Winifighter... pourquoi je l'ai laissé s'installer.

Bah voilà j'arrive sur le forum car un ami m'a dit que j'y trouverais surement mon bonheur.
J'explique mon problème en plein installation de logiciel un gentils logiciel est venu s'installer sur mon pc et moi bien sur j'ai accepté croyant que c'était mon logiciel, seul problème le logiciel était en faite le malware winifighter. Je l'ai vite désinstaller et j'ai essayé d'installer des spyware pour le supprimer deux problèmes, un des spyware à supprimer winifighter mais le fenêtre pop up me harcèle toujours et les autres spyware ne peuvent s'installer à cause de winifighter qui bloque les mise à jour .


Je fait donc appelle au savoir des gens qui trainent sur le forum pour m'aider à supprimer cette M....
Au faite je me sert d'un EEE PC 904 HD

Salut fix1377


On va vérifier cela, télécharge RSIT (de random/random) sur le bureau ici :
http://images.malwareremoval.com/random/RSIT.exe

- Double clique sur RSIT.exe qui est sur le bureau
- Clique sur Continue dans la fenêtre
- RSIT téléchargera HijackThis si il n’est pas présent où détecté, alors il faudra accepter la licence
- Poste le contenue des deux rapports, log.txt et info.txt(réduit dans la barre des tâches) à la fin de l’analyse

Les rapports sont dans le dossier ici C:\rsit


@++

Pour le LOG


Logfile of random's system information tool 1.06 (written by random/random)
Run by piv at 2009-07-26 19:05:41
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 21 GB (50%) free of 41 GB
Total RAM: 1015 MB (18% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:06:10, on 26/07/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\EeePC\ACPI\AsTray.exe
C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe
C:\Program Files\EeePC\ACPI\AsEPCMon.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\igfxext.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\puncxyfv.exe
C:\documents and settings\piv\local settings\application data\icuko.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\Program Files\OLYMPUS\DeviceDetector\DevDtct2.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Asus\EeePC\Super Hybrid Engine\SuperHybridEngine.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Sunbelt Software\CounterSpy\SBAMSvc.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Program Files\Sunbelt Software\CounterSpy\SBAMTray.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Documents and Settings\piv\Bureau\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\piv.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60341
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60341
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60341
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60341
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://eeepc.asus.com/global
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll (file missing)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {66886C4D-B307-4ECA-A228-52CA9B9851A4} - (no file)
O3 - Toolbar: Barre d'outils &Crawler - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll (file missing)
O4 - HKLM\..\Run: [AsusTray] C:\Program Files\EeePC\ACPI\AsTray.exe
O4 - HKLM\..\Run: [AsusACPIServer] C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe
O4 - HKLM\..\Run: [AsusEPCMonitor] C:\Program Files\EeePC\ACPI\AsEPCMon.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [SpyHunter] C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter.exe
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SBAMTray] C:\Program Files\Sunbelt Software\CounterSpy\SBAMTray.exe
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe -NoStart
O4 - HKCU\..\Run: [puncxyfv.exe] C:\WINDOWS\system32\puncxyfv.exe
O4 - HKCU\..\Run: [icuko] "c:\documents and settings\piv\local settings\application data\icuko.exe" icuko
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: Device Detector 3.lnk = C:\Program Files\OLYMPUS\DeviceDetector\DevDtct2.exe
O4 - Global Startup: SuperHybridEngine.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.(...)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{6BE20AFD-2C56-4896-8569-2663BD9FA80A}: NameServer = 85.255.112.144,85.255.112.5
O17 - HKLM\System\CCS\Services\Tcpip\..\{A7C6A3CF-D445-49C0-B22C-A38368201D8F}: NameServer = 85.255.112.144,85.255.112.5
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.112.144,85.255.112.5
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.112.144,85.255.112.5
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: NameServer = 85.255.112.144,85.255.112.5
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.112.144,85.255.112.5
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll (file missing)
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: CounterSpy Antispyware (SBAMSvc) - Sunbelt Software - C:\Program Files\Sunbelt Software\CounterSpy\SBAMSvc.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

--
End of file - 12289 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\{5B57CF47-0BFA-43c6-ACF9-3B3653DCADBA}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
C:\PROGRA~1\Crawler\Toolbar\ctbr.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre6\bin\ssv.dll [2009-03-09 320920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-09 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-03-09 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{66886C4D-B307-4ECA-A228-52CA9B9851A4}
{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - Barre d'outils &Crawler - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AsusTray"=C:\Program Files\EeePC\ACPI\AsTray.exe [2008-06-03 98304]
"AsusACPIServer"=C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe [2008-06-03 479232]
"AsusEPCMonitor"=C:\Program Files\EeePC\ACPI\AsEPCMon.exe [2008-05-21 94208]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-09-24 104984]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-09-24 121368]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-09-24 100888]
"ISUSPM Startup"=C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe [2004-04-17 196608]
"ISUSScheduler"=C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe [2004-04-13 69632]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-07-16 16806400]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2008-06-19 57344]
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2009-03-15 198160]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-09 148888]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-05-26 413696]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-07-13 292128]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2009-07-01 37888]
"SpyHunter"=C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter.exe []
"ISTray"=C:\Program Files\Spyware Doctor\pctsTray.exe [2008-12-08 1173384]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-02-05 81000]
"SBAMTray"=C:\Program Files\Sunbelt Software\CounterSpy\SBAMTray.exe [2009-06-10 685352]
"SpywareTerminator"=C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2009-07-25 2173440]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-13 1695232]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2007-10-18 5724184]
"OM_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe [2006-05-16 57344]
"puncxyfv.exe"=C:\WINDOWS\system32\puncxyfv.exe [2009-07-25 360448]
"icuko"=c:\documents and settings\piv\local settings\application data\icuko.exe [2009-07-25 231936]
"SpywareTerminatorUpdate"=C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2009-07-25 3055616]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
C:\WINDOWS\ALCMTR.EXE [2008-06-19 57344]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcWzrd]
C:\WINDOWS\ALCWZRD.EXE [2008-06-19 2808832]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2007-10-18 5724184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
C:\WINDOWS\SOUNDMAN.EXE [2008-06-18 77824]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Device Detector 3.lnk - C:\Program Files\OLYMPUS\DeviceDetector\DevDtct2.exe
SuperHybridEngine.lnk - C:\Program Files\Asus\EeePC\Super Hybrid Engine\SuperHybridEngine.exe

C:\Documents and Settings\piv\Menu Démarrer\Programmes\Démarrage
OpenOffice.org 3.0.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2006-10-10 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBAMSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SBAMSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sdauxservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sdcoreservice]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\K-Lite Codec Pack\Filters\ac3config.exe"="C:\Program Files\K-Lite Codec Pack\Filters\ac3config.exe:*:Enabled:AC3Filter"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\Google\Google Talk\googletalk.exe"="C:\Program Files\Google\Google Talk\googletalk.exe:*:Enabled:Google Talk"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\Program Files\Vuze\Azureus.exe"="C:\Program Files\Vuze\Azureus.exe:*:Enabled:Azureus"
"C:\Documents and Settings\piv\Bureau\freezer v1.4 fr\freezer v1.4 fr\freezer.exe"="C:\Documents and Settings\piv\Bureau\freezer v1.4 fr\freezer v1.4 fr\freezer.exe:*:Enabled:freezer"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{08b9dab6-e348-11dd-9e28-0015afeba779}]
shell\AutoRun\command - F:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{78e63a16-d11d-11dd-9e08-0015afeba779}]
shell\Auto\command - Start.exe
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Start.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ce484389-399b-11de-9eab-0015afeba779}]
shell\AutoRun\command - xih9.cmd
shell\explore\command - xih9.cmd
shell\open\command - xih9.cmd


======List of files/folders created in the last 1 months======

2011-07-23 12:08:04 ----A---- C:\WINDOWS\system32\ChCfg.exe
2011-07-23 12:07:33 ----AC---- C:\WINDOWS\SoundMan.exe
2011-07-23 12:07:32 ----AC---- C:\WINDOWS\SkyTel.exe
2011-07-23 12:07:32 ----A---- C:\WINDOWS\RtlUpd.exe
2011-07-23 12:07:31 ----AC---- C:\WINDOWS\RTLCPL.exe
2011-07-23 12:07:27 ----A---- C:\WINDOWS\RTHDCPL.exe
2011-07-23 12:07:26 ----A---- C:\WINDOWS\MicCal.exe
2011-07-23 12:07:20 ----AC---- C:\WINDOWS\alcwzrd.exe
2011-07-23 12:07:19 ----D---- C:\Program Files\Realtek
2011-07-23 12:07:19 ----A---- C:\WINDOWS\Alcmtr.exe
2011-07-23 12:07:17 ----A---- C:\WINDOWS\RtlExUpd.dll
2009-12-28 20:53:38 ----A---- C:\WINDOWS\130zst9a51170.dll
2009-12-28 17:46:12 ----A---- C:\WINDOWS\system32\15512hzcktool91f.exe
2009-12-27 21:41:08 ----A---- C:\WINDOWS\system32\f5aspywaze1598.dll
2009-12-24 09:30:45 ----A---- C:\WINDOWS\system32\27769noz-a-v5rus74b.exe
2009-12-21 16:39:03 ----A---- C:\WINDOWS\55055spy99ez.dll
2009-12-18 04:26:30 ----A---- C:\WINDOWS\system32\48ef5hie9z077.dll
2009-12-18 02:00:44 ----A---- C:\WINDOWS\2957spz574.dll
2009-12-16 21:39:40 ----A---- C:\WINDOWS\system32\23785otza-v9rus290.exe
2009-12-16 00:51:25 ----A---- C:\WINDOWS\system32\724backdzo5194.exe
2009-12-03 10:42:17 ----A---- C:\WINDOWS\system32\8968trojzb5.dll
2009-11-24 10:56:36 ----A---- C:\WINDOWS\system32\d019hre5z15287.exe
2009-11-19 12:23:02 ----A---- C:\WINDOWS\126495iruz4529.dll
2009-11-13 05:56:11 ----A---- C:\WINDOWS\system32\3537not-a-vi9usfz.exe
2009-11-05 22:08:32 ----A---- C:\WINDOWS\system32\45905ddware2148z.exe
2009-11-03 12:38:48 ----A---- C:\WINDOWS\d43zhief7945.dll
2009-11-02 15:28:30 ----A---- C:\WINDOWS\28935vz5us1c5.dll
2009-10-26 04:05:36 ----A---- C:\WINDOWS\96eebzckdoor1565.exe
2009-10-07 14:29:56 ----A---- C:\WINDOWS\24227z9562b.dll
2009-10-05 23:56:47 ----A---- C:\WINDOWS\system32\275405irzs93e.exe
2009-09-28 03:28:21 ----A---- C:\WINDOWS\system32\32bc5ddwaze971.dll
2009-09-27 15:24:22 ----A---- C:\WINDOWS\30z0not-a-vi9us1e5.dll
2009-09-27 15:00:14 ----A---- C:\WINDOWS\system32\8771w5z91fb.exe
2009-09-25 02:47:47 ----A---- C:\WINDOWS\3z3fbackdo5r2849.dll
2009-09-24 20:17:59 ----A---- C:\WINDOWS\system32\32420hacktool9z5.exe
2009-09-22 22:12:02 ----A---- C:\WINDOWS\system32\14268haczto5l92a.exe
2009-09-16 11:57:18 ----A---- C:\WINDOWS\system32\8z8dow9loader5759.dll
2009-09-15 09:37:36 ----A---- C:\WINDOWS\system32\f55spywarz29559.exe
2009-09-12 11:54:05 ----A---- C:\WINDOWS\23467tr5z749.dll
2009-09-10 08:11:30 ----A---- C:\WINDOWS\4490wo9z2fb5.dll
2009-09-10 02:39:09 ----A---- C:\WINDOWS\526zth9ef137.dll
2009-09-08 18:01:48 ----A---- C:\WINDOWS\51d2thie9758z.dll
2009-09-06 22:36:06 ----A---- C:\WINDOWS\system32\310z7not-a9vir5s613.dll
2009-09-05 02:44:36 ----A---- C:\WINDOWS\system32\10559teal192z.dll
2009-08-26 03:47:26 ----A---- C:\WINDOWS\system32\40b5a9dwaze3229.exe
2009-08-25 03:17:53 ----A---- C:\WINDOWS\26531hac5tzol696.dll
2009-08-24 15:16:30 ----A---- C:\WINDOWS\system32\6720b5ckdozr879.dll
2009-08-23 13:47:10 ----A---- C:\WINDOWS\system32\9z568spy154.exe
2009-08-23 03:11:01 ----A---- C:\WINDOWS\3391vi5u9zf6.exe
2009-08-19 04:43:45 ----A---- C:\WINDOWS\system32\1z748w9r53e9.dll
2009-08-18 19:37:47 ----A---- C:\WINDOWS\95401not-az5irus46a.dll
2009-08-17 22:28:52 ----A---- C:\WINDOWS\system32\1259zacktool335.exe
2009-08-13 21:36:25 ----A---- C:\WINDOWS\system32\295z89irusd9.dll
2009-08-11 14:28:17 ----A---- C:\WINDOWS\system32\593459zambot7c7.exe
2009-08-07 20:43:39 ----A---- C:\WINDOWS\9359n5t-a-vizuse0.exe
2009-08-07 08:40:33 ----A---- C:\WINDOWS\system32\7847do5nloadez1965.dll
2009-08-01 07:57:33 ----A---- C:\WINDOWS\system32\59z3thi5f2989.exe
2009-07-27 12:22:25 ----A---- C:\WINDOWS\4067v9zu557d.dll
2009-07-25 23:48:30 ----D---- C:\Documents and Settings\piv\Application Data\Sunbelt
2009-07-25 23:47:01 ----D---- C:\Program Files\Sunbelt Software
2009-07-25 23:46:03 ----D---- C:\Documents and Settings\All Users\Application Data\Sunbelt
2009-07-25 23:45:58 ----D---- C:\Documents and Settings\piv\Application Data\Spyware Terminator
2009-07-25 23:45:40 ----D---- C:\Documents and Settings\All Users\Application Data\Spyware Terminator
2009-07-25 23:45:34 ----D---- C:\Program Files\Spyware Terminator
2009-07-25 21:02:22 ----A---- C:\WINDOWS\system32\aswBoot.exe
2009-07-25 20:08:46 ----RASH---- C:\BOOT.BAK
2009-07-25 20:05:09 ----A---- C:\WINDOWS\UPGRADE.TXT
2009-07-25 20:04:52 ----D---- C:\WINDOWS\setup.pss
2009-07-25 15:48:08 ----D---- C:\Program Files\TuneUpMedia
2009-07-25 15:47:48 ----D---- C:\Documents and Settings\piv\Application Data\TuneUpMedia
2009-07-25 15:47:41 ----D---- C:\Documents and Settings\All Users\Application Data\TuneUpMedia
2009-07-25 15:25:38 ----D---- C:\WINDOWS\Prefetch
2009-07-25 15:16:58 ----A---- C:\WINDOWS\setuplog.txt
2009-07-25 15:16:07 ----N---- C:\WINDOWS\system32\mtxparhd.dll
2009-07-25 15:16:07 ----N---- C:\WINDOWS\system32\mdmxsdk.dll
2009-07-25 15:16:07 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
2009-07-25 15:16:07 ----N---- C:\WINDOWS\system32\ativvaxx.dll
2009-07-25 15:16:07 ----N---- C:\WINDOWS\system32\ativtmxx.dll
2009-07-25 15:16:07 ----N---- C:\WINDOWS\system32\ati3duag.dll
2009-07-25 15:16:07 ----N---- C:\WINDOWS\system32\ati3d1ag.dll
2009-07-25 15:16:07 ----N---- C:\WINDOWS\system32\ati2dvag.dll
2009-07-25 15:16:07 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
2009-07-25 15:16:07 ----N---- C:\WINDOWS\system32\ati2cqag.dll
2009-07-25 15:16:06 ----N---- C:\WINDOWS\system32\slserv.exe
2009-07-25 15:16:06 ----N---- C:\WINDOWS\system32\slrundll.exe
2009-07-25 15:16:06 ----N---- C:\WINDOWS\system32\slgen.dll
2009-07-25 15:16:06 ----N---- C:\WINDOWS\system32\slextspk.dll
2009-07-25 15:16:06 ----N---- C:\WINDOWS\system32\slcoinst.dll
2009-07-25 15:16:06 ----N---- C:\WINDOWS\system32\s3gnb.dll
2009-07-25 15:16:06 ----N---- C:\WINDOWS\system32\nv4_disp.dll
2009-07-25 15:16:05 ----N---- C:\WINDOWS\slrundll.exe
2009-07-25 15:16:05 ----D---- C:\WINDOWS\system32\bits
2009-07-25 15:12:34 ----D---- C:\WINDOWS\ServicePackFiles
2009-07-25 15:11:30 ----A---- C:\WINDOWS\000001_.tmp
2009-07-25 15:08:32 ----D---- C:\WINDOWS\EHome
2009-07-25 14:41:58 ----A---- C:\WINDOWS\system32\lsdelete.exe
2009-07-25 14:29:32 ----HDC---- C:\Documents and Settings\All Users\Application Data\{EF63305C-BAD7-4144-9208-D65528260864}
2009-07-25 14:29:20 ----D---- C:\Program Files\Lavasoft
2009-07-25 14:29:20 ----D---- C:\Documents and Settings\All Users\Application Data\Lavasoft
2009-07-25 14:11:16 ----D---- C:\Program Files\VS Revo Group
2009-07-25 13:54:48 ----D---- C:\Program Files\ReWind
2009-07-25 13:34:28 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-07-25 13:34:28 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-07-25 13:22:45 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2009-07-25 13:22:41 ----D---- C:\Program Files\Fichiers communs\PC Tools
2009-07-25 13:22:34 ----D---- C:\Program Files\Spyware Doctor
2009-07-25 13:22:34 ----D---- C:\Documents and Settings\piv\Application Data\PC Tools
2009-07-25 13:22:34 ----D---- C:\Documents and Settings\All Users\Application Data\PC Tools
2009-07-25 13:18:15 ----D---- C:\Program Files\trend micro
2009-07-25 13:18:14 ----D---- C:\rsit
2009-07-25 12:26:30 ----D---- C:\WINDOWS\Minidump
2009-07-25 12:08:08 ----A---- C:\WINDOWS\system32\8844hzck9ool2e5.exe
2009-07-25 12:08:08 ----A---- C:\WINDOWS\system32\68dzth5ef9110.exe
2009-07-25 12:08:08 ----A---- C:\WINDOWS\system32\65afst9zl534.exe
2009-07-25 12:08:08 ----A---- C:\WINDOWS\system32\58b9sparsez58.dll
2009-07-25 12:08:08 ----A---- C:\WINDOWS\system32\56f9d5znloa9er143.exe
2009-07-25 12:08:08 ----A---- C:\WINDOWS\system32\4e3d5teal3090z.dll
2009-07-25 12:08:08 ----A---- C:\WINDOWS\system32\3z14wor59a9.exe
2009-07-25 12:08:08 ----A---- C:\WINDOWS\system32\3771s9ambot5z55.exe
2009-07-25 12:08:08 ----A---- C:\WINDOWS\system32\1e5zr9949.dll
2009-07-25 12:08:08 ----A---- C:\WINDOWS\system32\19fzsparse5488.exe
2009-07-25 12:08:08 ----A---- C:\WINDOWS\system32\12895tr5jz68.exe
2009-07-25 12:08:08 ----A---- C:\WINDOWS\f519ddwarz2583.dll
2009-07-25 12:08:08 ----A---- C:\WINDOWS\652c5parse25z79.exe
2009-07-25 12:08:08 ----A---- C:\WINDOWS\5zb8v9r1556.exe
2009-07-25 12:08:08 ----A---- C:\WINDOWS\59508tzoj53f.dll
2009-07-25 12:08:08 ----A---- C:\WINDOWS\45979zy590.dll
2009-07-25 12:08:08 ----A---- C:\WINDOWS\28799worm1ez5.exe
2009-07-25 12:08:08 ----A---- C:\WINDOWS\19223spambot405z.exe
2009-07-25 12:08:08 ----A---- C:\WINDOWS\18740sza5bot9d1.exe
2009-07-25 12:08:07 ----A---- C:\WINDOWS\system32\z9a5sparse3187.dll
2009-07-25 12:08:07 ----A---- C:\WINDOWS\system32\z571thief1599.dll
2009-07-25 12:08:07 ----A---- C:\WINDOWS\system32\9c93thr5zt8719.exe
2009-07-25 12:08:07 ----A---- C:\WINDOWS\system32\90evi5z22.dll
2009-07-25 12:08:07 ----A---- C:\WINDOWS\system32\65d9thre9z14606.dll
2009-07-25 12:08:07 ----A---- C:\WINDOWS\system32\5e59sparze797.dll
2009-07-25 12:08:07 ----A---- C:\WINDOWS\system32\5c86threat11z99.exe
2009-07-25 12:08:07 ----A---- C:\WINDOWS\system32\51z4steal2749.exe
2009-07-25 12:08:07 ----A---- C:\WINDOWS\system32\48cz9i5582.dll
2009-07-25 12:08:07 ----A---- C:\WINDOWS\system32\47585pz19.exe
2009-07-25 12:08:07 ----A---- C:\WINDOWS\system32\4345tr5z1e79.dll
2009-07-25 12:08:07 ----A---- C:\WINDOWS\system32\4060tro5zb39.dll
2009-07-25 12:08:07 ----A---- C:\WINDOWS\system32\3c99thre5t1496z.dll
2009-07-25 12:08:07 ----A---- C:\WINDOWS\system32\35693worz399.exe
2009-07-25 12:08:07 ----A---- C:\WINDOWS\system32\29119spyz75.dll
2009-07-25 12:08:07 ----A---- C:\WINDOWS\system32\22521szy9bf.exe
2009-07-25 12:08:07 ----A---- C:\WINDOWS\system32\21599spamb5t9zf.exe
2009-07-25 12:08:07 ----A---- C:\WINDOWS\system32\19917not-azvi5us298.exe
2009-07-25 12:08:07 ----A---- C:\WINDOWS\system32\19138virus589z.exe
2009-07-25 12:08:07 ----A---- C:\WINDOWS\system32\18c4zownl9ad5r3159.dll
2009-07-25 12:08:07 ----A---- C:\WINDOWS\system32\13307zot9a-viru5ac.dll
2009-07-25 12:08:07 ----A---- C:\WINDOWS\9485szy5c8.exe
2009-07-25 12:08:07 ----A---- C:\WINDOWS\905zspy2a.exe
2009-07-25 12:08:07 ----A---- C:\WINDOWS\7598sp9ware1034z.dll
2009-07-25 12:08:07 ----A---- C:\WINDOWS\62a9ba5kdoorz151.dll
2009-07-25 12:08:07 ----A---- C:\WINDOWS\55f5do5nloazer9824.exe
2009-07-25 12:08:07 ----A---- C:\WINDOWS\4f9bbzckdoor5236.dll
2009-07-25 12:08:07 ----A---- C:\WINDOWS\4a5fad5ware999z.exe
2009-07-25 12:08:07 ----A---- C:\WINDOWS\2bfbthr5at189z1.exe
2009-07-25 12:08:07 ----A---- C:\WINDOWS\28zesp9rse25835.dll
2009-07-25 12:08:07 ----A---- C:\WINDOWS\197spaz59t3b5.dll
2009-07-25 12:08:07 ----A---- C:\WINDOWS\182dzp5ware3199.exe
2009-07-25 12:08:07 ----A---- C:\WINDOWS\14525s9y22z.dll
2009-07-25 12:08:07 ----A---- C:\WINDOWS\1378spzr9e5054.dll
2009-07-25 12:08:06 ----A---- C:\WINDOWS\system32\puncxyfv.exe
2009-07-25 11:13:19 ----D---- C:\Documents and Settings\piv\Application Data\Yahoo!
2009-07-25 11:07:19 ----A---- C:\WINDOWS\5513addware25z9.exe
2009-07-25 11:03:11 ----D---- C:\Program Files\Yahoo!
2009-07-25 10:41:35 ----D---- C:\Documents and Settings\piv\Application Data\ACD Systems
2009-07-25 10:39:47 ----D---- C:\Program Files\Fichiers communs\ACD Systems
2009-07-25 10:39:47 ----D---- C:\Program Files\ACD Systems
2009-07-25 09:36:26 ----D---- C:\Program Files\Winamp
2009-07-25 09:36:26 ----D---- C:\Documents and Settings\piv\Application Data\Winamp
2009-07-25 09:10:48 ----A---- C:\WINDOWS\system32\GEARAspi.dll
2009-07-25 09:10:06 ----D---- C:\Program Files\iPod
2009-07-23 22:07:52 ----A---- C:\WINDOWS\system32\8094spz7425.exe
2009-07-23 14:54:57 ----A---- C:\WINDOWS\system32\657dspar5e9658z.exe
2009-07-20 00:59:22 ----A---- C:\WINDOWS\6czd5tea92933.exe
2009-07-15 20:00:12 ----A---- C:\WINDOWS\system32\28z5hacktoo9430.exe
2009-07-15 12:03:28 ----HDC---- C:\WINDOWS\$NtUninstallKB973346$
2009-07-15 12:03:22 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2009-07-15 12:01:40 ----HDC---- C:\WINDOWS\$NtUninstallKB961371$
2009-07-15 09:31:38 ----A---- C:\WINDOWS\system32\6b4b9pywa5e125z.dll
2009-07-12 19:29:43 ----A---- C:\WINDOWS\system32\9022hacktozl2b95.dll
2009-07-12 03:35:07 ----A---- C:\WINDOWS\system32\31290z59ktool34b.exe
2009-07-11 06:01:08 ----A---- C:\WINDOWS\system32\9582worz64a.dll
2009-07-10 05:52:39 ----A---- C:\WINDOWS\25905s9y57ez.dll
2009-07-08 12:02:10 ----A---- C:\WINDOWS\system32\za69thief28445.dll
2009-07-07 11:21:23 ----A---- C:\WINDOWS\1560addwar9770z.exe
2009-07-06 16:18:31 ----D---- C:\Program Files\Avira
2009-07-06 16:18:31 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2009-07-05 16:55:59 ----A---- C:\WINDOWS\system32\26209hac9to5z4e3.dll
2009-07-04 13:14:22 ----A---- C:\WINDOWS\system32\22660wzrm975.dll
2009-07-03 21:28:00 ----A---- C:\WINDOWS\system32\1556tro94z7.exe
2009-06-29 12:45:45 ----D---- C:\Documents and Settings\piv\Application Data\SharePod
2009-06-29 12:28:39 ----D---- C:\Program Files\Bonjour
2009-06-29 11:54:27 ----N---- C:\WINDOWS\system32\Unusb20.exe
2009-06-29 11:54:27 ----N---- C:\WINDOWS\system32\rmusb20.EXE
2009-06-29 11:54:27 ----D---- C:\WINDOWS\system32\ALIEHCI
2009-06-29 11:54:25 ----A---- C:\WINDOWS\system32\SETUP.INI
2009-06-29 10:28:53 ----D---- C:\Documents and Settings\piv\Application Data\DMCache

======List of files/folders modified in the last 1 months======

2011-07-23 12:23:02 ----D---- C:\WINDOWS\repair
2011-07-23 12:12:53 ----A---- C:\WINDOWS\oemver.txt
2011-07-23 12:08:04 ----D---- C:\WINDOWS\system32\RTCOM
2009-07-26 15:58:18 ----D---- C:\WINDOWS\Temp
2009-07-26 15:52:06 ----D---- C:\Program Files\Mozilla Firefox
2009-07-26 15:47:20 ----D---- C:\WINDOWS\system32\CatRoot2
2009-07-26 15:46:18 ----D---- C:\WINDOWS\system32\drivers
2009-07-26 15:39:44 ----D---- C:\WINDOWS
2009-07-26 09:26:32 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-07-26 09:18:10 ----D---- C:\Program Files
2009-07-25 23:48:43 ----SHD---- C:\WINDOWS\Installer
2009-07-25 23:47:26 ----D---- C:\WINDOWS\system32
2009-07-25 20:09:39 ----D---- C:\Documents and Settings\piv\Application Data\Azureus
2009-07-25 20:08:46 ----RASH---- C:\boot.ini
2009-07-25 16:49:18 ----HD---- C:\WINDOWS\inf
2009-07-25 15:46:25 ----D---- C:\Program Files\Vuze
2009-07-25 15:26:43 ----AC---- C:\WINDOWS\OEWABLog.txt
2009-07-25 15:24:45 ----D---- C:\WINDOWS\security
2009-07-25 15:16:10 ----D---- C:\WINDOWS\WinSxS
2009-07-25 15:16:09 ----D---- C:\Program Files\Messenger
2009-07-25 15:16:08 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-07-25 15:16:08 ----D---- C:\WINDOWS\Help
2009-07-25 15:12:32 ----D---- C:\WINDOWS\system32\oobe
2009-07-25 15:12:27 ----D---- C:\WINDOWS\system32\CatRoot
2009-07-25 14:32:36 ----SD---- C:\WINDOWS\Tasks
2009-07-25 14:29:47 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-07-25 13:35:25 ----SHD---- C:\RECYCLER
2009-07-25 13:27:50 ----AC---- C:\WINDOWS\ntbtlog.txt
2009-07-25 13:22:41 ----D---- C:\Program Files\Fichiers communs
2009-07-25 12:53:51 ----D---- C:\Documents and Settings
2009-07-25 09:10:45 ----D---- C:\Program Files\iTunes
2009-07-25 09:10:04 ----D---- C:\Program Files\Fichiers communs\Apple
2009-07-22 23:01:39 ----D---- C:\Documents and Settings\piv\Application Data\gtk-2.0
2009-07-17 11:43:31 ----RSD---- C:\WINDOWS\Fonts
2009-07-15 12:03:27 ----HD---- C:\WINDOWS\$hf_mig$
2009-07-15 12:03:25 ----A---- C:\WINDOWS\imsins.BAK
2009-07-07 17:10:56 ----A---- C:\WINDOWS\system32\MRT.exe
2009-07-06 16:06:50 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-06-29 11:54:25 ----HD---- C:\Program Files\InstallShield Installation Information
2009-06-29 11:40:50 ----D---- C:\Program Files\QuickTime
2009-06-29 11:39:25 ----D---- C:\Documents and Settings\All Users\Application Data\Apple Computer
2009-06-29 11:06:14 ----D---- C:\Program Files\Adobe
2009-06-29 11:06:14 ----D---- C:\Documents and Settings\piv\Application Data\Adobe
2009-06-29 11:06:08 ----D---- C:\Program Files\Fichiers communs\Adobe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-02-05 26944]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-02-05 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-02-05 51376]
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 cdrbsdrv;cdrbsdrv; C:\WINDOWS\system32\drivers\cdrbsdrv.sys [2004-03-08 13567]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-07-13 28520]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-02-05 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-02-05 94032]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-03-24 55640]
R3 AR5211;Atheros Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ar5211.sys [2007-05-02 546976]
R3 AsusACPI;ASUS ACPI Driver; C:\WINDOWS\system32\DRIVERS\ASUSACPI.sys [2007-07-26 11264]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-02-05 23152]
R3 CmBatt;Pilote d'adaptateur secteur Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-03-19 23400]
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2006-10-10 1181824]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-07-16 4747776]
R3 L1e;Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l1e51x86.sys [2008-03-11 36864]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 usbvideo;Périphérique vidéo USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14720]
S2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys []
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-07-13 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-13 185089]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-06-05 144712]
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-02-05 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-02-05 138680]
R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-03-09 152984]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [2009-07-03 1029456]
R2 SBAMSvc;CounterSpy Antispyware; C:\Program Files\Sunbelt Software\CounterSpy\SBAMSvc.exe [2009-06-10 980264]
R2 sdAuxService;PC Tools Auxiliary Service; C:\Program Files\Spyware Doctor\pctsAuxs.exe [2009-01-07 348752]
R2 sdCoreService;PC Tools Security Service; C:\Program Files\Spyware Doctor\pctsSvc.exe [2009-01-21 1095560]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2009-07-25 487424]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-02-05 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-02-05 352920]
R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2009-07-13 542496]
R3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

Et infos



info.txt logfile of random's system information tool 1.06 2009-07-25 13:23:49

======Uninstall list======

-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe AIR-->c:\Program Files\Fichiers communs\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 9.1.1 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A91000000001}
ALi USB2.0 Driver-->C:\WINDOWS\system32\UnUSB20.EXE RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8E1DCD15-C9F1-49CE-807B-198C8241EB6B}\Setup.exe" -uninst
Apple Mobile Device Support-->MsiExec.exe /I{C337BDAF-CB4E-47E2-BE1A-CB31BB7DD0E3}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
Asus ACPI Driver-->MsiExec.exe /X{19F5658D-92E8-4A08-8657-D38ABB1574B2}
ASUSUpdate for Eee PC-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{587178E7-B1DF-494E-9838-FA4DD36E873C}\setup.exe" -l0x40c
Atheros Communications Inc.(R) AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver-->"C:\Program Files\InstallShield Installation Information\{3108C217-BE83-42E4-AE9E-A56A2A92E549}\setup.exe" -runfromtemp -l0x040c -removeonly
Audacity 1.2.6-->"C:\Program Files\Audacity\unins000.exe"
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Plus DirectShow Filters-->C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
ECAP-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{85E3CFBC-9B1B-470C-AF72-54EACA0F1322}\setup.exe" -l0x40c -removeonly
Eee Instant Key-->C:\Program Files\InstallShield Installation Information\{6E4DAE31-7CF3-441A-B6E5-B014D63C80CD}\setup.exe -runfromtemp -l0x0009 -removeonly
Eee Storage-->MsiExec.exe /I{DEB6ACEB-C418-4880-9133-1C5EB9AFBC79}
ESET NOD32 register program-->C:\Program Files\ESET\EAVSET\uninstall.exe
Favorit-->"c:\documents and settings\piv\local settings\application data\yioyuqw.exe" -uninstall
Galerie de photos Windows Live-->MsiExec.exe /X{A70FA218-6598-4AC9-813D-63597C5DD068}
GIMP 2.6.6-->"C:\Program Files\GIMP-2.0\setup\unins000.exe"
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Intel(R) Graphics Media Accelerator Driver-->C:\WINDOWS\system32\igxpun.exe -uninstall
iTunes-->MsiExec.exe /I{99ECF41F-5CCA-42BD-B8B8-A8333E2E2944}
Java DB 10.4.1.3-->MsiExec.exe /X{998D6972-F58E-479D-9248-8F179E55AE38}
Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216010FF}
K-Lite Codec Pack 4.1.4 (Full)-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1 Hotfix (KB929729)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M929729\M929729Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Office PowerPoint Viewer 2007 (French)-->MsiExec.exe /X{95120000-00AF-040C-0000-0000000FF1CE}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958215)-->"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960714)-->"C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB963027)-->"C:\WINDOWS\$NtUninstallKB963027$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969897)-->"C:\WINDOWS\$NtUninstallKB969897$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB942763)-->"C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Mozilla Firefox (3.0.12)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
Olympus Digital Wave Player-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB91E774-867B-4567-ACE7-8144EF036068}\Setup.exe" -l0x40c
OLYMPUS Master-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{BA820A24-704B-428D-9904-71A10DAC1372} /l1036 /zUNINSTALL
OpenOffice.org 3.0-->MsiExec.exe /I{6860B340-530D-46B3-91F8-1AE1F70F7C33}
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
PhotoFiltre-->"C:\Program Files\PhotoFiltre\Uninst.exe"
QuickTime-->MsiExec.exe /I{C78EAC6F-7A73-452E-8134-DBB2165C5A68}
RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x40c -removeonly
SpyHunter-->"C:\Program Files\Enigma Software Group\SpyHunter\Uninstall.exe" "C:\Program Files\Enigma Software Group\SpyHunter\install.log"
Spyware Doctor 6.0-->C:\Program Files\Spyware Doctor\unins000.exe /LOG
Super Hybrid Engine-->C:\Program Files\InstallShield Installation Information\{0990B5DF-92C3-4AD6-A18D-BF3ADF311240}\setup.exe -runfromtemp -l0x0009 -removeonly
Tweak UI-->"C:\WINDOWS\system32\mshta.exe" "res://C:\WINDOWS\system32\TweakUI.exe/uninstall.hta"
VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}
Winamp-->"C:\Program Files\Winamp\UninstWA.exe"
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
Windows Live Sync-->MsiExec.exe /X{67D0313C-4F15-437D-9A2D-C1564088A26A}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}

======Security center information======

AV: AntiVir Desktop

======System event log======

Computer Name: YOUR-89FFDODTUY
Event Code: 7036
Message: Le service Services Terminal Server est entré dans l'état : en cours d'exécution.

Record Number: 25531
Source Name: Service Control Manager
Time Written: 20090706160239.000000+120
Event Type: Informations
User:

Computer Name: YOUR-89FFDODTUY
Event Code: 7000
Message: Le service adfs n'a pas pu démarrer en raison de l'erreur :
Le fichier spécifié est introuvable.


Record Number: 25530
Source Name: Service Control Manager
Time Written: 20090706160238.000000+120
Event Type: erreur
User:

Computer Name: YOUR-89FFDODTUY
Event Code: 4201
Message: Le système a détecté que la carte réseau \DEVICE\TCPIP_{6BE20AFD-2C56-4896-8569-2663BD9FA80A} était connectée au réseau,
et a lancé une opération normale sur la carte réseau.

Record Number: 25529
Source Name: Tcpip
Time Written: 20090706160231.000000+120
Event Type: Informations
User:

Computer Name: YOUR-89FFDODTUY
Event Code: 6005
Message: Le service d'Enregistrement d'événement a démarré.

Record Number: 25528
Source Name: EventLog
Time Written: 20090706160223.000000+120
Event Type: Informations
User:

Computer Name: YOUR-89FFDODTUY
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 3 Uniprocessor Free.

Record Number: 25527
Source Name: EventLog
Time Written: 20090706160223.000000+120
Event Type: Informations
User:

=====Application event log=====

Computer Name: YOUR-89FFDODTUY
Event Code: 700
Message: msnmsgr (6636) La défragmentation en ligne commence un passage complet dans la base de données '\\.\C:\Documents and Settings\piv\Local Settings\Application Data\Microsoft\Messenger\fix1377@hotmail.fr\SharingMetadata\Working\database_CE30_E579_30E5_6943\dfsr.db'.

Record Number: 2782
Source Name: ESENT
Time Written: 20090610030156.000000+120
Event Type: Informations
User:

Computer Name: YOUR-89FFDODTUY
Event Code: 701
Message: msnmsgr (6636) La défragmentation en ligne a terminé un passage complet dans la base de données '\\.\C:\Documents and Settings\piv\Local Settings\Application Data\Microsoft\Messenger\fix1377@hotmail.fr\SharingMetadata\Working\database_CE30_E579_30E5_6943\dfsr.db'.

Record Number: 2781
Source Name: ESENT
Time Written: 20090610020156.000000+120
Event Type: Informations
User:

Computer Name: YOUR-89FFDODTUY
Event Code: 700
Message: msnmsgr (6636) La défragmentation en ligne commence un passage complet dans la base de données '\\.\C:\Documents and Settings\piv\Local Settings\Application Data\Microsoft\Messenger\fix1377@hotmail.fr\SharingMetadata\Working\database_CE30_E579_30E5_6943\dfsr.db'.

Record Number: 2780
Source Name: ESENT
Time Written: 20090610020156.000000+120
Event Type: Informations
User:

Computer Name: YOUR-89FFDODTUY
Event Code: 701
Message: msnmsgr (6636) La défragmentation en ligne a terminé un passage complet dans la base de données '\\.\C:\Documents and Settings\piv\Local Settings\Application Data\Microsoft\Messenger\fix1377@hotmail.fr\SharingMetadata\Working\database_CE30_E579_30E5_6943\dfsr.db'.

Record Number: 2779
Source Name: ESENT
Time Written: 20090610010156.000000+120
Event Type: Informations
User:

Computer Name: YOUR-89FFDODTUY
Event Code: 700
Message: msnmsgr (6636) La défragmentation en ligne commence un passage complet dans la base de données '\\.\C:\Documents and Settings\piv\Local Settings\Application Data\Microsoft\Messenger\fix1377@hotmail.fr\SharingMetadata\Working\database_CE30_E579_30E5_6943\dfsr.db'.

Record Number: 2778
Source Name: ESENT
Time Written: 20090610010156.000000+120
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 13 Stepping 8, GenuineIntel
"PROCESSOR_REVISION"=0d08
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip

-----------------EOF-----------------

Salut fix1377


Via Ajout/Suppression de programmes désinstalle SpyHunter qui est un faux logiciel de sécurité.

Supprime si encore présent : C:\Program Files\Enigma Software Group


Télécharge Navilog1 (de IL-MAFIOSO) sur le bureau http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe

- Double clic sur navilog1 présent sur le bureau

- Appuie sur F ou f valide par Entrée

- Appuie sur une touche de ton clavier à chaque fois que cela est demandé, tu arriveras au menu des options

- Choisis l'option 1 appuie sur la touche Entrée pour valider ton choix.

- Patiente jusqu'au message : *** Scan terminée le..... ***

- Le scan fini un rapport portant ce fixnavi.txt sera affiché poste le contenu de ce rapport.
- Si le résultat du scan ne s'affiche pas tu le trouvera dans C:\cleannavi.txt.

Note : Désactive ton Antivirus et antispyware
http://forum.pcastuces.com/desactiver_les_protections_residentes-f31s4.htm


@++

Merci dédétraqué, mon pc re fonctionne nikel.

Salut fix1377


Ton PC est super infecté encore, c'est pas le moment de lâché, poste le rapport demander.


@++

bonsoir, j'ai suivi votre technique pour désinstaller winifighter, mais à la fin il faut le posté ou merci beaucoup