bonjour j ai un petit souci avec mon ordi

voila mon pc n arrete pas d etre lent pourtant j utilise antivir CCleaner Malwarebytes' antimalware et meme Spybot search and destroy mais il continue de ramer j ai donc fait un scan HijackThis et j espere que vous pourriez m aider a y voir plus clair

je vous en remercie .pour etre deja venu sur ce forum je sais que vous etes tres competent

voici mon rapport HijackThis :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:17:33, on 06/12/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.neuf.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.euro.dell.com/countries/fr/fra/gen/default.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O1 - Hosts: r.com
O1 - Hosts: m
O1 - Hosts: m
O1 - Hosts: m
O1 - Hosts: m
O1 - Hosts: com
O1 - Hosts: m
O1 - Hosts: m
O1 - Hosts: m
O1 - Hosts: m
O1 - Hosts: om
O1 - Hosts: om
O1 - Hosts: om
O1 - Hosts: om
O1 - Hosts: mizer.com
O1 - Hosts: om
O1 - Hosts: om
O1 - Hosts: om
O1 - Hosts: om
O1 - Hosts: d.com
O1 - Hosts: d.com
O1 - Hosts: d.com
O1 - Hosts: d.com
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1257014988620
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{E5C978EB-A69F-456C-9051-B0B93C6AB2E9}: NameServer = 192.168.1.1
O20 - Winlogon Notify: utilplay - C:\WINDOWS\security\LOGS\utilplay.dll (file missing)
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Avira antivir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira antivir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 6106 bytes

les lignes hosts ne seraient pas bizarre?

mon ordi:Dell Dimension Dim2400

Intel(R)

Celeron (R) CPU 2.5 Ghz

2.49 Ghz 256 Mo de RAM

bonsoir

tu as un fichier host autre que celui de xp?

mets Malwarebytes à jour

lance le scan court mais ne supprime rien

poste son rapport

non en faites je ne sais pas l ordi est a mon frere il est administrateur et la session est verouillee avec un code et moi j ai ouvert ma session.

voila le scan Malwarebytes Anti-Malware :

Malwarebytes' Anti-Malware 1.42
Version de la base de données: 3304
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

06/12/2009 18:57:17
mbam-log-2009-12-06 (18-57-17).txt

Type de recherche: Examen rapide
Eléments examinés: 123738
Temps écoulé: 23 minute(s), 0 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

suis ce tutoriel et poste le rapport

http://forum.pcastuces.com/randoms_system_information_tool_rsit-f31s31.htm

voici le premier rapport:

Logfile of random's system information tool 1.06 (written by random/random)
Run by Famille at 2009-12-06 19:06:20
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 15 GB (20%) free of 76 GB
Total RAM: 254 MB (15% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:07:54, on 06/12/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Famille\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Famille.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.neuf.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.euro.dell.com/countries/fr/fra/gen/default.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O1 - Hosts: r.com
O1 - Hosts: m
O1 - Hosts: m
O1 - Hosts: m
O1 - Hosts: m
O1 - Hosts: com
O1 - Hosts: m
O1 - Hosts: m
O1 - Hosts: m
O1 - Hosts: m
O1 - Hosts: om
O1 - Hosts: om
O1 - Hosts: om
O1 - Hosts: om
O1 - Hosts: mizer.com
O1 - Hosts: om
O1 - Hosts: om
O1 - Hosts: om
O1 - Hosts: om
O1 - Hosts: d.com
O1 - Hosts: d.com
O1 - Hosts: d.com
O1 - Hosts: d.com
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1257014988620
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{E5C978EB-A69F-456C-9051-B0B93C6AB2E9}: NameServer = 192.168.1.1
O20 - Winlogon Notify: utilplay - C:\WINDOWS\security\LOGS\utilplay.dll (file missing)
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Avira antivir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira antivir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 6207 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\A947589197E0C12D.job
C:\WINDOWS\tasks\Rappel d'abonnement 1 auprès de l'ISP.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5CA3D70E-1895-11CF-8E15-001234567890}]
DriveLetterAccess - C:\WINDOWS\system32\dla\tfswshx.dll [2003-08-06 106548]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-11-24 263280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2009-11-24 764912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-11-24 263280]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2005-10-19 155648]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2005-10-19 126976]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-05-26 68856]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Configuration de la neuf Box]
C:\Program Files\neuf telecom\neuf Box\Wizard\QuickAccess.exe [2005-12-13 389120]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EzAgent]
C:\Program Files\ASUS\EZVCR\Agent.exe [2006-07-26 122880]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FlashPlayerUpdate]
C:\WINDOWS\system32\Macromed\Flash\FlashUtil9f.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechCameraAssistant]
C:\Program Files\Logitech\Video\CameraAssistant.exe [2005-12-07 489472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechCameraService(E)]
C:\WINDOWS\system32\ElkCtrl.exe [2004-11-01 262144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideo[inspector]]
C:\Program Files\Logitech\Video\InstallHelper.exe [2005-12-07 73728]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LVCOMSX]
C:\WINDOWS\system32\LVCOMSX.EXE [2005-12-09 225280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes Anti-Malware (reboot)]
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2009-12-03 1394000]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\WINDOWS\System32\qttask.exe -atboottime []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-05-26 68856]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Tweak UI]
TWEAKUI.CPL,TweakMeUp []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxsrvc.dll [2005-10-19 348160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\utilplay]
C:\WINDOWS\security\LOGS\utilplay.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"C:\Program Files\Yahoo!\Messenger\YPager.exe"="C:\Program Files\Yahoo!\Messenger\YPager.exe:*:Enabled:Yahoo! Messenger"
"C:\Program Files\Yahoo!\Messenger\YServer.exe"="C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server"
"C:\Program Files\IncrediMail\bin\IMApp.exe"="C:\Program Files\IncrediMail\bin\IMApp.exe:*:Enabled:IncrediMail"
"C:\Program Files\IncrediMail\bin\IncMail.exe"="C:\Program Files\IncrediMail\bin\IncMail.exe:*:Enabled:IncrediMail"
"C:\Program Files\IncrediMail\bin\ImpCnt.exe"="C:\Program Files\IncrediMail\bin\ImpCnt.exe:*:Enabled:IncrediMail"
"C:\Program Files\Internet Explorer\iexplore.exe"="C:\Program Files\Internet Explorer\iexplore.exe:*:Enabled:Internet Explorer"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\WINDOWS\SYSTEM32\dpvsetup.exe"="C:\WINDOWS\SYSTEM32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\SYSTEM32\rundll32.exe"="C:\WINDOWS\SYSTEM32\rundll32.exe:*:Enabled:Exécuter une DLL en tant qu'application"
"%windir%\system32\ccapp.exe"="%windir%\system32\ccapp.exe:*:Enabled:System Process"
"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe"="C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe:*:Enabled:Kaspersky Anti-Virus Service"
"C:\Program Files\Azureus\Azureus.exe"="C:\Program Files\Azureus\Azureus.exe:*:Enabled:Azureus"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

======List of files/folders created in the last 1 months======

2009-12-06 19:06:20 ----DC---- C:\rsit
2009-12-06 14:36:23 ----D---- C:\Program Files\Trend Micro
2009-12-04 17:53:10 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2009-12-04 17:52:35 ----D---- C:\Program Files\SpywareBlaster
2009-12-03 18:05:41 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-12-03 18:05:30 ----D---- C:\Program Files\xerox
2009-11-26 22:28:04 ----HD---- C:\WINDOWS\$hf_mig$
2009-11-26 22:25:39 ----D---- C:\Program Files\Fichiers communs\logishrd
2009-11-26 20:54:18 ----D---- C:\Program Files\CCleaner
2009-11-25 13:49:19 ----D---- C:\Documents and Settings\Famille\Application Data\dvdcss
2009-11-14 14:58:24 ----D---- C:\Program Files\Windows Live
2009-11-14 14:34:00 ----D---- C:\WINDOWS\system32\Adobe
2009-11-11 19:49:26 ----D---- C:\Documents and Settings\Famille\Application Data\Mozilla
2009-11-11 19:48:21 ----D---- C:\Program Files\Mozilla Firefox
2009-11-11 13:38:02 ----D---- C:\Program Files\Microsoft Silverlight
2009-11-07 19:04:12 ----DC---- C:\fsaua.data
2009-11-07 01:11:20 ----SHDC---- C:\Program Files\Fichiers communs\WindowsLiveInstaller

======List of files/folders modified in the last 1 months======

2009-12-06 19:06:15 ----D---- C:\WINDOWS\Prefetch
2009-12-06 16:58:12 ----D---- C:\WINDOWS\Temp
2009-12-06 16:57:30 ----D---- C:\WINDOWS\system32\CatRoot2
2009-12-06 14:40:20 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-12-06 14:36:23 ----RD---- C:\Program Files
2009-12-06 13:15:48 ----D---- C:\WINDOWS
2009-12-05 22:39:37 ----D---- C:\Program Files\Everest Poker
2009-12-05 21:23:04 ----D---- C:\WINDOWS\SYSTEM32
2009-12-05 16:16:24 ----D---- C:\Program Files\eMule
2009-12-05 16:09:15 ----D---- C:\Documents and Settings\Famille\Application Data\vlc
2009-12-04 21:54:31 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-12-04 19:32:47 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-12-04 19:31:00 ----D---- C:\WINDOWS\system32\DRIVERS
2009-12-04 19:13:21 ----SHD---- C:\WINDOWS\Installer
2009-12-04 18:59:34 ----SD---- C:\Documents and Settings\Famille\Application Data\Microsoft
2009-12-03 22:45:22 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-12-03 18:24:06 ----D---- C:\I386
2009-12-03 16:39:07 ----SHD---- C:\RECYCLER
2009-12-02 17:50:34 ----D---- C:\WINDOWS\Debug
2009-12-02 17:48:55 ----AC---- C:\WINDOWS\ezvcr.ini
2009-11-28 17:55:06 ----AC---- C:\WINDOWS\ModemLog_LG Internet Kit Modem Driver.txt
2009-11-26 22:29:05 ----HD---- C:\WINDOWS\INF
2009-11-26 22:28:54 ----D---- C:\WINDOWS\WinSxS
2009-11-26 22:28:25 ----RSHD---- C:\WINDOWS\system32\DLLCACHE
2009-11-26 22:27:24 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-11-26 22:25:39 ----D---- C:\Program Files\Fichiers communs
2009-11-26 22:24:47 ----RSD---- C:\WINDOWS\assembly
2009-11-26 22:24:43 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-11-14 14:58:05 ----D---- C:\Documents and Settings\All Users\Application Data\WLInstaller
2009-11-14 14:10:08 ----ASHC---- C:\BOOT.INI
2009-11-14 14:10:08 ----A---- C:\WINDOWS\WIN.INI
2009-11-14 14:10:08 ----A---- C:\WINDOWS\SYSTEM.INI
2009-11-14 02:07:36 ----D---- C:\Program Files\ALCATEL PC Suite
2009-11-07 18:58:07 ----D---- C:\Documents and Settings\Famille\Application Data\Adobe
2009-11-07 18:55:26 ----D---- C:\Program Files\Adobe
2009-11-07 18:55:25 ----D---- C:\Program Files\Fichiers communs\Adobe
2009-11-07 01:28:07 ----DC---- C:\WINDOWS\system32\DRVSTORE

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 omci;OMCI WDM Device Driver; C:\WINDOWS\System32\DRIVERS\omci.sys [2002-11-08 17217]
R1 sscdbhk5;sscdbhk5; C:\WINDOWS\system32\drivers\sscdbhk5.sys [2003-07-14 5621]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
R1 ssrtln;ssrtln; C:\WINDOWS\system32\drivers\ssrtln.sys [2003-07-14 23219]
R2 Aspi32;Aspi32; C:\WINDOWS\system32\drivers\Aspi32.sys [2002-07-17 16877]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-07-28 55656]
R2 drvnddm;drvnddm; C:\WINDOWS\system32\drivers\drvnddm.sys [2003-06-20 40448]
R2 tfsnboio;tfsnboio; C:\WINDOWS\system32\dla\tfsnboio.sys [2003-08-06 25685]
R2 tfsncofs;tfsncofs; C:\WINDOWS\system32\dla\tfsncofs.sys [2003-08-06 34837]
R2 tfsndrct;tfsndrct; C:\WINDOWS\system32\dla\tfsndrct.sys [2003-08-06 4117]
R2 tfsndres;tfsndres; C:\WINDOWS\system32\dla\tfsndres.sys [2003-08-06 2265]
R2 tfsnifs;tfsnifs; C:\WINDOWS\system32\dla\tfsnifs.sys [2003-08-06 83284]
R2 tfsnopio;tfsnopio; C:\WINDOWS\system32\dla\tfsnopio.sys [2003-08-06 14229]
R2 tfsnpool;tfsnpool; C:\WINDOWS\system32\dla\tfsnpool.sys [2003-08-06 6357]
R2 tfsnudf;tfsnudf; C:\WINDOWS\system32\dla\tfsnudf.sys [2003-08-06 98068]
R2 tfsnudfa;tfsnudfa; C:\WINDOWS\system32\dla\tfsnudfa.sys [2003-08-06 100373]
R2 tmcomm;tmcomm; \??\C:\WINDOWS\system32\drivers\tmcomm.sys []
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2002-04-01 4816]
R3 bcm4sbxp;Broadcom 440x 10/100 Integrated Controller XP Driver; C:\WINDOWS\System32\DRIVERS\bcm4sbxp.sys [2003-07-15 43136]
R3 HCW848NT;Hauppauge Win/TV; C:\WINDOWS\system32\DRIVERS\hcw848nt.sys [2000-06-12 140440]
R3 ialm;ialm; C:\WINDOWS\System32\DRIVERS\ialmnt5.sys [2005-10-19 807998]
R3 Lvckap;Logitech Kernel Audio Processing Filter Driver; \??\C:\WINDOWS\system32\drivers\Lvckap.sys []
R3 LVRS;Logitech RightSound Filter Driver; C:\WINDOWS\system32\DRIVERS\lvrs.sys [2009-04-30 265496]
R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys [2005-12-06 39424]
R3 pepifilter;Volume Adapter; C:\WINDOWS\system32\DRIVERS\lv302af.sys [2009-04-30 13976]
R3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\WINDOWS\system32\DRIVERS\LV302V32.SYS [2009-04-30 2687512]
R3 PPPoEWin;PPPoEWin Miniport; C:\WINDOWS\System32\DRIVERS\PPPoEWin.SYS [2003-09-25 104375]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2002-08-30 5888]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2003-11-18 591808]
R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 P3;Pilote processeur Intel Pentium III; C:\WINDOWS\System32\DRIVERS\p3.sys [2008-04-14 46848]
S3 {6080A529-897E-4629-A488-ABA0C29B635E};Intel(R) Graphics Platform (SoftBIOS) Driver; C:\WINDOWS\system32\drivers\ialmsbw.sys [2003-10-08 120830]
S3 {D31A0762-0CEB-444e-ACFF-B049A1F6FE91};Intel(R) Graphics Chipset (KCH) Driver; C:\WINDOWS\system32\drivers\ialmkchw.sys [2003-10-08 98842]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 EL90XBC;Pilote de la carte EtherLink XL 90XB/C 3Com; C:\WINDOWS\System32\DRIVERS\el90xbc5.sys [2001-08-17 66591]
S3 FilterService;Filter Service; C:\WINDOWS\System32\Drivers\F11AFLT.SYS [2002-02-03 15660]
S3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 lvmvdrv;Logitech Machine Vision Engine Loader; \??\C:\WINDOWS\system32\drivers\lvmvdrv.sys []
S3 mouhid;Pilote HID de souris; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-23 12288]
S3 MPE;Filtre BDA MPE; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-13 15232]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2004-08-04 1897408]
S3 PID_08A0;QuickCam IM(PID_08A0); C:\WINDOWS\system32\DRIVERS\LV302AV.SYS [2005-12-06 916096]
S3 PID_0928;Labtec WebCam(PID_0928); C:\WINDOWS\system32\DRIVERS\LV561AV.SYS []
S3 SABProcEnum;SABProcEnum; \??\C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\SABProcEnum.sys []
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SONYPVU1;Pilote de filtrage Sony USB (SONYPVU1); C:\WINDOWS\System32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 TVICHW32;TVICHW32; \??\C:\WINDOWS\system32\DRIVERS\TVICHW32.SYS []
S3 u3kmini;ASUS My Cinema-U3000 Mini; C:\WINDOWS\System32\Drivers\u3kmini.sys [2006-08-23 352000]
S3 USB_RNDIS;USB Remote NDIS Network Device Driver; C:\WINDOWS\System32\DRIVERS\usb8023.sys [2008-04-13 12800]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\System32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2008-04-13 26112]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 usbvideo;Périphérique vidéo USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\System32\DRIVERS\wanatw4.sys []
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 agp440;Filtre de bus AGP Intel; C:\WINDOWS\System32\DRIVERS\agp440.sys [2008-04-13 42368]
S4 agpCPQ;Filtre de bus AGP Compaq; C:\WINDOWS\System32\DRIVERS\agpCPQ.sys [2008-04-13 44928]
S4 alim1541;Filtre de bus AGP ALI; C:\WINDOWS\System32\DRIVERS\alim1541.sys [2008-04-13 42752]
S4 amdagp;Pilote de filtre du bus AMD AGP; C:\WINDOWS\System32\DRIVERS\amdagp.sys [2008-04-13 43008]
S4 cbidf;cbidf; C:\WINDOWS\System32\DRIVERS\cbidf2k.sys [2001-08-17 13952]
S4 IntelIde;IntelIde; C:\WINDOWS\System32\DRIVERS\intelide.sys [2008-04-14 5504]
S4 sisagp;Filtre de bus AGP SIS; C:\WINDOWS\System32\DRIVERS\sisagp.sys [2008-04-13 40960]
S4 viaagp;Filtre de bus AGP VIA; C:\WINDOWS\System32\DRIVERS\viaagp.sys [2008-04-13 42240]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirSchedulerService;Avira antivir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
R2 AntiVirService;Avira antivir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe [2004-02-26 49152]
R3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe [2004-11-08 68096]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-05-18 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

puis le second :

info.txt logfile of random's system information tool 1.06 2009-12-06 19:08:07

======Uninstall list======

-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->C:\WINDOWS\System32\\MSIEXEC.EXE /I {09DA4F91-2A09-4232-AB8C-6BC740096DE3} REMOVE=UpdateMgrFeature
-->C:\WINDOWS\System32\\MSIEXEC.EXE /x {1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
-->C:\WINDOWS\System32\\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
ACE Mega CoDecS Pack-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FFF5DEE7-8107-436B-9726-7573458FE6AE}\Setup.exe" -l0x9
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Photoshop CS-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EFB21DE7-8C19-4A88-BB28-A766E16493BC}\setup.exe" -l0x40c
Adobe Reader 9.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A92000000001}
Adobe Shockwave Player 11.5-->"C:\WINDOWS\system32\Adobe\Shockwave 11\uninstaller.exe"
Ahead Nero Burning ROM-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
ALCATEL PC Suite V6.2.4-->"C:\Program Files\ALCATEL PC Suite\unins000.exe"
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
Assistant de messagerie-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5700CB73-A4FE-4DC9-AC62-B0EE99646053}\setup.exe" -l040c -out
ASUS EZVCR-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{CE651735-FDDC-47EA-BFFD-3BF9472B8E85}
ASUS My Cinema-U3000 Mini-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8D2A1A00-F630-49ED-8E6C-C199544DD3AB}\setup.exe" -l0x9
Avira antivir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
Broadcom Management Programs-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{89EE857B-8970-4F9F-AB58-A1C873AC72B3} /l1036
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
dBpowerAMP Musepack Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Musepack Codec.dat
dBpowerAMP Music Converter-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Music Converter.dat
Dell Media Experience-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\setup.exe" -uninstall
Dell Solution Center-->MsiExec.exe /X{11F1920A-56A2-4642-B6E0-3B31A12C9288}
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DriverAgent by TouchStone Software-->RunDll32.exe advpack.dll,LaunchINFSection driveragent_exe.inf,TVICHW32Remove
eMule-->"C:\Program Files\eMule\Uninstall.exe"
Everest Poker (Remove Only)-->C:\Program Files\Everest Poker\cstart.exe /uninstall
Friendly PPPoE v3.0.0.26-->C:\WINDOWS\AppRun.exe C:\PROGRA~1\FRIEND~1\BROADB~1
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_0E996B068B56FCA2.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Hauppauge WinTV NT4/Win2000 Drivers-->C:\WINDOWS\system32\HCW848UN.EXE
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Indeo® software-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Intel\Indeo\Uninst.isu" -c"C:\Program Files\Intel\Indeo\SavedSystemFiles\indounin.dll"
Installation de la neuf BOX-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B7520B9A-3500-4A60-B8D2-E8A7C4AAF306}\setup.exe" -l0x40c -usb
Intel(R) Extreme Graphics Driver-->RUNDLL32.EXE C:\WINDOWS\system32\ialmrem.dll,UninstallW2KIGfx PCI\VEN_8086&DEV_2562
Jasc Paint Shop Pro 8-->MsiExec.exe /I{81A34902-9D0B-4920-A25C-4CDC5D14B328}
Java 2 Runtime Environment, SE v1.4.2_03-->MsiExec.exe /I{7148F0A8-6813-11D6-A77B-00B0D0142030}
Java(TM) 6 Update 17-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216015FF}
K-Lite Codec Pack 2.75 Full-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
LG GSM PC Components-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{C7A5A1A0-B69F-4A3E-97A1-0D23F4E8B11F}
Logiciel QuickCam de Logitech-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C191BE7C-8542-4A61-973A-714EF76C5995}\setup.exe" -l0x40c
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
MeuhMeuhTV (désinstallation uniquement)-->C:\Program Files\MeuhMeuhTV\UninstMMTV.exe
MeuhMeuhTV 2.30-->MsiExec.exe /I{8478CB20-423A-4FFC-9C90-FC7F3D07E039}
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Security Update (KB953297)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{72AD53CC-CCC0-3757-8480-9EE176866A7C}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{0BD83598-C2EF-3343-847B-7D2E84599128}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Data Access Components KB870669-->C:\WINDOWS\muninst.exe C:\WINDOWS\INF\KB870669.inf
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 6.0 Professional Edition-->"C:\Program Files\Microsoft Visual Studio\VC98\Setup\1033\Setup.exe"
Microsoft Works 7.0-->MsiExec.exe /I{64D114CE-4234-45C2-B60A-2B07D5A48F72}
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB974455)-->"C:\WINDOWS\ie8updates\KB974455-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB975364)-->"C:\WINDOWS\ie8updates\KB975364-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB976749)-->"C:\WINDOWS\ie8updates\KB976749-IE8\spuninst\spuninst.exe"
MMTV Install dll-->MsiExec.exe /I{93AA0098-0972-4DED-B1D0-9868BB2C75AF}
Modem ADSL-->C:\Program Files\ModemAdsl\uninstall.exe
Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->c:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
Mozilla Firefox (3.5.5)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
Programme de gestion Camera de Logitech®-->"C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\SETUP.EXE" UNINSTALL REMOVEPROMPT
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
SFR - Kit de connexion-->C:\Program Files\SFR\Kit\uninstall.exe
Sonic DLA-->MsiExec.exe /I{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
Sonic RecordNow!-->MsiExec.exe /I{9541FED0-327F-4DF0-8B96-EF57EF622F19}
Sonic Update Manager-->MsiExec.exe /I{09DA4F91-2A09-4232-AB8C-6BC740096DE3}
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
SpywareBlaster 4.2-->"C:\Program Files\SpywareBlaster\unins000.exe"
Ulead VideoStudio 8.0 SE VCD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4F1DA6BF-3614-48A1-9970-9E90F646789E}\Setup.exe" -l0x40c
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Viewpoint Media Player (Remove Only)-->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
VLC media player 1.0.3-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
WinZip-->"C:\Program Files\WinZip\WINZIP32.EXE" /uninstall
XviD MPEG-4 Video Codec-->"C:\Program Files\XviD\unins000.exe"

=====HijackThis Backups=====

O16 - DPF: {E1E73B44-2D20-47A9-9CA2-B534CEBBF856} (F-Secure Health Check 1.0) - http://securite-neufbox.sfr.fr/pchc/fscax.cab [2009-12-06]
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) [2009-12-06]
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file) [2009-12-06]
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) [2009-12-06]
O2 - BHO: (no name) - {FE6E9DB0-D9CD-8CD3-5320-8011CF86E8DB} - (no file) [2009-12-06]
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL') [2009-12-06]
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU') [2009-12-06]
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') [2009-12-06]
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') [2009-12-06]

======Hosts File======

127.0.0.1 localhost
r.com
127.0.0.1 www.z
m
m
m
m
com
m
m

======Security center information======

AV: antivir Desktop (outdated)

======System event log======

Computer Name: ACHRAF
Event Code: 6005
Message: Le service d'Enregistrement d'événement a démarré.

Record Number: 39943
Source Name: EventLog
Time Written: 20091105235013.000000+060
Event Type: Informations
User:

Computer Name: ACHRAF
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 3 Uniprocessor Free.

Record Number: 39942
Source Name: EventLog
Time Written: 20091105235013.000000+060
Event Type: Informations
User:

Computer Name: ACHRAF
Event Code: 6006
Message: Le service d'Enregistrement d'événement a été arrêté.

Record Number: 39941
Source Name: EventLog
Time Written: 20091105230849.000000+060
Event Type: Informations
User:

Computer Name: ACHRAF
Event Code: 7034
Message: Le service Ulead Burning Helper s'est terminé de façon inattendue pour la 1ème fois.

Record Number: 39940
Source Name: Service Control Manager
Time Written: 20091105222003.000000+060
Event Type: erreur
User:

Computer Name: ACHRAF
Event Code: 7036
Message: Le service Windows Installer est entré dans l'état : arrêté.

Record Number: 39939
Source Name: Service Control Manager
Time Written: 20091105215238.000000+060
Event Type: Informations
User:

=====Application event log=====

Computer Name: ACHRAF
Event Code: 1
Message:
Record Number: 5
Source Name: Avg7UpdSvc
Time Written: 20080705151506.000000+120
Event Type: Informations
User:

Computer Name: ACHRAF
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 4
Source Name: SecurityCenter
Time Written: 20080702005925.000000+120
Event Type: Informations
User:

Computer Name: ACHRAF
Event Code: 1
Message:
Record Number: 3
Source Name: Avg7UpdSvc
Time Written: 20080702005915.000000+120
Event Type: Informations
User:

Computer Name: ACHRAF
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 2
Source Name: SecurityCenter
Time Written: 20080701210512.000000+120
Event Type: Informations
User:

Computer Name: ACHRAF
Event Code: 1
Message:
Record Number: 1
Source Name: Avg7UpdSvc
Time Written: 20080701210502.000000+120
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Fichiers communs\Ulead Systems\MPEG
"windir"=%SystemRoot%
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 2 Stepping 9, GenuineIntel
"PROCESSOR_REVISION"=0209
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"FP_NO_HOST_CHECK"=NO

-----------------EOF-----------------

• Télécharge Findykill
• de Chiquitine29 sur le Bureau,
• Ferme toutes les applications sauf ton navigateur,
• Désactive temporairement ton antivirus, car l'outil peut le faire réagir,
• Clique sur "FindyKill.exe" pour lancer l'installe de l'outil . Conserve les paramètres d'installation par défaut.
• Double-clique sur le raccourci Findykill qui est sur ton bureau (Pour Vista, il faut un clic droit et exécuter en tant qu'administrateur).
• Choisis f puis valide par entrée pour utiliser la version française de l'outil,
• Choisis l'option 1 ( recherche ) . Puis laisse travailler l'outil.
• Une fois terminé, poste le rapport FindyKill.txt qui est généré. Le rapport est sauvegardé à la racine du disque :C:\FindyKill.txt

le rapport:

############################## | FindyKill V5.020 |

# User : Famille (Administrateurs) # ACHRAF
# Update on 26/11/2009 by Chiquitine29
# Start at: 19:32:01 | 06/12/2009
# Website : http://pagesperso-orange.fr/NosTools/index.html
# Contact : FindyKill.Contact@gmail.com

# Intel(R) Celeron(R) CPU 2.50GHz
# Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Enabled
# AV : antivir Desktop 9.0.1.32 [ (!) Disabled | (!) Outdated ]

# A:\ # Lecteur de disquettes 3 ½ pouces
# C:\ # Disque fixe local # 74,45 Go (14,76 Go free) # NTFS
# D:\ # Disque CD-ROM
# E:\ # Disque CD-ROM

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

################## | C: |


################## | C:\WINDOWS |


################## | C:\WINDOWS\system32 |


################## | C:\WINDOWS\system32\drivers |


################## | C:\Documents and Settings\Famille\Application Data |


################## | Autres detections ... |

################## | Temporary Internet Files |


################## | Registre / Clés infectieuses |

Présent ! [HKLM\software\microsoft\security center] "AntiVirusDisableNotify"
Présent ! [HKLM\software\microsoft\security center] "AntiVirusOverride"
Présent ! [HKLM\software\microsoft\security center] "FirewallDisableNotify"
Présent ! [HKLM\software\microsoft\security center] "FirewallOverride"
Présent ! [HKLM\software\microsoft\security center] "UpdatesDisableNotify"

################## | Etat / Services / Informations |

# Affichage des fichiers cachés : OK

# Mode sans echec : OK

# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# EapHost -> Start = 3 ( Good = 2 | Bad = 4 )
# Ip6Fw -> Start = 3 ( Good = 2 | Bad = 4 )
# SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )


################## | Cracks / Keygens / Serials |


################## | ! Fin du rapport # FindyKill V5.020 ! |

relance findykill option nettoyage et poste son rapport

puis:

• Télécharge lopS&D d'Eric71 et AngelDark,
• Double-clique sur le fichier téléchargé pour installer le logiciel.
• Double-clique sur le racourci créé pour lancer le programme,
• Choisis la langue,
• Sélectionne l'option 1. L'outil scanne plusieurs dossiers sensibles. Cela peut durer quelques minutes. Laisse l'analyse se dérouler.
• Le bloc-note va s'ouvrir. Poste son contenu dans ta prochaine réponse.

rapport findykill:

############################## | FindyKill V5.020 |

# User : Famille (Administrateurs) # ACHRAF
# Update on 26/11/2009 by Chiquitine29
# Start at: 20:10:12 | 06/12/2009
# Website : http://pagesperso-orange.fr/NosTools/index.html
# Contact : FindyKill.Contact@gmail.com

# Intel(R) Celeron(R) CPU 2.50GHz
# Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Enabled
# AV : antivir Desktop 9.0.1.32 [ Enabled | (!) Outdated ]

# A:\ # Lecteur de disquettes 3 ½ pouces
# C:\ # Disque fixe local # 74,45 Go (14,79 Go free) # NTFS
# D:\ # Disque CD-ROM
# E:\ # Disque CD-ROM

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

################## | C: |


################## | C:\WINDOWS |

Supprimé ! C:\WINDOWS\Prefetch\WINUPGRO.EXE-0F8DCEDB.pf

################## | C:\WINDOWS\system32 |


################## | C:\WINDOWS\system32\drivers |


################## | C:\Documents and Settings\Famille\Application Data |


################## | Autres suppressions ... |

################## | Temporary Internet Files |


################## | Registre / Clés infectieuses |

Supprimé ! [HKLM\software\microsoft\security center] "AntiVirusDisableNotify"
Supprimé ! [HKLM\software\microsoft\security center] "AntiVirusOverride"
Supprimé ! [HKLM\software\microsoft\security center] "FirewallDisableNotify"
Supprimé ! [HKLM\software\microsoft\security center] "FirewallOverride"
Supprimé ! [HKLM\software\microsoft\security center] "UpdatesDisableNotify"

################## | Etat / Services / Informations |

# Mode sans echec : OK


# Affichage des fichiers cachés : OK

# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# EapHost -> Start = 2 ( Good = 2 | Bad = 4 )
# Ip6Fw -> Start = 2 ( Good = 2 | Bad = 4 )
# SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )

################## | PEH ... |


################## | Cracks / Keygens / Serials |


################## | ! Fin du rapport # FindyKill V5.020 ! |

rapport lop S&D:

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) CPU 2.50GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A05
USER : Famille ( Administrator )
BOOT : Normal boot
Antivirus : antivir Desktop 9.0.1.32 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:74 Go (Free:14 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 06/12/2009|20:40 )

--------------------\\ Listing des dossiers dans APPLIC~1


[22/04/2004|08:41] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[22/04/2004|09:17] C:\DOCUME~1\ADMINI~1\APPLIC~1\Jasc Software Inc
[03/11/2009|12:30] C:\DOCUME~1\ADMINI~1\APPLIC~1\Malwarebytes
[03/11/2009|16:58] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[22/04/2004|09:19] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sonic
[22/04/2004|09:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun

[06/11/2009|13:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[03/11/2009|16:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AMOK DENT BIB BURN
[03/11/2009|13:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[17/03/2009|23:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[04/11/2009|16:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\KSP
[08/11/2004|02:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[02/11/2009|19:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[26/11/2009|22:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[06/05/2004|22:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[06/11/2009|12:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
[22/04/2004|09:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[04/12/2009|21:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[24/06/2005|14:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[06/12/2009|14:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[03/11/2009|00:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[01/11/2009|21:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[14/11/2009|14:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[22/04/2004|08:41] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[22/04/2004|09:17] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Jasc Software Inc
[22/04/2004|08:41] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[22/04/2004|09:19] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sonic
[22/04/2004|09:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun

[07/11/2009|18:58] C:\DOCUME~1\Famille\APPLIC~1\Adobe
[29/11/2009|16:50] C:\DOCUME~1\Famille\APPLIC~1\dvdcss
[06/07/2006|10:34] C:\DOCUME~1\Famille\APPLIC~1\Google
[01/07/2006|08:49] C:\DOCUME~1\Famille\APPLIC~1\GramDentBird
[29/06/2004|11:10] C:\DOCUME~1\Famille\APPLIC~1\Help
[22/04/2004|08:41] C:\DOCUME~1\Famille\APPLIC~1\Identities
[03/11/2009|16:46] C:\DOCUME~1\Famille\APPLIC~1\Inside 1
[22/04/2004|09:17] C:\DOCUME~1\Famille\APPLIC~1\Jasc Software Inc
[01/07/2004|16:40] C:\DOCUME~1\Famille\APPLIC~1\Macromedia
[02/11/2009|19:09] C:\DOCUME~1\Famille\APPLIC~1\Malwarebytes
[15/12/2006|23:46] C:\DOCUME~1\Famille\APPLIC~1\Media Player Classic
[04/12/2009|18:59] C:\DOCUME~1\Famille\APPLIC~1\Microsoft
[20/05/2004|17:46] C:\DOCUME~1\Famille\APPLIC~1\Microsoft Web Folders
[11/11/2009|19:50] C:\DOCUME~1\Famille\APPLIC~1\Mozilla
[25/10/2004|19:37] C:\DOCUME~1\Famille\APPLIC~1\MSN6
[14/12/2004|15:45] C:\DOCUME~1\Famille\APPLIC~1\Sonic
[22/04/2004|09:11] C:\DOCUME~1\Famille\APPLIC~1\Sun
[03/11/2009|00:50] C:\DOCUME~1\Famille\APPLIC~1\Ulead Systems
[05/12/2009|16:09] C:\DOCUME~1\Famille\APPLIC~1\vlc

[17/12/2004|17:05] C:\DOCUME~1\INVIT~1\APPLIC~1\Adobe
[30/10/2006|21:44] C:\DOCUME~1\INVIT~1\APPLIC~1\Google
[22/04/2004|08:41] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities
[22/04/2004|09:17] C:\DOCUME~1\INVIT~1\APPLIC~1\Jasc Software Inc
[23/11/2004|21:00] C:\DOCUME~1\INVIT~1\APPLIC~1\Macromedia
[03/12/2009|13:02] C:\DOCUME~1\INVIT~1\APPLIC~1\Malwarebytes
[03/12/2009|12:57] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft
[22/04/2004|09:19] C:\DOCUME~1\INVIT~1\APPLIC~1\Sonic
[22/04/2004|09:11] C:\DOCUME~1\INVIT~1\APPLIC~1\Sun

[03/11/2009|20:37] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[03/11/2009|17:01] C:\DOCUME~1\LOCALS~1\APPLIC~1\AVG7
[19/06/2004|18:15] C:\DOCUME~1\LOCALS~1\APPLIC~1\McAfee.com Personal Firewall
[03/11/2009|16:58] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[03/11/2009|16:58] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[21/06/2005|00:21] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[06/12/2009 20:00][--ah-----] C:\WINDOWS\tasks\A947589197E0C12D.job
[03/05/2004 18:30][--a------] C:\WINDOWS\tasks\Rappel d'abonnement 1 auprŠs de l'ISP.job
[06/12/2009 20:09][--ah-----] C:\WINDOWS\tasks\SA.DAT
[30/08/2002 07:00][-r-h-c---] C:\WINDOWS\tasks\DESKTOP.INI

( A947589197E0C12D.job )=( c:\docume~1\famille\applic~1\inside~1\liesforkaudio.exe )

--------------------\\ Listing des dossiers dans C:\Program Files

[16/05/2004|12:36] C:\Program Files\ACE Mega CoDecS Pack
[07/11/2009|18:55] C:\Program Files\Adobe
[19/01/2005|12:23] C:\Program Files\Ahead
[14/11/2009|02:07] C:\Program Files\ALCATEL PC Suite
[18/06/2008|18:30] C:\Program Files\ASUS
[03/11/2009|13:20] C:\Program Files\Avira
[22/04/2004|09:14] C:\Program Files\Broadcom Management Programs
[26/11/2009|20:54] C:\Program Files\CCleaner
[07/01/2005|11:50] C:\Program Files\CDex_150
[01/07/2004|18:57] C:\Program Files\Common Files
[22/04/2004|08:41] C:\Program Files\ComPlus Applications
[22/04/2004|09:15] C:\Program Files\Dell
[22/04/2004|09:17] C:\Program Files\Dell Computer
[11/08/2004|21:29] C:\Program Files\DivX
[05/12/2009|16:16] C:\Program Files\eMule
[05/12/2009|22:39] C:\Program Files\Everest Poker
[26/11/2009|22:25] C:\Program Files\Fichiers communs
[04/05/2004|18:28] C:\Program Files\Friendly Technologies
[18/03/2009|00:45] C:\Program Files\Google
[06/01/2005|14:08] C:\Program Files\Illustrate
[26/03/2005|13:11] C:\Program Files\IncrediMail
[22/06/2006|00:00] C:\Program Files\Inside 1
[04/11/2009|23:58] C:\Program Files\InstallShield Installation Information
[10/12/2006|13:20] C:\Program Files\Intel
[01/11/2009|16:20] C:\Program Files\Internet Explorer
[22/04/2004|09:17] C:\Program Files\Jasc Software Inc
[04/11/2009|01:53] C:\Program Files\Java
[04/11/2004|20:51] C:\Program Files\Kit_ADSL_Mail
[23/09/2006|20:19] C:\Program Files\K-Lite Codec Pack
[09/12/2004|10:57] C:\Program Files\LGGSM
[04/11/2009|23:58] C:\Program Files\Logitech
[04/12/2009|19:32] C:\Program Files\Malwarebytes' Anti-Malware
[01/11/2009|16:37] C:\Program Files\Messenger
[28/10/2007|21:33] C:\Program Files\MeuhMeuhTV
[01/11/2009|14:30] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[20/05/2004|17:46] C:\Program Files\microsoft frontpage
[31/08/2004|11:11] C:\Program Files\Microsoft Office
[11/11/2009|13:38] C:\Program Files\Microsoft Silverlight
[13/07/2004|12:19] C:\Program Files\Microsoft Visual Studio
[22/04/2004|09:15] C:\Program Files\Microsoft Works
[31/08/2004|11:12] C:\Program Files\Microsoft.NET
[24/03/2006|00:53] C:\Program Files\ModemAdsl
[01/11/2009|16:20] C:\Program Files\Movie Maker
[06/12/2009|20:33] C:\Program Files\Mozilla Firefox
[05/11/2009|01:35] C:\Program Files\MSBuild
[01/11/2009|16:20] C:\Program Files\msn
[22/04/2004|08:41] C:\Program Files\MSN Gaming Zone
[11/04/2005|12:02] C:\Program Files\MSN Plug-in
[05/11/2009|01:55] C:\Program Files\MSXML 4.0
[01/11/2009|16:11] C:\Program Files\NetMeeting
[18/03/2006|00:35] C:\Program Files\neuf telecom
[22/04/2004|09:16] C:\Program Files\Nullsoft
[01/11/2009|16:55] C:\Program Files\Outlook Express
[05/11/2009|01:35] C:\Program Files\Reference Assemblies
[20/09/2005|16:10] C:\Program Files\RegCleaner
[22/04/2004|08:41] C:\Program Files\Services en ligne
[31/10/2009|19:18] C:\Program Files\SFR
[22/04/2004|09:14] C:\Program Files\Sonic
[03/12/2009|22:45] C:\Program Files\Spybot - Search & Destroy
[06/12/2009|01:02] C:\Program Files\SpywareBlaster
[24/06/2005|14:42] C:\Program Files\Symantec
[06/12/2009|14:36] C:\Program Files\Trend Micro
[10/12/2006|13:06] C:\Program Files\Ulead Systems
[10/07/2004|02:05] C:\Program Files\Uninstall Information
[03/11/2009|01:02] C:\Program Files\VideoLAN
[22/04/2004|09:16] C:\Program Files\Viewpoint
[14/11/2009|15:08] C:\Program Files\Windows Live
[10/12/2006|13:06] C:\Program Files\Windows Media Components
[05/11/2009|01:21] C:\Program Files\Windows Media Connect 2
[05/11/2009|01:21] C:\Program Files\Windows Media Player
[13/12/2004|01:35] C:\Program Files\Windows NT
[01/11/2009|00:18] C:\Program Files\WindowsUpdate
[18/05/2004|13:59] C:\Program Files\WinRAR
[01/10/2008|21:11] C:\Program Files\WinTV
[12/05/2004|20:09] C:\Program Files\WinZip
[03/12/2009|18:05] C:\Program Files\xerox
[10/12/2006|13:09] C:\Program Files\XviD

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[07/11/2009|18:55] C:\Program Files\Fichiers communs\Adobe
[08/11/2004|02:41] C:\Program Files\Fichiers communs\Adobe Systems Shared
[19/01/2005|12:23] C:\Program Files\Fichiers communs\Ahead
[22/04/2004|09:16] C:\Program Files\Fichiers communs\AOL
[20/05/2004|17:49] C:\Program Files\Fichiers communs\Designer
[04/05/2004|18:28] C:\Program Files\Fichiers communs\FTL Shared
[10/12/2006|13:06] C:\Program Files\Fichiers communs\InstallShield
[22/04/2004|09:11] C:\Program Files\Fichiers communs\Java
[26/11/2009|22:26] C:\Program Files\Fichiers communs\logishrd
[05/11/2009|14:02] C:\Program Files\Fichiers communs\Logitech
[31/10/2009|19:30] C:\Program Files\Fichiers communs\Microsoft Shared
[22/04/2004|08:41] C:\Program Files\Fichiers communs\MSSoap
[22/04/2004|08:41] C:\Program Files\Fichiers communs\ODBC
[20/06/2005|22:28] C:\Program Files\Fichiers communs\Real
[22/04/2004|08:41] C:\Program Files\Fichiers communs\Services
[22/04/2004|09:14] C:\Program Files\Fichiers communs\Sonic
[22/04/2004|08:41] C:\Program Files\Fichiers communs\SpeechEngines
[22/04/2004|09:14] C:\Program Files\Fichiers communs\SureThing Shared
[24/06/2005|14:42] C:\Program Files\Fichiers communs\Symantec Shared
[01/11/2009|16:11] C:\Program Files\Fichiers communs\System
[10/12/2006|13:06] C:\Program Files\Fichiers communs\Ulead Systems
[31/10/2009|19:27] C:\Program Files\Fichiers communs\Windows Live
[07/11/2009|01:23] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 24 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\Famille\APPLIC~1\inside~1
C:\Program Files\inside~1
C:\WINDOWS\Tasks\A947589197E0C12D.job

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-06 20:43:55
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 2

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:10][D:3]-> C:\DOCUME~1\Famille\LOCALS~1\Temp
[F:1][D:0]-> C:\DOCUME~1\Famille\Cookies
[F:6][D:4]-> C:\DOCUME~1\Famille\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 06/12/2009|20:48 - Option : [1]

--------------------\\ Fin du rapport a 20:48:03

• relance LopS&D
• Double-clique sur le raccourci et choisis l'option 2. Cela va supprimer l'infection et provoquer une réinitialisation du fichier hosts.
• A la fin de la suppression, une recherche sera re-lancée.
• Le bloc-note s'ouvre. Edite son contenu dans ta prochaine réponse.

Rapport Lop S&D:

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) CPU 2.50GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A05
USER : Famille ( Administrator )
BOOT : Normal boot
Antivirus : antivir Desktop 9.0.1.32 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:74 Go (Free:14 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 06/12/2009|21:39 )


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\WINDOWS\Tasks\A947589197E0C12D.job
Supprime! - C:\DOCUME~1\Famille\APPLIC~1\inside~1
Supprime! - C:\Program Files\inside~1
-
[ Fichier Hosts ] .. Restaure!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

Supprime! - C:\Program Files\Viewpoint

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans APPLIC~1


[22/04/2004|08:41] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[22/04/2004|09:17] C:\DOCUME~1\ADMINI~1\APPLIC~1\Jasc Software Inc
[03/11/2009|12:30] C:\DOCUME~1\ADMINI~1\APPLIC~1\Malwarebytes
[03/11/2009|16:58] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[22/04/2004|09:19] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sonic
[22/04/2004|09:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun

[06/11/2009|13:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[03/11/2009|16:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AMOK DENT BIB BURN
[03/11/2009|13:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[17/03/2009|23:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[04/11/2009|16:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\KSP
[08/11/2004|02:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[02/11/2009|19:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[26/11/2009|22:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[06/05/2004|22:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[06/11/2009|12:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
[22/04/2004|09:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[04/12/2009|21:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[24/06/2005|14:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[06/12/2009|14:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[03/11/2009|00:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[01/11/2009|21:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[14/11/2009|14:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[22/04/2004|08:41] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[22/04/2004|09:17] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Jasc Software Inc
[22/04/2004|08:41] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[22/04/2004|09:19] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sonic
[22/04/2004|09:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun

[07/11/2009|18:58] C:\DOCUME~1\Famille\APPLIC~1\Adobe
[29/11/2009|16:50] C:\DOCUME~1\Famille\APPLIC~1\dvdcss
[06/07/2006|10:34] C:\DOCUME~1\Famille\APPLIC~1\Google
[01/07/2006|08:49] C:\DOCUME~1\Famille\APPLIC~1\GramDentBird
[29/06/2004|11:10] C:\DOCUME~1\Famille\APPLIC~1\Help
[22/04/2004|08:41] C:\DOCUME~1\Famille\APPLIC~1\Identities
[22/04/2004|09:17] C:\DOCUME~1\Famille\APPLIC~1\Jasc Software Inc
[01/07/2004|16:40] C:\DOCUME~1\Famille\APPLIC~1\Macromedia
[02/11/2009|19:09] C:\DOCUME~1\Famille\APPLIC~1\Malwarebytes
[15/12/2006|23:46] C:\DOCUME~1\Famille\APPLIC~1\Media Player Classic
[04/12/2009|18:59] C:\DOCUME~1\Famille\APPLIC~1\Microsoft
[20/05/2004|17:46] C:\DOCUME~1\Famille\APPLIC~1\Microsoft Web Folders
[11/11/2009|19:50] C:\DOCUME~1\Famille\APPLIC~1\Mozilla
[25/10/2004|19:37] C:\DOCUME~1\Famille\APPLIC~1\MSN6
[14/12/2004|15:45] C:\DOCUME~1\Famille\APPLIC~1\Sonic
[22/04/2004|09:11] C:\DOCUME~1\Famille\APPLIC~1\Sun
[03/11/2009|00:50] C:\DOCUME~1\Famille\APPLIC~1\Ulead Systems
[05/12/2009|16:09] C:\DOCUME~1\Famille\APPLIC~1\vlc

[17/12/2004|17:05] C:\DOCUME~1\INVIT~1\APPLIC~1\Adobe
[30/10/2006|21:44] C:\DOCUME~1\INVIT~1\APPLIC~1\Google
[22/04/2004|08:41] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities
[22/04/2004|09:17] C:\DOCUME~1\INVIT~1\APPLIC~1\Jasc Software Inc
[23/11/2004|21:00] C:\DOCUME~1\INVIT~1\APPLIC~1\Macromedia
[03/12/2009|13:02] C:\DOCUME~1\INVIT~1\APPLIC~1\Malwarebytes
[03/12/2009|12:57] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft
[22/04/2004|09:19] C:\DOCUME~1\INVIT~1\APPLIC~1\Sonic
[22/04/2004|09:11] C:\DOCUME~1\INVIT~1\APPLIC~1\Sun

[03/11/2009|20:37] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[03/11/2009|17:01] C:\DOCUME~1\LOCALS~1\APPLIC~1\AVG7
[19/06/2004|18:15] C:\DOCUME~1\LOCALS~1\APPLIC~1\McAfee.com Personal Firewall
[03/11/2009|16:58] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[03/11/2009|16:58] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[21/06/2005|00:21] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[03/05/2004 18:30][--a------] C:\WINDOWS\tasks\Rappel d'abonnement 1 auprŠs de l'ISP.job
[06/12/2009 20:09][--ah-----] C:\WINDOWS\tasks\SA.DAT
[30/08/2002 07:00][-r-h-c---] C:\WINDOWS\tasks\DESKTOP.INI

--------------------\\ Listing des dossiers dans C:\Program Files

[16/05/2004|12:36] C:\Program Files\ACE Mega CoDecS Pack
[07/11/2009|18:55] C:\Program Files\Adobe
[19/01/2005|12:23] C:\Program Files\Ahead
[14/11/2009|02:07] C:\Program Files\ALCATEL PC Suite
[18/06/2008|18:30] C:\Program Files\ASUS
[03/11/2009|13:20] C:\Program Files\Avira
[22/04/2004|09:14] C:\Program Files\Broadcom Management Programs
[26/11/2009|20:54] C:\Program Files\CCleaner
[07/01/2005|11:50] C:\Program Files\CDex_150
[01/07/2004|18:57] C:\Program Files\Common Files
[22/04/2004|08:41] C:\Program Files\ComPlus Applications
[22/04/2004|09:15] C:\Program Files\Dell
[22/04/2004|09:17] C:\Program Files\Dell Computer
[11/08/2004|21:29] C:\Program Files\DivX
[05/12/2009|16:16] C:\Program Files\eMule
[05/12/2009|22:39] C:\Program Files\Everest Poker
[26/11/2009|22:25] C:\Program Files\Fichiers communs
[04/05/2004|18:28] C:\Program Files\Friendly Technologies
[18/03/2009|00:45] C:\Program Files\Google
[06/01/2005|14:08] C:\Program Files\Illustrate
[26/03/2005|13:11] C:\Program Files\IncrediMail
[04/11/2009|23:58] C:\Program Files\InstallShield Installation Information
[10/12/2006|13:20] C:\Program Files\Intel
[01/11/2009|16:20] C:\Program Files\Internet Explorer
[22/04/2004|09:17] C:\Program Files\Jasc Software Inc
[04/11/2009|01:53] C:\Program Files\Java
[04/11/2004|20:51] C:\Program Files\Kit_ADSL_Mail
[23/09/2006|20:19] C:\Program Files\K-Lite Codec Pack
[09/12/2004|10:57] C:\Program Files\LGGSM
[04/11/2009|23:58] C:\Program Files\Logitech
[04/12/2009|19:32] C:\Program Files\Malwarebytes' Anti-Malware
[01/11/2009|16:37] C:\Program Files\Messenger
[28/10/2007|21:33] C:\Program Files\MeuhMeuhTV
[01/11/2009|14:30] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[20/05/2004|17:46] C:\Program Files\microsoft frontpage
[31/08/2004|11:11] C:\Program Files\Microsoft Office
[11/11/2009|13:38] C:\Program Files\Microsoft Silverlight
[13/07/2004|12:19] C:\Program Files\Microsoft Visual Studio
[22/04/2004|09:15] C:\Program Files\Microsoft Works
[31/08/2004|11:12] C:\Program Files\Microsoft.NET
[24/03/2006|00:53] C:\Program Files\ModemAdsl
[01/11/2009|16:20] C:\Program Files\Movie Maker
[06/12/2009|20:33] C:\Program Files\Mozilla Firefox
[05/11/2009|01:35] C:\Program Files\MSBuild
[01/11/2009|16:20] C:\Program Files\msn
[22/04/2004|08:41] C:\Program Files\MSN Gaming Zone
[11/04/2005|12:02] C:\Program Files\MSN Plug-in
[05/11/2009|01:55] C:\Program Files\MSXML 4.0
[01/11/2009|16:11] C:\Program Files\NetMeeting
[18/03/2006|00:35] C:\Program Files\neuf telecom
[22/04/2004|09:16] C:\Program Files\Nullsoft
[01/11/2009|16:55] C:\Program Files\Outlook Express
[05/11/2009|01:35] C:\Program Files\Reference Assemblies
[20/09/2005|16:10] C:\Program Files\RegCleaner
[22/04/2004|08:41] C:\Program Files\Services en ligne
[31/10/2009|19:18] C:\Program Files\SFR
[22/04/2004|09:14] C:\Program Files\Sonic
[03/12/2009|22:45] C:\Program Files\Spybot - Search & Destroy
[06/12/2009|01:02] C:\Program Files\SpywareBlaster
[24/06/2005|14:42] C:\Program Files\Symantec
[06/12/2009|14:36] C:\Program Files\Trend Micro
[10/12/2006|13:06] C:\Program Files\Ulead Systems
[10/07/2004|02:05] C:\Program Files\Uninstall Information
[03/11/2009|01:02] C:\Program Files\VideoLAN
[14/11/2009|15:08] C:\Program Files\Windows Live
[10/12/2006|13:06] C:\Program Files\Windows Media Components
[05/11/2009|01:21] C:\Program Files\Windows Media Connect 2
[05/11/2009|01:21] C:\Program Files\Windows Media Player
[13/12/2004|01:35] C:\Program Files\Windows NT
[01/11/2009|00:18] C:\Program Files\WindowsUpdate
[18/05/2004|13:59] C:\Program Files\WinRAR
[01/10/2008|21:11] C:\Program Files\WinTV
[12/05/2004|20:09] C:\Program Files\WinZip
[03/12/2009|18:05] C:\Program Files\xerox
[10/12/2006|13:09] C:\Program Files\XviD

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[07/11/2009|18:55] C:\Program Files\Fichiers communs\Adobe
[08/11/2004|02:41] C:\Program Files\Fichiers communs\Adobe Systems Shared
[19/01/2005|12:23] C:\Program Files\Fichiers communs\Ahead
[22/04/2004|09:16] C:\Program Files\Fichiers communs\AOL
[20/05/2004|17:49] C:\Program Files\Fichiers communs\Designer
[04/05/2004|18:28] C:\Program Files\Fichiers communs\FTL Shared
[10/12/2006|13:06] C:\Program Files\Fichiers communs\InstallShield
[22/04/2004|09:11] C:\Program Files\Fichiers communs\Java
[26/11/2009|22:26] C:\Program Files\Fichiers communs\logishrd
[05/11/2009|14:02] C:\Program Files\Fichiers communs\Logitech
[31/10/2009|19:30] C:\Program Files\Fichiers communs\Microsoft Shared
[22/04/2004|08:41] C:\Program Files\Fichiers communs\MSSoap
[22/04/2004|08:41] C:\Program Files\Fichiers communs\ODBC
[20/06/2005|22:28] C:\Program Files\Fichiers communs\Real
[22/04/2004|08:41] C:\Program Files\Fichiers communs\Services
[22/04/2004|09:14] C:\Program Files\Fichiers communs\Sonic
[22/04/2004|08:41] C:\Program Files\Fichiers communs\SpeechEngines
[22/04/2004|09:14] C:\Program Files\Fichiers communs\SureThing Shared
[24/06/2005|14:42] C:\Program Files\Fichiers communs\Symantec Shared
[01/11/2009|16:11] C:\Program Files\Fichiers communs\System
[10/12/2006|13:06] C:\Program Files\Fichiers communs\Ulead Systems
[31/10/2009|19:27] C:\Program Files\Fichiers communs\Windows Live
[07/11/2009|01:23] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 25 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-06 21:42:22
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 2

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:14][D:3]-> C:\DOCUME~1\Famille\LOCALS~1\Temp
[F:1][D:0]-> C:\DOCUME~1\Famille\Cookies
[F:6][D:4]-> C:\DOCUME~1\Famille\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 06/12/2009|20:48 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 06/12/2009|21:44 - Option : [2]

--------------------\\ Fin du rapport a 21:44:37

• Télécharge OTM (de Old_Timer) sur ton bureau,
• Double-clique sur OTM.exe pour lancer le programme,
• Copie la liste de fichiers ou de dossiers ci-dessous et colle-la dans la fenêtre du programme "Paste Instructions for Items to be Moved" :

nettoyage

:files
C:\DOCUME~1\ALLUSE~1\APPLIC~1\AMOK DENT BIB BURN
C:\DOCUME~1\Famille\APPLIC~1\GramDentBird
C:\Program Files\Everest Poker
:commands
[emptytemp]

• Clique sur MoveIt! pour lancer la suppression,
• Le résultat appraraîtra dans le cadre Results.
• Clique sur Exit pour fermer le programme.
• Poste le rapport qui est situé ici : C:\\\_OTM\MovedFiles
• Il te sera peut-être demandé de redémarrer ton PC. Dans ce cas, clique sur Yes.

Rapport OTM:

All processes killed
Error: Unable to interpret < nettoyage> in the current context!
========== FILES ==========
C:\DOCUME~1\ALLUSE~1\APPLIC~1\AMOK DENT BIB BURN folder moved successfully.
C:\DOCUME~1\Famille\APPLIC~1\GramDentBird folder moved successfully.
C:\Program Files\Everest Poker\history folder moved successfully.
C:\Program Files\Everest Poker\data\startup\shared\sounds folder moved successfully.
C:\Program Files\Everest Poker\data\startup\shared\icons folder moved successfully.
C:\Program Files\Everest Poker\data\startup\shared\bitmaps folder moved successfully.
C:\Program Files\Everest Poker\data\startup\shared folder moved successfully.
C:\Program Files\Everest Poker\data\startup\fr folder moved successfully.
C:\Program Files\Everest Poker\data\startup\en folder moved successfully.
C:\Program Files\Everest Poker\data\startup folder moved successfully.
C:\Program Files\Everest Poker\data\shared\shared\sounds folder moved successfully.
C:\Program Files\Everest Poker\data\shared\shared\bitmaps folder moved successfully.
C:\Program Files\Everest Poker\data\shared\shared folder moved successfully.
C:\Program Files\Everest Poker\data\shared\fr folder moved successfully.
C:\Program Files\Everest Poker\data\shared folder moved successfully.
C:\Program Files\Everest Poker\data\mp-poker\fr folder moved successfully.
C:\Program Files\Everest Poker\data\mp-poker\background folder moved successfully.
C:\Program Files\Everest Poker\data\mp-poker folder moved successfully.
C:\Program Files\Everest Poker\data\mp-lobby folder moved successfully.
C:\Program Files\Everest Poker\data\fonts folder moved successfully.
C:\Program Files\Everest Poker\data folder moved successfully.
C:\Program Files\Everest Poker folder moved successfully.
File/Folder :commands not found.
File/Folder [emptytemp] not found.

OTM by OldTimer - Version 3.1.2.2 log created on 12062009_215716

comment se comporte ton PC?

poste un nouveau rapport RSIT

ca a l air mieu qu avant

rapport log

Logfile of random's system information tool 1.06 (written by random/random)
Run by Famille at 2009-12-06 22:22:00
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 15 GB (20%) free of 76 GB
Total RAM: 254 MB (15% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:23:35, on 06/12/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Documents and Settings\Famille\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Famille.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.neuf.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.euro.dell.com/countries/fr/fra/gen/default.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1257014988620
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{E5C978EB-A69F-456C-9051-B0B93C6AB2E9}: NameServer = 192.168.1.1
O20 - Winlogon Notify: utilplay - C:\WINDOWS\security\LOGS\utilplay.dll (file missing)
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Avira antivir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira antivir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 5857 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Rappel d'abonnement 1 auprès de l'ISP.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5CA3D70E-1895-11CF-8E15-001234567890}]
DriveLetterAccess - C:\WINDOWS\system32\dla\tfswshx.dll [2003-08-06 106548]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-11-24 263280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2009-11-24 764912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-11-24 263280]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2005-10-19 155648]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2005-10-19 126976]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-05-26 68856]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Configuration de la neuf Box]
C:\Program Files\neuf telecom\neuf Box\Wizard\QuickAccess.exe [2005-12-13 389120]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EzAgent]
C:\Program Files\ASUS\EZVCR\Agent.exe [2006-07-26 122880]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FlashPlayerUpdate]
C:\WINDOWS\system32\Macromed\Flash\FlashUtil9f.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechCameraAssistant]
C:\Program Files\Logitech\Video\CameraAssistant.exe [2005-12-07 489472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechCameraService(E)]
C:\WINDOWS\system32\ElkCtrl.exe [2004-11-01 262144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideo[inspector]]
C:\Program Files\Logitech\Video\InstallHelper.exe [2005-12-07 73728]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LVCOMSX]
C:\WINDOWS\system32\LVCOMSX.EXE [2005-12-09 225280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes Anti-Malware (reboot)]
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2009-12-03 1394000]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\WINDOWS\System32\qttask.exe -atboottime []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-05-26 68856]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Tweak UI]
TWEAKUI.CPL,TweakMeUp []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxsrvc.dll [2005-10-19 348160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\utilplay]
C:\WINDOWS\security\LOGS\utilplay.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"C:\Program Files\Yahoo!\Messenger\YPager.exe"="C:\Program Files\Yahoo!\Messenger\YPager.exe:*:Enabled:Yahoo! Messenger"
"C:\Program Files\Yahoo!\Messenger\YServer.exe"="C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server"
"C:\Program Files\IncrediMail\bin\IMApp.exe"="C:\Program Files\IncrediMail\bin\IMApp.exe:*:Enabled:IncrediMail"
"C:\Program Files\IncrediMail\bin\IncMail.exe"="C:\Program Files\IncrediMail\bin\IncMail.exe:*:Enabled:IncrediMail"
"C:\Program Files\IncrediMail\bin\ImpCnt.exe"="C:\Program Files\IncrediMail\bin\ImpCnt.exe:*:Enabled:IncrediMail"
"C:\Program Files\Internet Explorer\iexplore.exe"="C:\Program Files\Internet Explorer\iexplore.exe:*:Enabled:Internet Explorer"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\WINDOWS\SYSTEM32\dpvsetup.exe"="C:\WINDOWS\SYSTEM32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\SYSTEM32\rundll32.exe"="C:\WINDOWS\SYSTEM32\rundll32.exe:*:Enabled:Exécuter une DLL en tant qu'application"
"%windir%\system32\ccapp.exe"="%windir%\system32\ccapp.exe:*:Enabled:System Process"
"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe"="C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe:*:Enabled:Kaspersky Anti-Virus Service"
"C:\Program Files\Azureus\Azureus.exe"="C:\Program Files\Azureus\Azureus.exe:*:Enabled:Azureus"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

======List of files/folders created in the last 1 months======

2009-12-06 21:57:16 ----DC---- C:\_OTM
2009-12-06 20:40:42 ----AC---- C:\lopR.txt
2009-12-06 20:39:59 ----DC---- C:\Lop SD
2009-12-06 20:09:49 ----AC---- C:\FindyKill.txt
2009-12-06 19:30:30 ----DC---- C:\FindyKill
2009-12-06 19:06:20 ----DC---- C:\rsit
2009-12-06 14:36:23 ----D---- C:\Program Files\Trend Micro
2009-12-04 17:53:10 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2009-12-04 17:52:35 ----D---- C:\Program Files\SpywareBlaster
2009-12-03 18:05:41 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-12-03 18:05:30 ----D---- C:\Program Files\xerox
2009-11-26 22:28:04 ----HD---- C:\WINDOWS\$hf_mig$
2009-11-26 22:25:39 ----D---- C:\Program Files\Fichiers communs\logishrd
2009-11-26 20:54:18 ----D---- C:\Program Files\CCleaner
2009-11-25 13:49:19 ----D---- C:\Documents and Settings\Famille\Application Data\dvdcss
2009-11-14 14:58:24 ----D---- C:\Program Files\Windows Live
2009-11-14 14:34:00 ----D---- C:\WINDOWS\system32\Adobe
2009-11-11 19:49:26 ----D---- C:\Documents and Settings\Famille\Application Data\Mozilla
2009-11-11 19:48:21 ----D---- C:\Program Files\Mozilla Firefox
2009-11-11 13:38:02 ----D---- C:\Program Files\Microsoft Silverlight
2009-11-07 19:04:12 ----DC---- C:\fsaua.data
2009-11-07 01:11:20 ----SHDC---- C:\Program Files\Fichiers communs\WindowsLiveInstaller

======List of files/folders modified in the last 1 months======

2009-12-06 22:06:45 ----D---- C:\WINDOWS\Prefetch
2009-12-06 22:01:04 ----D---- C:\WINDOWS\Temp
2009-12-06 22:00:23 ----D---- C:\WINDOWS\system32\CatRoot2
2009-12-06 21:57:25 ----RD---- C:\Program Files
2009-12-06 21:39:29 ----SD---- C:\WINDOWS\Tasks
2009-12-06 20:25:42 ----D---- C:\WINDOWS\SYSTEM32
2009-12-06 20:25:41 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-12-06 20:23:45 ----D---- C:\WINDOWS
2009-12-06 14:40:20 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-12-05 16:16:24 ----D---- C:\Program Files\eMule
2009-12-05 16:09:15 ----D---- C:\Documents and Settings\Famille\Application Data\vlc
2009-12-04 21:54:31 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-12-04 19:32:47 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-12-04 19:31:00 ----D---- C:\WINDOWS\system32\DRIVERS
2009-12-04 19:13:21 ----SHD---- C:\WINDOWS\Installer
2009-12-04 18:59:34 ----SD---- C:\Documents and Settings\Famille\Application Data\Microsoft
2009-12-03 22:45:22 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-12-03 18:24:06 ----D---- C:\I386
2009-12-03 16:39:07 ----SHD---- C:\RECYCLER
2009-12-02 17:50:34 ----D---- C:\WINDOWS\Debug
2009-12-02 17:48:55 ----AC---- C:\WINDOWS\ezvcr.ini
2009-11-28 17:55:06 ----AC---- C:\WINDOWS\ModemLog_LG Internet Kit Modem Driver.txt
2009-11-26 22:29:05 ----HD---- C:\WINDOWS\INF
2009-11-26 22:28:54 ----D---- C:\WINDOWS\WinSxS
2009-11-26 22:28:25 ----RSHD---- C:\WINDOWS\system32\DLLCACHE
2009-11-26 22:27:24 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-11-26 22:25:39 ----D---- C:\Program Files\Fichiers communs
2009-11-26 22:24:47 ----RSD---- C:\WINDOWS\assembly
2009-11-26 22:24:43 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-11-14 14:58:05 ----D---- C:\Documents and Settings\All Users\Application Data\WLInstaller
2009-11-14 14:10:08 ----ASHC---- C:\BOOT.INI
2009-11-14 14:10:08 ----A---- C:\WINDOWS\WIN.INI
2009-11-14 14:10:08 ----A---- C:\WINDOWS\SYSTEM.INI
2009-11-14 02:07:36 ----D---- C:\Program Files\ALCATEL PC Suite
2009-11-07 18:58:07 ----D---- C:\Documents and Settings\Famille\Application Data\Adobe
2009-11-07 18:55:26 ----D---- C:\Program Files\Adobe
2009-11-07 18:55:25 ----D---- C:\Program Files\Fichiers communs\Adobe
2009-11-07 01:28:07 ----DC---- C:\WINDOWS\system32\DRVSTORE

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 omci;OMCI WDM Device Driver; C:\WINDOWS\System32\DRIVERS\omci.sys [2002-11-08 17217]
R1 sscdbhk5;sscdbhk5; C:\WINDOWS\system32\drivers\sscdbhk5.sys [2003-07-14 5621]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
R1 ssrtln;ssrtln; C:\WINDOWS\system32\drivers\ssrtln.sys [2003-07-14 23219]
R2 Aspi32;Aspi32; C:\WINDOWS\system32\drivers\Aspi32.sys [2002-07-17 16877]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-07-28 55656]
R2 drvnddm;drvnddm; C:\WINDOWS\system32\drivers\drvnddm.sys [2003-06-20 40448]
R2 tfsnboio;tfsnboio; C:\WINDOWS\system32\dla\tfsnboio.sys [2003-08-06 25685]
R2 tfsncofs;tfsncofs; C:\WINDOWS\system32\dla\tfsncofs.sys [2003-08-06 34837]
R2 tfsndrct;tfsndrct; C:\WINDOWS\system32\dla\tfsndrct.sys [2003-08-06 4117]
R2 tfsndres;tfsndres; C:\WINDOWS\system32\dla\tfsndres.sys [2003-08-06 2265]
R2 tfsnifs;tfsnifs; C:\WINDOWS\system32\dla\tfsnifs.sys [2003-08-06 83284]
R2 tfsnopio;tfsnopio; C:\WINDOWS\system32\dla\tfsnopio.sys [2003-08-06 14229]
R2 tfsnpool;tfsnpool; C:\WINDOWS\system32\dla\tfsnpool.sys [2003-08-06 6357]
R2 tfsnudf;tfsnudf; C:\WINDOWS\system32\dla\tfsnudf.sys [2003-08-06 98068]
R2 tfsnudfa;tfsnudfa; C:\WINDOWS\system32\dla\tfsnudfa.sys [2003-08-06 100373]
R2 tmcomm;tmcomm; \??\C:\WINDOWS\system32\drivers\tmcomm.sys []
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2002-04-01 4816]
R3 bcm4sbxp;Broadcom 440x 10/100 Integrated Controller XP Driver; C:\WINDOWS\System32\DRIVERS\bcm4sbxp.sys [2003-07-15 43136]
R3 HCW848NT;Hauppauge Win/TV; C:\WINDOWS\system32\DRIVERS\hcw848nt.sys [2000-06-12 140440]
R3 ialm;ialm; C:\WINDOWS\System32\DRIVERS\ialmnt5.sys [2005-10-19 807998]
R3 Lvckap;Logitech Kernel Audio Processing Filter Driver; \??\C:\WINDOWS\system32\drivers\Lvckap.sys []
R3 LVRS;Logitech RightSound Filter Driver; C:\WINDOWS\system32\DRIVERS\lvrs.sys [2009-04-30 265496]
R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys [2005-12-06 39424]
R3 pepifilter;Volume Adapter; C:\WINDOWS\system32\DRIVERS\lv302af.sys [2009-04-30 13976]
R3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\WINDOWS\system32\DRIVERS\LV302V32.SYS [2009-04-30 2687512]
R3 PPPoEWin;PPPoEWin Miniport; C:\WINDOWS\System32\DRIVERS\PPPoEWin.SYS [2003-09-25 104375]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2002-08-30 5888]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2003-11-18 591808]
R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 P3;Pilote processeur Intel Pentium III; C:\WINDOWS\System32\DRIVERS\p3.sys [2008-04-14 46848]
S3 {6080A529-897E-4629-A488-ABA0C29B635E};Intel(R) Graphics Platform (SoftBIOS) Driver; C:\WINDOWS\system32\drivers\ialmsbw.sys [2003-10-08 120830]
S3 {D31A0762-0CEB-444e-ACFF-B049A1F6FE91};Intel(R) Graphics Chipset (KCH) Driver; C:\WINDOWS\system32\drivers\ialmkchw.sys [2003-10-08 98842]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 EL90XBC;Pilote de la carte EtherLink XL 90XB/C 3Com; C:\WINDOWS\System32\DRIVERS\el90xbc5.sys [2001-08-17 66591]
S3 FilterService;Filter Service; C:\WINDOWS\System32\Drivers\F11AFLT.SYS [2002-02-03 15660]
S3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 lvmvdrv;Logitech Machine Vision Engine Loader; \??\C:\WINDOWS\system32\drivers\lvmvdrv.sys []
S3 mouhid;Pilote HID de souris; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-23 12288]
S3 MPE;Filtre BDA MPE; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-13 15232]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2004-08-04 1897408]
S3 PID_08A0;QuickCam IM(PID_08A0); C:\WINDOWS\system32\DRIVERS\LV302AV.SYS [2005-12-06 916096]
S3 PID_0928;Labtec WebCam(PID_0928); C:\WINDOWS\system32\DRIVERS\LV561AV.SYS []
S3 SABProcEnum;SABProcEnum; \??\C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\SABProcEnum.sys []
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SONYPVU1;Pilote de filtrage Sony USB (SONYPVU1); C:\WINDOWS\System32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 TVICHW32;TVICHW32; \??\C:\WINDOWS\system32\DRIVERS\TVICHW32.SYS []
S3 u3kmini;ASUS My Cinema-U3000 Mini; C:\WINDOWS\System32\Drivers\u3kmini.sys [2006-08-23 352000]
S3 USB_RNDIS;USB Remote NDIS Network Device Driver; C:\WINDOWS\System32\DRIVERS\usb8023.sys [2008-04-13 12800]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\System32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2008-04-13 26112]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 usbvideo;Périphérique vidéo USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\System32\DRIVERS\wanatw4.sys []
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 agp440;Filtre de bus AGP Intel; C:\WINDOWS\System32\DRIVERS\agp440.sys [2008-04-13 42368]
S4 agpCPQ;Filtre de bus AGP Compaq; C:\WINDOWS\System32\DRIVERS\agpCPQ.sys [2008-04-13 44928]
S4 alim1541;Filtre de bus AGP ALI; C:\WINDOWS\System32\DRIVERS\alim1541.sys [2008-04-13 42752]
S4 amdagp;Pilote de filtre du bus AMD AGP; C:\WINDOWS\System32\DRIVERS\amdagp.sys [2008-04-13 43008]
S4 cbidf;cbidf; C:\WINDOWS\System32\DRIVERS\cbidf2k.sys [2001-08-17 13952]
S4 IntelIde;IntelIde; C:\WINDOWS\System32\DRIVERS\intelide.sys [2008-04-14 5504]
S4 sisagp;Filtre de bus AGP SIS; C:\WINDOWS\System32\DRIVERS\sisagp.sys [2008-04-13 40960]
S4 viaagp;Filtre de bus AGP VIA; C:\WINDOWS\System32\DRIVERS\viaagp.sys [2008-04-13 42240]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirSchedulerService;Avira antivir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
R2 AntiVirService;Avira antivir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe [2004-02-26 49152]
R3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe [2004-11-08 68096]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-05-18 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

1/

nettoyage
:files
C:\WINDOWS\security\LOGS\utilplay.dll

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\utilplay]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\utilplay]

:commands
[emptytemp]

2/

lance Hijack This pour un scan et coche puis fixe ces lignes si encore présentes comme indiqué sur ce tutoriel

O20 - Winlogon Notify: utilplay - C:\WINDOWS\security\LOGS\utilplay.dll (file missing)

3/

mets Malwarebytes à jour et scanne ton PC scan long supprime tout ce qu'il trouve et poste son rapport

à demain

1/ voici le rapport OTM:

All processes killed
Error: Unable to interpret < nettoyage> in the current context!
========== FILES ==========
File/Folder C:\WINDOWS\security\LOGS\utilplay.dll not found.
File/Folder :reg not found.
File/Folder [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\utilplay] not found.
File/Folder [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\utilplay] not found.
File/Folder :commands not found.
File/Folder [emptytemp] not found.

OTM by OldTimer - Version 3.1.2.2 log created on 12062009_225926

j envoie le reste des qu ils sont disponibles

merci bonne nuit a demain

bonjour

pour le 2/ j ai effectue HijackThis et "fix" la ligne

pour le 3/ j ai fait le scan Malwarebytes' Anti-Malware ca a pris beaucoup de temps

Rapport :

Malwarebytes' Anti-Malware 1.42
Version de la base de données: 3305
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

07/12/2009 15:19:29
mbam-log-2009-12-07 (15-19-29).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 197171
Temps écoulé: 5 hour(s), 16 minute(s), 27 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

comment se comporte ton pc?

bonjour il va deja beaucoup mieu mais y a encore des moments ou ca rame surement dû a ma memoire (256 Mo)

comment puis je ameliorer ma memoire?j ai vu que je peux changer en allant sur panneau de configuration/systeme/avance /performance/avance

espace disponible :15483Mo

la taille est geree par le systeme

minimale autorisee:2 Mo

recommandee:381 Mo

allouee actuellement :381 Mo

un conseil pour essayer d optimiser ma memoire?

un conseil pour essayer d optimiser ma memoire?

là il vaut mieux que tu demandes sur le forum "les mains dans le cambouis" tu y auras des réponses de personnes bien plus compétentes que moi...

si tout va bien maintenant

Nettoyage des outils utilisés pour la désinfection; inutile de les garder sur le PC, puisque constamment mis à jour.

* Ferme toutes les applications en cours, puis télécharge ToolsCleaner (de A.Rothstein et Dj Quiou) sur ton Bureau :

• Double clique sur ToolsCleaner2.exe -> clique sur -> Recherche et laisse le scan se terminer.
• Clique sur -> Suppression pour finaliser
• Clique sur -> Quitter, pour que le rapport puisse se créer.
• Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).
• Note : ton bureau va disparaître, c'est normal. S'il n'apparaît pas à la fin du scan, fais la manip suivante :
  
  • Ctrl+Alt+Supp pour ouvrir le Gestionnaire des tâches.
  • Puis rends toi à l'onglet "Processus", clique en haut à gauche sur "Fichiers" et choisis "Exécuter"
  • Tape : explorer.exe et valide. Cela fera ré-apparaître ton Bureau.

.
** Tu peux par contre, garder Malwarebytes'Anti-malware et CCleaner. Utilise CCleaner tous les soirs avant de couper le PC (ne prends que quelques secondes!)

.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.
.

Vaccination des clés USB, disques durs externes, etc.

Cela permet d'éviter un certain nombre d'infections utilisant ce moyen pour se propager.

Tu peux lire cet article et télécharger l'application pour vacciner tes supports USB LÀ . Il faut placer le vaccin sur le support et exécuter le programme.
.

.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.

J'aimerais que tu fasses une petite chose pour moi; modifie le titre de ton sujet. Comme on connait l'infection,
je te propose de le modifier afin de faciliter la lecture et la recherche, pour tous les autres astuciens/nes.

Replace-toi sur ton premier message du sujet, clique sur ce bouton -> et modifie ton titre de cette manière :
restes de bagle et infection Lop et clique sur "Publier le message". Merci!

.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.

Il est fortement recommandé d'avoir tous ses logiciels de sécurité à jour, afin d'éviter les failles par lesquelles s'engouffrent les infections.

• Pour suivre l'évolution des mises à jour de quelques logiciels de protection, ainsi que de Java : http://forum.pcastuces.com/sujet.asp?f=25&s=25842

.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.

/!\ Maintenant que ton PC n'est plus infecté, désactive la "Restauration du système" afin de créer un point de restauration sain.

Pour désactiver ou activer la Restauration du système, tu dois ouvrir une session Administrateur sous Windows XP.

Désactivation :
Clique droit sur le "Poste de travail" > Propriétés > onglet "Restauration du système" > coche la case "Désactiver la Restauration du système sur tous les lecteurs"
> Appliquer et Ok.

Ré-activation :
Suivre le même chemin ; décoche la case "Désactiver la Restauration du système sur tous les lecteurs"
> Appliquer et Ok. Redémarre l'ordinateur.

Comment faire pour : http://forum.pcastuces.com/desactiver_la_restauration_systeme-f31s7.htm

.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.

Je te conseille de défragmenter ton PC :

Défragmenter tous ses disques durs en un clic - Windows Vista

Conservez un disque dur propre avec Windows XP

.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.

/!\ Pour améliorer la sécurité de ton PC, prends quelques instants pour lire...

Sécuriser son PC +WIFI (versions "hot" & "light") : http://forum.pcastuces.com/sujet.asp?f=25&s=25892

Prévention et protection - Comment vous prémunir : http://forum.pcastuces.com/sujet.asp?f=25&s=36131

Les risques sécuritaires du peer-to-peer en 10 points : http://www.libellules.ch/phpBB2/les-risques-securitaires-du-peer-to-peer-en-10-points-t28947.html

Pourquoi éviter le P2P ? Point législatif et dangers : http://www.speedweb1.org/forum-tesgaz/viewtopic.php?t=1793

LE CRACK dans toute sa splendeur : http://www.speedweb1.org/forum-tesgaz/viewtopic.php?t=65

.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.

S'il te plait, note ton sujet [Résolu] en cliquant sur Marquer comme résolu, à gauche, en bas de la page ou

dans la barre de titre de ton sujet. Merci !

Prudence sur Internet et parle de PC Astuces autour de toi!

un grand merci pour ton aide et tes conseils j en parle constamment du forum pc astuces

j ai bien efface tous les outils precedemment utilises

j ai bien fai une restauration je pense que tout va mieu sur l ordi pour le reste je vais me rendre sur l autre forum toujours sur pc astuces biensur!!!!