Bonjour tout le monde !

J'ai un probleme avec mon ordinateur : j'ai mon centre de securité windows impossible a activer , de plus j'ai une fenetre internet qui s'ouvre toute les 30 secondes , c'est assez deseperan!

Donc j'aimerais avoir vos conseils afin de resoudre ce probleme .

J'ai fait un scan :

Logfile of Trend Micro HijackThis v2.0.3 (BETA)
Scan saved at 13:55:41, on 23/12/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18349)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\TrendMicro\HiJackThis\HiJackThis.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=83&bd=Pavilion&pf=cnnb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=83&bd=Pavilion&pf=cnnb
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=83&bd=Pavilion&pf=cnnb
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O2 - BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\CoIEPlg.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\2.0"
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\aestsrv.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe
O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (Audiosrv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: Planificateur LiveUpdate automatique (Automatic LiveUpdate Scheduler) - Symantec Corporation - c:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (BthServ) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe
O23 - Service: @%SystemRoot%\system32\dhcpcsvc.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe
O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe
O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\emdmgmt.dll,-1000 (EMDMgmt) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (Eventlog) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Easybits Shared Services for Windows (ezSharedSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard Corporation - C:\Windows\system32\Hpservice.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-200 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe
O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - c:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe
O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe
O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe
O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\netprof.dll,-246 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe
O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Recovery Service for Windows - Unknown owner - C:\Windows\SMINST\BLService.exe
O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe
O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe
O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe
O23 - Service: @%SystemRoot%\system32\SLUINotify.dll,-103 (SLUINotify) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe
O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\STacSV.exe
O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe
O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe
O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\wmpnetwk.exe
O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe
O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe

--
End of file - 22957 bytes

MERCI D'AVANCE !!

bonjour et bienvenue sur PCA Sécurité

peux tu faire

cette procédure

et poster les rapports stp

quand tu parles de fenêtres qui s'ouvrent, quel genre de fenêtre ? pub ?

Deja merci beaucoup de soccuper de moi !

Logfile of random's system information tool 1.06 (written by random/random)
Run by Flavien at 2009-12-24 14:54:20
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
System drive C: has 257 GB (87%) free of 296 GB
Total RAM: 3038 MB (59% free)

HijackThis download failed

======Scheduled tasks folder======

C:\Windows\tasks\HPCeeScheduleForFlavien.job
C:\Windows\tasks\Norton Internet Security - Effectuer une analyse complète du système - Flavien.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
c:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\coIEPlg.dll [2008-06-30 349552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Symantec Intrusion Prevention - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll [2008-07-29 116088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll [2008-03-25 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7C554162-8CB7-45A4-B8F4-8EA1C75885F9}]
AOL Toolbar BHO - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll [2008-02-03 1185120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Show Norton Toolbar - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\CoIEPlg.dll [2008-06-30 349552]
{DE9C389F-3316-41A7-809B-AA305ED9D922} - AOL Toolbar - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll [2008-02-03 1185120]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-05-14 13535776]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-05-14 92704]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-01-18 1033512]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray.exe [2008-06-27 442467]
"UCam_Menu"=C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2007-12-24 222504]
"QPService"=C:\Program Files\HP\QuickPlay\QPService.exe [2008-06-25 468264]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"ccApp"=c:\Program Files\Common Files\Symantec Shared\ccApp.exe [2008-02-07 51048]
"QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2008-03-14 202032]
"OnScreenDisplay"=C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe [2007-11-01 554288]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
"hpWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2008-04-15 488752]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe [2008-03-25 144784]
"HP Health Check Scheduler"=c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2008-06-16 75008]
"CleanUp"= []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-21 1233920]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2008-02-26 2289664]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883856]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======List of files/folders created in the last 1 months======

2009-12-24 14:49:24 ----D---- C:\rsit
2009-12-24 14:49:24 ----D---- C:\Program Files\trend micro
2009-12-23 13:51:28 ----D---- C:\Program Files\TrendMicro
2009-12-23 12:36:07 ----A---- C:\Windows\system32\tzres.dll
2009-12-23 12:26:06 ----A---- C:\Windows\system32\msshooks.dll
2009-12-23 12:26:06 ----A---- C:\Windows\system32\msscb.dll
2009-12-23 12:26:05 ----A---- C:\Windows\system32\thawbrkr.dll
2009-12-23 12:26:05 ----A---- C:\Windows\system32\srchadmin.dll
2009-12-23 12:26:05 ----A---- C:\Windows\system32\SearchFilterHost.exe
2009-12-23 12:26:05 ----A---- C:\Windows\system32\propsys.dll
2009-12-23 12:26:05 ----A---- C:\Windows\system32\propdefs.dll
2009-12-23 12:26:05 ----A---- C:\Windows\system32\msstrc.dll
2009-12-23 12:26:05 ----A---- C:\Windows\system32\mssprxy.dll
2009-12-23 12:26:05 ----A---- C:\Windows\system32\mssitlb.dll
2009-12-23 12:26:05 ----A---- C:\Windows\system32\msshsq.dll
2009-12-23 12:26:05 ----A---- C:\Windows\system32\korwbrkr.dll
2009-12-23 12:26:04 ----A---- C:\Windows\system32\xmlfilter.dll
2009-12-23 12:26:04 ----A---- C:\Windows\system32\wsepno.dll
2009-12-23 12:26:04 ----A---- C:\Windows\system32\tquery.dll
2009-12-23 12:26:04 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2009-12-23 12:26:04 ----A---- C:\Windows\system32\SearchIndexer.exe
2009-12-23 12:26:04 ----A---- C:\Windows\system32\rtffilt.dll
2009-12-23 12:26:04 ----A---- C:\Windows\system32\offfilt.dll
2009-12-23 12:26:04 ----A---- C:\Windows\system32\nlhtml.dll
2009-12-23 12:26:04 ----A---- C:\Windows\system32\mssvp.dll
2009-12-23 12:26:04 ----A---- C:\Windows\system32\mssrch.dll
2009-12-23 12:26:04 ----A---- C:\Windows\system32\mssph.dll
2009-12-23 12:26:04 ----A---- C:\Windows\system32\msscntrs.dll
2009-12-23 12:26:04 ----A---- C:\Windows\system32\mimefilt.dll
2009-12-23 12:26:04 ----A---- C:\Windows\system32\chtbrkr.dll
2009-12-23 12:26:04 ----A---- C:\Windows\system32\chsbrkr.dll
2009-12-23 12:26:03 ----A---- C:\Windows\system32\mssphtb.dll
2009-12-23 12:17:19 ----A---- C:\Windows\system32\nshhttp.dll
2009-12-23 12:17:18 ----A---- C:\Windows\system32\httpapi.dll
2009-12-23 12:03:23 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2009-12-23 12:03:23 ----A---- C:\Windows\system32\infocardapi.dll
2009-12-23 12:03:22 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2009-12-23 12:03:22 ----A---- C:\Windows\system32\icardres.dll
2009-12-23 12:03:22 ----A---- C:\Windows\system32\icardagt.exe
2009-12-23 12:03:21 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2009-12-23 12:03:19 ----A---- C:\Windows\system32\PresentationHost.exe
2009-12-23 11:59:19 ----A---- C:\Windows\system32\dfshim.dll
2009-12-23 11:59:17 ----A---- C:\Windows\system32\mscoree.dll
2009-12-23 11:59:16 ----A---- C:\Windows\system32\netfxperf.dll
2009-12-23 11:59:10 ----A---- C:\Windows\system32\mscorier.dll
2009-12-23 11:59:07 ----A---- C:\Windows\system32\mscories.dll
2009-12-23 11:55:35 ----D---- C:\Program Files\MSXML 4.0
2009-12-22 17:22:23 ----D---- C:\Program Files\CleanUp
2009-12-22 17:22:14 ----A---- C:\Windows\IsUninst.exe
2009-12-22 17:22:05 ----D---- C:\Users\Flavien\AppData\Roaming\WinRAR
2009-12-22 16:04:27 ----D---- C:\Program Files\Alwil Software
2009-12-22 15:44:31 ----A---- C:\Windows\system32\shell32.dll
2009-12-22 15:43:58 ----A---- C:\Windows\system32\WMVCORE.DLL
2009-12-22 15:43:57 ----A---- C:\Windows\system32\mf.dll
2009-12-22 15:43:50 ----A---- C:\Windows\system32\mshtml.dll
2009-12-22 15:43:49 ----A---- C:\Windows\system32\wininet.dll
2009-12-22 15:43:49 ----A---- C:\Windows\system32\urlmon.dll
2009-12-22 15:43:49 ----A---- C:\Windows\system32\occache.dll
2009-12-22 15:43:48 ----A---- C:\Windows\system32\ieframe.dll
2009-12-22 15:43:48 ----A---- C:\Windows\system32\ieapfltr.dll
2009-12-22 15:43:47 ----A---- C:\Windows\system32\mstime.dll
2009-12-22 15:43:47 ----A---- C:\Windows\system32\msfeeds.dll
2009-12-22 15:43:47 ----A---- C:\Windows\system32\ieUnatt.exe
2009-12-22 15:43:47 ----A---- C:\Windows\system32\iertutil.dll
2009-12-22 15:43:47 ----A---- C:\Windows\system32\ieencode.dll
2009-12-22 15:43:47 ----A---- C:\Windows\system32\iedkcs32.dll
2009-12-22 15:43:47 ----A---- C:\Windows\system32\ieaksie.dll
2009-12-22 15:43:46 ----A---- C:\Windows\system32\jsproxy.dll
2009-12-22 15:43:40 ----A---- C:\Windows\system32\gameux.dll
2009-12-22 15:43:40 ----A---- C:\Windows\system32\Apphlpdm.dll
2009-12-22 15:43:39 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2009-12-22 15:43:32 ----A---- C:\Windows\system32\rpcss.dll
2009-12-22 15:43:32 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2009-12-22 15:43:31 ----A---- C:\Windows\system32\sdohlp.dll
2009-12-22 15:43:31 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2009-12-22 15:43:31 ----A---- C:\Windows\system32\iasrecst.dll
2009-12-22 15:43:31 ----A---- C:\Windows\system32\iashost.exe
2009-12-22 15:43:31 ----A---- C:\Windows\system32\iasdatastore.dll
2009-12-22 15:43:31 ----A---- C:\Windows\system32\iasads.dll
2009-12-22 15:43:26 ----A---- C:\Windows\system32\localspl.dll
2009-12-22 15:43:22 ----A---- C:\Windows\system32\NlsLexicons0007.dll
2009-12-22 15:43:20 ----A---- C:\Windows\system32\NlsLexicons0009.dll
2009-12-22 15:43:13 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2009-12-22 15:42:25 ----A---- C:\Windows\system32\EncDec.dll
2009-12-22 15:42:24 ----A---- C:\Windows\system32\psisdecd.dll
2009-12-22 15:42:16 ----A---- C:\Windows\system32\ntoskrnl.exe
2009-12-22 15:42:16 ----A---- C:\Windows\system32\ntkrnlpa.exe
2009-12-22 15:42:07 ----A---- C:\Windows\system32\TCPSVCS.EXE
2009-12-22 15:42:07 ----A---- C:\Windows\system32\ROUTE.EXE
2009-12-22 15:42:07 ----A---- C:\Windows\system32\NETSTAT.EXE
2009-12-22 15:42:07 ----A---- C:\Windows\system32\netiohlp.dll
2009-12-22 15:42:07 ----A---- C:\Windows\system32\MRINFO.EXE
2009-12-22 15:42:07 ----A---- C:\Windows\system32\HOSTNAME.EXE
2009-12-22 15:42:07 ----A---- C:\Windows\system32\finger.exe
2009-12-22 15:42:07 ----A---- C:\Windows\system32\ARP.EXE
2009-12-22 15:42:06 ----A---- C:\Windows\system32\netevent.dll
2009-12-22 15:41:47 ----A---- C:\Windows\system32\kernel32.dll
2009-12-22 15:41:46 ----A---- C:\Windows\system32\apilogen.dll
2009-12-22 15:41:46 ----A---- C:\Windows\system32\amxread.dll
2009-12-22 15:41:39 ----A---- C:\Windows\system32\wmpdxm.dll
2009-12-22 15:41:35 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2009-12-22 15:41:35 ----A---- C:\Windows\system32\WindowsCodecs.dll
2009-12-22 15:41:35 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2009-12-22 15:41:31 ----A---- C:\Windows\explorer.exe
2009-12-22 15:41:28 ----A---- C:\Windows\system32\WMNetMgr.dll
2009-12-22 15:41:28 ----A---- C:\Windows\system32\logagent.exe
2009-12-22 15:41:26 ----A---- C:\Windows\system32\msxml6.dll
2009-12-22 15:41:26 ----A---- C:\Windows\system32\msxml3.dll
2009-12-22 15:41:24 ----A---- C:\Windows\system32\msv1_0.dll
2009-12-22 15:41:23 ----A---- C:\Windows\system32\wdigest.dll
2009-12-22 15:41:23 ----A---- C:\Windows\system32\secur32.dll
2009-12-22 15:41:23 ----A---- C:\Windows\system32\lsass.exe
2009-12-22 15:41:23 ----A---- C:\Windows\system32\lsasrv.dll
2009-12-22 15:41:21 ----A---- C:\Windows\system32\jscript.dll
2009-12-22 15:41:19 ----A---- C:\Windows\system32\wlansvc.dll
2009-12-22 15:41:19 ----A---- C:\Windows\system32\wlansec.dll
2009-12-22 15:41:19 ----A---- C:\Windows\system32\wlanmsm.dll
2009-12-22 15:41:19 ----A---- C:\Windows\system32\L2SecHC.dll
2009-12-22 15:41:17 ----A---- C:\Windows\system32\mstscax.dll
2009-12-22 15:41:14 ----A---- C:\Windows\system32\win32spl.dll
2009-12-22 15:41:12 ----A---- C:\Windows\system32\msdtcprx.dll
2009-12-22 15:41:11 ----A---- C:\Windows\system32\xolehlp.dll
2009-12-22 15:41:09 ----A---- C:\Windows\system32\rpcrt4.dll
2009-12-22 15:41:07 ----A---- C:\Windows\system32\avifil32.dll
2009-12-22 15:41:06 ----A---- C:\Windows\system32\wersvc.dll
2009-12-22 15:41:06 ----A---- C:\Windows\system32\Faultrep.dll
2009-12-22 15:41:05 ----A---- C:\Windows\system32\wshext.dll
2009-12-22 15:41:05 ----A---- C:\Windows\system32\wscript.exe
2009-12-22 15:41:05 ----A---- C:\Windows\system32\vbscript.dll
2009-12-22 15:41:04 ----A---- C:\Windows\system32\scrrun.dll
2009-12-22 15:41:04 ----A---- C:\Windows\system32\scrobj.dll
2009-12-22 15:41:04 ----A---- C:\Windows\system32\cscript.exe
2009-12-22 15:41:03 ----A---- C:\Windows\system32\t2embed.dll
2009-12-22 15:41:03 ----A---- C:\Windows\system32\fontsub.dll
2009-12-22 15:41:03 ----A---- C:\Windows\system32\dciman32.dll
2009-12-22 15:41:03 ----A---- C:\Windows\system32\atmfd.dll
2009-12-22 15:41:02 ----A---- C:\Windows\system32\emdmgmt.dll
2009-12-22 15:41:01 ----A---- C:\Windows\system32\dataclen.dll
2009-12-22 15:41:01 ----A---- C:\Windows\system32\cdd.dll
2009-12-22 15:41:00 ----A---- C:\Windows\system32\quartz.dll
2009-12-22 15:40:57 ----A---- C:\Windows\system32\schannel.dll
2009-12-22 15:40:54 ----A---- C:\Windows\system32\pacerprf.dll
2009-12-22 15:40:53 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2009-12-22 15:40:52 ----A---- C:\Windows\system32\netapi32.dll
2009-12-22 15:40:50 ----A---- C:\Windows\system32\rastls.dll
2009-12-22 15:40:50 ----A---- C:\Windows\system32\raschap.dll
2009-12-22 15:40:49 ----A---- C:\Windows\system32\winhttp.dll
2009-12-22 15:40:48 ----A---- C:\Windows\system32\gdi32.dll
2009-12-22 15:40:44 ----A---- C:\Windows\system32\wkssvc.dll
2009-12-22 15:40:43 ----A---- C:\Windows\system32\es.dll
2009-12-22 15:40:42 ----A---- C:\Windows\system32\msasn1.dll
2009-12-22 15:40:40 ----A---- C:\Windows\system32\connect.dll
2009-12-22 15:40:38 ----A---- C:\Windows\system32\IPSECSVC.DLL
2009-12-22 15:40:37 ----A---- C:\Windows\system32\atl.dll
2009-12-22 15:40:33 ----A---- C:\Windows\system32\inetcomm.dll
2009-12-22 15:40:31 ----A---- C:\Windows\system32\wmpeffects.dll
2009-12-22 15:35:37 ----N---- C:\Windows\system32\MpSigStub.exe
2009-12-22 15:32:45 ----A---- C:\Windows\system32\WSDApi.dll
2009-12-22 15:28:58 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2009-12-22 15:28:48 ----A---- C:\Windows\system32\wmp.dll
2009-12-22 15:28:46 ----A---- C:\Windows\system32\unregmp2.exe
2009-12-22 15:28:45 ----A---- C:\Windows\system32\spwmp.dll
2009-12-22 15:28:45 ----A---- C:\Windows\system32\dxmasf.dll
2009-12-22 15:28:44 ----A---- C:\Windows\system32\wmploc.DLL
2009-12-22 15:05:20 ----D---- C:\Windows\Minidump
2009-12-22 14:25:40 ----A---- C:\Windows\system32\krl32mainweq.dll
2009-12-22 14:23:40 ----A---- C:\ProgramData\sysReserve.ini
2009-12-22 13:49:12 ----D---- C:\Users\Flavien\AppData\Roaming\FMZilla
2009-12-22 13:49:12 ----D---- C:\downloads
2009-12-22 13:49:07 ----D---- C:\Program Files\Free Music Zilla
2009-12-22 13:43:33 ----A---- C:\Windows\system32\wups2.dll
2009-12-22 13:43:33 ----A---- C:\Windows\system32\wucltux.dll
2009-12-22 13:43:33 ----A---- C:\Windows\system32\wuaueng.dll
2009-12-22 13:43:33 ----A---- C:\Windows\system32\wuauclt.exe
2009-12-22 13:43:15 ----A---- C:\Windows\system32\wups.dll
2009-12-22 13:43:15 ----A---- C:\Windows\system32\wudriver.dll
2009-12-22 13:43:15 ----A---- C:\Windows\system32\wuapi.dll
2009-12-22 13:43:05 ----A---- C:\Windows\system32\wuwebv.dll
2009-12-22 13:43:05 ----A---- C:\Windows\system32\wuapp.exe
2009-12-21 22:07:09 ----D---- C:\Users\Flavien\AppData\Roaming\vlc
2009-12-21 22:06:21 ----D---- C:\Program Files\VideoLAN
2009-12-21 16:19:12 ----D---- C:\Program Files\WinRAR
2009-12-21 16:15:02 ----D---- C:\ProgramData\WinZip
2009-12-21 16:15:00 ----D---- C:\Program Files\WinZip
2009-12-21 14:28:48 ----D---- C:\Program Files\Microsoft Silverlight
2009-12-21 14:02:12 ----D---- C:\ProgramData\eMule
2009-12-21 13:50:50 ----D---- C:\Program Files\eMule
2009-12-21 13:45:25 ----D---- C:\Program Files\Microsoft
2009-12-21 13:45:03 ----D---- C:\Program Files\Windows Live SkyDrive
2009-12-21 13:44:44 ----D---- C:\Program Files\Windows Live
2009-12-21 13:43:52 ----D---- C:\Users\Flavien\AppData\Roaming\Mozilla
2009-12-21 13:43:44 ----D---- C:\Program Files\Mozilla Firefox
2009-12-21 13:41:11 ----D---- C:\Program Files\Common Files\Windows Live

======List of files/folders modified in the last 1 months======

2009-12-24 14:54:13 ----D---- C:\Windows\Temp
2009-12-24 14:49:24 ----RD---- C:\Program Files
2009-12-24 14:23:22 ----D---- C:\Windows\System32
2009-12-24 14:23:22 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-12-24 14:23:21 ----D---- C:\Windows\inf
2009-12-24 13:17:03 ----D---- C:\Windows\winsxs
2009-12-24 13:16:44 ----SHD---- C:\Windows\Installer
2009-12-24 13:16:38 ----D---- C:\ProgramData\Microsoft Help
2009-12-24 13:16:37 ----D---- C:\Windows\Microsoft.NET
2009-12-24 13:16:02 ----RSD---- C:\Windows\assembly
2009-12-24 13:11:38 ----D---- C:\WINDOWS
2009-12-24 11:31:59 ----RSD---- C:\Windows\Fonts
2009-12-24 11:31:55 ----D---- C:\Program Files\Common Files\microsoft shared
2009-12-23 14:03:19 ----D---- C:\Windows\rescache
2009-12-23 13:51:28 ----SD---- C:\Users\Flavien\AppData\Roaming\Microsoft
2009-12-23 13:44:47 ----HD---- C:\ProgramData
2009-12-23 13:44:46 ----D---- C:\Windows\system32\drivers
2009-12-23 13:19:08 ----D---- C:\Windows\Prefetch
2009-12-23 12:49:30 ----D---- C:\Windows\system32\catroot
2009-12-23 12:45:25 ----D---- C:\Windows\system32\fr-FR
2009-12-23 12:45:20 ----D---- C:\Program Files\Internet Explorer
2009-12-23 12:45:17 ----D---- C:\Windows\PolicyDefinitions
2009-12-23 12:45:15 ----D---- C:\Windows\ehome
2009-12-23 12:45:12 ----D---- C:\Windows\system32\wbem
2009-12-23 12:45:11 ----D---- C:\Windows\system32\manifeststore
2009-12-23 12:45:11 ----D---- C:\Windows\AppPatch
2009-12-23 12:45:00 ----D---- C:\Windows\system32\XPSViewer
2009-12-23 12:45:00 ----D---- C:\Windows\system32\en-US
2009-12-23 12:44:48 ----D---- C:\Program Files\Windows Mail
2009-12-23 12:44:47 ----D---- C:\Program Files\Windows Media Player
2009-12-23 12:38:29 ----D---- C:\Program Files\Microsoft Works
2009-12-23 12:26:30 ----D---- C:\Windows\system32\catroot2
2009-12-23 11:56:33 ----D---- C:\Windows\Debug
2009-12-23 11:54:37 ----D---- C:\Windows\SoftwareDistribution
2009-12-22 17:29:29 ----HD---- C:\System.sav
2009-12-22 17:29:29 ----D---- C:\Windows\system32\config
2009-12-22 17:29:29 ----D---- C:\Windows\SMINST
2009-12-22 17:29:29 ----D---- C:\Windows\panther
2009-12-22 17:29:29 ----D---- C:\Program Files\sp43867
2009-12-22 17:29:29 ----D---- C:\Program Files\IDT
2009-12-22 17:29:28 ----SHD---- C:\boot
2009-12-22 17:29:28 ----D---- C:\Program Files\AIM6
2009-12-22 16:09:46 ----SD---- C:\ProgramData\Microsoft
2009-12-22 14:23:42 ----D---- C:\Users\Flavien\AppData\Roaming\Adobe
2009-12-22 13:43:01 ----SHD---- C:\System Volume Information
2009-12-21 21:46:31 ----D---- C:\Windows\system32\WDI
2009-12-21 13:41:11 ----D---- C:\Program Files\Common Files
2009-12-21 00:50:55 ----D---- C:\ProgramData\Symantec
2009-12-21 00:50:13 ----D---- C:\Program Files\Common Files\Symantec Shared
2009-12-21 00:26:02 ----D---- C:\Windows\Tasks
2009-12-21 00:26:02 ----D---- C:\Windows\system32\Tasks
2009-12-01 12:06:20 ----A---- C:\Windows\system32\mrt.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [2009-12-14 371248]
R1 IDSvix86;Symantec Intrusion Prevention Driver; \??\C:\PROGRA~2\Symantec\DEFINI~1\SymcData\ipsdefs\20091217.002\IDSvix86.sys [2009-11-20 286768]
R1 SRTSP;SRTSP; C:\Windows\System32\Drivers\SRTSP.SYS [2008-02-01 279088]
R1 SRTSPX;SRTSPX; C:\Windows\System32\Drivers\SRTSPX.SYS [2008-02-01 43696]
R1 SymIM;Symantec Network Security Intermediate Filter Driver; C:\Windows\system32\DRIVERS\SymIMv.sys [2008-02-20 24112]
R1 SYMTDI;SYMTDI; C:\Windows\System32\Drivers\SYMTDI.SYS [2008-02-05 188464]
R2 CO_Mon;CO_Mon; \??\C:\Windows\system32\drivers\CO_Mon.sys [2007-08-09 36056]
R3 Accelerometer;HP Accelerometer; C:\Windows\system32\DRIVERS\Accelerometer.sys [2008-03-27 34664]
R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]
R3 enecir;ENE CIR Receiver; C:\Windows\system32\DRIVERS\enecir.sys [2008-01-24 52736]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2009-12-14 102448]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2007-06-18 16768]
R3 JMCR;JMCR; C:\Windows\system32\DRIVERS\jmcr.sys [2008-07-08 96856]
R3 NAVENG;NAVENG; \??\C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20091221.050\NAVENG.SYS [2009-12-14 84912]
R3 NAVEX15;NAVEX15; \??\C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20091221.050\NAVEX15.SYS [2009-12-14 1323568]
R3 NETw5v32;Pilote de carte Intel(R) Wireless WiFi Link pour Windows Vista 32 bits ; C:\Windows\system32\DRIVERS\NETw5v32.sys [2008-04-28 3658752]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2008-05-14 43552]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-05-14 7443872]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-05-02 122368]
R3 STHDA;IDT High Definition Audio CODEC; C:\Windows\system32\DRIVERS\stwrt.sys [2008-06-27 380928]
R3 SYMDNS;SYMDNS; C:\Windows\System32\Drivers\SYMDNS.SYS [2008-02-05 13616]
R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT.SYS [2008-07-29 123952]
R3 SYMFW;SYMFW; C:\Windows\System32\Drivers\SYMFW.SYS [2008-02-05 96432]
R3 SYMNDISV;SYMNDISV; C:\Windows\System32\Drivers\SYMNDISV.SYS [2008-02-05 41008]
R3 SYMREDRV;SYMREDRV; C:\Windows\System32\Drivers\SYMREDRV.SYS [2008-02-05 22320]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-01-18 196784]
R3 usbvideo;Périphérique vidéo USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]
S3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2006-11-02 464384]
S3 BthEnum;Pilote de bloc de demande Bluetooth; C:\Windows\system32\DRIVERS\BthEnum.sys [2008-01-21 19456]
S3 BthPan;Périphérique Bluetooth (réseau personnel); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
S3 BTHPORT;Pilote de port Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2008-01-21 219648]
S3 BTHUSB;Pilote USB radio Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2008-01-21 29184]
S3 COH_Mon;COH_Mon; \??\C:\Windows\system32\Drivers\COH_Mon.sys [2008-07-30 23888]
S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2008-01-21 987648]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2008-01-21 200704]
S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm60x32.sys [2006-11-02 429056]
S3 PMUSB2G;PassMark® Software USB 2.0 Loopback plug; C:\Windows\System32\Drivers\PMUSB.sys [2004-11-25 18944]
S3 RFCOMM;Périphérique Bluetooth (TDI protocole RFCOMM); C:\Windows\system32\DRIVERS\rfcomm.sys [2008-01-21 49664]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576]
S3 SPBBCDrv;SPBBCDrv; \??\C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys [2008-01-17 447024]
S3 SRTSPL;SRTSPL; C:\Windows\System32\Drivers\SRTSPL.SYS [2008-02-01 317616]
S3 winachsf;winachsf; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2008-01-21 654336]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AESTFilters;Andrea ST Filters Service; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\aestsrv.exe [2008-06-27 77824]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 ezSharedSvc;Easybits Shared Services for Windows; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2008-06-16 94208]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2008-03-18 19456]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-02-26 73728]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-05-14 118784]
R2 QPCapSvc;QuickPlay Background Capture Service (QBCS); C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe [2008-06-25 292216]
R2 QPSched;QuickPlay Task Scheduler (QTS); C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe [2008-06-25 116080]
R2 Recovery Service for Windows;Recovery Service for Windows; C:\Windows\SMINST\BLService.exe [2008-04-26 361808]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2007-01-09 272024]
R2 STacSV;Audio Service; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\STacSV.exe [2008-06-27 221273]
R3 Com4QLBEx;Com4QLBEx; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2008-02-07 193840]
R3 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2008-01-08 148832]
S2 Automatic LiveUpdate Scheduler;Planificateur LiveUpdate automatique; c:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe [2008-02-09 238968]
S2 ccEvtMgr;Symantec Event Manager; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2008-02-07 149864]
S2 ccSetMgr;Symantec Settings Manager; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2008-02-07 149864]
S2 CLTNetCnService;Symantec Lic NetConnect service; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2008-02-07 149864]
S2 LiveUpdate Notice;LiveUpdate Notice; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2008-02-07 149864]
S3 comHost;COM Host; c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe [2007-08-22 55640]
S3 GameConsoleService;GameConsoleService; C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe [2007-07-24 181800]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 LiveUpdate;LiveUpdate; c:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE [2008-09-05 3220856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Symantec Core LC;Symantec Core LC; C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe [2008-07-29 1245064]

-----------------EOF-----------------

Par contre impossible d'utuliser

Malwarebytes' Anti-Malware 1.42

car il ne repond pas !

Pour les fenetres qui s'ouvre , elle n'affiche rien mais leur adresses sont :

http://www.channelnetwork.cn/ac.php?aid=216&sid=new

http://www.webexternal.cn/ac.php?aid=216&sid=new

re

ça s'annonce mal, MBAM qui ne veut pas fonctionner, HJT qui ne sort pas non +

essaye de relancer tout de même RSIT afin d'obtenir le rapport hijackthis

javou =(

bé je lai déja fait le rapport avec rsit, nn ?

essaie stp d'éviter le langage sms merci

tu l'as fait mais le rapport hijackthis lui n'est pas sorti, j'en aurais besoin

désolé pour l'ecriture .

dans le premier message posté , c 'est le rapport Hijackthis .

oui effectivement

pour MBAM tu dis il ne répond pas, tu l'as installé ? et c'est lorsque tu veux l'utiliser qu'il ne répond pas ?

si c'est le cas il faudrait peut être redémarrer en mode sans échec et essayer de l'utiliser.

Il faut également faire un scan en ligne ici

http://www.kaspersky.com/kos/eng/partner/default/pages/default/check.html?n=1259235770640

poste le rapport à l'issu

il y aura aussi autre chose à faire -à supprime- je reviens ensuite

bé en fet j'ai eu beaucoup de mal à l'installer , puis j'ai tout de meme reussi mais impossible de le lancer .

Jai fait le scan avec kasperky online mais dans la rapport il n'y a rien de marquer ...

bonjour,

tu ne réponds pas à ma question concernant le mode sans échec essaye de le passer en mode sans échec si tu y as accès bien sûr, ne le force pas

ensuite kaspersky on line-----rien de marquer dis tu, ça veut dire quoi exactement ???? est-ce qu'il n'a rien détecté ....????

comment fait on pour redemarrer en mode sans echec ?

pour kasperky online une fois le scan terminé , le raport est vide, blanc .

bonsoir,

regarde ici

https://forum.pcastuces.com/comment_faire_pour_demarrer_en_mode_sans_echec-f31s41.htm

bonjour ,

j'ai fait le mode sans echec , il n'y avait plus de spam mais le centre de securité etait toujours impossible a activer.

Mais j'ai pas compris a quoi sa server le mode sans echec ,?

bonsoir,

le mode sans échec permet de lancer l'ordinateur avec un minimum d'applications, donc plus léger.

tu dis que tu as "fait le mode snas échec", ok, mais qu'a stu fait en mode sans échec ?? je t'avais demander de lancer un scan avec Malwarebyte's, l'as tu fait ou non ?

bonsoir,

a ok j'avais pas compris que je devais faire le scan =)

donc je viens de le faire , bé quand j'ai lancé MBM ils m'ont marqué que le programma a arreter de fonctionner et qu'il doivent le fermer etc...

oui en mode normal, mais en mode sans échec as tu essayé de lancer malwarebyte's ou non ?

oui sa a marqué ce que je t'ai ecrit dans le message precedent .

mouai !

bon essaye de faire ceci

Télécharge rkill de Grinler sur ton Bureau (et pas ailleurs).

/!\ Désactive tes applications antivirus et anti-spyware, en général via un clic droit sur l'icône de la Zone de notification. Sinon, elles risquent d'interférer avec cet outil./!\ (aide si besoin - Merci Morgane )

• Double-clique sur le fichier rkill sur ton Bureau afin de lancer l'outil.
  ( Pour les utilisateurs de Vista, faire un clic droit sur le fichier rkill téléchargé puis choisir "Exécuter en tant qu'Administrateur" ).
• Une fenêtre à fond noir va apparaître brièvement, puis disparaître.
• Si rien ne se passe, ou si l'outil ne se lance pas, télécharge l'outil depuis un des 3 autres liens ci-dessous et fais une nouvelle tentative d'exécution.

Lien 1
Lien 2
Lien 3

/!\ Si aucun des outils téléchargés depuis les quatre liens ci-dessus ne semble fonctionner, ne continue pas le nettoyage, et préviens moi dans ton prochain message. /!\

ah sa fait plaisir , sa a marché !

j'ai plus de spam , et le version d'essai de norton que j'avais car j'ai un nouveau ordi a reaparu quand je redemarre mon ordi !

merci beaucoup.

Par contre le centre de securité windows ne peut toujours s'activer .

bonjour,

j'ai plus de spam , et le version d'essai de norton que j'avais car j'ai un nouveau ordi a reaparu quand je redemarre mon ordi !

je n'ai pas compris ce que tu voulais dire concernant norton et le "nouveau ordi"

peux tu faire ceci

* télécharge Malwarebyte's en version renommée

MBAM (renommé)

essaye ensuite de le lancer

bé en fet je viens d'avoir mon ordinateur donc j'ai une version d'essai de 60 jours , et ils ne marchait plus

Puis depuis rkill tout remarche bien et je n'ai plus de spam , donc merci beaucoup !

Il reste juste le centre de sécurité window impossible a activer.

Voici le rapport :

Malwarebytes' Anti-Malware 1.42
Version de la base de données: 3439
Windows 6.0.6001 Service Pack 1
Internet Explorer 7.0.6001.18000

27/12/2009 16:46:34
mbam-log-2009-12-27 (16-46-25).txt

Type de recherche: Examen rapide
Eléments examinés: 97774
Temps écoulé: 6 minute(s), 8 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 2
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 7

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\H8SRT (Rootkit.TDSS) -> No action taken.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\h8srtd.sys (Rootkit.TDSS) -> No action taken.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\System32\H8SRTshfmmspobp.dll (Trojan.FakeAlert) -> No action taken.
C:\Users\Flavien\AppData\Local\Temp\2be0.exe (Trojan.FakeAlert) -> No action taken.
C:\Users\Flavien\AppData\Local\Temp\H8SRT26f1.tmp (Trojan.FakeAlert) -> No action taken.
C:\Users\Flavien\AppData\Local\Temp\H8SRTb7ab.tmp (Trojan.FakeAlert) -> No action taken.
C:\WINDOWS\System32\krl32mainweq.dll (Trojan.DNSChanger) -> No action taken.
C:\WINDOWS\System32\H8SRTixxvvnplvh.dat (Rootkit.TDSS) -> No action taken.
C:\Users\Flavien\AppData\Local\Temp\H8SRTb809.tmp (Rootkit.TDSS) -> No action taken.

merci beaucoup pour le temps consacré !

bonsoir,

ta version n'est plus à jour, il faudrait faire la mise à jour, relancer malwarebyte's pour un scan, ensuite tu supprimes et tu repostes le nouveau rapport stp

a ok je croyais que c'etait fini moi =)

c'est pour sa que je vous remerciez , ok je ferais sa en 2010 ^^

bonne soirée

non ce n'es tpas fini, alors on se revoit l'année prochaine, bon réveillon !

Malwarebytes' Anti-Malware 1.43
Version de la base de données: 3462
Windows 6.0.6001 Service Pack 1
Internet Explorer 7.0.6001.18000

31/12/2009 13:08:08
mbam-log-2009-12-31 (13-08-00).txt

Type de recherche: Examen rapide
Eléments examinés: 98135
Temps écoulé: 7 minute(s), 46 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 2
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 4

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\H8SRT (Rootkit.TDSS) -> No action taken.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\h8srtd.sys (Rootkit.TDSS) -> No action taken.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Users\Flavien\AppData\Local\Temp\H8SRT26f1.tmp (Trojan.FakeAlert) -> No action taken.
C:\WINDOWS\System32\krl32mainweq.dll (Trojan.DNSChanger) -> No action taken.
C:\WINDOWS\System32\H8SRTixxvvnplvh.dat (Rootkit.TDSS) -> No action taken.
C:\Users\Flavien\AppData\Local\Temp\H8SRTb809.tmp (Rootkit.TDSS) -> No action taken.

bonsoir

as tu supprimé tout ce qu'il a trouvé MBAM ?? car sur le rapport posté il est écrit no action taken.

Bon réveillon

bonjour ,

c'est bon j'ai supprimé , j'avais oublié ^^

bonsoir,

ok

Télécharge>load_tdsskiller< de Loup Blanc sur ton Bureau

Cet outil est conçu pour automatiser différentes tâches proposées par TDSSKiller, un fix de Kaspersky.

• Lance load_tdsskiller en double-cliquant dessus : l'outil va se connecter au Net pour télécharger une copie à jour de TDSSKiller, puis va lancer le scan
• A la fin du scan, appuie sur une touche pour continuer, comme l'indique le message dans la fenêtre noire d'invite de commande
• Le rapport s'affichera automatiquement : copie-colle son contenu dans ta prochaine réponse (le fichier est également présent ici : C:\tdsskiller\report.txt)
• Fais redémarrer ton PC

20:43:44:541 3296 TDSSKiller 2.1.1 Dec 20 2009 02:40:02
20:43:44:541 3296 ================================================================================
20:43:44:541 3296 SystemInfo:

20:43:44:541 3296 OS Version: 6.0.6001 ServicePack: 1.0
20:43:44:541 3296 Product type: Workstation
20:43:44:541 3296 ComputerName: PC-DE-FLAVIEN
20:43:44:542 3296 UserName: Flavien
20:43:44:542 3296 Windows directory: C:\Windows
20:43:44:542 3296 Processor architecture: Intel x86
20:43:44:542 3296 Number of processors: 2
20:43:44:542 3296 Page size: 0x1000
20:43:44:544 3296 Boot type: Normal boot
20:43:44:544 3296 ================================================================================
20:43:44:548 3296 ForceUnloadDriver: NtUnloadDriver error 2
20:43:44:549 3296 ForceUnloadDriver: NtUnloadDriver error 2
20:43:44:550 3296 ForceUnloadDriver: NtUnloadDriver error 2
20:43:44:553 3296 MyNtCreateFileW: NtCreateFile(\??\C:\Windows\system32\Drivers\KLMD.sys) returned status 0
20:43:44:565 3296 main: Driver KLMD successfully dropped
20:43:44:623 3296 main: Driver KLMD successfully loaded
20:43:44:623 3296
Scanning Registry ...
20:43:44:624 3296 ScanServices: Searching service UACd.sys
20:43:44:624 3296 ScanServices: Open/Create key error 2
20:43:44:624 3296 ScanServices: Searching service TDSSserv.sys
20:43:44:624 3296 ScanServices: Open/Create key error 2
20:43:44:624 3296 ScanServices: Searching service gaopdxserv.sys
20:43:44:624 3296 ScanServices: Open/Create key error 2
20:43:44:624 3296 ScanServices: Searching service gxvxcserv.sys
20:43:44:624 3296 ScanServices: Open/Create key error 2
20:43:44:624 3296 ScanServices: Searching service MSIVXserv.sys
20:43:44:624 3296 ScanServices: Open/Create key error 2
20:43:44:628 3296 UnhookRegistry: Kernel module file name: C:\Windows\system32\ntkrnlpa.exe, base addr: 82241000
20:43:44:628 3296 UnhookRegistry: Kernel local addr: 1BB0000
20:43:44:629 3296 UnhookRegistry: KeServiceDescriptorTable addr: 1CE7B00
20:43:44:714 3296 UnhookRegistry: KiServiceTable addr: 1C688E0
20:43:44:714 3296 UnhookRegistry: NtEnumerateKey service number (local): 85
20:43:44:714 3296 UnhookRegistry: NtEnumerateKey local addr: 1DB7BAC
20:43:44:720 3296 KLMD_OpenDevice: Trying to open KLMD device
20:43:44:720 3296 KLMD_GetSystemRoutineAddressA: Trying to get system routine address ZwEnumerateKey
20:43:44:720 3296 KLMD_GetSystemRoutineAddressW: Trying to get system routine address ZwEnumerateKey
20:43:44:720 3296 KLMD_ReadMem: Trying to ReadMemory 0x82296AAD[0x4]
20:43:44:720 3296 UnhookRegistry: NtEnumerateKey service number (kernel): 85
20:43:44:720 3296 KLMD_ReadMem: Trying to ReadMemory 0x822F9AF4[0x4]
20:43:44:721 3296 UnhookRegistry: NtEnumerateKey real addr: 82448BAC
20:43:44:721 3296 UnhookRegistry: NtEnumerateKey calc addr: 82448BAC
20:43:44:721 3296 UnhookRegistry: No SDT hooks found on NtEnumerateKey
20:43:44:721 3296 KLMD_ReadMem: Trying to ReadMemory 0x82448BAC[0xA]
20:43:44:721 3296 UnhookRegistry: No splicing found on NtEnumerateKey
20:43:44:724 3296
Scanning Kernel memory ...
20:43:44:724 3296 KLMD_OpenDevice: Trying to open KLMD device
20:43:44:724 3296 KLMD_GetSystemObjectAddressByNameA: Trying to get system object address by name \Driver\Disk
20:43:44:724 3296 KLMD_GetSystemObjectAddressByNameW: Trying to get system object address by name \Driver\Disk
20:43:44:724 3296 DetectCureTDL3: \Driver\Disk PDRIVER_OBJECT: 864C62C8
20:43:44:724 3296 DetectCureTDL3: KLMD_GetDeviceObjectList returned 1 DevObjects
20:43:44:724 3296 DetectCureTDL3: 0 Curr stack PDEVICE_OBJECT: 865C90D0
20:43:44:724 3296 KLMD_GetLowerDeviceObject: Trying to get lower device object for 865C90D0
20:43:44:724 3296 DetectCureTDL3: 0 Curr stack PDEVICE_OBJECT: 865C97D0
20:43:44:725 3296 KLMD_GetLowerDeviceObject: Trying to get lower device object for 865C97D0
20:43:44:725 3296 DetectCureTDL3: 0 Curr stack PDEVICE_OBJECT: 85CE68A8
20:43:44:725 3296 KLMD_GetLowerDeviceObject: Trying to get lower device object for 85CE68A8
20:43:44:725 3296 KLMD_ReadMem: Trying to ReadMemory 0x85CE68A8[0x38]
20:43:44:725 3296 DetectCureTDL3: DRIVER_OBJECT addr: 85D187B0
20:43:44:725 3296 KLMD_ReadMem: Trying to ReadMemory 0x85D187B0[0xA8]
20:43:44:725 3296 KLMD_ReadMem: Trying to ReadMemory 0x85CFF608[0x208]
20:43:44:725 3296 DetectCureTDL3: DRIVER_OBJECT name: \Driver\atapi, Driver Name: atapi
20:43:44:725 3296 DetectCureTDL3: IrpHandler (0) addr: 8AAEF0FC
20:43:44:725 3296 DetectCureTDL3: IrpHandler (1) addr: 82266FE3
20:43:44:725 3296 DetectCureTDL3: IrpHandler (2) addr: 8AAEF0FC
20:43:44:725 3296 DetectCureTDL3: IrpHandler (3) addr: 82266FE3
20:43:44:725 3296 DetectCureTDL3: IrpHandler (4) addr: 82266FE3
20:43:44:725 3296 DetectCureTDL3: IrpHandler (5) addr: 82266FE3
20:43:44:725 3296 DetectCureTDL3: IrpHandler (6) addr: 82266FE3
20:43:44:725 3296 DetectCureTDL3: IrpHandler (7) addr: 82266FE3
20:43:44:725 3296 DetectCureTDL3: IrpHandler (8) addr: 82266FE3
20:43:44:725 3296 DetectCureTDL3: IrpHandler (9) addr: 82266FE3
20:43:44:725 3296 DetectCureTDL3: IrpHandler (10) addr: 82266FE3
20:43:44:725 3296 DetectCureTDL3: IrpHandler (11) addr: 82266FE3
20:43:44:726 3296 DetectCureTDL3: IrpHandler (12) addr: 82266FE3
20:43:44:726 3296 DetectCureTDL3: IrpHandler (13) addr: 82266FE3
20:43:44:726 3296 DetectCureTDL3: IrpHandler (14) addr: 8AADD9D6
20:43:44:726 3296 DetectCureTDL3: IrpHandler (15) addr: 8AADD9A8
20:43:44:726 3296 DetectCureTDL3: IrpHandler (16) addr: 82266FE3
20:43:44:726 3296 DetectCureTDL3: IrpHandler (17) addr: 82266FE3
20:43:44:726 3296 DetectCureTDL3: IrpHandler (18) addr: 82266FE3
20:43:44:726 3296 DetectCureTDL3: IrpHandler (19) addr: 82266FE3
20:43:44:726 3296 DetectCureTDL3: IrpHandler (20) addr: 82266FE3
20:43:44:726 3296 DetectCureTDL3: IrpHandler (21) addr: 82266FE3
20:43:44:726 3296 DetectCureTDL3: IrpHandler (22) addr: 8AADDA04
20:43:44:726 3296 DetectCureTDL3: IrpHandler (23) addr: 8AAEAB70
20:43:44:726 3296 DetectCureTDL3: IrpHandler (24) addr: 82266FE3
20:43:44:726 3296 DetectCureTDL3: IrpHandler (25) addr: 82266FE3
20:43:44:726 3296 DetectCureTDL3: IrpHandler (26) addr: 82266FE3
20:43:44:726 3296 KLMD_ReadMem: Trying to ReadMemory 0x0[0x400]
20:43:44:726 3296 KLMD_ReadMem: DeviceIoControl error 1
20:43:44:726 3296 TDL3_StartIoHookDetect: Unable to get StartIo handler code
20:43:44:726 3296 TDL3_FileDetect: Processing driver: atapi
20:43:44:726 3296 TDL3_FileDetect: Parameters: C:\Windows\system32\drivers\atapi.sys, C:\Windows\system32\Drivers\atapi.tsk, SYSTEM\CurrentControlSet\Services\atapi, system32\Drivers\atapi.tsk
20:43:44:726 3296 TDL3_FileDetect: Processing driver file: C:\Windows\system32\drivers\atapi.sys
20:43:44:726 3296 KLMD_CreateFileW: Trying to open file C:\Windows\system32\drivers\atapi.sys
20:43:44:735 3296
Completed

Results:
20:43:44:735 3296 Infected objects in memory: 0
20:43:44:736 3296 Cured objects in memory: 0
20:43:44:736 3296 Infected objects on disk: 0
20:43:44:736 3296 Objects on disk cured on reboot: 0
20:43:44:736 3296 Objects on disk deleted on reboot: 0
20:43:44:737 3296 Registry nodes deleted on reboot: 0
20:43:44:737 3296

re

ok, relance à nouveau MBAM, supprime ce qu'il trouve, poste le rapport

Malwarebytes' Anti-Malware 1.43
Version de la base de données: 3470
Windows 6.0.6001 Service Pack 1
Internet Explorer 7.0.6001.18000

01/01/2010 21:31:59
mbam-log-2010-01-01 (21-31-59).txt

Type de recherche: Examen rapide
Eléments examinés: 98385
Temps écoulé: 3 minute(s), 54 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

parfait, comment se comporte ton pc actuellement ?

reposte un rapport RSIT également stp

il se comporte mieux mais par exemple le centre de securité windows ne s'active pas

ok poste un rapport RSIT STP

avait on fait un scan en ligne ?? je ne me souviens plus (et j'ai pas relu)

oui mais jarrive pas a le poster le rapport , sa me marque un msg d'erreur , quand je publie le message .

on avais essayé de le faire mais sa n'avait affiché que du blanc dans le rapport

pour poster le rapport, c'est peut être parce qu'il est trop long (tu parles de RSIT ?)

pour le scan en ligne ok, il faudrait peut être ene ssayer un autre. rappelle moi lequel tu as essayé

oui je pense que c'est parcqu'il est trop long , c'est bien rsit

on avais essayé kaspersky

alors poste le en plusieurs fois

et essaye ce scan

ESET on line

Logfile of random's system information tool 1.06 (written by random/random)
Run by Flavien at 2010-01-01 22:17:48
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2
System drive C: has 240 GB (81%) free of 296 GB
Total RAM: 3038 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:18:03, on 01/01/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Windows Defender\MSASCui.exe
c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\conime.exe
C:\Windows\explorer.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Flavien\Downloads\RSIT.exe
C:\Program Files\trend micro\Flavien.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=83&bd=Pavilion&pf=cnnb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=83&bd=Pavilion&pf=cnnb
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=83&bd=Pavilion&pf=cnnb
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O2 - BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\CoIEPlg.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\2.0"
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\aestsrv.exe
O23 - Service: Planificateur LiveUpdate automatique (Automatic LiveUpdate Scheduler) - Symantec Corporation - c:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard Corporation - C:\Windows\system32\Hpservice.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - c:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
O23 - Service: Recovery Service for Windows - Unknown owner - C:\Windows\SMINST\BLService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\STacSV.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe

--
End of file - 9634 bytes

======Scheduled tasks folder======

C:\Windows\tasks\HPCeeScheduleForFlavien.job
C:\Windows\tasks\Norton Internet Security - Effectuer une analyse complète du système - Flavien.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
c:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\coIEPlg.dll [2009-03-31 357744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Symantec Intrusion Prevention - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll [2008-07-29 116088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll [2008-03-25 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7C554162-8CB7-45A4-B8F4-8EA1C75885F9}]
AOL Toolbar BHO - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll [2008-02-03 1185120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Show Norton Toolbar - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\CoIEPlg.dll [2009-03-31 357744]
{DE9C389F-3316-41A7-809B-AA305ED9D922} - AOL Toolbar - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll [2008-02-03 1185120]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-01-18 1033512]
"UCam_Menu"=C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2007-12-24 222504]
"QPService"=C:\Program Files\HP\QuickPlay\QPService.exe [2008-06-25 468264]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"ccApp"=c:\Program Files\Common Files\Symantec Shared\ccApp.exe [2008-10-17 51048]
"QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2008-03-14 202032]
"OnScreenDisplay"=C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe [2007-11-01 554288]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
"hpWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2008-04-15 488752]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe [2008-03-25 144784]
"HP Health Check Scheduler"=c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2008-06-16 75008]
"CleanUp"= []
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray.exe [2008-06-27 442467]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-05-14 13535776]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-05-14 92704]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2008-02-26 2289664]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883856]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======List of files/folders created in the last 1 months======

2010-01-01 21:54:48 ----D---- C:\Windows\system32\eu-ES
2010-01-01 21:54:48 ----D---- C:\Windows\system32\ca-ES
2010-01-01 21:54:47 ----D---- C:\Windows\system32\vi-VN
2010-01-01 21:03:19 ----D---- C:\ProgramData\TrackMania
2010-01-01 20:43:44 ----A---- C:\TDSSKiller.2.1.1_01.01.2010_20.43.44_log.txt
2010-01-01 20:43:39 ----D---- C:\tdsskiller
2010-01-01 18:59:11 ----D---- C:\ProgramData\Boss Media
2010-01-01 18:59:03 ----D---- C:\Program Files\BetClic Poker
2009-12-31 12:56:53 ----A---- C:\Windows\system32\xactengine2_2.dll
2009-12-31 12:56:52 ----A---- C:\Windows\system32\xinput1_1.dll
2009-12-31 12:56:51 ----A---- C:\Windows\system32\xactengine2_1.dll
2009-12-31 12:56:40 ----A---- C:\Windows\system32\d3dx9_30.dll
2009-12-31 12:56:38 ----A---- C:\Windows\system32\xactengine2_0.dll
2009-12-31 12:56:38 ----A---- C:\Windows\system32\x3daudio1_0.dll
2009-12-31 12:56:37 ----A---- C:\Windows\system32\d3dx9_29.dll
2009-12-31 12:56:37 ----A---- C:\Windows\system32\d3dx9_28.dll
2009-12-31 12:56:36 ----A---- C:\Windows\system32\d3dx9_27.dll
2009-12-31 12:56:36 ----A---- C:\Windows\system32\d3dx9_26.dll
2009-12-31 12:56:35 ----A---- C:\Windows\system32\d3dx9_25.dll
2009-12-31 12:56:35 ----A---- C:\Windows\system32\d3dx9_24.dll
2009-12-31 12:54:16 ----D---- C:\Program Files\TmNationsForever
2009-12-30 22:47:13 ----D---- C:\ProgramData\Messenger Plus!
2009-12-30 22:46:49 ----D---- C:\Program Files\Messenger Plus! Live
2009-12-27 16:35:47 ----D---- C:\Users\Flavien\AppData\Roaming\Malwarebytes
2009-12-27 16:35:42 ----D---- C:\ProgramData\Malwarebytes
2009-12-27 16:35:41 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-12-27 12:25:00 ----SHD---- C:\Config.Msi
2009-12-26 23:16:32 ----D---- C:\Users\Flavien\AppData\Roaming\dvdcss
2009-12-26 11:32:23 ----A---- C:\Windows\ntbtlog.txt
2009-12-25 16:22:48 ----D---- C:\Windows\system32\EventProviders
2009-12-25 15:42:16 ----A---- C:\Windows\system32\NlsLexicons0007.dll
2009-12-25 15:42:13 ----A---- C:\Windows\system32\SLsvc.exe
2009-12-25 15:42:13 ----A---- C:\Windows\system32\SLCExt.dll
2009-12-25 15:42:12 ----A---- C:\Windows\system32\FunctionDiscoveryFolder.dll
2009-12-25 15:42:12 ----A---- C:\Windows\system32\DevicePairingWizard.exe
2009-12-25 15:42:11 ----A---- C:\Windows\system32\NlsLexicons0009.dll
2009-12-25 15:42:09 ----A---- C:\Windows\system32\mssrch.dll
2009-12-25 15:42:08 ----A---- C:\Windows\system32\tquery.dll
2009-12-25 15:42:07 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2009-12-25 15:42:07 ----A---- C:\Windows\system32\lsasrv.dll
2009-12-25 15:42:06 ----A---- C:\Windows\system32\scavenge.dll
2009-12-25 15:42:06 ----A---- C:\Windows\system32\RMActivate_isv.exe
2009-12-25 15:42:06 ----A---- C:\Windows\system32\RMActivate.exe
2009-12-25 15:42:06 ----A---- C:\Windows\system32\mshtml.dll
2009-12-25 15:42:05 ----A---- C:\Windows\system32\msi.dll
2009-12-25 15:42:05 ----A---- C:\Windows\system32\imapi2fs.dll
2009-12-25 15:42:04 ----A---- C:\Windows\system32\WscEapPr.dll
2009-12-25 15:42:04 ----A---- C:\Windows\system32\wcnwiz2.dll
2009-12-25 15:42:04 ----A---- C:\Windows\system32\sysmain.dll
2009-12-25 15:42:04 ----A---- C:\Windows\system32\secproc_isv.dll
2009-12-25 15:42:03 ----A---- C:\Windows\system32\mf.dll
2009-12-25 15:42:03 ----A---- C:\Windows\system32\icardagt.exe
2009-12-25 15:42:02 ----A---- C:\Windows\system32\ieframe.dll
2009-12-25 15:42:02 ----A---- C:\Windows\system32\EhStorShell.dll
2009-12-25 15:42:02 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2009-12-25 15:42:01 ----A---- C:\Windows\system32\spreview.exe
2009-12-25 15:42:01 ----A---- C:\Windows\system32\spinstall.exe
2009-12-25 15:42:01 ----A---- C:\Windows\system32\drmv2clt.dll
2009-12-25 15:42:00 ----A---- C:\Windows\system32\spwizui.dll
2009-12-25 15:42:00 ----A---- C:\Windows\system32\shell32.dll
2009-12-25 15:42:00 ----A---- C:\Windows\system32\secproc.dll
2009-12-25 15:42:00 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2009-12-25 15:41:59 ----A---- C:\Windows\system32\SearchIndexer.exe
2009-12-25 15:41:59 ----A---- C:\Windows\system32\p2psvc.dll
2009-12-25 15:41:59 ----A---- C:\Windows\system32\mssvp.dll
2009-12-25 15:41:59 ----A---- C:\Windows\system32\localspl.dll
2009-12-25 15:41:58 ----A---- C:\Windows\system32\sdohlp.dll
2009-12-25 15:41:58 ----A---- C:\Windows\system32\ntkrnlpa.exe
2009-12-25 15:41:58 ----A---- C:\Windows\system32\mssphtb.dll
2009-12-25 15:41:58 ----A---- C:\Windows\system32\mssph.dll
2009-12-25 15:41:58 ----A---- C:\Windows\system32\MSMPEG2VDEC.DLL
2009-12-25 15:41:58 ----A---- C:\Windows\system32\mscoree.dll
2009-12-25 15:41:58 ----A---- C:\Windows\system32\imapi2.dll
2009-12-25 15:41:57 ----A---- C:\Windows\system32\IMJP10K.DLL
2009-12-25 15:41:57 ----A---- C:\Windows\system32\esent.dll
2009-12-25 15:41:57 ----A---- C:\Windows\system32\DevicePairing.dll
2009-12-25 15:41:56 ----A---- C:\Windows\system32\wevtsvc.dll
2009-12-25 15:41:56 ----A---- C:\Windows\system32\sperror.dll
2009-12-25 15:41:56 ----A---- C:\Windows\system32\SLC.dll
2009-12-25 15:41:56 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2009-12-25 15:41:56 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2009-12-25 15:41:56 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2009-12-25 15:41:56 ----A---- C:\Windows\system32\msshsq.dll
2009-12-25 15:41:56 ----A---- C:\Windows\system32\korwbrkr.dll
2009-12-25 15:41:56 ----A---- C:\Windows\system32\IasMigReader.exe
2009-12-25 15:41:55 ----A---- C:\Windows\system32\WMVCORE.DLL
2009-12-25 15:41:55 ----A---- C:\Windows\system32\wmp.dll
2009-12-25 15:41:55 ----A---- C:\Windows\system32\msjet40.dll
2009-12-25 15:41:54 ----A---- C:\Windows\system32\Query.dll
2009-12-25 15:41:54 ----A---- C:\Windows\system32\qmgr.dll
2009-12-25 15:41:54 ----A---- C:\Windows\system32\ntoskrnl.exe
2009-12-25 15:41:54 ----A---- C:\Windows\system32\msxml6.dll
2009-12-25 15:41:54 ----A---- C:\Windows\system32\MPSSVC.dll
2009-12-25 15:41:53 ----A---- C:\Windows\system32\rpcrt4.dll
2009-12-25 15:41:53 ----A---- C:\Windows\system32\P2PGraph.dll
2009-12-25 15:41:53 ----A---- C:\Windows\system32\ole32.dll
2009-12-25 15:41:53 ----A---- C:\Windows\system32\ntdll.dll
2009-12-25 15:41:53 ----A---- C:\Windows\system32\msexch40.dll
2009-12-25 15:41:53 ----A---- C:\Windows\system32\diagperf.dll
2009-12-25 15:41:52 ----A---- C:\Windows\system32\winload.exe
2009-12-25 15:41:52 ----A---- C:\Windows\system32\uDWM.dll
2009-12-25 15:41:52 ----A---- C:\Windows\system32\srchadmin.dll
2009-12-25 15:41:52 ----A---- C:\Windows\system32\msxml3.dll
2009-12-25 15:41:52 ----A---- C:\Windows\system32\mmc.exe
2009-12-25 15:41:52 ----A---- C:\Windows\system32\mblctr.exe
2009-12-25 15:41:52 ----A---- C:\Windows\system32\EncDec.dll
2009-12-25 15:41:51 ----A---- C:\Windows\system32\riched20.dll
2009-12-25 15:41:51 ----A---- C:\Windows\system32\RacEngn.dll
2009-12-25 15:41:51 ----A---- C:\Windows\system32\IasMigPlugin.dll
2009-12-25 15:41:51 ----A---- C:\Windows\system32\fdBth.dll
2009-12-25 15:41:51 ----A---- C:\Windows\system32\dfsr.exe
2009-12-25 15:41:50 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2009-12-25 15:41:50 ----A---- C:\Windows\system32\SearchFilterHost.exe
2009-12-25 15:41:50 ----A---- C:\Windows\system32\milcore.dll
2009-12-25 15:41:50 ----A---- C:\Windows\system32\kernel32.dll
2009-12-25 15:41:50 ----A---- C:\Windows\system32\EhStorAPI.dll
2009-12-25 15:41:50 ----A---- C:\Windows\system32\CertEnroll.dll
2009-12-25 15:41:49 ----A---- C:\Windows\system32\urlmon.dll
2009-12-25 15:41:49 ----A---- C:\Windows\system32\spoolss.dll
2009-12-25 15:41:49 ----A---- C:\Windows\system32\schedsvc.dll
2009-12-25 15:41:49 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2009-12-25 15:41:49 ----A---- C:\Windows\system32\msvcp60.dll
2009-12-25 15:41:49 ----A---- C:\Windows\system32\msjtes40.dll
2009-12-25 15:41:49 ----A---- C:\Windows\system32\jscript.dll
2009-12-25 15:41:49 ----A---- C:\Windows\system32\infocardapi.dll
2009-12-25 15:41:49 ----A---- C:\Windows\system32\gpedit.dll
2009-12-25 15:41:49 ----A---- C:\Windows\system32\AuxiliaryDisplayDriverLib.dll
2009-12-25 15:41:48 ----A---- C:\Windows\system32\WinSAT.exe
2009-12-25 15:41:48 ----A---- C:\Windows\system32\wininet.dll
2009-12-25 15:41:48 ----A---- C:\Windows\system32\PresentationSettings.exe
2009-12-25 15:41:48 ----A---- C:\Windows\system32\es.dll
2009-12-25 15:41:47 ----A---- C:\Windows\system32\mstext40.dll
2009-12-25 15:41:47 ----A---- C:\Windows\system32\Magnify.exe
2009-12-25 15:41:47 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2009-12-25 15:41:47 ----A---- C:\Windows\system32\advapi32.dll
2009-12-25 15:41:46 ----A---- C:\Windows\system32\WMPhoto.dll
2009-12-25 15:41:46 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeCPL.dll
2009-12-25 15:41:46 ----A---- C:\Windows\system32\WebClnt.dll
2009-12-25 15:41:46 ----A---- C:\Windows\system32\vssapi.dll
2009-12-25 15:41:46 ----A---- C:\Windows\system32\slwmi.dll
2009-12-25 15:41:46 ----A---- C:\Windows\system32\msxbde40.dll
2009-12-25 15:41:46 ----A---- C:\Windows\system32\msfeeds.dll
2009-12-25 15:41:46 ----A---- C:\Windows\system32\msexcl40.dll
2009-12-25 15:41:46 ----A---- C:\Windows\system32\comsvcs.dll
2009-12-25 15:41:46 ----A---- C:\Windows\system32\authui.dll
2009-12-25 15:41:45 ----A---- C:\Windows\system32\vbscript.dll
2009-12-25 15:41:45 ----A---- C:\Windows\system32\propsys.dll
2009-12-25 15:41:45 ----A---- C:\Windows\system32\PresentationHost.exe
2009-12-25 15:41:45 ----A---- C:\Windows\system32\newdev.dll