iznokiller

Bonjour, J'ai fait du ménage sur mon PC, et là je me retrouve avec une lenteur impressionnante au démarrage (je suis sur XP). Quand je clique sur l'icône de ma session, il met au minimum 2 minutes pour arriver sur le bureau et là les icônes et les programmes ne se lancent pas avant 10 mn. J'ai testé la restauration bureau avec zeb-restore mais ça n'a rien changé. Un petit coup de main serait le bienvenu. Merci.

ok merci de ton aide c'est cool a++

pour c:\windows\system32\sens.dll/b] Antivirus Version Dernière mise à jour Résultat a-squared 4.0.0.101 2009.04.16 - AhnLab-V3 5.0.0.2 2009.04.16 - AntiVir 7.9.0.143 2009.04.16 - Antiy-AVL 2.0.3.1 2009.04.16 - Authentium 5.1.2.4 2009.04.16 - Avast 4.8.1335.0 2009.04.16 - AVG 8.5.0.287 2009.04.16 - BitDefender 7.2 2009.04.16 - CAT-QuickHeal 10.00 2009.04.16 - ClamAV 0.94.1 2009.04.16 - Comodo 1116 2009.04.16 - DrWeb 4.44.0.09170 2009.04.16 - eSafe 7.0.17.0 2009.04.13 - eTrust-Vet 31.6.6455 2009.04.14 - F-Prot 4.4.4.56 2009.04.15 - F-Secure 8.0.14470.0 2009.04.16 - Fortinet 3.117.0.0 2009.04.16 - GData 19 2009.04.16 - Ikarus T3.1.1.49.0 2009.04.16 - K7AntiVirus 7.10.704 2009.04.15 - Kaspersky 7.0.0.125 2009.04.16 - McAfee 5586 2009.04.16 - McAfee+Artemis 5586 2009.04.16 - McAfee-GW-Edition 6.7.6 2009.04.16 - Microsoft 1.4502 2009.04.16 - NOD32 4014 2009.04.16 - Norman 6.00.06 2009.04.16 - nProtect 2009.1.8.0 2009.04.16 Trojan/W32.Agent.38912.BZ Panda 10.0.0.14 2009.04.16 - PCTools 4.4.2.0 2009.04.15 - Prevx1 V2 2009.04.16 - Rising 21.25.34.00 2009.04.16 - Sophos 4.40.0 2009.04.16 - Sunbelt 3.2.1858.2 2009.04.15 - Symantec 1.4.4.12 2009.04.16 - TheHacker 6.3.4.0.309 2009.04.16 - TrendMicro 8.700.0.1004 2009.04.16 - VBA32 3.12.10.2 2009.04.12 - ViRobot 2009.4.16.1696 2009.04.16 - VirusBuster 4.6.5.0 2009.04.16 - Information additionnelle File size: 38912 bytes MD5...: 50f6f8e01ad2af261af86a3077b6fb6c SHA1..: e6dc0c049573746611a1c71310847bda99cf6caa SHA256: d0647e9063e69f1a541c06beb9d5b8299c374066c3e3475f662cf7cf44bc3fb1 SHA512: 76a8746446838751bd660f0457d0033fc606068c7c931ebe091705a238be4716 0d6364a1c7bd1333f00dd0db4a66741af70ef3a849442b990c9ccf9157d8fb98 ssdeep: 384:gvrSc3ZCj9CaN+3bSTCWSZuyUACegBDam/XSvWKBU85w3Focyjx8CcQ6WE8l iWwH:gTOHI3ECWSAyIoOOWEl5w3FoHcElc PEiD..: - TrID..: File type identification Win32 Executable Generic (42.3%) Win32 Dynamic Link Library (generic) (37.6%) Generic Win/DOS Executable (9.9%) DOS Executable Generic (9.9%) Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%) PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x12a3 timedatestamp.....: 0x41109607 (Wed Aug 04 07:53:43 2004) machinetype.......: 0x14c (I386) ( 4 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x1000 0x722d 0x7400 6.31 c6ff338e2ce44fcf989395aaaf342145 .data 0x9000 0x29c 0x200 1.62 f2d2b05f107f10f8f77cc58f220d2f01 .rsrc 0xa000 0x1520 0x1600 3.95 1ef872deceab5ec81f62aa55fe58b402 .reloc 0xc000 0x6c4 0x800 6.15 a38801b47318bf68798270e45d4866dd ( 6 imports ) > ntdll.dll: wcscpy, wcscmp, _wcsnicmp, wcschr, wcscat, wcslen > RPCRT4.dll: RpcBindingSetAuthInfoExW, RpcBindingFromStringBindingW, NdrServerCall2, I_RpcBindingIsClientLocal, RpcServerRegisterIfEx, RpcServerUseProtseqEpW, RpcMgmtSetServerStackSize, RpcServerUnregisterIf, RpcBindingFree, RpcStringBindingComposeW, NdrClientCall2, RpcStringFreeW > ole32.dll: StringFromIID, CoCreateInstance, CoRegisterClassObject, CoRevokeClassObject, CoInitializeEx, CoTaskMemFree, CoUninitialize > USER32.dll: wsprintfW > KERNEL32.dll: SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, LocalFree, FormatMessageW, SetEvent, GetSystemPowerStatus, OpenEventW, InitializeCriticalSection, GetProcessHeap, FreeLibrary, GetProcAddress, LoadLibraryW, DisableThreadLibraryCalls, DeleteCriticalSection, CloseHandle, GetTickCount, InterlockedIncrement, InterlockedDecrement, EnterCriticalSection, LeaveCriticalSection, HeapAlloc, HeapFree, InterlockedExchange, DeleteTimerQueueTimer, Sleep, CreateTimerQueueTimer, GetLastError, QueueUserWorkItem, MapViewOfFile, CreateFileMappingW, UnmapViewOfFile, lstrlenW, DelayLoadFailureHook, InterlockedCompareExchange, LoadLibraryA, QueryPerformanceCounter, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime > ADVAPI32.dll: RegEnumKeyExW, RegSetKeySecurity, RegDeleteValueW, OpenSCManagerW, OpenServiceW, QueryServiceStatus, CloseServiceHandle, WmiNotificationRegistrationW, RegOpenKeyExW, RegQueryValueExW, RegSetValueExW, RegCloseKey, GetLengthSid, InitializeAcl, AddAccessAllowedAce, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, AllocateAndInitializeSid, FreeSid, RegisterServiceCtrlHandlerExW, SetServiceStatus, RegisterEventSourceW, ReportEventW, DeregisterEventSource ( 4 exports ) SensNotifyNetconEvent, SensNotifyRasEvent, SensNotifyWinlogonEvent, ServiceMain RDS...: NSRL Reference Data Set ( Microsoft ) > MSDN Disc 2439.8: sens.dll > MSDN Disc 2439.7: sens.dll > MSDN Disc 2439.6: sens.dll CWSandbox info: <a href='http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=50f6f8e01ad2af261af86a3077b6fb6c' target='_blank'>http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=50f6f8e01ad2af261af86a3077b6fb6c</a> pour C:\WINDOWS\system32\KERNEL32.dll Antivirus Version Dernière mise à jour Résultat a-squared 4.0.0.101 2009.04.16 - AhnLab-V3 5.0.0.2 2009.04.16 - AntiVir 7.9.0.143 2009.04.16 - Antiy-AVL 2.0.3.1 2009.04.16 - Authentium 5.1.2.4 2009.04.16 - Avast 4.8.1335.0 2009.04.16 - AVG 8.5.0.287 2009.04.16 - BitDefender 7.2 2009.04.16 - CAT-QuickHeal 10.00 2009.04.16 - ClamAV 0.94.1 2009.04.16 - Comodo 1116 2009.04.16 - DrWeb 4.44.0.09170 2009.04.16 - eSafe 7.0.17.0 2009.04.13 - eTrust-Vet 31.6.6455 2009.04.14 - F-Prot 4.4.4.56 2009.04.16 - F-Secure 8.0.14470.0 2009.04.16 - Fortinet 3.117.0.0 2009.04.16 - GData 19 2009.04.16 - Ikarus T3.1.1.49.0 2009.04.16 - K7AntiVirus 7.10.704 2009.04.15 - Kaspersky 7.0.0.125 2009.04.16 - McAfee 5586 2009.04.16 - McAfee+Artemis 5586 2009.04.16 - McAfee-GW-Edition 6.7.6 2009.04.16 - Microsoft 1.4502 2009.04.16 - NOD32 4014 2009.04.16 - Norman 6.00.06 2009.04.16 - nProtect 2009.1.8.0 2009.04.16 - Panda 10.0.0.14 2009.04.16 - PCTools 4.4.2.0 2009.04.15 - Prevx1 V2 2009.04.16 - Rising 21.25.34.00 2009.04.16 - Sophos 4.40.0 2009.04.16 - Sunbelt 3.2.1858.2 2009.04.15 - Symantec 1.4.4.12 2009.04.16 - TheHacker 6.3.4.0.309 2009.04.16 - TrendMicro 8.700.0.1004 2009.04.16 - VBA32 3.12.10.2 2009.04.12 - ViRobot 2009.4.16.1696 2009.04.16 - VirusBuster 4.6.5.0 2009.04.16 - pour C:\WINDOWS\system32\services.exe Antivirus Version Dernière mise à jour Résultat a-squared 4.0.0.101 2009.04.16 - AhnLab-V3 5.0.0.2 2009.04.16 - AntiVir 7.9.0.143 2009.04.16 - Antiy-AVL 2.0.3.1 2009.04.16 - Authentium 5.1.2.4 2009.04.16 - Avast 4.8.1335.0 2009.04.16 - AVG 8.5.0.287 2009.04.16 - BitDefender 7.2 2009.04.16 - CAT-QuickHeal 10.00 2009.04.16 - ClamAV 0.94.1 2009.04.16 - Comodo 1116 2009.04.16 - DrWeb 4.44.0.09170 2009.04.16 - eSafe 7.0.17.0 2009.04.13 - eTrust-Vet 31.6.6455 2009.04.14 - F-Prot 4.4.4.56 2009.04.16 - F-Secure 8.0.14470.0 2009.04.16 - Fortinet 3.117.0.0 2009.04.16 - GData 19 2009.04.16 - Ikarus T3.1.1.49.0 2009.04.16 - K7AntiVirus 7.10.704 2009.04.15 - Kaspersky 7.0.0.125 2009.04.16 - McAfee 5586 2009.04.16 - McAfee+Artemis 5586 2009.04.16 - McAfee-GW-Edition 6.7.6 2009.04.16 - Microsoft 1.4502 2009.04.16 - NOD32 4014 2009.04.16 - Norman 6.00.06 2009.04.16 - nProtect 2009.1.8.0 2009.04.16 - Panda 10.0.0.14 2009.04.16 - PCTools 4.4.2.0 2009.04.15 - Prevx1 V2 2009.04.16 - Rising 21.25.34.00 2009.04.16 - Sophos 4.40.0 2009.04.16 - Sunbelt 3.2.1858.2 2009.04.15 - Symantec 1.4.4.12 2009.04.16 - TheHacker 6.3.4.0.309 2009.04.16 - TrendMicro 8.700.0.1004 2009.04.16 - VBA32 3.12.10.2 2009.04.12 - ViRobot 2009.4.16.1696 2009.04.16 - VirusBuster 4.6.5.0 2009.04.16 - pour c:\windows\system32\wuauserv.dll/b] a-squared 4.0.0.101 2009.04.16 - AhnLab-V3 5.0.0.2 2009.04.16 - AntiVir 7.9.0.143 2009.04.16 - Antiy-AVL 2.0.3.1 2009.04.16 - Authentium 5.1.2.4 2009.04.16 - Avast 4.8.1335.0 2009.04.16 - AVG 8.5.0.287 2009.04.16 - BitDefender 7.2 2009.04.16 - CAT-QuickHeal 10.00 2009.04.16 - ClamAV 0.94.1 2009.04.16 - Comodo 1116 2009.04.16 - DrWeb 4.44.0.09170 2009.04.16 - eSafe 7.0.17.0 2009.04.13 - eTrust-Vet 31.6.6455 2009.04.14 - F-Prot 4.4.4.56 2009.04.16 - F-Secure 8.0.14470.0 2009.04.16 - Fortinet 3.117.0.0 2009.04.16 - GData 19 2009.04.16 - Ikarus T3.1.1.49.0 2009.04.16 - K7AntiVirus 7.10.704 2009.04.15 - Kaspersky 7.0.0.125 2009.04.16 - McAfee 5586 2009.04.16 - McAfee+Artemis 5586 2009.04.16 - McAfee-GW-Edition 6.7.6 2009.04.16 - Microsoft 1.4502 2009.04.16 - NOD32 4014 2009.04.16 - Norman 6.00.06 2009.04.16 - nProtect 2009.1.8.0 2009.04.16 - Panda 10.0.0.14 2009.04.16 - PCTools 4.4.2.0 2009.04.15 - Prevx1 V2 2009.04.16 - Rising 21.25.34.00 2009.04.16 - Sophos 4.40.0 2009.04.16 - Sunbelt 3.2.1858.2 2009.04.15 - Symantec 1.4.4.12 2009.04.16 - TheHacker 6.3.4.0.309 2009.04.16 - TrendMicro 8.700.0.1004 2009.04.16 - VBA32 3.12.10.2 2009.04.12 - ViRobot 2009.4.16.1696 2009.04.16 - VirusBuster 4.6.5.0 2009.04.16 - pour C:\WINDOWS\system32\spoolsv.exe a-squared 4.0.0.101 2009.04.16 - AhnLab-V3 5.0.0.2 2009.04.16 - AntiVir 7.9.0.143 2009.04.16 - Antiy-AVL 2.0.3.1 2009.04.16 - Authentium 5.1.2.4 2009.04.16 - Avast 4.8.1335.0 2009.04.16 - AVG 8.5.0.287 2009.04.16 - BitDefender 7.2 2009.04.16 - CAT-QuickHeal 10.00 2009.04.16 - ClamAV 0.94.1 2009.04.16 - Comodo 1116 2009.04.16 - DrWeb 4.44.0.09170 2009.04.16 - eSafe 7.0.17.0 2009.04.13 - eTrust-Vet 31.6.6455 2009.04.14 - F-Prot 4.4.4.56 2009.04.16 - F-Secure 8.0.14470.0 2009.04.16 - Fortinet 3.117.0.0 2009.04.16 - GData 19 2009.04.16 - Ikarus T3.1.1.49.0 2009.04.16 - K7AntiVirus 7.10.704 2009.04.15 - Kaspersky 7.0.0.125 2009.04.16 - McAfee 5586 2009.04.16 - McAfee+Artemis 5586 2009.04.16 - McAfee-GW-Edition 6.7.6 2009.04.16 - Microsoft 1.4502 2009.04.16 - NOD32 4014 2009.04.16 - Norman 6.00.06 2009.04.16 - nProtect 2009.1.8.0 2009.04.16 - Panda 10.0.0.14 2009.04.16 - PCTools 4.4.2.0 2009.04.15 - Prevx1 V2 2009.04.16 - Rising 21.25.34.00 2009.04.16 - Sophos 4.40.0 2009.04.16 - Sunbelt 3.2.1858.2 2009.04.15 - Symantec 1.4.4.12 2009.04.16 - TheHacker 6.3.4.0.309 2009.04.16 - TrendMicro 8.700.0.1004 2009.04.16 - VBA32 3.12.10.2 2009.04.12 - ViRobot 2009.4.16.1696 2009.04.16 - VirusBuster 4.6.5.0 2009.04.16 -

bon ça change rien, il me trouve toujours la meme chose ! le log: Version - a-squared Free 4.0 Dernière mise à jour : 15/04/2009 01:17:44 Paramètres des balayages : Éléments : Mémoire, Traces, Cookies, C:\, E:\ Balaye dans les archives : Marche Analyse heuristique : Arrêt Balaye dans les ADS : Marche Début du balayage : 16/04/2009 17:36:59 [752] C:\WINDOWS\system32\KERNEL32.dll Objets détectés : Trojan.Win32.Agent!IK [784] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK [828] C:\WINDOWS\system32\services.exe Objets détectés : Trojan.Patched.AS!IK [828] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK [840] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK [996] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK [1044] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK [1144] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK [1144] c:\windows\system32\sens.dll Objets détectés : Virus.Win32.Mesoum!IK [1144] c:\windows\system32\wuauserv.dll Objets détectés : Virus.Win32.Messoum!IK [1224] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK [1408] C:\WINDOWS\system32\spoolsv.exe Objets détectés : Virus.Win32.Patched.B!IK [1408] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK [1448] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK [1636] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK [1656] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK [1684] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK [1760] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK [1776] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK [1872] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK [1956] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK [2012] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK [184] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK [1288] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK [1280] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK [1608] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK [2144] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK [2296] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK [2820] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK [3908] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK [3932] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK [3960] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK [2804] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK [2956] C:\WINDOWS\system32\kernel32.dll Objets détectés : Trojan.Win32.Agent!IK Analysé Fichiers : 115897 Traces : 621055 Cookies : 1243 Processus : 31 Objets trouvés Fichiers : 0 Traces : 0 Cookies : 0 Processus : 34 Clés de Registre : 0 Fin du balayage : 16/04/2009 17:53:03 Temps du balayage : 0:16:04

merci de ton aide voila le log: Malwarebytes' Anti-Malware 1.36 Version de la base de données: 1989 Windows 5.1.2600 Service Pack 2 16/04/2009 17:04:48 mbam-log-2009-04-16 (17-04-48).txt Type de recherche: Examen complet (C:\|E:\|) Eléments examinés: 146114 Temps écoulé: 41 minute(s), 5 second(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 3 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 0 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{6fd31ed6-7c94-4bbc-8e95-f927f4d3a949} (Adware.180Solutions) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{90b5a95a-afd5-4d11-b9bd-a69d53d22226} (Adware.Hotbar) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8109fd3d-d891-4f80-8339-50a4913ace6f} (Adware.Zango) -> Quarantined and deleted successfully. Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): (Aucun élément nuisible détecté)

ok merci je m'en était à peu près sur les log: Logfile of random's system information tool 1.06 (written by random/random) Run by Izno at 2009-04-16 13:43:08 Microsoft Windows XP Édition familiale Service Pack 2 System drive C: has 15 GB (49%) free of 30 GB Total RAM: 2047 MB (68% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 13:43:14, on 16/04/2009 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16674) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe c:\program files\a-squared free\a2service.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Spyware Terminator\sp_rsser.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\WF2K.EXE C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\system32\RUNDLL32.EXE C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Windows Live\Messenger\usnsvc.exe C:\Program Files\Winamp\winamp.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Izno\Bureau\RSIT.exe C:\Program Files\Trend Micro\HijackThis\Izno.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.01net.com/telecharger/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.01net.com/telecharger/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.01net.com/telecharger/ R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O4 - HKLM\..\Run: [WinFoxV2] C:\WINDOWS\system32\WF2K.EXE O4 - HKLM\..\Run: [WinFast2KLoadDefault] rundll32.exe C:\WINDOWS\system32\wf2kcpl.dll,DllLoadDefaultSettings O4 - HKLM\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear O4 - HKLM\..\Run: [DLCFCATS] rundll32 C:\WINDOWS\system32\spool\DRIVERS\W32X86\3\DLCFtime.dll,_RunDLLEntry@16 O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [spywareTerminator] "C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O9 - Extra button: (no name) - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - (no file) O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1184601644015 O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111...all/xscan53.cab O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - http://config.zebulon.fr/plugins/hardwaredetection.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - c:\program files\a-squared free\a2service.exe O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: dlcf_device - - C:\WINDOWS\system32\dlcfcoms.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe O23 - Service: Ventrilo - Unknown owner - C:\Program Files\VentSrv\ventrilo_svc.exe -- End of file - 6791 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\Microsoft_Hardware_Launch_IPoint_exe.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}] Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2007-09-20 328752] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-09 35840] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E5A1691B-D188-4419-AD02-90002030B8EE}] FlashFXP Helper for Internet Explorer - C:\PROGRA~1\FlashFXP\IEFlash.dll [2007-05-16 191096] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}] JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-03-09 73728] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "WinFoxV2"=C:\WINDOWS\system32\WF2K.EXE [2006-03-01 1486848] "WinFast2KLoadDefault"=C:\WINDOWS\system32\wf2kcpl.dll [2006-02-22 668672] "NVIDIA nTune"=C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe [2006-05-23 81920] "DLCFCATS"=rundll32 C:\WINDOWS\system32\spool\DRIVERS\W32X86\3\DLCFtime.dll,_RunDLLEntry@16 [] "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2008-09-17 13574144] "nwiz"=nwiz.exe /install [] "RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-12-20 16860672] "Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632] "NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2008-09-17 86016] "SpywareTerminator"=C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe [2008-11-08 1783808] "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792] "avgnt"=C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008-06-12 266497] "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-09 148888] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-05 15360] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "E:\Jeux\FEAR\FEAR.exe"="E:\Jeux\FEAR\FEAR.exe:*:Enabled:FEAR" "C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent" "C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "E:\Jeux\nwn2rel\nwn2main.exe"="E:\Jeux\nwn2rel\nwn2main.exe:*:Enabled:Neverwinter Nights 2 Main" "E:\Jeux\nwn2rel\nwn2main_amdxp.exe"="E:\Jeux\nwn2rel\nwn2main_amdxp.exe:*:Enabled:Neverwinter Nights 2 AMD" "E:\Jeux\nwn2rel\nwupdate.exe"="E:\Jeux\nwn2rel\nwupdate.exe:*:Enabled:Neverwinter Nights 2 Updater" "E:\Jeux\nwn2rel\nwn2server.exe"="E:\Jeux\nwn2rel\nwn2server.exe:*:Enabled:Neverwinter Nights 2 Server" "C:\Program Files\Azureus\Azureus.exe"="C:\Program Files\Azureus\Azureus.exe:*:Enabled:Azureus" "C:\Program Files\eMule\eMule.exe"="C:\Program Files\eMule\eMule.exe:*:Enabled:eMule" "E:\utils\freebox\Freeplayer\vlc\vlc.exe"="E:\utils\freebox\Freeplayer\vlc\vlc.exe:*:Enabled:VLC media player" "C:\Program Files\freeBrowser\vlc\vlc.exe"="C:\Program Files\freeBrowser\vlc\vlc.exe:*:Enabled:VLC media player" "C:\Program Files\freeBrowser\freeBrowser\freeBrowser.exe"="C:\Program Files\freeBrowser\freeBrowser\freeBrowser.exe:*:Enabled:FreeBrowser" "C:\Program Files\eChanblard\emule.exe"="C:\Program Files\eChanblard\emule.exe:*:Enabled:eMule" "C:\WINDOWS\system\explorer.exe"="C:\WINDOWS\system\explorer.exe:*:Enabled:Windows Sharing" "C:\DOCUME~1\Izno\LOCALS~1\Temp\Rar$DI00.859\img0794-www.photoupload.com"="C:\DOCUME~1\Izno\LOCALS~1\Temp\Rar$DI00.859\img0794-www.photoupload.com:*:Enabled:Windows Sharing" "C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA" "C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB" "C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe"="C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe:*:Disabled:Sunbelt Firewall GUI" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)" "C:\Program Files\Winamp Remote\bin\Orb.exe"="C:\Program Files\Winamp Remote\bin\Orb.exe:*:Enabled:Orb" "C:\Program Files\Winamp Remote\bin\OrbTray.exe"="C:\Program Files\Winamp Remote\bin\OrbTray.exe:*:Enabled:OrbTray" "C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe"="C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:*:Enabled:Orb Stream Client" "E:\Jeux\stalker\S.T.A.L.K.E.R. - Clear Sky\bin\xrEngine.exe"="E:\Jeux\stalker\S.T.A.L.K.E.R. - Clear Sky\bin\xrEngine.exe:*:Enabled:S.T.A.L.K.E.R. - Clear Sky (CLI)" "E:\Jeux\stalker\S.T.A.L.K.E.R. - Clear Sky\bin\dedicated\xrEngine.exe"="E:\Jeux\stalker\S.T.A.L.K.E.R. - Clear Sky\bin\dedicated\xrEngine.exe:*:Enabled:S.T.A.L.K.E.R. - Clear Sky (SRV)" "C:\Documents and Settings\Izno\Application Data\Facebook\facebook.exe"="C:\Documents and Settings\Izno\Application Data\Facebook\facebook.exe:127.0.0.1/255.255.255.255:Enabled:Facebook" "C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour" "C:\Program Files\HomePlayer\HomePlayer.exe"="C:\Program Files\HomePlayer\HomePlayer.exe:*:Enabled:HomePlayer" "C:\Program Files\HomePlayer\VLC\vlc.exe"="C:\Program Files\HomePlayer\VLC\vlc.exe:*:Enabled:VLC HomePlayer" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\G] shell\AutoRun\command - G:\setup\rsrc\Autorun.exe shell\dinstall\command - G:\Directx\dxsetup.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6e1b9fc1-700e-11db-9867-0016176f8975}] shell\AutoRun\command - G:\CojLauncher.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7fb027a6-8fa0-11dc-9ae7-0016176f8975}] shell\AutoRun\command - F:\AutoRun.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8d2755db-d2ca-11dd-9cc4-0016176f8975}] shell\Auto\command - H:\AdobeR.exe e shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e ======List of files/folders created in the last 1 months====== 2009-04-16 13:43:08 ----D---- C:\rsit 2009-04-16 12:40:50 ----D---- C:\Program Files\Trend Micro 2009-03-27 13:35:13 ----A---- C:\WINDOWS\system32\javaws.exe 2009-03-27 13:35:13 ----A---- C:\WINDOWS\system32\javaw.exe 2009-03-27 13:35:13 ----A---- C:\WINDOWS\system32\java.exe ======List of files/folders modified in the last 1 months====== 2009-04-16 13:40:47 ----D---- C:\Program Files\Mozilla Firefox 2009-04-16 12:40:50 ----AD---- C:\Program Files 2009-04-16 11:48:44 ----A---- C:\RTHDCPL_Dump.txt 2009-04-16 11:48:42 ----D---- C:\WINDOWS\Temp 2009-04-16 11:48:10 ----D---- C:\WINDOWS\Registration 2009-04-15 16:25:41 ----D---- C:\Documents and Settings\Izno\Application Data\Azureus 2009-04-15 15:28:28 ----D---- C:\WINDOWS\system32\CatRoot2 2009-04-15 15:08:40 ----D---- C:\WINDOWS 2009-04-15 14:59:42 ----D---- C:\Program Files\a-squared Free 2009-04-14 00:28:11 ----D---- C:\Program Files\Spybot - Search & Destroy 2009-04-03 12:00:24 ----D---- C:\Documents and Settings\Izno\Application Data\Spyware Terminator 2009-03-29 21:38:28 ----HD---- C:\WINDOWS\inf 2009-03-29 21:38:28 ----D---- C:\Program Files\Windows Live Safety Center 2009-03-29 18:52:44 ----D---- C:\WINDOWS\system32 2009-03-29 18:52:44 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2009-03-27 13:35:21 ----SHD---- C:\WINDOWS\Installer 2009-03-27 13:35:12 ----D---- C:\Program Files\Java 2009-03-20 22:57:41 ----A---- C:\WINDOWS\NeroDigital.ini 2009-03-20 16:44:44 ----D---- C:\Documents and Settings\Izno\Application Data\OpenOffice.org2 ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 AmdK8;Pilote de processeur AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-05-10 43520] R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys [] R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2008-10-30 75072] R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys [] R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2007-11-08 21248] R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2006-07-24 5632] R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2008-09-14 279712] R2 irda;Protocole IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2004-08-04 87424] R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2008-09-14 25888] R3 avgntflt;avgntflt; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys [] R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752] R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2004-08-05 9600] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-12-20 4637696] R3 irsir;Pilote série infrarouge Microsoft; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688] R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-05 12288] R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-09-17 6132576] R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-03-22 52736] R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-03-22 18944] R3 NVR0Dev;NVR0Dev; \??\C:\WINDOWS\nvoclock.sys [] R3 Rasirda;Miniport réseau étendu (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584] R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-05 26624] R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-05 57600] R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2004-08-05 17024] R3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856] R4 WINFOXIO;WINFOXIO; \??\C:\WINDOWS\system32\Drivers\WINFOXIO.SYS [] S3 apol5rkv;apol5rkv; C:\WINDOWS\system32\drivers\apol5rkv.sys [] S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys [] S3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2006-11-09 47360] S3 Point32;Microsoft IntelliPoint Filter Driver; C:\WINDOWS\system32\DRIVERS\point32.sys [] S3 RushTopDevice;RushTopDevice; \??\C:\Program Files\MSI\Core Center\RushTop.sys [] S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:\WINDOWS\system32\DRIVERS\ss_bus.sys [2005-08-30 58320] S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:\WINDOWS\system32\DRIVERS\ss_mdfl.sys [2005-08-30 8304] S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:\WINDOWS\system32\DRIVERS\ss_mdm.sys [2005-08-30 94000] S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\WINDOWS\system32\DRIVERS\sscdbus.sys [2005-12-22 80272] S3 sscdmdfl;SAMSUNG CDMA Modem Filter; C:\WINDOWS\system32\DRIVERS\sscdmdfl.sys [2005-12-22 10864] S3 sscdmdm;SAMSUNG CDMA Modem Drivers; C:\WINDOWS\system32\DRIVERS\sscdmdm.sys [2005-12-22 137884] S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104] S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 26496] S4 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS [] S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 a2free;a-squared Free Service; c:\program files\a-squared free\a2service.exe [2009-04-15 425080] R2 AntiVirScheduler;Planificateur Avira AntiVir Personal - Free Antivirus; C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe [2008-10-15 68865] R2 AntiVirService;Avira AntiVir Personal - Free Antivirus Guard; C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe [2008-10-15 151297] R2 Irmon;Moniteur infrarouge; C:\WINDOWS\system32\svchost.exe [2004-08-05 14336] R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-03-09 152984] R2 nTuneService;nTune Service; C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe [2006-05-23 86016] R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2008-09-17 163908] R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2008-11-08 570880] R3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328] S2 Ventrilo;Ventrilo; C:\Program Files\VentSrv\ventrilo_svc.exe [2005-07-13 65536] S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144] S3 dlcf_device;dlcf_device; C:\WINDOWS\system32\dlcfcoms.exe [2005-10-28 491520] S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728] S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240] S4 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-10 38912] -----------------EOF----------------- info.txt logfile of random's system information tool 1.06 2009-04-16 13:43:15 ======Uninstall list====== -->C:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL -->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL -->C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL -->C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL -->C:\WINDOWS\UNNeroVision.exe /UNINSTALL -->C:\WINDOWS\UNRecode.exe /UNINSTALL -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D066C0E0-A915-11D5-B078-00C0F6A04C3E}\setup.exe" -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe Adobe Reader 8.1.4 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81300000003} Adobe Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe a-squared Free 2.1-->"C:\Program Files\a-squared Free\unins000.exe" Assistant de connexion Windows Live-->MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986} Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE Azureus Vuze-->C:\Program Files\Azureus\uninstall.exe CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe" CDex extraction audio-->"C:\Program Files\CDex_170b2\uninstall.exe" CodeStuff Starter-->"C:\Program Files\CodeStuff\Starter\unStarter.exe" Core Center-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\MSI\Core Center\Uninst.isu" Dell Color Printer 725-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\dlcfUNST.EXE -NOLICENSE FlashFXP v3-->"C:\Program Files\FlashFXP\Uninstall.exe" "C:\Program Files\FlashFXP\install.log" -u freeBrowser 0.9.0-->C:\Program Files\freeBrowser\uninst.exe Full Tilt Poker-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D4C9692E-4EFA-4DA0-8B7F-9439466D9E31}\setup.exe" -l0x9 -removeonly Hattrick Organizer (remove only)-->C:\HattrickOrganizer\Uninstall.exe HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall Hijackthis Version Française 1.99.0.1-->"C:\Program Files\Hijackthis Version Française\unins000.exe" HomePlayer 1.5.7-->C:\Program Files\HomePlayer\uninst.exe Java 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF} Java 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020} Java 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030} Java 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050} Java 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070} K-Lite Codec Pack 3.9.0 Full-->"C:\Program Files\K-Lite Codec Pack\unins000.exe" Ma-Config.com plugin-->MsiExec.exe /I{D2D7529F-6B55-4C1C-BC9C-D6F1BCC066B6} Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe" Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28} Microsoft Office PowerPoint Viewer 2003-->MsiExec.exe /X{90AF040C-6000-11D3-8CFE-0150048383C9} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe" Mozilla Firefox (3.0.-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe MSI Live Update 3-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\MSI\Live Update 3\Uninst.isu" MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF} Musetools NT-->MsiExec.exe /I{EB64DD0C-3C22-4D6B-A6FE-3ECB1EA6C98E} Nero 7 Demo-->MsiExec.exe /I{4C8EDB2B-7D69-929F-0064-77B589571036} Notepad++-->C:\Program Files\Notepad++\uninstall.exe NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI NVIDIA nTune-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{7C7F30F4-94E7-4AA8-8941-90C4A80C68BF} /l1036 OpenAL-->"C:\Program Files\OpenAL\OpenALwEAX.exe" /U OpenOffice.org 2.1-->MsiExec.exe /I{E5430A11-6799-41E0-A9D5-F68BDC67AAD8} QuickTime-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{929408E6-D265-4174-805F-81D1D914E2A4} /l1036 Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x40c -removeonly SAMSUNG CDMA Modem Driver Set-->C:\WINDOWS\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe Samsung Mobile phone USB driver Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe SAMSUNG Mobile USB Modem 1.0 Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe SAMSUNG Mobile USB Modem Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe Samsung PC Studio 3-->"C:\Program Files\InstallShield Installation Information\{C4A4722E-79F9-417C-BD72-8D359A090C97}\setup.exe" -runfromtemp -l0x040c -removeonly Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} SoulSeek 157 NS 13c-->"C:\Program Files\Soulseek-Test\uninstall.exe" Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe" Spyware Terminator-->"C:\Program Files\Spyware Terminator\unins000.exe" System Requirements Lab-->C:\Program Files\SystemRequirementsLab\Uninstall.exe Ventrilo Client-->MsiExec.exe /I{789289CA-F73A-4A16-A331-54D498CE069F} Ventrilo Server-->MsiExec.exe /I{85DD724B-15E5-4572-81BF-CF9031D83848} VLC media player 0.9.2-->C:\Program Files\VideoLAN\VLC\uninstall.exe Winamp-->"C:\Program Files\Winamp\UninstWA.exe" Windows Internet Explorer 7-->"C:\WINDOWS\ie7\spuninst\spuninst.exe" Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390} Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65} Windows Live OneCare safety scanner-->RunDll32.exe "C:\Program Files\Windows Live Safety Center\wlscCore.dll",UninstallFunction WLSC_SCANNER_PRODUCT Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} WinFast® Display Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F69FD33C-8815-46BF-9134-A643DE68F3C0}\setup.exe" -l0x40c -removeonly WinFox Setup-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Leadtek Research Inc.\WinFox Setup\Uninst.isu" -c"C:\WINDOWS\system32\WinFox\WinFoxUT.dll" XnView 1.94.2-->"C:\Program Files\XnView\unins000.exe" ======Hosts File====== 127.0.0.1 babe.the-killer.bz 127.0.0.1 www.babe.the-killer.bz 127.0.0.1 babe.k-lined.com 127.0.0.1 www.babe.k-lined.com 127.0.0.1 did.i-used.cc 127.0.0.1 www.did.i-used.cc 127.0.0.1 coolwwwsearch.com 127.0.0.1 www.coolwwwsearch.com 127.0.0.1 coolwebsearch.com 127.0.0.1 www.coolwebsearch.com ======Security center information====== AV: Avira AntiVir PersonalEdition Classic ======System event log====== Computer Name: IA Event Code: 26 Message: Application popup : xrEngine.exe - Composant introuvable : Cette application n'a pas pu démarrer car xrAPI.dll est introuvable. La réinstallation de cette application peut corriger ce problème. Record Number: 22916 Source Name: Application Popup Time Written: 20080912120912.000000+120 Event Type: Informations User: Computer Name: IA Event Code: 10005 Message: DCOM a reçu l'erreur "%1058" lors de la mise en route du service helpsvc avec les arguments "" pour démarrer le serveur : {833E4010-AFF7-4AC3-AAC2-9F24C1457BCE} Record Number: 22915 Source Name: DCOM Time Written: 20080912120905.000000+120 Event Type: erreur User: IA\Izno Computer Name: IA Event Code: 26 Message: Application popup : xrEngine.exe - Composant introuvable : Cette application n'a pas pu démarrer car d3dx9_37.dll est introuvable. La réinstallation de cette application peut corriger ce problème. Record Number: 22914 Source Name: Application Popup Time Written: 20080912120857.000000+120 Event Type: Informations User: Computer Name: IA Event Code: 26 Message: Application popup : xrEngine.exe - Composant introuvable : Cette application n'a pas pu démarrer car d3dx9_37.dll est introuvable. La réinstallation de cette application peut corriger ce problème. Record Number: 22913 Source Name: Application Popup Time Written: 20080912120732.000000+120 Event Type: Informations User: Computer Name: IA Event Code: 26 Message: Application popup : xrEngine.exe - Composant introuvable : Cette application n'a pas pu démarrer car d3dx9_37.dll est introuvable. La réinstallation de cette application peut corriger ce problème. Record Number: 22912 Source Name: Application Popup Time Written: 20080912115755.000000+120 Event Type: Informations User: =====Application event log===== Computer Name: IA Event Code: 700 Message: msnmsgr (692) La défragmentation en ligne commence un passage complet dans la base de données '\\.\C:\Documents and Settings\Izno\Local Settings\Application Data\Microsoft\Messenger\mat.izno@hotmail.fr\SharingMetadata\Working\database_7420_BB96_20BB_5E34\dfsr.db'. Record Number: 16009 Source Name: ESENT Time Written: 20090129050003.000000+060 Event Type: Informations User: Computer Name: IA Event Code: 701 Message: msnmsgr (692) La défragmentation en ligne a terminé un passage complet dans la base de données '\\.\C:\Documents and Settings\Izno\Local Settings\Application Data\Microsoft\Messenger\mat.izno@hotmail.fr\SharingMetadata\Working\database_7420_BB96_20BB_5E34\dfsr.db'. Record Number: 16008 Source Name: ESENT Time Written: 20090129040003.000000+060 Event Type: Informations User: Computer Name: IA Event Code: 700 Message: msnmsgr (692) La défragmentation en ligne commence un passage complet dans la base de données '\\.\C:\Documents and Settings\Izno\Local Settings\Application Data\Microsoft\Messenger\mat.izno@hotmail.fr\SharingMetadata\Working\database_7420_BB96_20BB_5E34\dfsr.db'. Record Number: 16007 Source Name: ESENT Time Written: 20090129040003.000000+060 Event Type: Informations User: Computer Name: IA Event Code: 701 Message: msnmsgr (692) La défragmentation en ligne a terminé un passage complet dans la base de données '\\.\C:\Documents and Settings\Izno\Local Settings\Application Data\Microsoft\Messenger\mat.izno@hotmail.fr\SharingMetadata\Working\database_7420_BB96_20BB_5E34\dfsr.db'. Record Number: 16006 Source Name: ESENT Time Written: 20090129030003.000000+060 Event Type: Informations User: Computer Name: IA Event Code: 700 Message: msnmsgr (692) La défragmentation en ligne commence un passage complet dans la base de données '\\.\C:\Documents and Settings\Izno\Local Settings\Application Data\Microsoft\Messenger\mat.izno@hotmail.fr\SharingMetadata\Working\database_7420_BB96_20BB_5E34\dfsr.db'. Record Number: 16005 Source Name: ESENT Time Written: 20090129030003.000000+060 Event Type: Informations User: ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\QuickTime\QTSystem\;C:\Program Files\Samsung\Samsung PC Studio 3\ "windir"=%SystemRoot% "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "PROCESSOR_ARCHITECTURE"=x86 "PROCESSOR_LEVEL"=15 "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 75 Stepping 2, AuthenticAMD "PROCESSOR_REVISION"=4b02 "NUMBER_OF_PROCESSORS"=2 "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "CLASSPATH"=C:\Program Files\QuickTime\QTSystem\QTJava.zip "QTJAVA"=C:\Program Files\QuickTime\QTSystem\QTJava.zip -----------------EOF-----------------

Bonjour, a-squared me trouve les virus Trojan.Win32.Agent!IK, Trojan.Patched.AS!IK, Virus.Win32.Mesoum!IK et Virus.Win32.Patched.B!IK. Il ne veut pas me les supprimer, ni les mettre en quarantaine dès que j'essaye l'ordinateur s'éteint. Un petit coup de main serait le bienvenue Voici le log: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:41:04, on 16/04/2009 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16674) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe c:\program files\a-squared free\a2service.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Spyware Terminator\sp_rsser.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\WF2K.EXE C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\system32\RUNDLL32.EXE C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Windows Live\Messenger\usnsvc.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.01net.com/telecharger/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.01net.com/telecharger/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.01net.com/telecharger/ R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O4 - HKLM\..\Run: [WinFoxV2] C:\WINDOWS\system32\WF2K.EXE O4 - HKLM\..\Run: [WinFast2KLoadDefault] rundll32.exe C:\WINDOWS\system32\wf2kcpl.dll,DllLoadDefaultSettings O4 - HKLM\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear O4 - HKLM\..\Run: [DLCFCATS] rundll32 C:\WINDOWS\system32\spool\DRIVERS\W32X86\3\DLCFtime.dll,_RunDLLEntry@16 O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [spywareTerminator] "C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O9 - Extra button: (no name) - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - (no file) O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1184601644015 O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111...all/xscan53.cab O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - http://config.zebulon.fr/plugins/hardwaredetection.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - c:\program files\a-squared free\a2service.exe O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: dlcf_device - - C:\WINDOWS\system32\dlcfcoms.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe O23 - Service: Ventrilo - Unknown owner - C:\Program Files\VentSrv\ventrilo_svc.exe -- End of file - 6713 bytes merci

salut ouais tout est ok c'est pour ça que je comprend pas ...

bonjour, Je viens d'acheter des enceintes logitech G51 mais impossible de les faire marcher !!!! Ma carte son est une realtek ALC883 j'arrive juste à faire marcher les 2 hauts parleurs avant. Je comprend pas pourtant tout à l'air d'etre bien connecté. Si quelqu'un peu m'aider ce serait cool. Merci de vos reponses.

En fait ça recommence par contre le test des barrettes mémoires et un peu compliqué. Si quelqu'un a une autre solution. Merci de vos réponse

re, bon la premier solution à l'air de marcher mais vu que ça ne m'arrive pas tout le temps je verrais bien. Sinon j'essayerais la deuxieme solution. Merci de votre aide

bonjour ça m'arrive rarement disons 1 fois sur 10 mais au demarrage le curseur de ma souris reste bloqué meme si je la debranche et rebranche il ne se passe rien. Je suis donc obligé de rebooté mon pc. Si quelqu'un peut m'aider merci

yes ça a marché Merci de ta réponse

bonjour, En fait je l'ai deja fait, j'ai reussi à tout rentrer à part Mshtml.dll et ça marche toujours pas. Merci de ta réponse.

Bonjour, Depuis quelque temps je n'arrive plus à cliquer les liens que l'ont m'envoie sur msn ou hotmail. Apparement il faut executer regsvr32 Mshtml.dll mais impossible. Si quelqu'un a la solution ce serait cool. Merci