50 <REP> d-------- C:\rsit
2009-01-19 17:44 . 2009-01-22 17:17 <REP> d-------- C:\Program Files\SuperCopier2
2009-01-18 16:41 . 2009-01-18 16:41 720 --a------ C:\WINDOWS\system32\history.aaw
2009-01-18 16:40 . 2009-01-18 16:41 <REP> d-------- C:\WINDOWS\system32\logs
2009-01-18 16:40 . 2009-01-18 16:41 3,616 --a------ C:\WINDOWS\system32\settings.aaw
2009-01-18 13:58 . 2009-01-18 13:58 <REP> d-------- C:\Program Files\Lavasoft
2009-01-18 13:25 . 2009-01-18 13:25 <REP> d-------- D:\Documents and Settings\LocalService\Application Data\TeamViewer
2009-01-17 18:04 . 2009-01-17 18:04 <REP> d-------- C:\Program Files\TeamViewer
2009-01-17 10:44 . 2009-01-18 14:02 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
2009-01-12 19:26 . 2009-01-12 19:26 <REP> d-------- D:\Documents and Settings\Ben\Application Data\GlarySoft
2009-01-12 19:21 . 2009-01-12 19:22 <REP> d-------- C:\Program Files\Glary Utilities
2009-01-11 17:39 . 2009-01-11 17:38 410,984 --a------ C:\WINDOWS\system32\deploytk.dll
2009-01-06 21:39 . 1997-04-08 20:08 299,520 --a------ C:\WINDOWS\uninst.exe
2009-01-06 19:03 . 2009-01-08 22:46 <REP> d-------- C:\Program Files\Steam
2009-01-06 17:04 . 2009-01-06 17:04 <REP> d-------- D:\Documents and Settings\Ben\WINDOWS
2009-01-06 14:27 . 2009-01-06 14:27 3,532 --a------ C:\drmHeader.bin
2009-01-04 12:22 . 2009-01-04 12:22 <REP> d-------- C:\Program Files\uTorrent
2009-01-03 21:51 . 2009-01-03 21:51 <REP> d-------- D:\Documents and Settings\Ben\Application Data\CyberLink
2008-12-27 18:14 . 2008-12-27 18:14 <REP> d-------- D:\Documents and Settings\Ben\Application Data\InstallShield Installation Information
2008-12-27 17:57 . 2008-12-27 17:57 <REP> d-------- C:\Program Files\Unreal Tournament 3
2008-12-27 17:56 . 2008-12-27 17:56 <REP> d-------- C:\WINDOWS\45235788142C44BE8A4DDDE9A84492E5.TMP
2008-12-26 15:53 . 2008-12-26 15:53 <REP> d-------- C:\Program Files\Bonjour
2008-12-25 21:03 . 2008-12-25 21:14 <REP> d-------- C:\Program Files\BeeThink SpyDetector_2.0
2008-12-25 21:03 . 2007-12-03 10:15 17,408 --a------ C:\WINDOWS\system32\drivers\nfilter.sys
2008-12-25 11:42 . 2008-04-17 13:12 107,368 --a------ C:\WINDOWS\system32\GEARAspi.dll
2008-12-25 11:42 . 2008-04-17 13:12 15,464 --a------ C:\WINDOWS\system32\drivers\GEARAspiWDM.sys
2008-12-25 11:41 . 2008-12-25 11:42 <REP> d-------- D:\Documents and Settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2008-12-25 11:41 . 2008-12-25 11:42 <REP> d-------- C:\Program Files\iTunes
2008-12-25 11:41 . 2008-12-25 11:41 <REP> d-------- C:\Program Files\iPod
2008-12-25 11:41 . 2008-12-25 11:41 <REP> d-------- C:\Program Files\Apple Software Update
2008-12-25 11:41 . 2008-11-07 14:23 32,000 --a------ C:\WINDOWS\system32\drivers\usbaapl.sys
2008-12-25 11:40 . 2008-12-25 11:41 <REP> d-------- C:\Program Files\Fichiers communs\Apple
2008-12-25 11:30 . 2008-12-25 11:30 <REP> d-------- C:\Program Files\iGnuteel
2008-12-23 17:41 . 2009-01-17 16:37 <REP> d-------- C:\Program Files\WarRock
2008-12-22 23:54 . 2008-12-24 02:30 <REP> d-------- C:\Program Files\Opera
2008-12-22 14:51 . 2008-12-22 14:52 <REP> d-------- C:\Program Files\Image Mender

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-01-22 16:18 --------- d-----w C:\Program Files\cFosSpeed
2009-01-21 17:24 --------- d-----w C:\Program Files\Mozilla Thunderbird
2009-01-18 15:19 --------- d-----w D:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-01-18 12:58 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard
2009-01-17 17:42 --------- d-----w C:\Program Files\TeamViewer3
2009-01-17 17:07 --------- d-----w D:\Documents and Settings\Ben\Application Data\TeamViewer
2009-01-11 16:38 --------- d-----w C:\Program Files\Java
2009-01-06 13:29 --------- d-----w D:\Documents and Settings\Ben\Application Data\uTorrent
2008-12-27 13:00 --------- d-----w D:\Documents and Settings\All Users\Application Data\Microsoft Help
2008-12-25 09:28 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-12-24 16:30 --------- d-----w D:\Documents and Settings\All Users\Application Data\ma-config.com
2008-12-24 16:30 --------- d-----w C:\Program Files\ma-config.com
2008-12-24 01:17 --------- d-----w C:\Program Files\TuneUp Utilities 2008
2008-12-20 21:31 --------- d-----w C:\Program Files\Microsoft
2008-12-16 18:05 --------- d-----w C:\Program Files\Ashampoo
2008-12-16 18:00 --------- d-----w D:\Documents and Settings\Ben\Application Data\Ashampoo
2008-12-16 18:00 --------- d-----w D:\Documents and Settings\All Users\Application Data\ashampoo
2008-12-14 10:16 --------- d-----w C:\Program Files\Fichiers communs\Merge Modules
2008-12-14 10:15 --------- d-----w C:\Program Files\Microsoft Visual Studio 8
2008-12-13 23:12 --------- d-----w C:\Program Files\AGEIA Technologies
2008-12-13 23:10 --------- d-----w C:\Program Files\Microsoft Silverlight
2008-12-12 22:16 --------- d-----w C:\Program Files\nLite
2008-12-11 10:57 333,952 ----a-w C:\WINDOWS\system32\drivers\srv.sys
2008-12-10 17:00 --------- d-----w D:\Documents and Settings\Ben\Application Data\teamspeak2
2008-12-09 18:31 --------- d-----w D:\Documents and Settings\Ben\Application Data\DAEMON Tools
2008-12-09 18:24 --------- d-----w C:\Program Files\BankPerfect
2008-12-08 19:07 --------- d-----w C:\Program Files\Microsoft Games for Windows - LIVE
2008-12-08 17:58 --------- d-----w C:\Program Files\Reference Assemblies
2008-12-08 16:39 --------- d-----w C:\Program Files\Google
2008-12-07 21:19 138,464 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys
2008-12-06 21:53 --------- d-----w D:\Documents and Settings\Ben\Application Data\Apple Computer
2008-12-06 21:52 --------- d-----w D:\Documents and Settings\All Users\Application Data\Apple Computer
2008-12-06 21:50 --------- d-----w C:\Program Files\QuickTime
2008-12-06 15:03 --------- d-----w D:\Documents and Settings\Ben\Application Data\FileZilla
2008-12-05 19:39 --------- d-----w D:\Documents and Settings\All Users\Application Data\Avira
2008-12-05 19:39 --------- d-----w C:\Program Files\Avira
2008-12-02 22:11 6,209,536 ----a-w C:\WINDOWS\system32\drivers\nv4_mini.sys
2008-11-30 10:36 --------- d-----w C:\Program Files\DivX
2008-11-27 20:09 22,328 ----a-w D:\Documents and Settings\Ben\Application Data\PnkBstrK.sys
2008-11-23 18:12 --------- d-----w C:\Program Files\AusLogics Disk Defrag
2008-06-09 15:59 47,360 ----a-w D:\Documents and Settings\Benjamin\Application Data\pcouffin.sys
2008-05-07 16:49 22,328 ----a-w D:\Documents and Settings\Benjamin\Application Data\PnkBstrK.sys
2008-04-05 12:34 87,608 ----a-w D:\Documents and Settings\Benjamin\Application Data\ezpinst.exe
2008-11-17 16:53 122,880 ----a-w C:\Program Files\mozilla firefox\components\GoogleDesktopMozilla.dll
.

((((((((((((((((((((((((((((( snapshot@2009-01-21_18.21.02.40 )))))))))))))))))))))))))))))))))))))))))
.
- 2009-01-21 17:18:45 16,384 -c--a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
+ 2009-01-22 16:17:56 16,384 -c--a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
- 2009-01-21 17:18:45 32,768 -c--a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat
+ 2009-01-22 16:17:56 32,768 -c--a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat
- 2009-01-21 17:18:45 32,768 -c--a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2009-01-22 16:17:56 32,768 -c--a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2009-01-22 16:17:48 16,384 ----atw C:\WINDOWS\temp\Perflib_Perfdata_424.dat
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"="C:\Program Files\RocketDock\RocketDock.exe" [2007-09-02 12:58 495616]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 03:33 15360]
"SuperCopier2.exe"="C:\Program Files\SuperCopier2\SuperCopier2.exe" [2006-07-07 17:45 1052672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-10 13:00 455168]
"PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-10 13:00 455168]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2005-09-29 13:01 67584]
"SunJavaUpdateSched"="C:\Program Files\Java\jre6\bin\jusched.exe" [2009-01-11 17:38 136600]
"OmniPass"="C:\Apps\Softex\OmniPass\scureapp.exe" [2006-01-30 08:56 1978368]
"ACTIVBOARD"="c:\apps\ABoard\ABoard.exe" [2003-05-02 10:31 24576]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2008-12-02 23:11 13680640]
"cFosSpeed"="C:\Program Files\cFosSpeed\cFosSpeed.exe" [2007-10-24 14:24 854992]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 01:38 34672]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 13:28 266497]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2008-12-02 23:11 86016]
"High Definition Audio Property Page Shortcut"="HDAShCut.exe" [2005-01-07 16:07 61952 C:\WINDOWS\system32\HdAShCut.exe]
"RTHDCPL"="RTHDCPL.EXE" [2005-12-09 15:49 15691264 C:\WINDOWS\RTHDCPL.exe]
"nwiz"="nwiz.exe" [2008-12-02 23:11 1657376 C:\WINDOWS\system32\nwiz.exe]
"PD0630 STISvc"="P0630Pin.dll" [2005-06-05 18:01 36864 C:\WINDOWS\system32\P0630Pin.dll]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 03:33 15360]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"MemCheckBoxInRunDlg"= 1 (0x1)
"NoSMBalloonTip"= 1 (0x1)
"NoWelcomeScreen"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\OPXPGina]
2006-01-30 07:53 49152 C:\APPS\Softex\OmniPass\OPXPGina.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.dvacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\Vio\Dvacm.acm
"msacm.mpegacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\MPEG\mpegacm.acm
"msacm.ulmp3acm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\MPEG\ulmp3acm.acm

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DetectorApp]
--a------ 2005-10-20 05:15 102400 C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]
--a------ 2008-11-17 17:53 30192 C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
--a------ 2008-11-20 13:20 290088 C:\Program Files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
--a------ 2008-11-19 18:04 68856 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UnlockerAssistant]
--a------ 2008-05-02 05:15 15872 C:\Program Files\Unlocker\UnlockerAssistant.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"MSSQL$SQLEXPRESS"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" -atboottime

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"DisablePagingExecutive"=dword:00000001
"SecondLevelDataCache"=dword:00000200

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%ProgramFiles%\\AOL 9.0\\aol.exe"=
"%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\logo_ubi.exe"=
"%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\pandora.exe"=
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"C:\\Program Files\\SightSpeed\\SightSpeed.exe"=
"C:\\Program Files\\MultiProxy\\MProxy.exe"=
"D:\\Documents and Settings\\All Users\\Application Data\\NexonUS\\NGM\\NGM.exe"=
"D:\\Documents and Settings\\All Users\\Application Data\\NexonEU\\NGM\\NGM.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\WINDOWS\\system32\\PnkBstrA.exe"=
"C:\\WINDOWS\\system32\\PnkBstrB.exe"=
"C:\\Program Files\\TeamViewer3\\TeamViewer.exe"=
"D:\\rockstar social club\\Rockstar Games Social Club\\RGSCLauncher.exe"=
"D:\\Rockstar Game\\Grand Theft Auto IV\\GTAIV.exe"=
"D:\\Rockstar Game\\Grand Theft Auto IV\\LaunchGTAIV.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"D:\\call of duty\\iw3mp.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"C:\\Program Files\\Unreal Tournament 3\\Binaries\\UT3.exe"=
"D:\\Documents and Settings\\Ben\\Mes documents\\freezer.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
"D:\\dune\\DUNE2000.DAT"=

R0 tffsport;M-Systems DiskOnChip 2000;C:\WINDOWS\system32\drivers\tffsport.sys [2008-09-22 18:31:42 149376]
R3 3xHybrid;3xHybrid service;C:\WINDOWS\system32\drivers\3xHybrid.sys [2008-09-20 11:45:26 825600]
R3 P0630VID;Creative WebCam Live!;C:\WINDOWS\system32\drivers\P0630Vid.sys [2008-09-20 20:37:22 91841]
R3 teamviewervpn;TeamViewer VPN Adapter;C:\WINDOWS\system32\drivers\teamviewervpn.sys [2008-01-07 09:37:36 25088]
R3 X10Hid;X10 Hid Device;C:\WINDOWS\system32\drivers\x10hid.sys [2008-09-20 11:45:32 7040]
R4 TeamViewer4;TeamViewer 4;C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe [2009-01-08 10:43:52 185640]
S3 cpuz131;cpuz131;\??\D:\DOCUME~1\Ben\LOCALS~1\Temp\cpuz131\cpuz_x32.sys --> D:\DOCUME~1\Ben\LOCALS~1\Temp\cpuz131\cpuz_x32.sys [?]
S3 getPlus(R) Helper;getPlus(R) Helper;C:\Program Files\NOS\bin\getPlus_HelperSvc.exe [2008-09-24 17:00:35 33752]
S3 GoogleDesktopManager-092308-165331;Google Desktop Manager 5.8.809.23506;C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2008-11-17 17:53:33 30192]
S3 maconfservice;Ma-Config Service;C:\Program Files\ma-config.com\maconfservice.exe [2008-12-19 16:54:10 195752]
S4 msvsmon80;Débogueur distant Visual Studio 2005;C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x86\msvsmon.exe [2006-12-02 06:28:10 2805000]

--- Autres Services/Pilotes en mémoire ---

*Deregistered* - mchInjDrv

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{79976a30-e3cd-11dd-b039-0016e61fb21c}]
\Shell\AutoRun\command - L:\start.exe
\Shell\FramaKey\command - L:\start.exe
.
Contenu du dossier 'Tâches planifiées'

2009-01-16 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]

2009-01-21 C:\WINDOWS\Tasks\Extension de garantie.job
- C:\APPS\SMP\PBCARNOT.EXE [2005-11-09 12:55]

2009-01-22 C:\WINDOWS\Tasks\GlaryInitialize.job
- C:\Program Files\Glary Utilities\initialize.exe [2008-12-29 12:51]

2009-01-16 C:\WINDOWS\Tasks\Maintenance en 1 clic.job
- C:\Program Files\TuneUp Utilities 2008\OneClick.exe [2008-06-20 09:23]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/
uInternet Settings,ProxyServer = 131.246.191.42:3124
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://www.google.fr/keyword/%s
IE: E&xporter vers Microsoft Excel - C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
FF - ProfilePath - D:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\4blpqd47.default\
FF - prefs.js: browser.startup.homepage - www.google.fr
FF - component: C:\Program Files\Mozilla Firefox\components\GoogleDesktopMozilla.dll
FF - plugin: C:\Program Files\ma-config.com\nphardwaredetection.dll
FF - plugin: C:\Program Files\Microsoft\Office Live\npOLW.dll
FF - plugin: C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: C:\Program Files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
FF - plugin: D:\Documents and Settings\All Users\Application Data\NexonEU\NGM\npNxGameeu.dll
FF - plugin: D:\Documents and Settings\All Users\Application Data\NexonUS\NGM\npNxGameUS.dll
.

6 plantage depuis de soir 18h30

Salut fire24



Moi être devin peut-être, donne plus de détail de ce que tu fais quand ça plante.


-Télécharge et installe MalwareByte's Anti-Malware
http://www.malwarebytes.org/mbam/program/mbam-setup.exe

- Mets le à jour

---

- Redémarre en mode sans échec :

Au redémarrage de ton PC tapote sur la touche F8 ou F5, sur l'écran suivant déplace toi avec les flèches de direction et choisis Mode sans échec. Choisis ta session habituelle et non la session Administrateur

---

- Double clique sur le raccourci de MalwareByte's Anti-Malware qui est sur le bureau.
- Sélectionne Exécuter un examen complet si ce n'est pas déjà fait
- clique sur Rechercher

- Une fois le scan terminé, une fenêtre s'ouvre, clique sur sur Ok

- Si MalwareByte's n'a rien détecté, clique sur Ok Un rapport va apparaître ferme-le.

- Si MalwareByte's a détecté des infections, clique sur Afficher les résultats ensuite sur Supprimer la sélection

- Enregistre le rapport sur ton Bureau comme cela il sera plus facile à retrouver, poste ensuite ce rapport.

Note : Si MalwareByte's a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok

Tutoriel pour MalwareByte's ici :
http://www.malekal.com/tutorial_MalwareBytes_AntiMalware.php


@++

bon ! le scan viens juste de se terminer. près de 6h de scann OMG

voici le résultat, je ne suis pas sûr que cette infection soit la cause du problème. Encore 3 bugs avant que je lance le scan. en bug, j'entend système bloqué, plus rien ne répond a part l'arrêt en restant appuyé sur le bouton

Malwarebytes' Anti-Malware 1.33
Version de la base de données: 1683
Windows 5.1.2600 Service Pack 3

2009-01-24 00:02:23
mbam-log-2009-01-24 (00-02-23).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 230795
Temps écoulé: 5 hour(s), 53 minute(s), 18 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5428486-50a0-4a02-9d20-520b59a9f9b3} (Adware.Shopping.Report) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Salut fire24


As-tu regardé pour un dépoussiérage de l'intérieur de ton ordinateur?
La chaleur est l'ennemie des composants électroniques. Un excès de poussière nuit à la bonne ventilation des composants.
Surchauffe = Plantage


@++

biensûr
mon pc est très propre, je retire la poussière environ 1 fois par mois.
ma version d'everest me signale que mon cpu est a 16°, mon hdd à 30 et ma graph a 48.
je trouve la température du cpu très bizarre (c'est un pentium d915) mais à part sa rien a signaler avec la chaleur.

Salut fire24


Télécharge DiagHelp sur le bureau ici :

http://www.malekal.com/download/DiagHelp.zip

Lire et suivre attentivement le tutoriel ici :

http://www.malekal.com/DiagHelp/DiagHelp.php


- Choisi l'option 1 (Lister Fichiers), enregistre-le sur le bureau.

---

Utilise ensuite cjoint.com http://cjoint.com/ pour poster en lien ton rapport

- Clique sur Parcourir pour aller chercher le rapport
- Clique sur Ouvrir ensuite sur Créer le lien Cjoint

- Fais un copier/coller du lien qui est devant Le lien a été créé: dans ta prochaine réponse.


@++

il me semble que c'est ce fichier.
http://cjoint.com/?bBq0Wfg2cO

1 bug avant que je commence la procédure, 1 autre pendant.

Salut fire24


Télécharge Toolbar-S&D (de la Team IDN) sur ton Bureau.

http://eric.71.mespages.googlepages.com/ToolBarSD.exe

- Double clique l’icône ToolBar S&D sur le bureau
- Choisi F pour français et valide
- Au menu principal de ToolBar S&D choisi l’option 1 (Recherche)
- Le menu Démarrer et les icônes vont disparaîtrent, c'est normal
- La recherche s'effectue, cela peut prendre plusieurs minutes, ne touche à rien.
- Une fois l'analyse terminée, le rapport de recherche s'ouvre dans le Bloc-Note. (Dans le cas où le rapport ne s'ouvre pas, ce dernier se trouve sur C:\TB.txt)


Copier/coller le rapport dans ton prochain poste


-----


Faire un scan de ce fichier aojbqzod.SYS ici :

http://www.virustotal.com/fr/


Clique sur Parcourir et copie/colle ceci C:\WINDOWS\system32\Drivers\aojbqzod.SYS, après tu clique sur Envoyer le fichier et attendre le résultat de l’analyse.


Poste le résultat au complet

Aide : http://bibou0007.com/scans-en-ligne-f75/tutorial-sur-virustotal-t190.htm


@++

voici le premier rapport. le truc de crackwep c'est juste dans un but pédagogique (presque tout le monde utilise du wpa, donc j'essaie de trouver la clé de ma box qui est en wep ^^)

-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) D CPU 2.80GHz )
BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
USER : Ben ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Activated)
C:\ (Local Disk) - NTFS - Total:29 Go (Free:4 Go)
D:\ (Local Disk) - NTFS - Total:249 Go (Free:171 Go)
E:\ (CD or DVD)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (CD or DVD)
K:\ (USB)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 2009-01-25|18:04 )

-----------\\ Recherche de Fichiers / Dossiers ...

C:\Program Files\DAEMON Tools Toolbar
C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT
C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\components
C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\components\DTToolbarFF.dll

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="http://www.google.fr/"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"


--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

D:\DOCUME~1\Ben\Bureau\a up\Win_Keygen_Pack_Greeny_Burito.org.rar
D:\DOCUME~1\Ben\Mes documents\CrackWep
D:\DOCUME~1\Ben\Mes documents\CrackWep\!!!A LIRE!!!.txt
D:\DOCUME~1\Ben\Mes documents\CrackWep\Guide de piratage d'un reseau WIFI domestique (ou commentexploserune clef WEP) sous Windows.pdf
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\etherchange.exe
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\ethereal-setup-0.99.0.exe
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\iperf.exe
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WlanDrv
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket\atheros30112
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket\atheros421
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket\Modèle.txt
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket\atheros30112\ar5211.sys
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket\atheros30112\net5211.inf
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket\atheros30112\readme.htm
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket\atheros421\ar5211.sys
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket\atheros421\net5211.inf
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket\atheros421\readme.htm
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\airdecap.exe
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\airodump.exe
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\cygwin1.dll
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\Lang
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\logo.jpg
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\MSVCR70.DLL
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\PEEK.DLL
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\PEEK5.SYS
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\README.txt
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\Updater
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\Updater.exe
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\Updater.ini
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\WinAircrack.exe
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\wzcook.exe
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\Lang\english.ini
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\Lang\francais.ini
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\Lang\spanish.ini
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\Lang\system.ini.txt
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\Updater\Data.upd
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WlanDrv\WlanDrv.exe



1 - "C:\ToolBar SD\TB_1.txt" - 2009-01-25|18:06 - Option : [1]

-----------\\ Fin du rapport a 18:06:32.20

Pour le fichier, introuvable.

Salut fire24


Important Désactive ton Antivirus et antispyware avant le scan :
http://forum.pcastuces.com/desactiver_les_protections_residentes-f31s4.htm

- Double clique sur l’icône ToolBar S&D sur le bureau
- Choisi F pour français et valide
- Au menu principal de ToolBar S&D choisi l’option 2 (Suppression)
- Le menu démarrer et les icônes vont à nouveau disparaître.. c'est normal.
- Le nettoyage va prendre quelques minutes...
- Une fois l'opération terminée, le rapport de nettoyage s'ouvre

Copier/coller le rapport dans ton prochain poste


------


Autoriser l'affichage des fichiers et dossiers cachés :

Sur le bureau double clique sur le Poste de travail en haut clique sur Outils/Option des dossiers… clique sur l’onglet Affichage :

Maintenant tu :

Coches : Afficher les Fichiers et dossiers cachés

Décoches : Masquer les extensions dont le type est connu

Décoches : Masquer les fichiers protégés du système d'exploitation (recommandé)

Clique sur Appliquer pour valider les changements et clique sur Ok


Vérifie si le fichier n'est bien plus là :
C:\WINDOWS\system32\Drivers\aojbqzod.SYS


@++

le fichier a bel est bien disparu.

le rapport


-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) D CPU 2.80GHz )
BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
USER : Ben ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Not Activated)
C:\ (Local Disk) - NTFS - Total:29 Go (Free:4 Go)
D:\ (Local Disk) - NTFS - Total:249 Go (Free:171 Go)
E:\ (CD or DVD)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (CD or DVD)
K:\ (USB)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 2009-01-25|20:39 )

-----------\\ Recherche de Fichiers / Dossiers ...

C:\Program Files\DAEMON Tools Toolbar
C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT
C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\components
C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\components\DTToolbarFF.dll

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="http://www.google.fr/"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"


--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

D:\DOCUME~1\Ben\Bureau\a up\Win_Keygen_Pack_Greeny_Burito.org.rar
D:\DOCUME~1\Ben\Mes documents\CrackWep
D:\DOCUME~1\Ben\Mes documents\CrackWep\!!!A LIRE!!!.txt
D:\DOCUME~1\Ben\Mes documents\CrackWep\Guide de piratage d'un reseau WIFI domestique (ou commentexploserune clef WEP) sous Windows.pdf
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\etherchange.exe
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\ethereal-setup-0.99.0.exe
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\iperf.exe
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WlanDrv
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket\atheros30112
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket\atheros421
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket\Modèle.txt
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket\atheros30112\ar5211.sys
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket\atheros30112\net5211.inf
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket\atheros30112\readme.htm
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket\atheros421\ar5211.sys
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket\atheros421\net5211.inf
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket\atheros421\readme.htm
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\airdecap.exe
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\airodump.exe
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\cygwin1.dll
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\Lang
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\logo.jpg
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\MSVCR70.DLL
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\PEEK.DLL
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\PEEK5.SYS
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\README.txt
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\Updater
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\Updater.exe
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\Updater.ini
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\WinAircrack.exe
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\wzcook.exe
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\Lang\english.ini
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\Lang\francais.ini
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\Lang\spanish.ini
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\Lang\system.ini.txt
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\Updater\Data.upd
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WlanDrv\WlanDrv.exe



1 - "C:\ToolBar SD\TB_1.txt" - 2009-01-25|18:06 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 2009-01-25|20:41 - Option : [1]

-----------\\ Fin du rapport a 20:41:02.23

Salut fire24


Maintenant fais l'option 2 de ToolBar S&D, tu as refais l'option 1


@++

oups désolé
voici le bon


-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) D CPU 2.80GHz )
BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
USER : Ben ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Activated)
C:\ (Local Disk) - NTFS - Total:29 Go (Free:4 Go)
D:\ (Local Disk) - NTFS - Total:249 Go (Free:171 Go)
E:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (CD or DVD)
K:\ (USB)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 2009-01-25|22:29 )

-----------\\ SUPPRESSION

Supprime! - C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT
Supprime! - C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
Supprime! - C:\Program Files\DAEMON Tools Toolbar

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="http://www.google.fr/"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://www.msn.com/"


--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

D:\DOCUME~1\Ben\Bureau\a up\Win_Keygen_Pack_Greeny_Burito.org.rar
D:\DOCUME~1\Ben\Mes documents\CrackWep
D:\DOCUME~1\Ben\Mes documents\CrackWep\!!!A LIRE!!!.txt
D:\DOCUME~1\Ben\Mes documents\CrackWep\Guide de piratage d'un reseau WIFI domestique (ou commentexploserune clef WEP) sous Windows.pdf
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\etherchange.exe
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\ethereal-setup-0.99.0.exe
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\iperf.exe
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WlanDrv
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket\atheros30112
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket\atheros421
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket\Modèle.txt
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket\atheros30112\ar5211.sys
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket\atheros30112\net5211.inf
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket\atheros30112\readme.htm
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket\atheros421\ar5211.sys
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket\atheros421\net5211.inf
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WildPacket\atheros421\readme.htm
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\airdecap.exe
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\airodump.exe
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\cygwin1.dll
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\Lang
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\logo.jpg
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\MSVCR70.DLL
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\PEEK.DLL
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\PEEK5.SYS
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\README.txt
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\Updater
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\Updater.exe
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\Updater.ini
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\WinAircrack.exe
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\wzcook.exe
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\Lang\english.ini
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\Lang\francais.ini
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\Lang\spanish.ini
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\Lang\system.ini.txt
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\winaircrackpack\WinAircrackPack\WinAircrackPack\Updater\Data.upd
D:\DOCUME~1\Ben\Mes documents\CrackWep\Tools\WlanDrv\WlanDrv.exe



1 - "C:\ToolBar SD\TB_1.txt" - 2009-01-25|18:06 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 2009-01-25|20:41 - Option : [1]
3 - "C:\ToolBar SD\TB_3.txt" - 2009-01-25|22:31 - Option : [2]

-----------\\ Fin du rapport a 22:31:32.01


depuis presque 1 heure il n'y a pas encore eu de bug

Salut fire24


Tant mieux si cette toolbar(DAEMON Tools Toolbar) qui causait problème, on va faire un ménage des outils téléchargés pour la désinfection, télécharge Tools Cleaner sur le bureau :

http://pc-system.fr/TC/ToolsCleaner2.exe


- Double clique sur ToolsCleaner2.exe sur le bureau
- Clique sur Recherche et laisse le scan agir.
- Clique sur Suppression pour finaliser.
- Tu peux, si tu le souhaites, te servir des Options facultatives.
- Clique sur Quitter pour obtenir le rapport.
- Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).
- Si des outils restes après le passage de Tools Cleaner, tu pourras les supprimer manuellement ainsi que tous les rapports qui on été généré lors de la désinfection.


Faire un scan de vulnérabilités afin de vérifier que tes logiciels soit à jour sans failles de sécurités et mettre à jour :
http://www.malekal.com/scan_vulnerabilite.php

Faire un ménage des fichiers inutiles et de la base de registre :
http://www.malekal.com/tutorial_CCleaner.html

Après tout cela, dit moi si tu as encore des soucis.


@++

bon je ne trouve pas le rapport, mais j'ai fait le ménage ( j'utilisais déjà ccleaner et j'avais déjà utilisé toolscleaner avant que j'ai ce problème.

le problème est résolu, merci beaucoup pour ton aide et ta patience

Salut fire24


Bien de rien, je te donne quelques consignes de sécurité :

- Windows Update parfaitement à jour http://www.windowsupdate.com/ (catégories critique, Services Pack et Services Release)
- pare-feu bien paramétré
- antivirus bien paramétré et mis à jour régulièrement (quotidiennement s'il le faut) avec un scan complet régulier (journalier s'il le faut).
- une attitude prudente vis à vis de la navigation (pas de sites douteux : cracks, warez, sexe...) et vis à vis de la messagerie (fichiers joints aux messages doivent être scannés avant d'être ouverts)
- pas de téléchargement illégal, qui est le principal facteur d’infection (µTorrent, BitTorrent, eMule, Limewire, etc..) Le danger des cracks !
- une attitude vigilante (être à l'affût d'un fonctionnement inhabituel de son système)
- nettoyage hebdomadaire du système (suppression des fichiers inutiles, nettoyage de la base de registre, scandisk, defrag)
- scan hebdomadaire antispyware ( je conseil MalwareByte's Anti-Malware)
- un contrôle régulier de la console JAVA pour s'assurer qu'elle est à jour http://www.java.com/en/download/help/testvm.xml
- un scan de vulnérabilités afin de vérifier que tes logiciels soit à jour sans failles de sécurités :
http://www.malekal.com/scan_vulnerabilite.php


------ Ton infection, tu la dénonces ? :

Tu n'es pas obligé mais ce serait bien que tu prennes 5 minutes et que tu rapportes ton infection sur Malware Complaints pour condamner les auteurs.

Si tu ne la trouves pas dans la liste, poste dans Autres infections.

Aide : Comment dénoncer mon infection sur Malware Complaints.


De bonne lecture :
http://www.malekal.com/menu_windows_general.php
http://www.malekal.com/menu_windows_securite.php


Si tu considère ton problème comme résolu, édite avec le crochet ton premier poste et ajoute [résolu] dans le titre.


Bonne journée et bon surf


@++