Aller au contenu

sk84life

Membres
  • Compteur de contenus

    52
  • Inscription

  • Dernière visite

Messages posté(e)s par sk84life

  1. bonjour a tous j'aimerai savoir si quelqu'un connait une astuce pour empêcher mon ordinateur de sortir de la session qu'en je le laisse un moment sans le toucher. :chpas:

    j'ai enlever le mot de passe, mais j'ai pas trouvé dans le compte utilisateur une option pour enlever cette sortie de session automatique une fois qu'on le laisse tourné sans le toucher.J'en est mare de voir ce petit icone et devoir recliquer dessus pour regagner l'espace de travail.

    merci d'avance :super:

  2. d'accord merci a tous donc voila ma configuration final

    alimentation fortron

     

    boitier tour moyen advance

    plus des petits ventilateurs xilence power pour garder le tout au frait :P

     

    carte mére asus p5q deluxe

     

    processeur intel core 2 duo e8500 3.16ghz

    avec ca peut étre un ventriad?? non?genre un spire ou un asus

     

    carte graphique sapphire radeon hd 4870

     

    disque dur western digital caviar se16 , 500go

     

    memoire vive kit dual channel ddr2 2x1go pc 6400 corsair

    ou la méme mais en kit 2x2go

    car j'ai peur que 2go de soit suffisant

     

    et un petit graveur dvd lightscribe lg

     

    et je crois que c bon a non un clavier microsoft je pense que c'est plutot pas mal

    donc voila ma configuration complète ,si vous avez quelque chose a ajouté ou a conseiller n'hésiter pas :P

    a oui le moniteur j'ai pensé a celui la

  3. merci a tous

    j'ai utlisé ma configue sur le site corsair pour touver la mémoire qui me faut ey il me trouve

     

    Kit Dual Channel DDR2, XMS2 DHX, 2 x 1 Go, PC2-6400, 4-4-4-12 ( j'espère que 2go suffit :P )

     

    ok pour mon dique dur

     

    Disque dur Caviar SE16, 500 Go, 7200 tpm, buffer 16 Mo, SATA II, Western Digital c'est mieux je suppose :P

     

    pour l'alimentation que pensez vous

     

    Alimentation EA4G-750, 750W, ventilo 14 cm, 2 x SATA, antibruit, Advance

     

    pour le boitier

     

    Boitier Moyen Tour Bloody, coloris noir, MAD-X

    ou

    Boitier moyen tour Elite RC335, coloris noir, CoolerMaster

    ou alors

    Boitier moyen tour TA-D31, ATX, coloris noir, USB/Audio, Asus

     

    encore merci ! :P

  4. j'ai donc un pioneer dvr 106d qui ne grave pas les dvd-rw et ne le reconnait carrément pas dé fois.

    le firmewear et 1.07 ,j'avais la dernière version 1.08 mais ça n'avait rien changé c'est pour ça que je suis revenu a la version 1.07 mais rien n'y fait (au passage il peut graver les cd-r mais pas plus)

    j'ai testé différent type de dvd il peut lire les dvd video , il ne reconnait pas les dvd(rw panasonic ni les phillips ni méme verbatim ,j'ai donc acheté des sony dvd-rw (vitessex2 qui est celle de mon graveur) il les reconnait mai quand il s'agit de graver c'est impossible

    j'ai même testé différent type de logicielle pour graver nero 6 7 8 et 9 rien ni fait vso convertodvd et cdburnerxp

    mais toujours pareille rien ne se passe alors je commence a désespérer :P

    j'essaye maintenant de revenir a la version 1.08 mais il me marque qu'il ne peut pas trouver la cible donc voila

    je ne sais plus quoi faire si quelqu'un peut m'aider je devient vraiment fou

    merci d'avance

    mon lecteur est pioneer dvd-rw dvr-106d

    il est sensé supporter en lecture et écriture les cd-r cd-rw dvd-r dvd-rw dvd+r dvd+rw et lecture dvd-rom et cd-rom

  5. je suis désoler pour cette erreur :P

    en tout cas les deux erreur ne sont pas liées car j'ai réinstallé XP pro sp2 et mon lecteur marche bien maintenant :P

    pour l'erreur de runtime cette erreur c'est aussi affiché pour un jeu

    ici j'ai une solution elle est en anglais mais il demande l'avis d'un professionnel donc voila le lien a savoir si c'est la bonne solution si c'est un problème de dll car je n'est aucun virus aucun trojan ni spyware et tout les composant de l'ordinateur marche http://support.esri.com/index.cfm?fa=knowl...how&d=22308

    merci :P

  6. j'ai installer dreamule et celui ci ne veut pas se lancer et il m'affiche un rapport d'erreur ,une fenêtre qui s'ouvre et me dit runtime error donc je ne sais pas se que c'est j'ai essayer installé visual effect runtime de microsoft (version 6) mais rien ne change

    donc je me suis dit que peut étre il y a un conflit avec un autre programme :P

    est ce que quelqu'un peut m'aider s'il vous plait

    merci

  7. moi a la base j'étais pas la pour une infection ,mais pour une perte de mes lecteur et du canal ide secondaire,c'est après qu'on ma dit que j'étais infecté,mais il n'ont pas l'aire très méchant

    voici les rapport tant attendus

     

    Logfile of random's system information tool 1.05 (written by random/random)

    Run by nunus at 2009-02-07 01:43:33

    Microsoft Windows XP Édition familiale Service Pack 3

    System drive C: has 91 GB (79%) free of 114 GB

    Total RAM: 1535 MB (66% free)

     

    Logfile of Trend Micro HijackThis v2.0.2

    Scan saved at 01:43:43, on 07/02/2009

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v7.00 (7.00.6000.16762)

    Boot mode: Normal

     

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\Ati2evxx.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\WINDOWS\system32\Ati2evxx.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\Avira\AntiVir PersonalEdition Premium\sched.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\Avira\AntiVir PersonalEdition Premium\avguard.exe

    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

    C:\Program Files\Avira\AntiVir PersonalEdition Premium\avesvc.exe

    C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

    C:\Program Files\Microsoft LifeCam\MSCamS32.exe

    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\Avira\AntiVir PersonalEdition Premium\avmailc.exe

    C:\Program Files\Avira\AntiVir PersonalEdition Premium\AVWEBGRD.EXE

    C:\Program Files\eMule\emule.exe

    C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe

    C:\Program Files\Winamp\winamp.exe

    C:\WINDOWS\System32\TuneUpDefragService.exe

    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe

    C:\Program Files\Avira\AntiVir PersonalEdition Premium\avgnt.exe

    C:\Program Files\Windows Live\Messenger\msnmsgr.exe

    C:\Program Files\Windows Live\Contacts\wlcomm.exe

    C:\Documents and Settings\nunus\Bureau\RSIT.exe

    C:\Documents and Settings\nunus\Bureau\Programs\HiJackThis\nunus.exe

     

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comodo.com/search/

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll

    O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll

    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll

    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll

    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot

    O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray

    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Premium\avgnt.exe" /min

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

    O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll

    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab

    O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (TotalScan Installer Class) - http://www.nanoscan.com/as/cabs/ascstubie.cab

    O20 - AppInit_DLLs:

    O23 - Service: Avira AntiVir Premium MailGuard (AntiVirMailService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avmailc.exe

    O23 - Service: Planificateur Avira AntiVir Premium (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\sched.exe

    O23 - Service: Avira AntiVir Premium Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avguard.exe

    O23 - Service: Avira AntiVir Premium WebGuard (antivirwebservice) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\AVWEBGRD.EXE

    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

    O23 - Service: Service d'assistance Avira AntiVir Premium MailGuard (AVEService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avesvc.exe

    O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe

    O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

    O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

     

    --

    End of file - 7482 bytes

     

    ======Scheduled tasks folder======

     

    C:\WINDOWS\tasks\1-Click Maintenance.job

    C:\WINDOWS\tasks\AppleSoftwareUpdate.job

     

    ======Registry dump======

     

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]

    &Yahoo! Toolbar Helper - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll [2008-05-15 817936]

     

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]

    Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

     

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]

    RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2009-01-27 304736]

     

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]

    Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2008-12-04 92504]

     

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

    SSVHelper Class - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll [2008-02-22 509328]

     

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

    Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2008-11-18 408952]

     

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]

    Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2008-12-08 1067352]

     

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

    {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll [2008-05-15 817936]

    {21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2008-12-08 1067352]

     

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

    "TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2009-01-27 185872]

    "Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2009-01-14 399504]

    "avgnt"=C:\Program Files\Avira\AntiVir PersonalEdition Premium\avgnt.exe [2008-06-12 266497]

     

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

    "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

    "msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2008-12-02 3882312]

    "Yahoo! Pager"=C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe [2007-08-30 4670704]

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]

    C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AppleSyncNotifier]

    []

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICCC]

    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe [2006-01-02 45056]

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avgnt]

    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe /min []

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]

    C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]

    []

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]

    C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2008-12-02 3882312]

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

    C:\Program Files\QuickTime\QTTask.exe [2008-11-04 413696]

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RegistryMechanic]

    C:\Program Files\Registry Mechanic\RegMech.exe [2008-07-08 2828184]

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]

    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2009-01-27 185872]

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VirtualCloneDrive]

    C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2008-06-29 52168]

     

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Yahoo! Pager]

    C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe [2007-08-30 4670704]

     

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

    "AppInit_DLLS"=" "

     

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]

    C:\WINDOWS\system32\Ati2evxx.dll [2006-05-03 61440]

     

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

    WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

     

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]

    "SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,

     

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

    "dontdisplaylastusername"=0

    "legalnoticecaption"=

    "legalnoticetext"=

    "shutdownwithoutlogon"=1

    "undockwithoutlogon"=1

     

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

    "NoInstrumentation"=1

    "NoDrives"=0

    "NoDriveAutoRun"=FFFFFFFF

    "NoDriveTypeAutoRun"=0

     

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

    "NoDriveAutoRun"=

    "NoDriveTypeAutoRun"=

    "NoDrives"=

     

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

    "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

    "C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"

    "C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"

    "C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"

    "C:\Program Files\Microsoft LifeCam\LifeCam.exe"="C:\Program Files\Microsoft LifeCam\LifeCam.exe:*:Enabled:LifeCam.exe"

    "C:\Program Files\Microsoft LifeCam\LifeExp.exe"="C:\Program Files\Microsoft LifeCam\LifeExp.exe:*:Enabled:LifeExp.exe"

    "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger"

    "C:\Program Files\Yahoo!\Messenger\YServer.exe"="C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server"

    "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

    "C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"

    "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"

    "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"

    "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

    "C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"

    "C:\Program Files\Fichiers communs\AOL\Loader\aolload.exe"="C:\Program Files\Fichiers communs\AOL\Loader\aolload.exe:*:Enabled:AOL Loader"

    "C:\Documents and Settings\nunus\Bureau\c&c 2\GAME.EXE"="C:\Documents and Settings\nunus\Bureau\c&c 2\GAME.EXE:*:Enabled:Main executable for Red Alert 2"

     

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

    "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

    "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

    "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"

    "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"

    "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

     

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7bb8e030-1e9b-11dc-bc04-00265412b130}]

    shell\AutoRun\command - F:\wd_windows_tools\setup.exe

     

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b15d8302-358a-11dd-bd14-001cdf2f2856}]

    shell\AutoRun\command - F:\autoset.exe

     

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c0bcce23-1a14-11dd-bcd4-000c6ebb025c}]

    shell\AutoRun\command - G:\LaunchU3.exe -a

     

     

    ======File associations======

     

    .reg - open - regedit.exe "%1" %*

     

    ======List of files/folders created in the last 1 months======

     

    2009-02-07 01:43:33 ----D---- C:\rsit

    2009-02-06 15:09:44 ----D---- C:\WINDOWS\LastGood

    2009-02-06 11:12:07 ----D---- C:\Program Files\Lavalys

    2009-02-06 01:08:09 ----D---- C:\Documents and Settings\nunus\Application Data\Avira

    2009-02-05 23:32:51 ----D---- C:\Program Files\jv16 PowerTools 2009

    2009-02-05 23:18:30 ----A---- C:\TB.txt

    2009-02-05 23:17:49 ----D---- C:\ToolBar SD

    2009-02-05 22:44:13 ----A---- C:\WINDOWS\system32\avsda.dll

    2009-02-05 22:44:10 ----D---- C:\Program Files\Avira

    2009-02-05 22:44:10 ----D---- C:\Documents and Settings\All Users\Application Data\Avira

    2009-02-05 21:46:19 ----A---- C:\WINDOWS\SuperUtil.ini

    2009-02-05 21:32:08 ----A---- C:\WINDOWS\system32\supermenuhook.dll

    2009-02-05 21:32:06 ----A---- C:\WINDOWS\system32\vb6sock.dll

    2009-02-05 21:32:06 ----A---- C:\WINDOWS\system32\SuperRes.dll

    2009-02-05 21:32:06 ----A---- C:\WINDOWS\system32\Shreder.dll

    2009-02-05 21:32:06 ----A---- C:\WINDOWS\system32\context.dll

    2009-02-05 21:32:03 ----D---- C:\Program Files\SuperLogix

    2009-02-05 21:04:24 ----A---- C:\WINDOWS\system32\XceedZip.dll

    2009-02-05 17:09:38 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP

    2009-02-05 17:09:32 ----A---- C:\WINDOWS\system32\STKIT432.DLL

    2009-02-05 17:09:27 ----D---- C:\Program Files\Registry Mechanic

    2009-02-05 14:47:07 ----D---- C:\Program Files\Elaborate Bytes

    2009-02-04 12:05:04 ----D---- C:\Program Files\MagicISO

    2009-02-03 01:38:05 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$

    2009-02-02 23:54:31 ----SHD---- C:\Config.Msi

    2009-02-02 23:38:13 ----D---- C:\Program Files\InterActual

    2009-02-02 23:38:11 ----D---- C:\Program Files\GameSpy Arcade

    2009-02-02 22:02:10 ----D---- C:\Program Files\Fichiers communs\xing shared

    2009-02-02 22:01:51 ----D---- C:\Documents and Settings\nunus\Application Data\DAEMON Tools Pro

    2009-02-02 22:01:51 ----D---- C:\Documents and Settings\nunus\Application Data\DAEMON Tools

    2009-02-02 22:01:51 ----D---- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite

    2009-01-30 16:30:24 ----D---- C:\Program Files\Winamp

    2009-01-30 16:30:24 ----D---- C:\Documents and Settings\nunus\Application Data\Winamp

    2009-01-27 04:00:25 ----A---- C:\WINDOWS\system32\rmoc3260.dll

    2009-01-27 04:00:15 ----A---- C:\WINDOWS\system32\pndx5032.dll

    2009-01-27 04:00:15 ----A---- C:\WINDOWS\system32\pndx5016.dll

    2009-01-27 04:00:14 ----D---- C:\Program Files\Real

    2009-01-27 04:00:13 ----A---- C:\WINDOWS\system32\pncrt.dll

    2009-01-25 22:59:06 ----RHD---- C:\Documents and Settings\nunus\Application Data\SecuROM

    2009-01-25 22:18:08 ----A---- C:\WINDOWS\system32\d3dx10_38.dll

    2009-01-25 22:18:08 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll

    2009-01-25 22:18:05 ----A---- C:\WINDOWS\system32\D3DX9_38.dll

    2009-01-25 22:17:58 ----A---- C:\WINDOWS\system32\d3dx10_35.dll

    2009-01-25 22:17:58 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll

    2009-01-25 22:17:52 ----A---- C:\WINDOWS\system32\d3dx9_35.dll

    2009-01-25 22:17:45 ----D---- C:\WINDOWS\Logs

    2009-01-25 04:48:15 ----D---- C:\Documents and Settings\nunus\Application Data\OpenOffice.org

    2009-01-25 03:42:40 ----D---- C:\Documents and Settings\nunus\Application Data\DAEMON Tools Lite

    2009-01-23 20:29:40 ----D---- C:\Program Files\OpenOffice.org 3

    2009-01-15 20:06:05 ----D---- C:\Documents and Settings\nunus\Application Data\acccore

    2009-01-15 20:03:19 ----D---- C:\Documents and Settings\All Users\Application Data\AOL OCP

    2009-01-15 20:03:16 ----D---- C:\Documents and Settings\All Users\Application Data\AOL

    2009-01-15 20:02:05 ----D---- C:\Documents and Settings\All Users\Application Data\Viewpoint

    2009-01-15 20:02:04 ----D---- C:\Program Files\Viewpoint

    2009-01-15 20:01:34 ----D---- C:\Program Files\Fichiers communs\AOL

    2009-01-15 20:01:17 ----D---- C:\Program Files\AIM6

    2009-01-15 19:57:09 ----D---- C:\Documents and Settings\All Users\Application Data\AOL Downloads

    2009-01-14 18:57:12 ----D---- C:\Program Files\Bonjour

    2009-01-14 18:53:59 ----D---- C:\Program Files\QuickTime

    2009-01-11 19:44:58 ----D---- C:\Program Files\Microsoft Silverlight

    2009-01-11 19:42:41 ----D---- C:\Program Files\Microsoft Sync Framework

    2009-01-11 19:39:52 ----A---- C:\WINDOWS\system32\d3dx9_32.dll

    2009-01-11 19:39:41 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition

    2009-01-11 19:37:55 ----D---- C:\Program Files\Microsoft

    2009-01-11 19:37:21 ----D---- C:\Program Files\Windows Live SkyDrive

     

    ======List of files/folders modified in the last 1 months======

     

    2009-02-07 01:43:39 ----D---- C:\WINDOWS\Prefetch

    2009-02-07 01:40:40 ----D---- C:\Program Files\Mozilla Firefox

    2009-02-06 22:43:02 ----D---- C:\WINDOWS\TEMP

    2009-02-06 17:53:06 ----D---- C:\Program Files\eMule

    2009-02-06 15:09:46 ----D---- C:\Program Files\Windows Live Safety Center

    2009-02-06 15:09:45 ----HD---- C:\WINDOWS\inf

    2009-02-06 15:09:44 ----D---- C:\WINDOWS

    2009-02-06 11:12:07 ----RD---- C:\Program Files

    2009-02-06 09:00:00 ----A---- C:\WINDOWS\SchedLgU.Txt

    2009-02-06 00:38:59 ----SHD---- C:\WINDOWS\Installer

    2009-02-05 23:42:10 ----D---- C:\WINDOWS\system32

    2009-02-05 22:47:23 ----D---- C:\WINDOWS\system32\CatRoot2

    2009-02-05 22:44:15 ----D---- C:\WINDOWS\system32\drivers

    2009-02-05 22:17:14 ----D---- C:\Documents and Settings\nunus\Application Data\uTorrent

    2009-02-05 21:57:03 ----SHD---- C:\System Volume Information

    2009-02-05 21:57:03 ----D---- C:\WINDOWS\system32\Restore

    2009-02-05 19:19:24 ----D---- C:\Program Files\Malwarebytes' Anti-Malware

    2009-02-05 17:59:03 ----SH---- C:\boot.ini

    2009-02-05 17:59:03 ----A---- C:\WINDOWS\win.ini

    2009-02-05 17:59:03 ----A---- C:\WINDOWS\system.ini

    2009-02-03 05:59:46 ----D---- C:\WINDOWS\Microsoft.NET

    2009-02-03 05:59:40 ----RSD---- C:\WINDOWS\assembly

    2009-02-03 01:58:48 ----D---- C:\Program Files\AMDAGP

    2009-02-03 01:44:35 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI

    2009-02-03 01:40:09 ----RSHDC---- C:\WINDOWS\system32\dllcache

    2009-02-03 01:37:47 ----D---- C:\WINDOWS\system32\fr-fr

    2009-02-03 01:35:16 ----D---- C:\WINDOWS\WinSxS

    2009-02-03 01:31:11 ----D---- C:\WINDOWS\system32\XPSViewer

    2009-02-03 01:31:00 ----RSD---- C:\WINDOWS\Fonts

    2009-02-03 01:28:41 ----D---- C:\Program Files\Internet Explorer

    2009-02-03 01:16:26 ----D---- C:\WINDOWS\system32\CatRoot

    2009-02-03 00:21:48 ----SHD---- C:\RECYCLER

    2009-02-03 00:21:14 ----D---- C:\Documents and Settings

    2009-02-02 23:52:24 ----SD---- C:\Documents and Settings\nunus\Application Data\Microsoft

    2009-02-02 23:52:06 ----HD---- C:\Program Files\InstallShield Installation Information

    2009-02-02 23:39:55 ----D---- C:\WINDOWS\system32\config

    2009-02-02 23:39:38 ----D---- C:\WINDOWS\system32\wbem

    2009-02-02 23:39:37 ----D---- C:\WINDOWS\Registration

    2009-02-02 23:36:11 ----D---- C:\WINDOWS\system32\en-us

    2009-02-02 22:02:34 ----DC---- C:\WINDOWS\system32\DRVSTORE

    2009-02-02 22:02:21 ----D---- C:\Program Files\Fichiers communs\Adobe

    2009-02-02 22:02:17 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe

    2009-02-02 22:02:15 ----D---- C:\Program Files\Adobe

    2009-02-02 22:01:56 ----D---- C:\WINDOWS\system32\DirectX

    2009-01-30 16:21:27 ----D---- C:\Program Files\Fichiers communs\Apple

    2009-01-27 04:00:45 ----D---- C:\Documents and Settings\nunus\Application Data\Real

    2009-01-27 04:00:30 ----D---- C:\Program Files\Fichiers communs

    2009-01-27 04:00:28 ----D---- C:\Program Files\Fichiers communs\Real

    2009-01-27 04:00:13 ----A---- C:\WINDOWS\system32\msvcr71.dll

    2009-01-27 04:00:13 ----A---- C:\WINDOWS\system32\msvcp71.dll

    2009-01-25 22:59:03 ----A---- C:\WINDOWS\system32\CmdLineExt.dll

    2009-01-16 21:59:46 ----D---- C:\WINDOWS\Debug

    2009-01-16 20:28:55 ----D---- C:\Program Files\TuneUp Utilities 2008

    2009-01-15 20:01:54 ----SD---- C:\WINDOWS\Downloaded Program Files

    2009-01-15 20:01:14 ----D---- C:\Documents and Settings\nunus\Application Data\Mozilla

    2009-01-15 14:15:52 ----D---- C:\Documents and Settings\nunus\Application Data\dvdcss

    2009-01-14 18:41:23 ----HD---- C:\WINDOWS\$hf_mig$

    2009-01-11 22:14:37 ----D---- C:\Program Files\Fichiers communs\Wise Installation Wizard

    2009-01-11 21:46:53 ----D---- C:\WINDOWS\ie7updates

    2009-01-11 19:44:40 ----D---- C:\Program Files\Windows Live

    2009-01-11 19:42:21 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft

    2009-01-11 19:37:41 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared

    2009-01-10 02:35:28 ----A---- C:\WINDOWS\system32\MRT.exe

     

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

     

    R1 AmdK7;Pilote de processeur AMD K7; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2008-04-14 41856]

    R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir PersonalEdition Premium\avgio.sys []

    R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2008-10-30 75072]

    R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2008-07-21 24392]

    R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]

    R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2007-11-08 21248]

    R1 SuperMounter;SuperMounter; C:\WINDOWS\system32\drivers\SuperMounter.sys [2008-02-24 11264]

    R1 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-05 12032]

    R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]

    R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-05-03 1540608]

    R3 avgntflt;avgntflt; \??\C:\Program Files\Avira\AntiVir PersonalEdition Premium\avgntflt.sys []

    R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]

    R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys []

    R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-05 12288]

    R3 ms_mpu401;Pilote UART MIDI MPU-401 Microsoft; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944]

    R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]

    R3 nvax;Service for NVIDIA® nForce Audio Enumerator; C:\WINDOWS\system32\drivers\nvax.sys [2002-12-05 13056]

    R3 nvnforce;Service for NVIDIA® nForce Audio; C:\WINDOWS\system32\drivers\nvapu.sys [2002-12-05 241664]

    R3 rt2870;Ralink 802.11n USB Wireless LAN Card Driver; C:\WINDOWS\system32\DRIVERS\rt2870.sys [2007-05-10 503680]

    R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]

    R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]

    R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]

    R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]

    R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]

    R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]

    R3 VClone;VClone; C:\WINDOWS\system32\DRIVERS\VClone.sys [2008-09-24 29184]

    R3 VX1000;VX-1000; C:\WINDOWS\system32\DRIVERS\VX1000.sys [2007-04-10 1966312]

    S1 bdpredir;bdpredir; \??\C:\Program Files\Softwin\BitDefender10\bdpredir.sys []

    S2 BDRSDRV;BDRSDRV; \??\C:\Program Files\Softwin\BitDefender10\bdrsdrv.sys []

    S3 Ad-Watch Connect Filter;Ad-Watch Connect Kernel Filter; \??\C:\WINDOWS\system32\drivers\NSDriver.sys []

    S3 Ad-Watch Real-Time Scanner;AW Real-Time Scanner; \??\C:\WINDOWS\system32\drivers\AWRTPD.sys []

    S3 Ad-Watch Registry Filter;Ad-Watch Registry Kernel Filter; \??\C:\WINDOWS\system32\drivers\AWRTRD.sys []

    S3 AMDPCI;AMDPCI; \??\C:\DOCUME~1\nunus\LOCALS~1\Temp\AMDPCI.sys []

    S3 AmdTools;AMD Special Tools Driver; C:\WINDOWS\system32\DRIVERS\AmdTools.sys []

    S3 BDFSDRV;BDFSDRV; \??\C:\Program Files\Softwin\BitDefender10\bdfsdrv.sys []

    S3 Bridge;Pont MAC; C:\WINDOWS\system32\DRIVERS\bridge.sys [2008-04-13 71552]

    S3 BridgeMP;Miniport de pont MAC; C:\WINDOWS\system32\DRIVERS\bridge.sys [2008-04-13 71552]

    S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []

    S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]

    S3 EL90Xbc;3Com 3C90X-BC Family PCI EtherLink Adapter; C:\WINDOWS\system32\DRIVERS\el90Xbc5.SYS [2002-08-13 74338]

    S3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys []

    S3 LVRS;Logitech RightSound Filter Driver; C:\WINDOWS\system32\DRIVERS\lvrs.sys []

    S3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\LVUSBSta.sys []

    S3 mcdbus;Driver for MagicISO SCSI Host Controller; C:\WINDOWS\system32\DRIVERS\mcdbus.sys []

    S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]

    S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]

    S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]

    S3 NVENET;NVIDIA nForce MCP Networking Adapter Driver; C:\WINDOWS\system32\DRIVERS\NVENET.sys [2002-09-23 80896]

    S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCAMPR5.SYS []

    S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []

    S3 pepifilter;Volume Adapter; C:\WINDOWS\system32\DRIVERS\lv302af.sys []

    S3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\WINDOWS\system32\DRIVERS\LV302V32.SYS []

    S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]

    S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]

    S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]

    S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]

    S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]

    S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]

    S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]

    S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

    S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

     

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

     

    R2 AntiVirMailService;Avira AntiVir Premium MailGuard; C:\Program Files\Avira\AntiVir PersonalEdition Premium\avmailc.exe [2008-11-21 164097]

    R2 AntiVirScheduler;Planificateur Avira AntiVir Premium; C:\Program Files\Avira\AntiVir PersonalEdition Premium\sched.exe [2008-10-15 68865]

    R2 AntiVirService;Avira AntiVir Premium Guard; C:\Program Files\Avira\AntiVir PersonalEdition Premium\avguard.exe [2008-10-15 151297]

    R2 antivirwebservice;Avira AntiVir Premium WebGuard; C:\Program Files\Avira\AntiVir PersonalEdition Premium\AVWEBGRD.EXE [2008-06-12 258305]

    R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-11-07 132424]

    R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-05-03 413696]

    R2 AVEService;Service d'assistance Avira AntiVir Premium MailGuard; C:\Program Files\Avira\AntiVir PersonalEdition Premium\avesvc.exe [2008-05-09 41217]

    R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2009-01-14 170640]

    R2 MSCamSvc;MSCamSvc; C:\Program Files\Microsoft LifeCam\MSCamS32.exe [2007-05-17 271720]

    R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2008-12-04 226640]

    R2 UxTuneUp;TuneUp Extension de thème; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]

    R3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\WINDOWS\System32\TuneUpDefragService.exe [2008-07-13 355584]

    S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2006-05-03 520192]

    S2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]

    S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]

    S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]

    S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]

    S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]

    S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]

    S3 usprserv;User Privilege Service; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]

    S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]

    S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]

    S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

    S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

     

    -----------------EOF-----------------

     

     

    info.txt logfile of random's system information tool 1.05 2009-02-07 01:43:46

     

    ======Uninstall list======

     

    -->C:\PROGRA~1\Yahoo!\Common\UNYT_W~1.EXE

    -->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0

    Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe

    Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe

    Adobe Reader 8.1.3 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81300000003}

    Adobe Shockwave Player-->C:\WINDOWS\system32\Adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log

    AIM 6-->C:\Program Files\AIM6\uninst.exe

    Apple Mobile Device Support-->MsiExec.exe /I{EC4455AB-F155-4CC1-A4C5-88F3777F9886}

    Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}

    Assistant de connexion Windows Live-->MsiExec.exe /I{D6E592B3-67DA-4BBB-9783-E1838FB253A2}

    ATI - Software Uninstall Utility-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe

    ATI Catalyst Control Center-->MsiExec.exe /I{EA9FAF16-0E5C-42C4-9742-9AF8D5F6D69B}

    ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean

    Avira AntiVir Premium-->C:\Program Files\Avira\AntiVir PersonalEdition Premium\SETUP.EXE /REMOVE

    Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}

    CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"

    Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}

    Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"

    eMule-->"C:\Program Files\eMule\Uninstall.exe"

    EVEREST Ultimate Edition v4.60-->"C:\Program Files\Lavalys\EVEREST Ultimate Edition\unins000.exe"

    Galerie de photos Windows Live-->MsiExec.exe /X{43563ACB-371B-4C58-8979-B192B390424C}

    HijackThis 2.0.2-->"C:\Documents and Settings\nunus\Bureau\Programs\HiJackThis\HijackThis.exe" /uninstall

    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""

    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""

    Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe

    Installation Windows Live-->MsiExec.exe /I{3CCB732A-E472-4CF9-B1EE-F18365341FE0}

    Java 6 Update 4-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160040}

    Java 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}

    Junk Mail filter update-->MsiExec.exe /I{4AB8B41B-3AF1-46BE-99B0-0ACD3B300C0A}

    Konvertor-->C:\Program Files\Konvertor\uninst.exe

    Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall

    Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"

    Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{72AD53CC-CCC0-3757-8480-9EE176866A7C}

    Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}

    Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{0BD83598-C2EF-3343-847B-7D2E84599128}

    Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}

    Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}

    Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe

    Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

    Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"

    Microsoft LifeCam-->MsiExec.exe /X{968D41C3-25BB-4632-A6DF-2E1C8F0143A4}

    Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"

    Microsoft Search Enhancement Pack-->MsiExec.exe /I{299CF645-48C7-4FA1-8BCD-5CE200CF180D}

    Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}

    Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}

    Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}

    Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}

    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"

    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"

    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"

    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"

    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"

    Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->c:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe

    Mozilla Firefox (3.0.6)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe

    MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}

    MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}

    MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

    MSXML 6.0 Parser (KB933579)-->MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}

    MSXML4 Parser-->MsiExec.exe /I{01501EBA-EC35-4F9F-8889-3BE346E5DA13}

    OpenOffice.org 3.0-->MsiExec.exe /I{1572F66F-F9AD-4D45-B0D2-0F45A0D5A0F6}

    Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}

    QuickTime-->MsiExec.exe /I{F958CA02-BB40-4007-894B-258729456EE4}

    RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0

    Registry Mechanic 8.0-->"C:\Program Files\Registry Mechanic\unins000.exe" /Log

    Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}

    Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}

    Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}

    Spelling Dictionaries Support For Adobe Reader 8-->MsiExec.exe /I{AC76BA86-7AD7-5464-3428-800000000003}

    Super Utilities Pro 9.39-->"C:\Program Files\SuperLogix\Super Utilities\unins000.exe"

    TuneUp Utilities 2008-->MsiExec.exe /I{5888428E-699C-4E71-BF71-94EE06B497DA}

    VideoLAN VLC media player 0.8.6f-->C:\Program Files\VideoLAN\VLC\uninstall.exe

    Viewpoint Media Player-->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u

    VirtualCloneDrive-->"C:\Program Files\Elaborate Bytes\VirtualCloneDrive\vcd-uninst.exe" /D="C:\Program Files\Elaborate Bytes\VirtualCloneDrive"

    Winamp Toolbar for Firefox-->"C:\Documents and Settings\nunus\Application Data\Mozilla\Firefox\Profiles\xsakganr.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\uninstall.exe"

    Winamp-->"C:\Program Files\Winamp\UninstWA.exe"

    Windows Live Call-->MsiExec.exe /I{01523985-2098-43AF-9C97-12B07BE02A9B}

    Windows Live Communications Platform-->MsiExec.exe /I{F69E83CF-B440-43F8-89E6-6EA80712109B}

    Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}

    Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}

    Windows Live OneCare safety scanner-->RunDll32.exe "C:\Program Files\Windows Live Safety Center\wlscCore.dll",UninstallFunction WLSC_SCANNER_PRODUCT

    Windows Live Sync-->MsiExec.exe /X{67D0313C-4F15-437D-9A2D-C1564088A26A}

    Windows Live Toolbar-->MsiExec.exe /X{915809D6-1F93-45F2-9699-5F1DA64DC24B}

    Windows Live Writer-->MsiExec.exe /X{2231CE39-B963-4B9D-823A-F412ECA637B1}

    Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll

    Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}

    Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"

    WinRAR-->"C:\WINDOWS\WinRAR\uninstall.exe" "/U:C:\Program Files\WinRAR\Uninstall\uninstall.xml"

    XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"

    Yahoo! Extras-->C:\PROGRA~1\Yahoo!\Common\unyext.exe

    Yahoo! Install Manager-->C:\WINDOWS\system32\regsvr32 /u C:\PROGRA~1\Yahoo!\Common\YINSTH~1.DLL

    Yahoo! Internet Mail-->C:\WINDOWS\system32\regsvr32 /u /s C:\PROGRA~1\Yahoo!\Common\ymmapi.dll

    Yahoo! Messenger-->C:\PROGRA~1\Yahoo!\MESSEN~1\UNWISE.EXE /U C:\PROGRA~1\Yahoo!\MESSEN~1\INSTALL.LOG

    Yahoo! Toolbar-->C:\PROGRA~1\Yahoo!\Common\UNYT_W~1.EXE

     

    ======Security center information======

     

    AV: Bitdefender Antivirus (disabled) (outdated)

    AV: Avira AntiVir PersonalEdition

    FW: Bitdefender Firewall (disabled)

    FW: COMODO Firewall Pro

     

    System event log

     

    Computer Name: LD-CFB7ED993F7D

    Event Code: 7036

    Message: Le service Gestion d'applications est entré dans l'état : arrêté.

     

    Record Number: 32738

    Source Name: Service Control Manager

    Time Written: 20090130162458.000000+060

    Event Type: Informations

    User:

     

    Computer Name: LD-CFB7ED993F7D

    Event Code: 7035

    Message: Un contrôle Démarrer a correctement été envoyé au service Gestion d'applications.

     

    Record Number: 32737

    Source Name: Service Control Manager

    Time Written: 20090130162458.000000+060

    Event Type: Informations

    User: LD-CFB7ED993F7D\nunus

     

    Computer Name: LD-CFB7ED993F7D

    Event Code: 7023

    Message: Le service Gestion d'applications s'est arrêté avec l'erreur :

    Le module spécifié est introuvable.

     

     

    Record Number: 32736

    Source Name: Service Control Manager

    Time Written: 20090130162458.000000+060

    Event Type: erreur

    User:

     

    Computer Name: LD-CFB7ED993F7D

    Event Code: 7036

    Message: Le service Gestion d'applications est entré dans l'état : arrêté.

     

    Record Number: 32735

    Source Name: Service Control Manager

    Time Written: 20090130162458.000000+060

    Event Type: Informations

    User:

     

    Computer Name: LD-CFB7ED993F7D

    Event Code: 7035

    Message: Un contrôle Démarrer a correctement été envoyé au service Gestion d'applications.

     

    Record Number: 32734

    Source Name: Service Control Manager

    Time Written: 20090130162458.000000+060

    Event Type: Informations

    User: LD-CFB7ED993F7D\nunus

     

    Application event log

     

    Computer Name: LD-CFB7ED993F7D

    Event Code: 11707

    Message: Produit : QuickTime -- L'installation s'est terminée correctement.

     

    Record Number: 10145

    Source Name: MsiInstaller

    Time Written: 20080915091131.000000+120

    Event Type: Informations

    User: LD-CFB7ED993F7D\nunus

     

    Computer Name: LD-CFB7ED993F7D

    Event Code: 11707

    Message: Produit : Apple Mobile Device Support -- L'installation s'est terminée correctement.

     

    Record Number: 10144

    Source Name: MsiInstaller

    Time Written: 20080915090902.000000+120

    Event Type: Informations

    User: LD-CFB7ED993F7D\nunus

     

    Computer Name: LD-CFB7ED993F7D

    Event Code: 102

    Message: msnmsgr (3408) \\.\C:\Documents and Settings\nunus\Local Settings\Application Data\Microsoft\Messenger\[email protected]\SharingMetadata\Working\database_F478_F978_78F9_39C6\dfsr.db: Le moteur de base de données a démarré une nouvelle instance (0).

     

    Record Number: 10143

    Source Name: ESENT

    Time Written: 20080915090543.000000+120

    Event Type: Informations

    User:

     

    Computer Name: LD-CFB7ED993F7D

    Event Code: 100

    Message: msnmsgr (3408) Le moteur de base de données 5.01.2600.2780 est démarré.

     

    Record Number: 10142

    Source Name: ESENT

    Time Written: 20080915090542.000000+120

    Event Type: Informations

    User:

     

    Computer Name: LD-CFB7ED993F7D

    Event Code: 101

    Message: MsnMsgr (276) Le moteur de base de données est arrêté.

     

    Record Number: 10141

    Source Name: ESENT

    Time Written: 20080914202151.000000+120

    Event Type: Informations

    User:

     

    ======Environment variables======

     

    "ComSpec"=%SystemRoot%\system32\cmd.exe

    "Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\QuickTime\QTSystem;C:\Program Files\QuickTime\QTSystem\

    "windir"=%SystemRoot%

    "FP_NO_HOST_CHECK"=NO

    "OS"=Windows_NT

    "PROCESSOR_ARCHITECTURE"=x86

    "PROCESSOR_LEVEL"=6

    "PROCESSOR_IDENTIFIER"=x86 Family 6 Model 10 Stepping 0, AuthenticAMD

    "PROCESSOR_REVISION"=0a00

    "NUMBER_OF_PROCESSORS"=1

    "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH

    "TEMP"=%SystemRoot%\TEMP

    "TMP"=%SystemRoot%\TEMP

    "CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip

    "QTJAVA"=C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip

     

    -----------------EOF-----------------

  8. voici ton rapport chef(je sais j'ai pas mal de crack on fait se qu'on peut pour sauver son pc)

     

     

    -----------\\ ToolBar S&D 1.2.8 XP/Vista

     

    Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3

    X86-based PC ( Uniprocessor Free : AMD Athlon XP )

    BIOS : Phoenix - AwardBIOS v6.00PG

    USER : nunus ( Administrator )

    BOOT : Normal boot

    Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Activated)

    Firewall : COMODO Firewall Pro 3.0 (Activated)

    C:\ (Local Disk) - NTFS - Total:111 Go (Free:91 Go)

    D:\ (CD or DVD)

    E:\ (CD or DVD)

     

    "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )

    Option : [2] ( 06/02/2009| 0:27 )

     

    -----------\\ SUPPRESSION

     

    Echec ! - C:\Program Files\AskSBar\bar

    Echec ! - C:\Program Files\AskSBar\SrchAstt

    Echec ! - C:\Program Files\AskSBar\bar\1.bin

    Echec ! - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL

    Echec ! - C:\Program Files\AskSBar\SrchAstt\1.bin

    Echec ! - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL

    Supprime! - C:\Program Files\Mozilla Firefox\plugins\NPAskSBr.dll

    Echec ! - C:\Program Files\AskSBar

     

    -----------\\ DEUXIEME PASSAGE

     

    Echec ! - C:\Program Files\AskSBar\bar

    Echec ! - C:\Program Files\AskSBar\SrchAstt

    Echec ! - C:\Program Files\AskSBar\bar\1.bin

    Echec ! - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL

    Echec ! - C:\Program Files\AskSBar\SrchAstt\1.bin

    Echec ! - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL

    Echec ! - C:\Program Files\AskSBar

     

    -----------\\ Recherche de Fichiers / Dossiers ...

     

    C:\Program Files\AskSBar

    C:\Program Files\AskSBar\bar

    C:\Program Files\AskSBar\SrchAstt

    C:\Program Files\AskSBar\bar\1.bin

    C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL

    C:\Program Files\AskSBar\SrchAstt\1.bin

    C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL

     

    -----------\\ Extensions

     

    (nunus) - {0b38152b-1b20-484d-a11f-5e04a9b0661f} => winamptoolbar

    (nunus) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar

    (nunus) - {84b24861-62f6-364b-eba5-2e5e2061d7e6} => mediaplayerconnectivity

     

     

    -----------\\ [..\Internet Explorer\Main]

     

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

    "Local Page"="C:\\WINDOWS\\system32\\blank.htm"

    "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

    "Start Page"="http://www.comodo.com/search/"

    "SearchMigratedDefaultURL"="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"

     

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]

    "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"

    "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"'>http://go.microsoft.com/fwlink/?LinkId=54896"

    "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"

    "Start Page"="http://www.msn.com/"

     

     

    --------------------\\ Recherche d'autres infections

     

    --------------------\\ Cracks & Keygens ..

     

    C:\DOCUME~1\nunus\Application Data\uTorrent\Civilization 4 IV + Warlords expansion + 1.61 + 2.08 update + nocd crack civ4 civIV.rar.torrent

    C:\DOCUME~1\nunus\Bureau\Programs\Malwarebytes.Anti-Malware.v1.33.Multilangages.Incl-Keygen.[emule-island.com].rar

    C:\DOCUME~1\nunus\Bureau\Programs\PC Tools Registry Mechanic v8.0.0.900+Keygen-HeartBug

    C:\DOCUME~1\nunus\Bureau\Programs\Super.Utilities.Pro.v9.39.Multilangages.Incl-Crack.[emule-island.com].rar

    C:\DOCUME~1\nunus\Bureau\Programs\PC Tools Registry Mechanic v8.0.0.900+Keygen-HeartBug\HEARTBUG.nfo

    C:\DOCUME~1\nunus\Bureau\Programs\PC Tools Registry Mechanic v8.0.0.900+Keygen-HeartBug\Keygen

    C:\DOCUME~1\nunus\Bureau\Programs\PC Tools Registry Mechanic v8.0.0.900+Keygen-HeartBug\rminstall.exe

    C:\DOCUME~1\nunus\Bureau\Programs\PC Tools Registry Mechanic v8.0.0.900+Keygen-HeartBug\Keygen\Keygen.exe

    C:\DOCUME~1\nunus\Mes documents\Downloads\PC Tools Registry Mechanic v8.0.0.900+Keygen-HeartBug

    C:\DOCUME~1\nunus\Mes documents\Downloads\PC Tools Registry Mechanic v8.0.0.900+Keygen-HeartBug\HEARTBUG.nfo

    C:\DOCUME~1\nunus\Mes documents\Downloads\PC Tools Registry Mechanic v8.0.0.900+Keygen-HeartBug\Keygen

    C:\DOCUME~1\nunus\Mes documents\Downloads\PC Tools Registry Mechanic v8.0.0.900+Keygen-HeartBug\rminstall.exe

    C:\DOCUME~1\nunus\Mes documents\Downloads\PC Tools Registry Mechanic v8.0.0.900+Keygen-HeartBug\Keygen\Keygen.exe

    C:\DOCUME~1\nunus\Recent\Driver.Genius.Professional.Edition.2007.v7.1.0.622.Multilangages.Incl-Keygen.[emule-island.com].rar.lnk

    C:\DOCUME~1\nunus\Recent\Keygen.lnk

    C:\DOCUME~1\nunus\Recent\Malwarebytes.Anti-Malware.v1.33.Multilangages.Incl-Keygen.[emule-island.com].rar.lnk

    C:\DOCUME~1\nunus\Recent\Super.Utilities.Pro.v9.39.Multilangages.Incl-Crack.[emule-island.com].rar.lnk

     

     

     

    1 - "C:\ToolBar SD\TB_1.txt" - 05/02/2009|23:22 - Option : [1]

    2 - "C:\ToolBar SD\TB_2.txt" - 06/02/2009| 0:30 - Option : [2]

     

    -----------\\ Fin du rapport a 0:30:02,39

     

    et donc a la suite celui de hijackthis

     

    Logfile of Trend Micro HijackThis v2.0.2

    Scan saved at 00:31:08, on 06/02/2009

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v7.00 (7.00.6000.16762)

    Boot mode: Normal

     

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\Ati2evxx.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\WINDOWS\system32\Ati2evxx.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\Avira\AntiVir PersonalEdition Premium\sched.exe

    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\Avira\AntiVir PersonalEdition Premium\avguard.exe

    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

    C:\Program Files\Avira\AntiVir PersonalEdition Premium\avesvc.exe

    C:\Program Files\Bonjour\mDNSResponder.exe

    C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

    C:\Program Files\Microsoft LifeCam\MSCamS32.exe

    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\Avira\AntiVir PersonalEdition Premium\avmailc.exe

    C:\Program Files\Avira\AntiVir PersonalEdition Premium\AVWEBGRD.EXE

    C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe

    C:\Program Files\Avira\AntiVir PersonalEdition Premium\avgnt.exe

    C:\Program Files\eMule\emule.exe

    C:\Program Files\Mozilla Firefox\firefox.exe

    C:\Documents and Settings\nunus\Bureau\Programs\HiJackThis\HijackThis.exe

     

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comodo.com/search/

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll

    O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll

    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll

    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll

    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot

    O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray

    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Premium\avgnt.exe" /min

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

    O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll

    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab

    O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (TotalScan Installer Class) - http://www.nanoscan.com/as/cabs/ascstubie.cab

    O20 - AppInit_DLLs:

    O23 - Service: Avira AntiVir Premium MailGuard (AntiVirMailService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avmailc.exe

    O23 - Service: Planificateur Avira AntiVir Premium (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\sched.exe

    O23 - Service: Avira AntiVir Premium Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avguard.exe

    O23 - Service: Avira AntiVir Premium WebGuard (antivirwebservice) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\AVWEBGRD.EXE

    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

    O23 - Service: Service d'assistance Avira AntiVir Premium MailGuard (AVEService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avesvc.exe

    O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe

    O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

    O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

     

    --

    End of file - 7331 bytes

  9. ok voila le rapport demandé :P

     

     

    -----------\\ ToolBar S&D 1.2.8 XP/Vista

     

    Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3

    X86-based PC ( Uniprocessor Free : AMD Athlon XP )

    BIOS : Phoenix - AwardBIOS v6.00PG

    USER : nunus ( Administrator )

    BOOT : Normal boot

    Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Activated)

    Firewall : COMODO Firewall Pro 3.0 (Activated)

    C:\ (Local Disk) - NTFS - Total:111 Go (Free:91 Go)

    D:\ (CD or DVD)

    E:\ (CD or DVD)

     

    "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )

    Option : [1] ( 05/02/2009|23:18 )

     

    -----------\\ Recherche de Fichiers / Dossiers ...

     

    C:\Program Files\AskSBar

    C:\Program Files\AskSBar\bar

    C:\Program Files\AskSBar\SrchAstt

    C:\Program Files\AskSBar\bar\1.bin

    C:\Program Files\AskSBar\bar\Cache

    C:\Program Files\AskSBar\bar\History

    C:\Program Files\AskSBar\bar\Settings

    C:\Program Files\AskSBar\bar\1.bin\A2FFXTBR.JAR

    C:\Program Files\AskSBar\bar\1.bin\A2FFXTBR.MANIFEST

    C:\Program Files\AskSBar\bar\1.bin\A2HIGHIN.EXE

    C:\Program Files\AskSBar\bar\1.bin\A2NTSTBR.JAR

    C:\Program Files\AskSBar\bar\1.bin\A2NTSTBR.MANIFEST

    C:\Program Files\AskSBar\bar\1.bin\A2PLUGIN.DLL

    C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL

    C:\Program Files\AskSBar\bar\1.bin\NPASKSBR.DLL

    C:\Program Files\AskSBar\bar\Cache\01DCBA6B

    C:\Program Files\AskSBar\bar\Cache\0DD044D9.bin

    C:\Program Files\AskSBar\bar\Cache\0DD049BB.bin

    C:\Program Files\AskSBar\bar\Cache\0DD04D07.bin

    C:\Program Files\AskSBar\bar\Cache\0DD05276.bin

    C:\Program Files\AskSBar\bar\Cache\0DD054D7.bin

    C:\Program Files\AskSBar\bar\Cache\0DD05B9E.bin

    C:\Program Files\AskSBar\bar\Cache\0DD05F57.bin

    C:\Program Files\AskSBar\bar\Cache\0DD063CB.bin

    C:\Program Files\AskSBar\bar\Cache\files.ini

    C:\Program Files\AskSBar\bar\History\search2

    C:\Program Files\AskSBar\bar\Settings\prevcfg2.htm

    C:\Program Files\AskSBar\SrchAstt\1.bin

    C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL

    C:\Program Files\Mozilla Firefox\plugins\NPAskSBr.dll

     

    -----------\\ Extensions

     

    (nunus) - {0b38152b-1b20-484d-a11f-5e04a9b0661f} => winamptoolbar

    (nunus) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar

    (nunus) - {84b24861-62f6-364b-eba5-2e5e2061d7e6} => mediaplayerconnectivity

     

     

    -----------\\ [..\Internet Explorer\Main]

     

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

    "Local Page"="C:\\WINDOWS\\system32\\blank.htm"

    "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

    "Start Page"="http://www.comodo.com/search/"

    "SearchMigratedDefaultURL"="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"

     

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]

    "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"'>http://go.microsoft.com/fwlink/?LinkId=69157"

    "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"'>http://go.microsoft.com/fwlink/?LinkId=54896"

    "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"

    "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

     

     

    --------------------\\ Recherche d'autres infections

     

    --------------------\\ Cracks & Keygens ..

     

    C:\DOCUME~1\nunus\Application Data\uTorrent\Civilization 4 IV + Warlords expansion + 1.61 + 2.08 update + nocd crack civ4 civIV.rar.torrent

    C:\DOCUME~1\nunus\Bureau\Programs\Malwarebytes.Anti-Malware.v1.33.Multilangages.Incl-Keygen.[emule-island.com].rar

    C:\DOCUME~1\nunus\Bureau\Programs\PC Tools Registry Mechanic v8.0.0.900+Keygen-HeartBug

    C:\DOCUME~1\nunus\Bureau\Programs\Super.Utilities.Pro.v9.39.Multilangages.Incl-Crack.[emule-island.com].rar

    C:\DOCUME~1\nunus\Bureau\Programs\PC Tools Registry Mechanic v8.0.0.900+Keygen-HeartBug\HEARTBUG.nfo

    C:\DOCUME~1\nunus\Bureau\Programs\PC Tools Registry Mechanic v8.0.0.900+Keygen-HeartBug\Keygen

    C:\DOCUME~1\nunus\Bureau\Programs\PC Tools Registry Mechanic v8.0.0.900+Keygen-HeartBug\rminstall.exe

    C:\DOCUME~1\nunus\Mes documents\Downloads\PC Tools Registry Mechanic v8.0.0.900+Keygen-HeartBug

    C:\DOCUME~1\nunus\Mes documents\Downloads\PC Tools Registry Mechanic v8.0.0.900+Keygen-HeartBug\HEARTBUG.nfo

    C:\DOCUME~1\nunus\Mes documents\Downloads\PC Tools Registry Mechanic v8.0.0.900+Keygen-HeartBug\Keygen

    C:\DOCUME~1\nunus\Mes documents\Downloads\PC Tools Registry Mechanic v8.0.0.900+Keygen-HeartBug\rminstall.exe

    C:\DOCUME~1\nunus\Mes documents\Downloads\PC Tools Registry Mechanic v8.0.0.900+Keygen-HeartBug\Keygen\Keygen.exe

    C:\DOCUME~1\nunus\Recent\Driver.Genius.Professional.Edition.2007.v7.1.0.622.Multilangages.Incl-Keygen.[emule-island.com].rar.lnk

    C:\DOCUME~1\nunus\Recent\Keygen.lnk

    C:\DOCUME~1\nunus\Recent\Malwarebytes.Anti-Malware.v1.33.Multilangages.Incl-Keygen.[emule-island.com].rar.lnk

    C:\DOCUME~1\nunus\Recent\Super.Utilities.Pro.v9.39.Multilangages.Incl-Crack.[emule-island.com].rar.lnk

     

     

     

    1 - "C:\ToolBar SD\TB_1.txt" - 05/02/2009|23:22 - Option : [1]

     

    -----------\\ Fin du rapport a 23:22:20,10

     

    et encore un grand merci :P

  10. bon voila j'ai suivi le conseille j'ai enlevé la restauration et je l'est remise voici le rapport hijackthis

     

    Logfile of Trend Micro HijackThis v2.0.2

    Scan saved at 21:57:31, on 05/02/2009

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v7.00 (7.00.6000.16762)

    Boot mode: Normal

     

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\Ati2evxx.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\WINDOWS\system32\Ati2evxx.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

    C:\Program Files\Bonjour\mDNSResponder.exe

    C:\Program Files\Microsoft LifeCam\MSCamS32.exe

    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\Windows Live\Messenger\msnmsgr.exe

    C:\Program Files\Windows Live\Contacts\wlcomm.exe

    C:\Program Files\Mozilla Firefox\firefox.exe

    C:\Program Files\Winamp\winamp.exe

    C:\Program Files\eMule\emule.exe

    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe

    C:\WINDOWS\system32\ntvdm.exe

    C:\WINDOWS\system32\wuauclt.exe

    C:\Documents and Settings\nunus\Bureau\Programs\HiJackThis\HijackThis.exe

     

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comodo.com/search/

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll

    R3 - URLSearchHook: (no name) - {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL

    O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll

    O2 - BHO: Ask Search Assistant BHO - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL

    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll

    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

    O2 - BHO: Ask Toolbar BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL

    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll

    O3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL

    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

    O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\pchealth\helpctr\Binaries\MSCONFIG.EXE /auto

    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot

    O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll

    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab

    O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (TotalScan Installer Class) - http://www.nanoscan.com/as/cabs/ascstubie.cab

    O20 - AppInit_DLLs:

    O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

    O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

    O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe

    O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

     

    --

    End of file - 7108 bytes

     

     

    merci beaucoup pour votre aide :P

×
×
  • Créer...