Theo1060

Bonjour et merci encore pour ton aide , Hormis les quelques petites interrogations évoquées dans mon message précédant, je ne vois rien d'autre d'anormal à signaler. Donc s'il y a une suite et fin à toutes ces manipulations, je suis prêt pour continuer... A bientôt.

Bonjour Gof, Vraiment désolé pour le temps que j'ai mis pour répondre, mais je suis extrêmement occupé ces temps-ci... Alors tout va toujours bien pour mon PC, mais j'ai juste deux petites questions à propos de Kaspersky: - il me détecte régulièrement des tentatives d'intrusions (attaques réseaux) - dans le "journal", je constate chaque jours, entre 100'000 et 200'000 évènements concernant le "module NTFS du défragmenteur de disque"... Est-ce que tout ça est normal? Vu que je connais pas bien comment fonctionne Kaspersky, je voulais juste m'assurer de ça. Si c'est pas un problème, on peut passer à la suite! A bientôt.

Bonsoir Gof, Aucun souci pour ta disponibilité.., c'est déjà un énorme service que tu me rends. Donc le PC va effectivement beaucoup mieux. Il n'y a plus de ralentissements et tout à l'air de fonctionner parfaitement bien! Hier et cet après-midi Kaspersky s'excitait un peu avec des messages de préventions des intrusions et d'évènements de blocages de programmes potentiellement indésirables, mais maintenant tout semble être réglé!!! Alors voilà le rapport de MBAM: Malwarebytes' Anti-Malware 1.37 Version de la base de données: 2190 Windows 5.1.2600 Service Pack 2 29.05.2009 00:06:18 mbam-log-2009-05-29 (00-06-18).txt Type de recherche: Examen complet (C:\|E:\|) Eléments examinés: 237336 Temps écoulé: 1 hour(s), 22 minute(s), 59 second(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 2 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 0 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): (Aucun élément nuisible détecté) A bientôt.

Bonjour Gof, Donc voilà le rapport ComboFix: ComboFix 09-05-26.03 - Claudius 27.05.2009 11:56.3 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.33.1036.18.1022.419 [GMT 2:00] Lancé depuis: c:\documents and settings\Claudius\Bureau\Combo-Fix.exe Commutateurs utilisés :: c:\documents and settings\Claudius\Bureau\CFScript.txt AV: Kaspersky Internet Security *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0} FW: Kaspersky Internet Security *disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0} . - Mode FONCTIONNALITES REDUITES - . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\docume~1\Claudius\LOCALS~1\Temp\IadHide4.dll c:\documents and settings\Claudius\Local Settings\Temp\IadHide4.dll . ((((((((((((((((((((((((((((( Fichiers créés du 2009-04-27 au 2009-05-27 )))))))))))))))))))))))))))))))))))) . 2009-05-25 21:21 . 2009-05-25 21:21 33808 ----a-w c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP8\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav8exec\8.0.0.506\klbg.sys 2009-05-25 21:21 . 2009-05-25 21:21 206088 ----a-w c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP8\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav8exec\8.0.0.506\avp.exe 2009-05-25 21:21 . 2009-05-25 21:21 226832 ----a-w c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP8\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav8exec\8.0.0.506\XP\klif.sys 2009-05-24 17:21 . 2009-05-24 17:22 -------- d-----w c:\program files\trend micro 2009-05-24 17:21 . 2009-05-24 17:22 -------- d-----w C:\rsit 2009-05-24 16:32 . 2009-05-25 21:21 105395 ----a-w c:\windows\system32\drivers\klin.dat 2009-05-24 16:32 . 2009-05-25 21:21 94643 ----a-w c:\windows\system32\drivers\klick.dat 2009-05-24 16:31 . 2009-05-27 09:59 -------- d-----w c:\documents and settings\All Users\Application Data\Kaspersky Lab 2009-05-24 16:31 . 2009-05-27 09:57 524320 --sha-w c:\windows\system32\drivers\fidbox2.dat 2009-05-24 16:31 . 2009-05-27 09:57 4652064 --sha-w c:\windows\system32\drivers\fidbox.dat 2009-05-24 16:31 . 2009-05-24 16:31 -------- d-----w c:\program files\Kaspersky Lab 2009-05-24 16:08 . 2009-05-24 16:08 -------- d-----w c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files 2009-05-19 19:01 . 2009-05-19 19:01 -------- d-----w c:\program files\freshney.org 2009-05-15 16:16 . 2009-05-15 16:16 -------- d-----w c:\documents and settings\Claudius\Application Data\QuosaDDM 2009-05-13 15:39 . 2009-05-14 23:08 -------- d-----w c:\documents and settings\All Users\Application Data\foldit 2009-05-13 15:39 . 2009-05-13 15:40 -------- d-----w c:\program files\foldit 2009-05-13 13:14 . 2009-05-13 13:14 62208 ----a-r c:\documents and settings\Claudius\Application Data\Microsoft\Installer\{ADF69C76-13FF-49F0-A078-922725A8B1B6}\NewShortcut1_4F03CF542AC143F6A860D7EE370CC008.exe 2009-05-13 13:14 . 2009-05-13 13:14 284646 ----a-r c:\documents and settings\Claudius\Application Data\Microsoft\Installer\{ADF69C76-13FF-49F0-A078-922725A8B1B6}\BOINCMGRLink1_2D0ABC88DA524BA695666CB679534EC7.exe 2009-05-13 13:14 . 2009-05-13 13:14 284646 ----a-r c:\documents and settings\Claudius\Application Data\Microsoft\Installer\{ADF69C76-13FF-49F0-A078-922725A8B1B6}\BOINCMGRLink_B65C4A4D2B2A46CCA2D918164C6297B8.exe 2009-05-13 13:14 . 2009-05-13 13:14 284646 ----a-r c:\documents and settings\Claudius\Application Data\Microsoft\Installer\{ADF69C76-13FF-49F0-A078-922725A8B1B6}\ARPPRODUCTICON.exe 2009-05-13 13:14 . 2009-05-27 10:00 -------- d-----w c:\program files\BOINC 2009-05-13 12:59 . 2009-05-13 12:59 -------- d-----w c:\documents and settings\Claudius\Application Data\SoftwareDownload 2009-05-13 12:59 . 2009-05-13 13:02 -------- d-----w c:\program files\Computer Screen Saver 2009-05-08 12:17 . 2009-05-08 12:17 -------- d-----w c:\program files\URUSoft 2009-05-07 12:21 . 2009-01-29 14:37 684032 ----a-w c:\documents and settings\Claudius\Application Data\Mozilla\Firefox\Profiles\bjx475cm.default\extensions\safeview@cdisys.com\platform\WINNT_x86-msvc\plugins\npSafeview3.dll 2009-04-27 19:46 . 2009-05-13 20:25 -------- d-----w c:\program files\Enlight . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2009-05-27 10:00 . 2007-01-09 09:25 -------- d-----w c:\documents and settings\Claudius\Application Data\OpenOffice.org2 2009-05-27 09:57 . 2009-05-24 16:31 2872 --sha-w c:\windows\system32\drivers\fidbox2.idx 2009-05-27 09:57 . 2009-05-24 16:31 37424 --sha-w c:\windows\system32\drivers\fidbox.idx 2009-05-27 09:15 . 2008-09-19 17:07 -------- d-----w c:\documents and settings\Claudius\Application Data\BitTorrent 2009-05-27 08:43 . 2009-01-18 14:36 -------- d-----w c:\program files\Mozilla Thunderbird 2009-05-26 16:53 . 2006-12-22 03:55 -------- d---a-w c:\documents and settings\All Users\Application Data\TEMP 2009-05-25 21:21 . 2008-01-29 15:29 33808 ----a-w c:\windows\system32\drivers\klbg.sys 2009-05-24 16:27 . 2008-09-18 20:01 -------- d-----w c:\program files\Spybot - Search & Destroy 2009-05-24 16:25 . 2007-01-04 14:24 -------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2009-05-24 16:16 . 2006-12-22 03:52 -------- d-----w c:\program files\McAfee 2009-05-13 20:30 . 2007-01-19 14:02 -------- d--h--w c:\program files\InstallShield Installation Information 2009-05-12 12:53 . 2008-10-14 09:30 -------- d-----w c:\documents and settings\Claudius\Application Data\Skype 2009-05-11 06:06 . 2008-10-21 21:18 -------- d-----w c:\documents and settings\Claudius\Application Data\skypePM 2009-04-30 09:50 . 2005-09-01 05:53 76340 ----a-w c:\windows\system32\perfc00C.dat 2009-04-30 09:50 . 2005-09-01 05:53 469952 ----a-w c:\windows\system32\perfh00C.dat 2009-04-23 12:06 . 2008-03-04 07:32 -------- d-----w c:\documents and settings\Claudius\Application Data\Creative 2009-04-08 14:47 . 2007-01-04 14:48 -------- d-----w c:\program files\eMule 2009-04-07 19:08 . 2009-04-07 19:08 -------- d-----w c:\program files\CamStudio 2009-04-07 13:17 . 2009-04-07 13:17 -------- d-----w c:\documents and settings\All Users\Application Data\Advanced Chemistry Development 2009-04-07 13:17 . 2009-04-07 13:15 -------- d-----w c:\documents and settings\Claudius\Application Data\Advanced Chemistry Development 2009-04-07 13:17 . 2009-04-07 13:16 -------- d-----w c:\program files\ACDFREE12 2009-04-07 12:02 . 2009-04-07 12:02 57344 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\Deployment\cache\6.0\50\5b902232-16a0a1a1-n\Decora-SSE.dll 2009-04-07 12:02 . 2009-04-07 12:02 24064 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\Deployment\cache\6.0\15\4e09eacf-385d4f97-n\Decora-D3D.dll 2009-04-07 12:02 . 2009-04-07 12:02 315392 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-2e4cf758-n\jogl.dll 2009-04-07 12:02 . 2009-04-07 12:02 20480 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-2e4cf758-n\jogl_awt.dll 2009-04-07 12:02 . 2009-04-07 12:02 114688 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-2e4cf758-n\jogl_cg.dll 2009-04-07 12:02 . 2009-04-07 12:02 20480 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\Deployment\cache\6.0\45\4f710eed-2e457e16-n\gluegen-rt.dll 2009-04-07 12:02 . 2009-04-07 12:02 499712 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\Deployment\cache\6.0\33\258cea61-7b7e30e2-n\msvcp71.dll 2009-04-07 12:02 . 2009-04-07 12:02 499712 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\Deployment\cache\6.0\33\258cea61-7b7e30e2-n\jmc.dll 2009-04-07 12:02 . 2009-04-07 12:02 348160 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\Deployment\cache\6.0\33\258cea61-7b7e30e2-n\msvcr71.dll 2009-04-07 12:01 . 2006-12-22 03:41 -------- d-----w c:\program files\Java 2009-04-07 12:00 . 2009-04-07 12:00 152576 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\jre1.6.0_13\lzma.dll 2009-03-28 12:57 . 2009-03-28 12:57 -------- d-----w c:\program files\BoontyGames 2009-03-28 12:57 . 2009-03-28 12:57 -------- d-----w c:\program files\Boonty 2009-03-10 11:12 . 2009-03-10 11:12 2876719 ----a-w c:\documents and settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe 2009-03-09 03:19 . 2008-12-29 17:44 410984 ----a-w c:\windows\system32\deploytk.dll 2009-03-06 14:00 . 2005-09-01 05:53 286720 ----a-w c:\windows\system32\pdh.dll 2009-03-03 00:13 . 2005-09-01 05:53 826368 ----a-w c:\windows\system32\wininet.dll 2008-12-31 15:00 . 2007-01-04 15:44 168 --sh--r c:\windows\system32\0EF28D81E9.sys 2008-12-31 15:00 . 2007-01-04 15:44 5174 --sha-w c:\windows\system32\KGyGaAvL.sys . (((((((((((((((((((((((((((((((((((((((((((( Look ))))))))))))))))))))))))))))))))))))))))))))))))))))))))) . --- c:\windows\system32\0EF28D81E9.sys --- Company: !VERINFO: NOT PE FILE! File Description: !VERINFO: NOT PE FILE! File Version: !VERINFO: NOT PE FILE! Product Name: !VERINFO: NOT PE FILE! Copyright: !VERINFO: NOT PE FILE! Original Filename: !VERINFO: NOT PE FILE! File size: 168 Created time: 2007-01-04 15:44 Modified time: 2008-12-31 15:00 MD5: 1A58A805C64888C9671634C9BD38BE7F SHA1: 7766E45C2A570DEDD608699E99C93CB892E9C347 ((((((((((((((((((((((((((((( SnapShot@2009-05-24_19.28.33 ))))))))))))))))))))))))))))))))))))))))) . + 2009-05-27 09:58 . 2009-05-27 09:58 16384 c:\windows\Temp\Perflib_Perfdata_708.dat + 2009-05-24 16:30 . 2009-05-25 21:21 226832 c:\windows\system32\drivers\klif.sys . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-10 15360] "LDM"="c:\program files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe" [2007-01-22 20480] "VeohPlugin"="c:\program files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe" [2008-12-16 3528440] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-13 68856] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ehTray"="c:\windows\ehome\ehtray.exe" [2005-09-29 67584] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-06-16 7323648] "DLA"="c:\windows\System32\DLA\DLACTRLW.EXE" [2005-09-08 122940] "ISUSPM Startup"="c:\progra~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 221184] "ISUSScheduler"="c:\program files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2004-07-27 81920] "Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2006-12-22 169984] "Sony Ericsson PC Suite"="c:\program files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2005-10-26 159744] "LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2004-10-08 221184] "LogitechVideoRepair"="c:\program files\Logitech\Video\ISStart.exe" [2004-10-08 458752] "LogitechVideoTray"="c:\program files\Logitech\Video\LogiTray.exe" [2004-10-08 217088] "McAfeeUpdaterUI"="c:\program files\McAfee\Common Framework\UdaterUI.exe" [2006-12-19 136768] "AzAgent"="c:\program files\Companion Photo\AzAgent.exe" [2006-03-16 733184] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2007-01-19 155648] "AVP"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" [2009-05-25 206088] "SigmatelSysTrayApp"="stsystra.exe" - c:\windows\stsystra.exe [2006-08-15 282624] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-10 15360] c:\documents and settings\Claudius\Menu D‚marrer\Programmes\D‚marrage\ BOINC Manager.lnk - c:\program files\BOINC\boincmgr.exe [2008-3-4 4150016] OpenOffice.org 2.1.lnk - c:\program files\OpenOffice.org 2.1\program\quickstart.exe [2006-11-27 393216] c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ Dell Network Assistant.lnk - c:\windows\Installer\{0240BDFB-2995-4A3F-8C96-18D41282B716}\Icon0240BDFB3.exe [2006-12-22 7168] hp psc 1000 series.lnk - c:\program files\HP\Digital Imaging\bin\hpohmr08.exe [2003-4-6 147456] hpoddt01.exe.lnk - c:\program files\HP\Digital Imaging\bin\hpotdd01.exe [2003-4-6 28672] Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe [2007-1-22 450560] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "MsnMsgr"="c:\program files\MSN Messenger\MsnMsgr.Exe" /background "EA Core"=c:\program files\Electronic Arts\EADM\Core.exe -silent "CTSyncU.exe"="c:\program files\Creative\Sync Manager Unicode\CTSyncU.exe" "swg"=c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe "LogitechSoftwareUpdate"="c:\program files\Logitech\Video\ManifestEngine.exe" boot [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe" "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" "Corel Photo Downloader"=c:\program files\Corel\Corel Snapfire Plus\Corel Photo Downloader.exe "DMXLauncher"=c:\program files\Dell\Media Experience\DMXLauncher.exe "HP Component Manager"="c:\program files\HP\hpcoretech\hpcmpmgr.exe" "QuickTime Task"="c:\program files\QuickTime\qttask.exe" -atboottime [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusDisableNotify"=dword:00000001 "UpdatesDisableNotify"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\eMule\\emule.exe"= "c:\\Program Files\\Messenger\\msmsgs.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\backWeb-8876480.exe"= "c:\\Program Files\\Cossacks - Back To War\\DMCR.EXE"= "c:\\WINDOWS\\system32\\dplaysvr.exe"= "c:\\Program Files\\Activision\\Call To Power 2\\ctp2_program\\ctp\\ctp2.exe"= "c:\\Program Files\\BitTorrent\\bittorrent.exe"= "c:\\Program Files\\McAfee\\Common Framework\\FrameworkService.exe"= "c:\\Program Files\\Electronic Arts\\EADM\\Core.exe"= "c:\\Program Files\\Black Isle\\Baldur's Gate\\BGMain.exe"= "c:\\Program Files\\Black Isle\\Baldur's Gate\\BGMain2.exe"= "c:\\Program Files\\Black Isle\\BGII - SoA\\BGMain.exe"= "c:\\Program Files\\Veoh Networks\\VeohWebPlayer\\veohwebplayer.exe"= "c:\\Program Files\\Winamp Remote\\bin\\Orb.exe"= "c:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"= "c:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"= "c:\\Program Files\\Dell Network Assistant\\ezi_hnm2.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= "c:\\WINDOWS\\ehome\\ehtray.exe"= "c:\\WINDOWS\\stsystra.exe"= "c:\\WINDOWS\\system32\\DLA\\DLACTRLW.EXE"= "c:\\Documents and Settings\\All Users\\Application Data\\Kaspersky Lab Setup Files\\Kaspersky Internet Security 2009\\french\\setup.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "10421:UDP"= 10421:UDP:SingleClick Discovery Protocol "10426:UDP"= 10426:UDP:SingleClick ICC R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [29.01.2008 17:29 33808] R3 KLFLTDEV;Kaspersky Lab KLFltDev;c:\windows\system32\drivers\klfltdev.sys [13.03.2008 18:02 26640] R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [30.04.2008 17:06 24592] S3 k510bus;Sony Ericsson K510 Driver driver (WDM);c:\windows\system32\drivers\k510bus.sys [19.01.2007 15:36 58288] S3 k510mdfl;Sony Ericsson K510 USB WMC Modem Filter;c:\windows\system32\drivers\k510mdfl.sys [19.01.2007 15:36 8336] S3 k510mdm;Sony Ericsson K510 USB WMC Modem Driver;c:\windows\system32\drivers\k510mdm.sys [19.01.2007 15:36 94064] S3 k510mgmt;Sony Ericsson K510 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\k510mgmt.sys [19.01.2007 15:36 85408] S3 k510obex;Sony Ericsson K510 USB WMC OBEX Interface;c:\windows\system32\drivers\k510obex.sys [19.01.2007 15:36 83344] . Contenu du dossier 'Tâches planifiées' 2009-04-26 c:\windows\Tasks\FRU Task 2003-04-06 08:52ewlett-Packard2003-04-06 08:52p psc 1200 series5E771253C1676EBED677BF361FDFC537825E15B8233010071.job - c:\program files\HP\Digital Imaging\Bin\hpqfrucl.exe [2003-04-05 23:52] 2009-05-27 c:\windows\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job - c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 10:20] . . ------- Examen supplémentaire ------- . uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 uInternet Connection Wizard,ShellNext = iexplore uInternet Settings,ProxyOverride = localhost uSearchURL,(Default) = hxxp://g.fr.msn.ch/0SEFRCH/SAOS01?FORM=TOOLBR IE: &Windows Live Search - c:\program files\Windows Live Toolbar\msntb.dll/search.htm IE: Ajouter à Kaspersky Anti-Bannière - c:\program files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 IE: Ouvrir dans un nouvel onglet d'arrière-plan - c:\program files\Windows Live Toolbar\Components\fr-ch\msntabres.dll.mui/229?516062d33775479e8188a869eb7a836f IE: Ouvrir dans un nouvel onglet de premier plan - c:\program files\Windows Live Toolbar\Components\fr-ch\msntabres.dll.mui/230?516062d33775479e8188a869eb7a836f Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\program files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} - hxxp://activex.camfrogweb.com/advanced/2.0.2.3/cfweb_activex.camfrogweb.com-advanced-2.0.2.3_instmodule.exe DPF: {3743E8B0-BE34-4652-9F11-7C4EB22F39B9} - hxxp://online6.edqm.eu.ezproxy.ulb.ac.be/ep604/NetisUtils/install/safeview.cab FF - ProfilePath - c:\documents and settings\Claudius\Application Data\Mozilla\Firefox\Profiles\bjx475cm.default\ FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q= FF - component: c:\documents and settings\Claudius\Application Data\Mozilla\Firefox\Profiles\bjx475cm.default\extensions\piclens@cooliris.com\components\coolirisstub.dll FF - component: c:\program files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll FF - plugin: c:\documents and settings\Claudius\Application Data\Mozilla\Firefox\Profiles\bjx475cm.default\extensions\safeview@cdisys.com\platform\WINNT_x86-msvc\plugins\npSafeview3.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npbittorrent.dll FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\NPVeohTVPlugin.dll FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\npWebPlayerVideoPluginATL.dll ---- PARAMETRES FIREFOX ---- FF - user.js: dom.disable_open_during_load - false // Popupblocker control handled by McAfee Privacy Service FF - user.js: general.useragent.extra.zencast - Creative ZENcast v2.00.08. ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-05-27 11:58 Windows 5.1.2600 Service Pack 2 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . --------------------- CLES DE REGISTRE BLOQUEES --------------------- [HKEY_USERS\S-1-5-21-1363129366-1328066173-2993044551-1005\Software\SecuROM\License information*] "datasecu"=hex:09,bb,71,1d,7d,d1,13,5d,a0,f2,4a,78,0b,08,97,21,8d,66,1e,1a,64, 0f,66,aa,fa,72,87,35,ba,4a,d7,aa,3b,44,41,1d,1c,5f,32,3c,ea,b7,5b,44,fe,d7,\ "rkeysecu"=hex:3e,80,9e,c4,40,b4,90,83,87,8e,33,49,64,ac,f8,d9 [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•9~*] "C040110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL" . ------------------------ Autres processus actifs ------------------------ . c:\windows\system32\CTSVCCDA.EXE c:\windows\ehome\ehrecvr.exe c:\windows\ehome\ehSched.exe c:\program files\Dell Network Assistant\hnm_svc.exe c:\program files\Java\jre6\bin\jqs.exe c:\program files\McAfee\Common Framework\FrameworkService.exe c:\windows\system32\nvsvc32.exe c:\program files\McAfee\Common Framework\naPrdMgr.exe c:\windows\system32\wdfmgr.exe c:\windows\ehome\mcrdsvc.exe c:\windows\system32\dllhost.exe c:\windows\system32\wbem\wmiapsrv.exe c:\windows\ehome\ehmsas.exe c:\program files\Fichiers communs\Teleca Shared\CapabilityManager.exe c:\program files\Google\Google Desktop Search\GoogleDesktopIndex.exe c:\program files\McAfee\Common Framework\Mctray.exe c:\program files\Google\Google Desktop Search\GoogleDesktopDisplay.exe c:\program files\Logitech\Video\FxSvr2.exe c:\windows\system32\msiexec.exe c:\program files\Fichiers communs\Teleca Shared\Generic.exe c:\program files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe c:\program files\HP\Digital Imaging\bin\hpoevm08.exe c:\program files\OpenOffice.org 2.1\program\soffice.exe c:\program files\OpenOffice.org 2.1\program\soffice.bin c:\program files\BOINC\boinc.exe c:\program files\HP\Digital Imaging\bin\hposts08.exe c:\program files\BOINC\projects\setiathome.berkeley.edu\astropulse_5.03_windows_intelx86.exe c:\program files\BOINC\projects\setiathome.berkeley.edu\astropulse_5.03_windows_intelx86.exe . ************************************************************************** . Heure de fin: 2009-05-27 12:06 - La machine a redémarré ComboFix-quarantined-files.txt 2009-05-27 10:05 ComboFix2.txt 2009-05-25 21:02 ComboFix3.txt 2009-05-24 19:33 Avant-CF: 109'552'865'280 octets libres Après-CF: 109'659'140'096 octets libres 287 --- E O F --- 2009-05-15 01:02 Et voici le rapport Dr. Web: Combo-Fix.exe/data002\32788R22FWJFW\FIND3M.bat;C:\Documents and Settings\Claudius\Bureau\Combo-Fix.exe/data002;Probablement BATCH.Virus;; data002;C:\Documents and Settings\Claudius\Bureau;L'archive contient des éléments infectés;; Combo-Fix.exe;C:\Documents and Settings\Claudius\Bureau;Conteneur comporte des objets infectés;; PERSO.XLS;C:\Language\Fran-Ang.4-9;XM.Hit;; TRADUC.DOT;C:\Language\Fran-Ang.4-9;XM.Hit;; Claudius.exe.vir;C:\Qoobox\Quarantine\C\Documents and Settings\Claudius;Trojan.DownLoad.33158;Supprimé.; 1041d.exe.vir;C:\Qoobox\Quarantine\C\WINDOWS\system32;BackDoor.IRC.Nite.18;Supprimé.; digiwet.dll.vir;C:\Qoobox\Quarantine\C\WINDOWS\system32;Trojan.Inject.5512;Supprimé.; A0060397.exe\PERSO.XLS;C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436\A0060397.exe;XM.Hit;; A0060397.exe\Traduc.dot;C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436\A0060397.exe;XM.Hit;; A0060397.exe;C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436;L'archive contient des éléments infectés;Quarantaine.; A0060398.exe\data005;C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436\A0060398.exe;Adware.MyWay;; A0060398.exe\data008;C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436\A0060398.exe;Adware.MyWay;; A0060398.exe\data010;C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436\A0060398.exe;Adware.MyWay;; A0060398.exe;C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436;L'archive contient des éléments infectés;Quarantaine.; A0060429.exe;C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436;Trojan.DownLoad.33158;Supprimé.; A0060430.dll;C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436;Trojan.Inject.5512;Supprimé.; A0060435.exe;C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436;BackDoor.IRC.Nite.18;Supprimé.; A0060524.bat;C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436;Probablement BATCH.Virus;Irréparable.Quarantaine.; A0060689.bat;C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP437;Probablement BATCH.Virus;Irréparable.Quarantaine.; A0061799.bat;C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP437;Probablement BATCH.Virus;Irréparable.Quarantaine.; A0061907.bat;C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP437;Probablement BATCH.Virus;Irréparable.Quarantaine.; A tout bientôt.

Bonjour Gof, Voilà j'ai exécuté toutes tes intructions: Je me suis absenté pendant l'analyse de ComboFix, mais je suis revenu juste à temps pour remarquer qu'il a fait redémarrer mon PC, j'espère que c'est normal... J'ai mis à jour Kaspersky et ai effectué une analyse complète. Pour le rapport, je suis allé sur "Journaux", puis "exporter", j'espère que c'est bien ça. Sinon lorsque je clic sur "menaces détectées", j'ai la possibilité de les mettre en quarantaine (les 420 éléments), dois-je le faire? Voilà le rapport ComboFix: ComboFix 09-05-23.04 - Claudius 25.05.2009 22:51.2 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.33.1036.18.1022.500 [GMT 2:00] Lancé depuis: c:\documents and settings\Claudius\Bureau\Combo-Fix.exe Commutateurs utilisés :: c:\documents and settings\Claudius\Bureau\CFScript.txt AV: Kaspersky Internet Security *On-access scanning disabled* (Outdated) {2C4D4BC6-0793-4956-A9F9-E252435469C0} FW: Kaspersky Internet Security *disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0} FILE :: c:\windows\system32\2552665137.dat . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\docume~1\Claudius\LOCALS~1\Temp\IadHide4.dll c:\documents and settings\Claudius\Local Settings\Temp\IadHide4.dll c:\windows\system32\2552665137.dat . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_AMD64SI -------\Service_amd64si ((((((((((((((((((((((((((((( Fichiers créés du 2009-04-25 au 2009-05-25 )))))))))))))))))))))))))))))))))))) . 2009-05-24 17:21 . 2009-05-24 17:22 -------- d-----w c:\program files\trend micro 2009-05-24 17:21 . 2009-05-24 17:22 -------- d-----w C:\rsit 2009-05-24 16:32 . 2009-05-24 16:32 96976 ----a-w c:\windows\system32\drivers\klin.dat 2009-05-24 16:32 . 2009-05-24 16:32 87855 ----a-w c:\windows\system32\drivers\klick.dat 2009-05-24 16:31 . 2009-05-25 20:55 32 --sha-w c:\windows\system32\drivers\fidbox2.dat 2009-05-24 16:31 . 2009-05-25 20:55 32 --sha-w c:\windows\system32\drivers\fidbox.dat 2009-05-24 16:31 . 2009-05-24 16:31 -------- d-----w c:\program files\Kaspersky Lab 2009-05-24 16:31 . 2009-05-24 16:31 -------- d-----w c:\documents and settings\All Users\Application Data\Kaspersky Lab 2009-05-24 16:08 . 2009-05-24 16:08 -------- d-----w c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files 2009-05-19 19:01 . 2009-05-19 19:01 -------- d-----w c:\program files\freshney.org 2009-05-15 16:16 . 2009-05-15 16:16 -------- d-----w c:\documents and settings\Claudius\Application Data\QuosaDDM 2009-05-13 15:39 . 2009-05-14 23:08 -------- d-----w c:\documents and settings\All Users\Application Data\foldit 2009-05-13 15:39 . 2009-05-13 15:40 -------- d-----w c:\program files\foldit 2009-05-13 13:14 . 2009-05-13 13:14 62208 ----a-r c:\documents and settings\Claudius\Application Data\Microsoft\Installer\{ADF69C76-13FF-49F0-A078-922725A8B1B6}\NewShortcut1_4F03CF542AC143F6A860D7EE370CC008.exe 2009-05-13 13:14 . 2009-05-13 13:14 284646 ----a-r c:\documents and settings\Claudius\Application Data\Microsoft\Installer\{ADF69C76-13FF-49F0-A078-922725A8B1B6}\BOINCMGRLink1_2D0ABC88DA524BA695666CB679534EC7.exe 2009-05-13 13:14 . 2009-05-13 13:14 284646 ----a-r c:\documents and settings\Claudius\Application Data\Microsoft\Installer\{ADF69C76-13FF-49F0-A078-922725A8B1B6}\BOINCMGRLink_B65C4A4D2B2A46CCA2D918164C6297B8.exe 2009-05-13 13:14 . 2009-05-13 13:14 284646 ----a-r c:\documents and settings\Claudius\Application Data\Microsoft\Installer\{ADF69C76-13FF-49F0-A078-922725A8B1B6}\ARPPRODUCTICON.exe 2009-05-13 13:14 . 2009-05-25 20:56 -------- d-----w c:\program files\BOINC 2009-05-13 12:59 . 2009-05-13 12:59 -------- d-----w c:\documents and settings\Claudius\Application Data\SoftwareDownload 2009-05-13 12:59 . 2009-05-13 13:02 -------- d-----w c:\program files\Computer Screen Saver 2009-05-08 12:17 . 2009-05-08 12:17 -------- d-----w c:\program files\URUSoft 2009-05-07 12:21 . 2009-01-29 14:37 684032 ----a-w c:\documents and settings\Claudius\Application Data\Mozilla\Firefox\Profiles\bjx475cm.default\extensions\safeview@cdisys.com\platform\WINNT_x86-msvc\plugins\npSafeview3.dll 2009-04-27 19:46 . 2009-05-13 20:25 -------- d-----w c:\program files\Enlight . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2009-05-25 20:56 . 2007-01-09 09:25 -------- d-----w c:\documents and settings\Claudius\Application Data\OpenOffice.org2 2009-05-25 20:56 . 2006-12-22 03:55 -------- d---a-w c:\documents and settings\All Users\Application Data\TEMP 2009-05-25 20:55 . 2009-05-24 16:31 32 --sha-w c:\windows\system32\drivers\fidbox2.idx 2009-05-25 20:55 . 2009-05-24 16:31 32 --sha-w c:\windows\system32\drivers\fidbox.idx 2009-05-25 14:29 . 2009-01-18 14:36 -------- d-----w c:\program files\Mozilla Thunderbird 2009-05-24 16:27 . 2008-09-18 20:01 -------- d-----w c:\program files\Spybot - Search & Destroy 2009-05-24 16:25 . 2007-01-04 14:24 -------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2009-05-24 16:16 . 2006-12-22 03:52 -------- d-----w c:\program files\McAfee 2009-05-20 16:17 . 2008-09-19 17:07 -------- d-----w c:\documents and settings\Claudius\Application Data\BitTorrent 2009-05-13 20:30 . 2007-01-19 14:02 -------- d--h--w c:\program files\InstallShield Installation Information 2009-05-12 12:53 . 2008-10-14 09:30 -------- d-----w c:\documents and settings\Claudius\Application Data\Skype 2009-05-11 06:06 . 2008-10-21 21:18 -------- d-----w c:\documents and settings\Claudius\Application Data\skypePM 2009-04-30 09:50 . 2005-09-01 05:53 76340 ----a-w c:\windows\system32\perfc00C.dat 2009-04-30 09:50 . 2005-09-01 05:53 469952 ----a-w c:\windows\system32\perfh00C.dat 2009-04-23 12:06 . 2008-03-04 07:32 -------- d-----w c:\documents and settings\Claudius\Application Data\Creative 2009-04-08 14:47 . 2007-01-04 14:48 -------- d-----w c:\program files\eMule 2009-04-07 19:08 . 2009-04-07 19:08 -------- d-----w c:\program files\CamStudio 2009-04-07 13:17 . 2009-04-07 13:17 -------- d-----w c:\documents and settings\All Users\Application Data\Advanced Chemistry Development 2009-04-07 13:17 . 2009-04-07 13:15 -------- d-----w c:\documents and settings\Claudius\Application Data\Advanced Chemistry Development 2009-04-07 13:17 . 2009-04-07 13:16 -------- d-----w c:\program files\ACDFREE12 2009-04-07 12:02 . 2009-04-07 12:02 57344 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\Deployment\cache\6.0\50\5b902232-16a0a1a1-n\Decora-SSE.dll 2009-04-07 12:02 . 2009-04-07 12:02 24064 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\Deployment\cache\6.0\15\4e09eacf-385d4f97-n\Decora-D3D.dll 2009-04-07 12:02 . 2009-04-07 12:02 315392 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-2e4cf758-n\jogl.dll 2009-04-07 12:02 . 2009-04-07 12:02 20480 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-2e4cf758-n\jogl_awt.dll 2009-04-07 12:02 . 2009-04-07 12:02 114688 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-2e4cf758-n\jogl_cg.dll 2009-04-07 12:02 . 2009-04-07 12:02 20480 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\Deployment\cache\6.0\45\4f710eed-2e457e16-n\gluegen-rt.dll 2009-04-07 12:02 . 2009-04-07 12:02 499712 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\Deployment\cache\6.0\33\258cea61-7b7e30e2-n\msvcp71.dll 2009-04-07 12:02 . 2009-04-07 12:02 499712 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\Deployment\cache\6.0\33\258cea61-7b7e30e2-n\jmc.dll 2009-04-07 12:02 . 2009-04-07 12:02 348160 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\Deployment\cache\6.0\33\258cea61-7b7e30e2-n\msvcr71.dll 2009-04-07 12:01 . 2006-12-22 03:41 -------- d-----w c:\program files\Java 2009-04-07 12:00 . 2009-04-07 12:00 152576 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\jre1.6.0_13\lzma.dll 2009-03-28 12:57 . 2009-03-28 12:57 -------- d-----w c:\program files\BoontyGames 2009-03-28 12:57 . 2009-03-28 12:57 -------- d-----w c:\program files\Boonty 2009-03-10 11:12 . 2009-03-10 11:12 2876719 ----a-w c:\documents and settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe 2009-03-09 03:19 . 2008-12-29 17:44 410984 ----a-w c:\windows\system32\deploytk.dll 2009-03-06 14:00 . 2005-09-01 05:53 286720 ----a-w c:\windows\system32\pdh.dll 2009-03-03 00:13 . 2005-09-01 05:53 826368 ----a-w c:\windows\system32\wininet.dll 2008-12-31 15:00 . 2007-01-04 15:44 168 --sh--r c:\windows\system32\0EF28D81E9.sys 2008-12-31 15:00 . 2007-01-04 15:44 5174 --sha-w c:\windows\system32\KGyGaAvL.sys . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-10 15360] "LDM"="c:\program files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe" [2007-01-22 20480] "VeohPlugin"="c:\program files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe" [2008-12-16 3528440] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-13 68856] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ehTray"="c:\windows\ehome\ehtray.exe" [2005-09-29 67584] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-06-16 7323648] "DLA"="c:\windows\System32\DLA\DLACTRLW.EXE" [2005-09-08 122940] "ISUSPM Startup"="c:\progra~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 221184] "ISUSScheduler"="c:\program files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2004-07-27 81920] "Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2006-12-22 169984] "Sony Ericsson PC Suite"="c:\program files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2005-10-26 159744] "LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2004-10-08 221184] "LogitechVideoRepair"="c:\program files\Logitech\Video\ISStart.exe" [2004-10-08 458752] "LogitechVideoTray"="c:\program files\Logitech\Video\LogiTray.exe" [2004-10-08 217088] "McAfeeUpdaterUI"="c:\program files\McAfee\Common Framework\UdaterUI.exe" [2006-12-19 136768] "AzAgent"="c:\program files\Companion Photo\AzAgent.exe" [2006-03-16 733184] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2007-01-19 155648] "SigmatelSysTrayApp"="stsystra.exe" - c:\windows\stsystra.exe [2006-08-15 282624] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-10 15360] c:\documents and settings\Claudius\Menu D‚marrer\Programmes\D‚marrage\ BOINC Manager.lnk - c:\program files\BOINC\boincmgr.exe [2008-3-4 4150016] OpenOffice.org 2.1.lnk - c:\program files\OpenOffice.org 2.1\program\quickstart.exe [2006-11-27 393216] c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ Dell Network Assistant.lnk - c:\windows\Installer\{0240BDFB-2995-4A3F-8C96-18D41282B716}\Icon0240BDFB3.exe [2006-12-22 7168] hp psc 1000 series.lnk - c:\program files\HP\Digital Imaging\bin\hpohmr08.exe [2003-4-6 147456] hpoddt01.exe.lnk - c:\program files\HP\Digital Imaging\bin\hpotdd01.exe [2003-4-6 28672] Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe [2007-1-22 450560] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "MsnMsgr"="c:\program files\MSN Messenger\MsnMsgr.Exe" /background "EA Core"=c:\program files\Electronic Arts\EADM\Core.exe -silent "CTSyncU.exe"="c:\program files\Creative\Sync Manager Unicode\CTSyncU.exe" "swg"=c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe "LogitechSoftwareUpdate"="c:\program files\Logitech\Video\ManifestEngine.exe" boot [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe" "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" "Corel Photo Downloader"=c:\program files\Corel\Corel Snapfire Plus\Corel Photo Downloader.exe "DMXLauncher"=c:\program files\Dell\Media Experience\DMXLauncher.exe "HP Component Manager"="c:\program files\HP\hpcoretech\hpcmpmgr.exe" "QuickTime Task"="c:\program files\QuickTime\qttask.exe" -atboottime [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusDisableNotify"=dword:00000001 "UpdatesDisableNotify"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\eMule\\emule.exe"= "c:\\Program Files\\Messenger\\msmsgs.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\backWeb-8876480.exe"= "c:\\Program Files\\Cossacks - Back To War\\DMCR.EXE"= "c:\\WINDOWS\\system32\\dplaysvr.exe"= "c:\\Program Files\\Activision\\Call To Power 2\\ctp2_program\\ctp\\ctp2.exe"= "c:\\Program Files\\BitTorrent\\bittorrent.exe"= "c:\\Program Files\\McAfee\\Common Framework\\FrameworkService.exe"= "c:\\Program Files\\Electronic Arts\\EADM\\Core.exe"= "c:\\Program Files\\Black Isle\\Baldur's Gate\\BGMain.exe"= "c:\\Program Files\\Black Isle\\Baldur's Gate\\BGMain2.exe"= "c:\\Program Files\\Black Isle\\BGII - SoA\\BGMain.exe"= "c:\\Program Files\\Veoh Networks\\VeohWebPlayer\\veohwebplayer.exe"= "c:\\Program Files\\Winamp Remote\\bin\\Orb.exe"= "c:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"= "c:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"= "c:\\Program Files\\Dell Network Assistant\\ezi_hnm2.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= "c:\\WINDOWS\\ehome\\ehtray.exe"= "c:\\WINDOWS\\stsystra.exe"= "c:\\WINDOWS\\system32\\DLA\\DLACTRLW.EXE"= "c:\\Documents and Settings\\All Users\\Application Data\\Kaspersky Lab Setup Files\\Kaspersky Internet Security 2009\\french\\setup.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "10421:UDP"= 10421:UDP:SingleClick Discovery Protocol "10426:UDP"= 10426:UDP:SingleClick ICC R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [29.01.2008 17:29 32784] R3 KLFLTDEV;Kaspersky Lab KLFltDev;c:\windows\system32\drivers\klfltdev.sys [13.03.2008 18:02 26640] R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [30.04.2008 17:06 24592] S3 k510bus;Sony Ericsson K510 Driver driver (WDM);c:\windows\system32\drivers\k510bus.sys [19.01.2007 15:36 58288] S3 k510mdfl;Sony Ericsson K510 USB WMC Modem Filter;c:\windows\system32\drivers\k510mdfl.sys [19.01.2007 15:36 8336] S3 k510mdm;Sony Ericsson K510 USB WMC Modem Driver;c:\windows\system32\drivers\k510mdm.sys [19.01.2007 15:36 94064] S3 k510mgmt;Sony Ericsson K510 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\k510mgmt.sys [19.01.2007 15:36 85408] S3 k510obex;Sony Ericsson K510 USB WMC OBEX Interface;c:\windows\system32\drivers\k510obex.sys [19.01.2007 15:36 83344] . Contenu du dossier 'Tâches planifiées' 2009-04-26 c:\windows\Tasks\FRU Task 2003-04-06 08:52ewlett-Packard2003-04-06 08:52p psc 1200 series5E771253C1676EBED677BF361FDFC537825E15B8233010071.job - c:\program files\HP\Digital Imaging\Bin\hpqfrucl.exe [2003-04-05 23:52] 2009-05-25 c:\windows\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job - c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 10:20] . . ------- Examen supplémentaire ------- . uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 uInternet Connection Wizard,ShellNext = iexplore uInternet Settings,ProxyOverride = localhost uSearchURL,(Default) = hxxp://g.fr.msn.ch/0SEFRCH/SAOS01?FORM=TOOLBR IE: &Windows Live Search - c:\program files\Windows Live Toolbar\msntb.dll/search.htm IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 IE: Ouvrir dans un nouvel onglet d'arrière-plan - c:\program files\Windows Live Toolbar\Components\fr-ch\msntabres.dll.mui/229?516062d33775479e8188a869eb7a836f IE: Ouvrir dans un nouvel onglet de premier plan - c:\program files\Windows Live Toolbar\Components\fr-ch\msntabres.dll.mui/230?516062d33775479e8188a869eb7a836f Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\program files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} - hxxp://activex.camfrogweb.com/advanced/2.0.2.3/cfweb_activex.camfrogweb.com-advanced-2.0.2.3_instmodule.exe DPF: {3743E8B0-BE34-4652-9F11-7C4EB22F39B9} - hxxp://online6.edqm.eu.ezproxy.ulb.ac.be/ep604/NetisUtils/install/safeview.cab FF - ProfilePath - c:\documents and settings\Claudius\Application Data\Mozilla\Firefox\Profiles\bjx475cm.default\ FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q= FF - component: c:\documents and settings\Claudius\Application Data\Mozilla\Firefox\Profiles\bjx475cm.default\extensions\piclens@cooliris.com\components\coolirisstub.dll FF - component: c:\program files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll FF - plugin: c:\documents and settings\Claudius\Application Data\Mozilla\Firefox\Profiles\bjx475cm.default\extensions\safeview@cdisys.com\platform\WINNT_x86-msvc\plugins\npSafeview3.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npbittorrent.dll FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\NPVeohTVPlugin.dll FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\npWebPlayerVideoPluginATL.dll ---- PARAMETRES FIREFOX ---- FF - user.js: dom.disable_open_during_load - false // Popupblocker control handled by McAfee Privacy Service FF - user.js: general.useragent.extra.zencast - Creative ZENcast v2.00.08. ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-05-25 22:57 Windows 5.1.2600 Service Pack 2 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . --------------------- CLES DE REGISTRE BLOQUEES --------------------- [HKEY_USERS\S-1-5-21-1363129366-1328066173-2993044551-1005\Software\SecuROM\License information*] "datasecu"=hex:09,bb,71,1d,7d,d1,13,5d,a0,f2,4a,78,0b,08,97,21,8d,66,1e,1a,64, 0f,66,aa,fa,72,87,35,ba,4a,d7,aa,3b,44,41,1d,1c,5f,32,3c,ea,b7,5b,44,fe,d7,\ "rkeysecu"=hex:3e,80,9e,c4,40,b4,90,83,87,8e,33,49,64,ac,f8,d9 [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•9~*] "C040110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL" . ------------------------ Autres processus actifs ------------------------ . c:\program files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe c:\windows\system32\CTSVCCDA.EXE c:\windows\ehome\ehrecvr.exe c:\windows\ehome\ehSched.exe c:\program files\Dell Network Assistant\hnm_svc.exe c:\program files\Java\jre6\bin\jqs.exe c:\program files\McAfee\Common Framework\FrameworkService.exe c:\windows\system32\nvsvc32.exe c:\program files\McAfee\Common Framework\naPrdMgr.exe c:\windows\system32\wdfmgr.exe c:\windows\ehome\mcrdsvc.exe c:\program files\Fichiers communs\Teleca Shared\CapabilityManager.exe c:\program files\McAfee\Common Framework\Mctray.exe c:\program files\Google\Google Desktop Search\GoogleDesktopIndex.exe c:\program files\Google\Google Desktop Search\GoogleDesktopDisplay.exe c:\program files\Logitech\Video\FxSvr2.exe c:\program files\Dell Network Assistant\ezi_hnm2.exe c:\program files\HP\Digital Imaging\bin\hpoevm08.exe c:\windows\system32\dllhost.exe c:\program files\OpenOffice.org 2.1\program\soffice.exe c:\program files\BOINC\boinc.exe c:\windows\system32\wbem\wmiapsrv.exe c:\program files\OpenOffice.org 2.1\program\soffice.bin c:\windows\ehome\ehmsas.exe c:\program files\HP\Digital Imaging\bin\hposts08.exe c:\program files\Fichiers communs\Teleca Shared\Generic.exe c:\program files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe c:\program files\BOINC\projects\setiathome.berkeley.edu\astropulse_5.03_windows_intelx86.exe c:\program files\BOINC\projects\setiathome.berkeley.edu\astropulse_5.03_windows_intelx86.exe . ************************************************************************** . Heure de fin: 2009-05-25 23:02 - La machine a redémarré ComboFix-quarantined-files.txt 2009-05-25 21:02 ComboFix2.txt 2009-05-24 19:33 Avant-CF: 102'957'486'080 octets libres Après-CF: 102'936'612'864 octets libres 267 --- E O F --- 2009-05-15 01:02 Voilà le rapport de Kaspersky: Analyse complète: terminée le 26.05.2009 01:36 (événements : 472, objets : 456808, durée : 02:13:07) 25.05.2009 23:23 Lancement de la tâche 25.05.2009 23:23 Détectés: http://www.viruslist.com/fr/advisories/34924 C:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\Annots.api 25.05.2009 23:24 Détectés: http://www.viruslist.com/fr/advisories/34866 C:\Program Files\Mozilla Firefox\firefox.exe 25.05.2009 23:24 Détectés: http://www.viruslist.com/fr/advisories/34012 C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll 25.05.2009 23:24 Détectés: http://www.viruslist.com/fr/advisories/32419 C:\Program Files\OpenOffice.org 2.1\program\soffice.BIN 25.05.2009 23:25 Détectés: http://www.viruslist.com/fr/advisories/32419 C:\Program Files\OpenOffice.org 2.1\program\soffice.exe 25.05.2009 23:27 Détectés: http://www.viruslist.com/fr/advisories/33981 C:\Program Files\winamp\winamp.exe 25.05.2009 23:28 Détectés: http://www.viruslist.com/fr/advisories/34866 C:\Program Files\Mozilla Firefox\firefox.exe 25.05.2009 23:28 Détectés: http://www.viruslist.com/fr/advisories/27620 C:\Program Files\real\realplayer\realplay.exe 25.05.2009 23:28 Détectés: http://www.viruslist.com/fr/advisories/32419 C:\Program Files\OpenOffice.org 2.1\program\soffice.exe 25.05.2009 23:28 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\quicktimeplayer.exe 25.05.2009 23:39 Détectés: Trojan.Win32.Inject.abbv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP431\A0059826.sys 25.05.2009 23:39 Non réparés: Trojan.Win32.Inject.abbv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP431\A0059826.sys Reporté 25.05.2009 23:40 Détectés: Trojan.Win32.Inject.abbv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP433\A0060166.sys 25.05.2009 23:40 Non réparés: Trojan.Win32.Inject.abbv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP433\A0060166.sys Reporté 25.05.2009 23:40 Détectés: Trojan.Win32.Inject.abbv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436\A0060363.sys 25.05.2009 23:40 Non réparés: Trojan.Win32.Inject.abbv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436\A0060363.sys Reporté 25.05.2009 23:42 Détectés: Trojan.Win32.Inject.abbv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436\A0060431.sys 25.05.2009 23:42 Non réparés: Trojan.Win32.Inject.abbv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436\A0060431.sys Reporté 25.05.2009 23:42 Détectés: Trojan.Win32.Inject.aatv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436\A0060432.sys 25.05.2009 23:42 Non réparés: Trojan.Win32.Inject.aatv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436\A0060432.sys Reporté 26.05.2009 00:24 Détectés: http://www.viruslist.com/fr/advisories/32270 C:\i386\Flash.ocx 26.05.2009 00:25 Détectés: http://www.viruslist.com/fr/advisories/34451 C:\i386\java.exe 26.05.2009 00:25 Détectés: http://www.viruslist.com/fr/advisories/32991 C:\i386\javaws.exe 26.05.2009 00:27 Détectés: http://www.viruslist.com/fr/advisories/34012 C:\i386\NPSWF32.dll 26.05.2009 00:31 Détectés: http://www.viruslist.com/fr/advisories/34924 C:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\Annots.api 26.05.2009 00:42 Détectés: http://www.viruslist.com/fr/advisories/20845 C:\Program Files\Dell\Media Experience\InterActual\bin\pcfpatch 26.05.2009 00:43 Détectés: http://www.viruslist.com/fr/advisories/33196 C:\Program Files\DivX\DivX Web Player\npdivx32.dll 26.05.2009 00:58 Détectés: http://www.viruslist.com/fr/advisories/34451 C:\Program Files\ImageJ\jre\bin\java.exe 26.05.2009 00:58 Détectés: http://www.viruslist.com/fr/advisories/20845 C:\Program Files\InterActual\InterActual Player\bin\pcfpatch 26.05.2009 00:59 Détectés: http://www.viruslist.com/fr/advisories/34451 C:\Program Files\Java\jre1.5.0_06\bin\java.exe 26.05.2009 00:59 Détectés: http://www.viruslist.com/fr/advisories/32991 C:\Program Files\Java\jre1.5.0_06\bin\javaws.exe 26.05.2009 00:59 Détectés: http://www.viruslist.com/fr/advisories/34451 C:\Program Files\Java\jre1.5.0_10\bin\java.exe 26.05.2009 00:59 Détectés: http://www.viruslist.com/fr/advisories/32991 C:\Program Files\Java\jre1.5.0_10\bin\javaws.exe 26.05.2009 00:59 Détectés: http://www.viruslist.com/fr/advisories/34451 C:\Program Files\Java\jre1.6.0_01\bin\java.exe 26.05.2009 01:00 Détectés: http://www.viruslist.com/fr/advisories/34451 C:\Program Files\Java\jre1.6.0_07\bin\java.exe 26.05.2009 01:04 Détectés: http://www.viruslist.com/fr/advisories/34866 C:\Program Files\Mozilla Firefox\firefox.exe 26.05.2009 01:05 Détectés: http://www.viruslist.com/fr/advisories/33196 C:\Program Files\Mozilla Firefox\plugins\npdivx32.dll 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PictureViewer.Resources\PictureViewer.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PictureViewer.Resources\da.lproj\PictureViewerLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PictureViewer.Resources\de.lproj\PictureViewerLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PictureViewer.Resources\en.lproj\PictureViewerLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PictureViewer.Resources\es.lproj\PictureViewerLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PictureViewer.Resources\fi.lproj\PictureViewerLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PictureViewer.Resources\fr.lproj\PictureViewerLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PictureViewer.Resources\it.lproj\PictureViewerLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PictureViewer.Resources\ja.lproj\PictureViewerLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PictureViewer.Resources\nl.lproj\PictureViewerLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PictureViewer.Resources\ko.lproj\PictureViewerLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PictureViewer.Resources\no.lproj\PictureViewerLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PictureViewer.Resources\sv.lproj\PictureViewerLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PictureViewer.Resources\zh_CN.lproj\PictureViewerLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PictureViewer.Resources\zh_TW.lproj\PictureViewerLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PanelHelperBase.Resources\PanelHelperBase.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\quicktimeplayer.exe 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PanelHelperBase.Resources\de.lproj\PanelHelperBaseLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PanelHelperBase.Resources\da.lproj\PanelHelperBaseLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PanelHelperBase.Resources\en.lproj\PanelHelperBaseLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PanelHelperBase.Resources\fi.lproj\PanelHelperBaseLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PanelHelperBase.Resources\es.lproj\PanelHelperBaseLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PanelHelperBase.Resources\fr.lproj\PanelHelperBaseLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PanelHelperBase.Resources\ja.lproj\PanelHelperBaseLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PanelHelperBase.Resources\it.lproj\PanelHelperBaseLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PanelHelperBase.Resources\no.lproj\PanelHelperBaseLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PanelHelperBase.Resources\ko.lproj\PanelHelperBaseLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PanelHelperBase.Resources\nl.lproj\PanelHelperBaseLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PanelHelperBase.Resources\zh_CN.lproj\PanelHelperBaseLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PanelHelperBase.Resources\sv.lproj\PanelHelperBaseLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PanelHelperBase.Resources\zh_TW.lproj\PanelHelperBaseLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PropPanelHelpers.Resources\PropPanelHelpers.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PropPanelHelpers.Resources\en.lproj\PropPanelHelpersLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PropPanelHelpers.Resources\de.lproj\PropPanelHelpersLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PropPanelHelpers.Resources\da.lproj\PropPanelHelpersLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PropPanelHelpers.Resources\es.lproj\PropPanelHelpersLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PropPanelHelpers.Resources\fi.lproj\PropPanelHelpersLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PropPanelHelpers.Resources\fr.lproj\PropPanelHelpersLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PropPanelHelpers.Resources\ko.lproj\PropPanelHelpersLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PropPanelHelpers.Resources\it.lproj\PropPanelHelpersLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PropPanelHelpers.Resources\ja.lproj\PropPanelHelpersLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PropPanelHelpers.Resources\nl.lproj\PropPanelHelpersLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PropPanelHelpers.Resources\no.lproj\PropPanelHelpersLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PropPanelHelpers.Resources\sv.lproj\PropPanelHelpersLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PropPanelHelpers.Resources\zh_CN.lproj\PropPanelHelpersLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\PropertyPanels\PropPanelHelpers.Resources\zh_TW.lproj\PropPanelHelpersLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\CoreVideo.Resources\CoreVideo.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\CoreVideo.Resources\da.lproj\CoreVideoLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\CoreVideo.Resources\es.lproj\CoreVideoLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\CoreVideo.Resources\en.lproj\CoreVideoLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\CoreVideo.Resources\de.lproj\CoreVideoLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\CoreVideo.Resources\fi.lproj\CoreVideoLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\CoreVideo.Resources\fr.lproj\CoreVideoLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\CoreVideo.Resources\ko.lproj\CoreVideoLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\CoreVideo.Resources\ja.lproj\CoreVideoLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\CoreVideo.Resources\it.lproj\CoreVideoLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\CoreVideo.Resources\sv.lproj\CoreVideoLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\CoreVideo.Resources\no.lproj\CoreVideoLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\CoreVideo.Resources\nl.lproj\CoreVideoLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\CoreVideo.Resources\zh_TW.lproj\CoreVideoLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\CoreVideo.Resources\zh_CN.lproj\CoreVideoLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime.Resources\QuickTime.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime.Resources\de.lproj\QuickTimeLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime.Resources\en.lproj\QuickTimeLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime.Resources\da.lproj\QuickTimeLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime.Resources\es.lproj\QuickTimeLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime.Resources\fr.lproj\QuickTimeLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime.Resources\fi.lproj\QuickTimeLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime.Resources\it.lproj\QuickTimeLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime.Resources\ja.lproj\QuickTimeLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime.Resources\ko.lproj\QuickTimeLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime.Resources\nl.lproj\QuickTimeLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime.Resources\no.lproj\QuickTimeLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime.Resources\sv.lproj\QuickTimeLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime.Resources\zh_CN.lproj\QuickTimeLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime.Resources\zh_TW.lproj\QuickTimeLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPP.Resources\QuickTime3GPP.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPP.Resources\da.lproj\QuickTime3GPPLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPP.Resources\de.lproj\QuickTime3GPPLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPP.Resources\en.lproj\QuickTime3GPPLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPP.Resources\es.lproj\QuickTime3GPPLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPP.Resources\fi.lproj\QuickTime3GPPLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPP.Resources\fr.lproj\QuickTime3GPPLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPP.Resources\it.lproj\QuickTime3GPPLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPP.Resources\ja.lproj\QuickTime3GPPLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPP.Resources\ko.lproj\QuickTime3GPPLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPP.Resources\nl.lproj\QuickTime3GPPLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPP.Resources\no.lproj\QuickTime3GPPLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPP.Resources\sv.lproj\QuickTime3GPPLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPP.Resources\zh_CN.lproj\QuickTime3GPPLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPP.Resources\zh_TW.lproj\QuickTime3GPPLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPPAuthoring.Resources\QuickTime3GPPAuthoring.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPPAuthoring.Resources\da.lproj\QuickTime3GPPAuthoringLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPPAuthoring.Resources\de.lproj\QuickTime3GPPAuthoringLocalized.qtr 26.05.2009 01:08 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPPAuthoring.Resources\en.lproj\QuickTime3GPPAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPPAuthoring.Resources\es.lproj\QuickTime3GPPAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPPAuthoring.Resources\fi.lproj\QuickTime3GPPAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPPAuthoring.Resources\fr.lproj\QuickTime3GPPAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPPAuthoring.Resources\it.lproj\QuickTime3GPPAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPPAuthoring.Resources\ja.lproj\QuickTime3GPPAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPPAuthoring.Resources\ko.lproj\QuickTime3GPPAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPPAuthoring.Resources\nl.lproj\QuickTime3GPPAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPPAuthoring.Resources\no.lproj\QuickTime3GPPAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPPAuthoring.Resources\sv.lproj\QuickTime3GPPAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPPAuthoring.Resources\zh_CN.lproj\QuickTime3GPPAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTime3GPPAuthoring.Resources\zh_TW.lproj\QuickTime3GPPAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAudioSupport.Resources\QuickTimeAudioSupport.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAudioSupport.Resources\da.lproj\QuickTimeAudioSupportLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAudioSupport.Resources\de.lproj\QuickTimeAudioSupportLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAudioSupport.Resources\en.lproj\QuickTimeAudioSupportLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAudioSupport.Resources\es.lproj\QuickTimeAudioSupportLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAudioSupport.Resources\fi.lproj\QuickTimeAudioSupportLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAudioSupport.Resources\fr.lproj\QuickTimeAudioSupportLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAudioSupport.Resources\it.lproj\QuickTimeAudioSupportLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAudioSupport.Resources\ja.lproj\QuickTimeAudioSupportLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAudioSupport.Resources\ko.lproj\QuickTimeAudioSupportLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAudioSupport.Resources\nl.lproj\QuickTimeAudioSupportLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAudioSupport.Resources\no.lproj\QuickTimeAudioSupportLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAudioSupport.Resources\sv.lproj\QuickTimeAudioSupportLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAudioSupport.Resources\zh_CN.lproj\QuickTimeAudioSupportLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAudioSupport.Resources\zh_TW.lproj\QuickTimeAudioSupportLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAuthoring.Resources\QuickTimeAuthoring.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAuthoring.Resources\da.lproj\QuickTimeAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAuthoring.Resources\de.lproj\QuickTimeAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAuthoring.Resources\en.lproj\QuickTimeAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAuthoring.Resources\es.lproj\QuickTimeAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAuthoring.Resources\fi.lproj\QuickTimeAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAuthoring.Resources\fr.lproj\QuickTimeAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAuthoring.Resources\it.lproj\QuickTimeAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAuthoring.Resources\ko.lproj\QuickTimeAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAuthoring.Resources\ja.lproj\QuickTimeAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAuthoring.Resources\nl.lproj\QuickTimeAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAuthoring.Resources\no.lproj\QuickTimeAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAuthoring.Resources\zh_CN.lproj\QuickTimeAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAuthoring.Resources\sv.lproj\QuickTimeAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeAuthoring.Resources\zh_TW.lproj\QuickTimeAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeCapture.Resources\QuickTimeCapture.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeCapture.Resources\da.lproj\QuickTimeCaptureLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeCapture.Resources\de.lproj\QuickTimeCaptureLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeCapture.Resources\en.lproj\QuickTimeCaptureLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeCapture.Resources\es.lproj\QuickTimeCaptureLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeCapture.Resources\fi.lproj\QuickTimeCaptureLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeCapture.Resources\fr.lproj\QuickTimeCaptureLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeCapture.Resources\it.lproj\QuickTimeCaptureLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeCapture.Resources\ja.lproj\QuickTimeCaptureLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeCapture.Resources\ko.lproj\QuickTimeCaptureLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeCapture.Resources\nl.lproj\QuickTimeCaptureLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeCapture.Resources\no.lproj\QuickTimeCaptureLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeCapture.Resources\sv.lproj\QuickTimeCaptureLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeCapture.Resources\zh_TW.lproj\QuickTimeCaptureLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeCapture.Resources\zh_CN.lproj\QuickTimeCaptureLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEffects.Resources\QuickTimeEffects.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEffects.Resources\da.lproj\QuickTimeEffectsLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEffects.Resources\de.lproj\QuickTimeEffectsLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEffects.Resources\en.lproj\QuickTimeEffectsLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEffects.Resources\es.lproj\QuickTimeEffectsLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEffects.Resources\fi.lproj\QuickTimeEffectsLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEffects.Resources\fr.lproj\QuickTimeEffectsLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEffects.Resources\it.lproj\QuickTimeEffectsLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEffects.Resources\ja.lproj\QuickTimeEffectsLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEffects.Resources\ko.lproj\QuickTimeEffectsLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEffects.Resources\no.lproj\QuickTimeEffectsLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEffects.Resources\nl.lproj\QuickTimeEffectsLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEffects.Resources\zh_CN.lproj\QuickTimeEffectsLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEffects.Resources\sv.lproj\QuickTimeEffectsLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEffects.Resources\zh_TW.lproj\QuickTimeEffectsLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEssentials.Resources\QuickTimeEssentials.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEssentials.Resources\da.lproj\QuickTimeEssentialsLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEssentials.Resources\en.lproj\QuickTimeEssentialsLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEssentials.Resources\de.lproj\QuickTimeEssentialsLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEssentials.Resources\es.lproj\QuickTimeEssentialsLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEssentials.Resources\fi.lproj\QuickTimeEssentialsLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEssentials.Resources\fr.lproj\QuickTimeEssentialsLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEssentials.Resources\ja.lproj\QuickTimeEssentialsLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEssentials.Resources\it.lproj\QuickTimeEssentialsLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEssentials.Resources\ko.lproj\QuickTimeEssentialsLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEssentials.Resources\no.lproj\QuickTimeEssentialsLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEssentials.Resources\nl.lproj\QuickTimeEssentialsLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEssentials.Resources\sv.lproj\QuickTimeEssentialsLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEssentials.Resources\zh_CN.lproj\QuickTimeEssentialsLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeEssentials.Resources\zh_TW.lproj\QuickTimeEssentialsLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeH264.Resources\QuickTimeH264.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeH264.Resources\da.lproj\QuickTimeH264Localized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeH264.Resources\de.lproj\QuickTimeH264Localized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeH264.Resources\en.lproj\QuickTimeH264Localized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeH264.Resources\es.lproj\QuickTimeH264Localized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeH264.Resources\fi.lproj\QuickTimeH264Localized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeH264.Resources\fr.lproj\QuickTimeH264Localized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeH264.Resources\it.lproj\QuickTimeH264Localized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeH264.Resources\ja.lproj\QuickTimeH264Localized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeH264.Resources\ko.lproj\QuickTimeH264Localized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeH264.Resources\nl.lproj\QuickTimeH264Localized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeH264.Resources\no.lproj\QuickTimeH264Localized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeH264.Resources\sv.lproj\QuickTimeH264Localized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeH264.Resources\zh_CN.lproj\QuickTimeH264Localized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeH264.Resources\zh_TW.lproj\QuickTimeH264Localized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeImage.Resources\QuickTimeImage.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeImage.Resources\da.lproj\QuickTimeImageLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeImage.Resources\de.lproj\QuickTimeImageLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeImage.Resources\en.lproj\QuickTimeImageLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeImage.Resources\es.lproj\QuickTimeImageLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeImage.Resources\fi.lproj\QuickTimeImageLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeImage.Resources\fr.lproj\QuickTimeImageLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeImage.Resources\it.lproj\QuickTimeImageLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeImage.Resources\ja.lproj\QuickTimeImageLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeImage.Resources\nl.lproj\QuickTimeImageLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeImage.Resources\ko.lproj\QuickTimeImageLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeImage.Resources\no.lproj\QuickTimeImageLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeImage.Resources\sv.lproj\QuickTimeImageLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeImage.Resources\zh_CN.lproj\QuickTimeImageLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeInternetExtras.Resources\QuickTimeInternetExtras.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeImage.Resources\zh_TW.lproj\QuickTimeImageLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeInternetExtras.Resources\da.lproj\QuickTimeInternetExtrasLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeInternetExtras.Resources\de.lproj\QuickTimeInternetExtrasLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeInternetExtras.Resources\es.lproj\QuickTimeInternetExtrasLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeInternetExtras.Resources\en.lproj\QuickTimeInternetExtrasLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeInternetExtras.Resources\fi.lproj\QuickTimeInternetExtrasLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeInternetExtras.Resources\fr.lproj\QuickTimeInternetExtrasLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeInternetExtras.Resources\it.lproj\QuickTimeInternetExtrasLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeInternetExtras.Resources\ja.lproj\QuickTimeInternetExtrasLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeInternetExtras.Resources\ko.lproj\QuickTimeInternetExtrasLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeInternetExtras.Resources\nl.lproj\QuickTimeInternetExtrasLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeInternetExtras.Resources\no.lproj\QuickTimeInternetExtrasLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeInternetExtras.Resources\sv.lproj\QuickTimeInternetExtrasLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeInternetExtras.Resources\zh_CN.lproj\QuickTimeInternetExtrasLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeInternetExtras.Resources\zh_TW.lproj\QuickTimeInternetExtrasLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG.Resources\QuickTimeMPEG.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG.Resources\de.lproj\QuickTimeMPEGLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG.Resources\da.lproj\QuickTimeMPEGLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG.Resources\en.lproj\QuickTimeMPEGLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG.Resources\es.lproj\QuickTimeMPEGLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG.Resources\fi.lproj\QuickTimeMPEGLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG.Resources\fr.lproj\QuickTimeMPEGLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG.Resources\it.lproj\QuickTimeMPEGLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG.Resources\ja.lproj\QuickTimeMPEGLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG.Resources\ko.lproj\QuickTimeMPEGLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG.Resources\nl.lproj\QuickTimeMPEGLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG.Resources\no.lproj\QuickTimeMPEGLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG.Resources\sv.lproj\QuickTimeMPEGLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG.Resources\zh_CN.lproj\QuickTimeMPEGLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG.Resources\zh_TW.lproj\QuickTimeMPEGLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4.Resources\QuickTimeMPEG4.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4.Resources\da.lproj\QuickTimeMPEG4Localized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4.Resources\de.lproj\QuickTimeMPEG4Localized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4.Resources\es.lproj\QuickTimeMPEG4Localized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4.Resources\en.lproj\QuickTimeMPEG4Localized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4.Resources\fr.lproj\QuickTimeMPEG4Localized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4.Resources\fi.lproj\QuickTimeMPEG4Localized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4.Resources\it.lproj\QuickTimeMPEG4Localized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4.Resources\ja.lproj\QuickTimeMPEG4Localized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4.Resources\ko.lproj\QuickTimeMPEG4Localized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4.Resources\nl.lproj\QuickTimeMPEG4Localized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4.Resources\no.lproj\QuickTimeMPEG4Localized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4.Resources\sv.lproj\QuickTimeMPEG4Localized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4.Resources\zh_CN.lproj\QuickTimeMPEG4Localized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4.Resources\zh_TW.lproj\QuickTimeMPEG4Localized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4Authoring.Resources\QuickTimeMPEG4Authoring.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4Authoring.Resources\da.lproj\QuickTimeMPEG4AuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4Authoring.Resources\de.lproj\QuickTimeMPEG4AuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4Authoring.Resources\en.lproj\QuickTimeMPEG4AuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4Authoring.Resources\es.lproj\QuickTimeMPEG4AuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4Authoring.Resources\fi.lproj\QuickTimeMPEG4AuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4Authoring.Resources\fr.lproj\QuickTimeMPEG4AuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4Authoring.Resources\ja.lproj\QuickTimeMPEG4AuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4Authoring.Resources\it.lproj\QuickTimeMPEG4AuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4Authoring.Resources\nl.lproj\QuickTimeMPEG4AuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4Authoring.Resources\ko.lproj\QuickTimeMPEG4AuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4Authoring.Resources\no.lproj\QuickTimeMPEG4AuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4Authoring.Resources\sv.lproj\QuickTimeMPEG4AuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4Authoring.Resources\zh_CN.lproj\QuickTimeMPEG4AuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMPEG4Authoring.Resources\zh_TW.lproj\QuickTimeMPEG4AuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMusic.Resources\QuickTimeMusic.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMusic.Resources\da.lproj\QuickTimeMusicLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMusic.Resources\de.lproj\QuickTimeMusicLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMusic.Resources\en.lproj\QuickTimeMusicLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMusic.Resources\es.lproj\QuickTimeMusicLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMusic.Resources\fi.lproj\QuickTimeMusicLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMusic.Resources\fr.lproj\QuickTimeMusicLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMusic.Resources\it.lproj\QuickTimeMusicLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMusic.Resources\ja.lproj\QuickTimeMusicLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMusic.Resources\ko.lproj\QuickTimeMusicLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMusic.Resources\no.lproj\QuickTimeMusicLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMusic.Resources\nl.lproj\QuickTimeMusicLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMusic.Resources\sv.lproj\QuickTimeMusicLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMusic.Resources\zh_CN.lproj\QuickTimeMusicLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeMusic.Resources\zh_TW.lproj\QuickTimeMusicLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeQD3D.Resources\QuickTimeQD3D.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeQD3D.Resources\de.lproj\QuickTimeQD3DLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeQD3D.Resources\da.lproj\QuickTimeQD3DLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeQD3D.Resources\en.lproj\QuickTimeQD3DLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeQD3D.Resources\es.lproj\QuickTimeQD3DLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeQD3D.Resources\fr.lproj\QuickTimeQD3DLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeQD3D.Resources\it.lproj\QuickTimeQD3DLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeQD3D.Resources\fi.lproj\QuickTimeQD3DLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeQD3D.Resources\ja.lproj\QuickTimeQD3DLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeQD3D.Resources\nl.lproj\QuickTimeQD3DLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeQD3D.Resources\ko.lproj\QuickTimeQD3DLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeQD3D.Resources\no.lproj\QuickTimeQD3DLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeQD3D.Resources\sv.lproj\QuickTimeQD3DLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeQD3D.Resources\zh_CN.lproj\QuickTimeQD3DLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeQD3D.Resources\zh_TW.lproj\QuickTimeQD3DLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreaming.Resources\QuickTimeStreaming.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreaming.Resources\de.lproj\QuickTimeStreamingLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreaming.Resources\da.lproj\QuickTimeStreamingLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreaming.Resources\en.lproj\QuickTimeStreamingLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreaming.Resources\es.lproj\QuickTimeStreamingLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreaming.Resources\fi.lproj\QuickTimeStreamingLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreaming.Resources\fr.lproj\QuickTimeStreamingLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreaming.Resources\it.lproj\QuickTimeStreamingLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreaming.Resources\ko.lproj\QuickTimeStreamingLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreaming.Resources\ja.lproj\QuickTimeStreamingLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreaming.Resources\no.lproj\QuickTimeStreamingLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreaming.Resources\nl.lproj\QuickTimeStreamingLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreaming.Resources\sv.lproj\QuickTimeStreamingLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreaming.Resources\zh_CN.lproj\QuickTimeStreamingLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreaming.Resources\zh_TW.lproj\QuickTimeStreamingLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingAuthoring.Resources\da.lproj\QuickTimeStreamingAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingAuthoring.Resources\de.lproj\QuickTimeStreamingAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingAuthoring.Resources\QuickTimeStreamingAuthoring.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingAuthoring.Resources\en.lproj\QuickTimeStreamingAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingAuthoring.Resources\es.lproj\QuickTimeStreamingAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingAuthoring.Resources\fi.lproj\QuickTimeStreamingAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingAuthoring.Resources\fr.lproj\QuickTimeStreamingAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingAuthoring.Resources\it.lproj\QuickTimeStreamingAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingAuthoring.Resources\ja.lproj\QuickTimeStreamingAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingAuthoring.Resources\nl.lproj\QuickTimeStreamingAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingAuthoring.Resources\ko.lproj\QuickTimeStreamingAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingAuthoring.Resources\no.lproj\QuickTimeStreamingAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingAuthoring.Resources\sv.lproj\QuickTimeStreamingAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingAuthoring.Resources\zh_CN.lproj\QuickTimeStreamingAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingAuthoring.Resources\zh_TW.lproj\QuickTimeStreamingAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingExtras.Resources\QuickTimeStreamingExtras.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingExtras.Resources\da.lproj\QuickTimeStreamingExtrasLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingExtras.Resources\de.lproj\QuickTimeStreamingExtrasLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingExtras.Resources\en.lproj\QuickTimeStreamingExtrasLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingExtras.Resources\es.lproj\QuickTimeStreamingExtrasLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingExtras.Resources\fi.lproj\QuickTimeStreamingExtrasLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingExtras.Resources\fr.lproj\QuickTimeStreamingExtrasLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingExtras.Resources\ja.lproj\QuickTimeStreamingExtrasLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingExtras.Resources\it.lproj\QuickTimeStreamingExtrasLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingExtras.Resources\ko.lproj\QuickTimeStreamingExtrasLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingExtras.Resources\nl.lproj\QuickTimeStreamingExtrasLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingExtras.Resources\no.lproj\QuickTimeStreamingExtrasLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingExtras.Resources\sv.lproj\QuickTimeStreamingExtrasLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingExtras.Resources\zh_CN.lproj\QuickTimeStreamingExtrasLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeStreamingExtras.Resources\zh_TW.lproj\QuickTimeStreamingExtrasLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVR.Resources\QuickTimeVR.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVR.Resources\da.lproj\QuickTimeVRLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVR.Resources\en.lproj\QuickTimeVRLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVR.Resources\de.lproj\QuickTimeVRLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVR.Resources\fi.lproj\QuickTimeVRLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVR.Resources\es.lproj\QuickTimeVRLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVR.Resources\fr.lproj\QuickTimeVRLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVR.Resources\it.lproj\QuickTimeVRLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVR.Resources\ja.lproj\QuickTimeVRLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVR.Resources\ko.lproj\QuickTimeVRLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVR.Resources\nl.lproj\QuickTimeVRLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVR.Resources\no.lproj\QuickTimeVRLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVR.Resources\sv.lproj\QuickTimeVRLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVR.Resources\zh_CN.lproj\QuickTimeVRLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVR.Resources\zh_TW.lproj\QuickTimeVRLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVRAuthoring.Resources\QuickTimeVRAuthoring.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVRAuthoring.Resources\da.lproj\QuickTimeVRAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVRAuthoring.Resources\en.lproj\QuickTimeVRAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVRAuthoring.Resources\de.lproj\QuickTimeVRAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVRAuthoring.Resources\fi.lproj\QuickTimeVRAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVRAuthoring.Resources\es.lproj\QuickTimeVRAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVRAuthoring.Resources\fr.lproj\QuickTimeVRAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVRAuthoring.Resources\it.lproj\QuickTimeVRAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVRAuthoring.Resources\ja.lproj\QuickTimeVRAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVRAuthoring.Resources\ko.lproj\QuickTimeVRAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVRAuthoring.Resources\nl.lproj\QuickTimeVRAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVRAuthoring.Resources\no.lproj\QuickTimeVRAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVRAuthoring.Resources\sv.lproj\QuickTimeVRAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVRAuthoring.Resources\zh_CN.lproj\QuickTimeVRAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeVRAuthoring.Resources\zh_TW.lproj\QuickTimeVRAuthoringLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeWebHelper.Resources\da.lproj\QuickTimeWebHelperLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeWebHelper.Resources\QuickTimeWebHelper.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeWebHelper.Resources\de.lproj\QuickTimeWebHelperLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeWebHelper.Resources\en.lproj\QuickTimeWebHelperLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeWebHelper.Resources\es.lproj\QuickTimeWebHelperLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeWebHelper.Resources\fi.lproj\QuickTimeWebHelperLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeWebHelper.Resources\fr.lproj\QuickTimeWebHelperLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeWebHelper.Resources\it.lproj\QuickTimeWebHelperLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeWebHelper.Resources\ja.lproj\QuickTimeWebHelperLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeWebHelper.Resources\ko.lproj\QuickTimeWebHelperLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeWebHelper.Resources\nl.lproj\QuickTimeWebHelperLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeWebHelper.Resources\no.lproj\QuickTimeWebHelperLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeWebHelper.Resources\sv.lproj\QuickTimeWebHelperLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeWebHelper.Resources\zh_CN.lproj\QuickTimeWebHelperLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\Program Files\quicktime\QTSystem\QuickTimeWebHelper.Resources\zh_TW.lproj\QuickTimeWebHelperLocalized.qtr 26.05.2009 01:09 Détectés: http://www.viruslist.com/fr/advisories/27620 C:\Program Files\real\realplayer\realplay.exe 26.05.2009 01:15 Détectés: http://www.viruslist.com/fr/advisories/33981 C:\Program Files\winamp\winamp.exe 26.05.2009 01:17 Détectés: Trojan.Win32.Inject.abbv C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\amd64si.sys.vir 26.05.2009 01:17 Non réparés: Trojan.Win32.Inject.abbv C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\amd64si.sys.vir Reporté 26.05.2009 01:17 Détectés: Trojan.Win32.Inject.aatv C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\port135sik.sys.vir 26.05.2009 01:17 Détectés: Trojan.Win32.Inject.aatv C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\nicsk32.sys.vir 26.05.2009 01:17 Non réparés: Trojan.Win32.Inject.aatv C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\port135sik.sys.vir Reporté 26.05.2009 01:17 Non réparés: Trojan.Win32.Inject.aatv C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\nicsk32.sys.vir Reporté 26.05.2009 01:20 Détectés: Trojan.Win32.Inject.abbv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP431\A0059826.sys 26.05.2009 01:20 Non réparés: Trojan.Win32.Inject.abbv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP431\A0059826.sys Reporté 26.05.2009 01:20 Détectés: Trojan.Win32.Inject.abbv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP433\A0060166.sys 26.05.2009 01:20 Non réparés: Trojan.Win32.Inject.abbv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP433\A0060166.sys Reporté 26.05.2009 01:20 Détectés: Trojan.Win32.Inject.abbv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436\A0060363.sys 26.05.2009 01:20 Non réparés: Trojan.Win32.Inject.abbv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436\A0060363.sys Reporté 26.05.2009 01:20 Détectés: Trojan.Win32.Inject.aatv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436\A0060432.sys 26.05.2009 01:20 Détectés: Trojan.Win32.Inject.abbv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436\A0060431.sys 26.05.2009 01:20 Non réparés: Trojan.Win32.Inject.aatv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436\A0060432.sys Reporté 26.05.2009 01:20 Non réparés: Trojan.Win32.Inject.abbv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436\A0060431.sys Reporté 26.05.2009 01:30 Détectés: http://www.viruslist.com/fr/advisories/26003 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe 26.05.2009 01:32 Détectés: http://www.viruslist.com/fr/advisories/26027 C:\WINDOWS\SoftwareDistribution\Download\44b6174a4a693136d02d4a7ecd7cbd54\flash.ocx 26.05.2009 01:33 Détectés: http://www.viruslist.com/fr/advisories/23655 C:\WINDOWS\SoftwareDistribution\Download\44b6174a4a693136d02d4a7ecd7cbd54\msxml6.dll 26.05.2009 01:34 Détectés: http://www.viruslist.com/fr/advisories/33632 C:\WINDOWS\system32\QuickTime.qts 26.05.2009 01:35 Détectés: http://www.viruslist.com/fr/advisories/34012 C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx 26.05.2009 01:35 Détectés: http://www.viruslist.com/fr/advisories/34012 C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll 26.05.2009 01:35 Détectés: http://www.viruslist.com/fr/advisories/23655 C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9818.0_x-ww_8ff50c5d\msxml4.dll 26.05.2009 01:35 Détectés: http://www.viruslist.com/fr/advisories/23655 C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9848.0_x-ww_1b897e9a\msxml4.dll 26.05.2009 01:36 Détectés: Trojan.Win32.Inject.abbv C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\amd64si.sys.vir 26.05.2009 01:36 Supprimés: Trojan.Win32.Inject.abbv C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\amd64si.sys.vir 26.05.2009 01:36 Détectés: Trojan.Win32.Inject.aatv C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\nicsk32.sys.vir 26.05.2009 01:36 Supprimés: Trojan.Win32.Inject.aatv C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\nicsk32.sys.vir 26.05.2009 01:36 Détectés: Trojan.Win32.Inject.aatv C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\port135sik.sys.vir 26.05.2009 01:36 Supprimés: Trojan.Win32.Inject.aatv C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\port135sik.sys.vir 26.05.2009 01:36 Détectés: Trojan.Win32.Inject.abbv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP431\A0059826.sys 26.05.2009 01:36 Supprimés: Trojan.Win32.Inject.abbv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP431\A0059826.sys 26.05.2009 01:36 Détectés: Trojan.Win32.Inject.abbv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP433\A0060166.sys 26.05.2009 01:36 Supprimés: Trojan.Win32.Inject.abbv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP433\A0060166.sys 26.05.2009 01:36 Détectés: Trojan.Win32.Inject.abbv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436\A0060363.sys 26.05.2009 01:36 Supprimés: Trojan.Win32.Inject.abbv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436\A0060363.sys 26.05.2009 01:36 Détectés: Trojan.Win32.Inject.abbv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436\A0060431.sys 26.05.2009 01:36 Supprimés: Trojan.Win32.Inject.abbv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436\A0060431.sys 26.05.2009 01:36 Détectés: Trojan.Win32.Inject.aatv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436\A0060432.sys 26.05.2009 01:36 Supprimés: Trojan.Win32.Inject.aatv C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP436\A0060432.sys 26.05.2009 01:36 Fin de la tâche A bientôt

Euh voilà... Je sais pas si tu as reçu mon MP...?

Non j'avais déjà activé l'affichage des dossiers et fichiers cachés... Si le fichier est bien c:\windows\system32\0EF28D81E9.sys alors il n'existe pas.

Bon alors je n'arrive pas à uploader le fichier .txt, après un certain temps de chargement le message "Le fichier choisi est invalide !" apparait. Et le fichier c:\windows\system32\0EF28D81E9.sys n'a pas l'air d'exister, donc pas d'analyse en ligne. J'espère que ce n'est pas trop grave...

Oups pardon, j'avais pas vu. Et bien je suis en train d'essayer de l'envoyer, mais ça n'a pas l'air de fonctionner. Le fichier fais quand même 2 Mo et ma connexion Internet n'est pas du tonnerre. Désolé... je m'archarne quand même!

C'est bon... tout s'est très bien déroulé, juste que le papier peint de mon bureau à changé, que 3-4 vieilles icônes du bureau sont ré-apparues et quelques icônes de la barre de défilement ont disparues... M'enfin rien de grave! Et hop voilà le rapport ComboFix: ComboFix 09-05-23.04 - Claudius 24.05.2009 21:22.1 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.33.1036.18.1022.496 [GMT 2:00] Lancé depuis: c:\documents and settings\Claudius\Bureau\Combo-Fix.exe . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\docume~1\Claudius\LOCALS~1\Temp\IadHide4.dll c:\documents and settings\Claudius\Claudius.exe c:\documents and settings\Claudius\Local Settings\Temp\IadHide4.dll c:\windows\system32\1041d.exe c:\windows\system32\digiwet.dll c:\windows\system32\drivers\amd64si.sys c:\windows\system32\drivers\nicsk32.sys c:\windows\system32\drivers\port135sik.sys . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_ACPI32 -------\Legacy_BITSANTIVIRSERVICE -------\Legacy_I386SI -------\Legacy_KSI32SK -------\Legacy_NETSIK -------\Legacy_NICSK32 -------\Legacy_PORT135SIK -------\Legacy_TDSSSERV -------\Legacy_WS2_32SIK -------\Service_BITSAntiVirService -------\Service_ksi32sk -------\Service_netsik -------\Service_nicsk32 -------\Service_port135sik ((((((((((((((((((((((((((((( Fichiers créés du 2009-04-24 au 2009-05-24 )))))))))))))))))))))))))))))))))))) . 2009-05-24 17:21 . 2009-05-24 17:22 -------- d-----w c:\program files\trend micro 2009-05-24 17:21 . 2009-05-24 17:22 -------- d-----w C:\rsit 2009-05-24 16:32 . 2009-05-24 16:32 96976 ----a-w c:\windows\system32\drivers\klin.dat 2009-05-24 16:32 . 2009-05-24 16:32 87855 ----a-w c:\windows\system32\drivers\klick.dat 2009-05-24 16:31 . 2009-05-24 19:25 32 --sha-w c:\windows\system32\drivers\fidbox2.dat 2009-05-24 16:31 . 2009-05-24 19:25 32 --sha-w c:\windows\system32\drivers\fidbox.dat 2009-05-24 16:31 . 2009-05-24 16:31 -------- d-----w c:\program files\Kaspersky Lab 2009-05-24 16:31 . 2009-05-24 16:31 -------- d-----w c:\documents and settings\All Users\Application Data\Kaspersky Lab 2009-05-24 16:08 . 2009-05-24 16:08 -------- d-----w c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files 2009-05-24 11:57 . 2009-05-24 11:57 32 --s-a-w c:\windows\system32\2552665137.dat 2009-05-19 19:01 . 2009-05-19 19:01 -------- d-----w c:\program files\freshney.org 2009-05-15 16:16 . 2009-05-15 16:16 -------- d-----w c:\documents and settings\Claudius\Application Data\QuosaDDM 2009-05-13 15:39 . 2009-05-14 23:08 -------- d-----w c:\documents and settings\All Users\Application Data\foldit 2009-05-13 15:39 . 2009-05-13 15:40 -------- d-----w c:\program files\foldit 2009-05-13 13:14 . 2009-05-13 13:14 62208 ----a-r c:\documents and settings\Claudius\Application Data\Microsoft\Installer\{ADF69C76-13FF-49F0-A078-922725A8B1B6}\NewShortcut1_4F03CF542AC143F6A860D7EE370CC008.exe 2009-05-13 13:14 . 2009-05-13 13:14 284646 ----a-r c:\documents and settings\Claudius\Application Data\Microsoft\Installer\{ADF69C76-13FF-49F0-A078-922725A8B1B6}\BOINCMGRLink1_2D0ABC88DA524BA695666CB679534EC7.exe 2009-05-13 13:14 . 2009-05-13 13:14 284646 ----a-r c:\documents and settings\Claudius\Application Data\Microsoft\Installer\{ADF69C76-13FF-49F0-A078-922725A8B1B6}\BOINCMGRLink_B65C4A4D2B2A46CCA2D918164C6297B8.exe 2009-05-13 13:14 . 2009-05-13 13:14 284646 ----a-r c:\documents and settings\Claudius\Application Data\Microsoft\Installer\{ADF69C76-13FF-49F0-A078-922725A8B1B6}\ARPPRODUCTICON.exe 2009-05-13 13:14 . 2009-05-24 19:27 -------- d-----w c:\program files\BOINC 2009-05-13 12:59 . 2009-05-13 12:59 -------- d-----w c:\documents and settings\Claudius\Application Data\SoftwareDownload 2009-05-13 12:59 . 2009-05-13 13:02 -------- d-----w c:\program files\Computer Screen Saver 2009-05-08 12:17 . 2009-05-08 12:17 -------- d-----w c:\program files\URUSoft 2009-05-07 12:21 . 2009-01-29 14:37 684032 ----a-w c:\documents and settings\Claudius\Application Data\Mozilla\Firefox\Profiles\bjx475cm.default\extensions\safeview@cdisys.com\platform\WINNT_x86-msvc\plugins\npSafeview3.dll 2009-04-27 19:46 . 2009-05-13 20:25 -------- d-----w c:\program files\Enlight . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2009-05-24 19:27 . 2007-01-09 09:25 -------- d-----w c:\documents and settings\Claudius\Application Data\OpenOffice.org2 2009-05-24 19:27 . 2006-12-22 03:55 -------- d---a-w c:\documents and settings\All Users\Application Data\TEMP 2009-05-24 19:25 . 2009-05-24 16:31 32 --sha-w c:\windows\system32\drivers\fidbox2.idx 2009-05-24 19:25 . 2009-05-24 16:31 32 --sha-w c:\windows\system32\drivers\fidbox.idx 2009-05-24 16:32 . 2009-01-18 14:36 -------- d-----w c:\program files\Mozilla Thunderbird 2009-05-24 16:27 . 2008-09-18 20:01 -------- d-----w c:\program files\Spybot - Search & Destroy 2009-05-24 16:25 . 2007-01-04 14:24 -------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2009-05-24 16:16 . 2006-12-22 03:52 -------- d-----w c:\program files\McAfee 2009-05-20 16:17 . 2008-09-19 17:07 -------- d-----w c:\documents and settings\Claudius\Application Data\BitTorrent 2009-05-13 20:30 . 2007-01-19 14:02 -------- d--h--w c:\program files\InstallShield Installation Information 2009-05-12 12:53 . 2008-10-14 09:30 -------- d-----w c:\documents and settings\Claudius\Application Data\Skype 2009-05-11 06:06 . 2008-10-21 21:18 -------- d-----w c:\documents and settings\Claudius\Application Data\skypePM 2009-04-30 09:50 . 2005-09-01 05:53 76340 ----a-w c:\windows\system32\perfc00C.dat 2009-04-30 09:50 . 2005-09-01 05:53 469952 ----a-w c:\windows\system32\perfh00C.dat 2009-04-23 12:06 . 2008-03-04 07:32 -------- d-----w c:\documents and settings\Claudius\Application Data\Creative 2009-04-08 14:47 . 2007-01-04 14:48 -------- d-----w c:\program files\eMule 2009-04-07 19:08 . 2009-04-07 19:08 -------- d-----w c:\program files\CamStudio 2009-04-07 13:17 . 2009-04-07 13:17 -------- d-----w c:\documents and settings\All Users\Application Data\Advanced Chemistry Development 2009-04-07 13:17 . 2009-04-07 13:15 -------- d-----w c:\documents and settings\Claudius\Application Data\Advanced Chemistry Development 2009-04-07 13:17 . 2009-04-07 13:16 -------- d-----w c:\program files\ACDFREE12 2009-04-07 12:02 . 2009-04-07 12:02 57344 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\Deployment\cache\6.0\50\5b902232-16a0a1a1-n\Decora-SSE.dll 2009-04-07 12:02 . 2009-04-07 12:02 24064 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\Deployment\cache\6.0\15\4e09eacf-385d4f97-n\Decora-D3D.dll 2009-04-07 12:02 . 2009-04-07 12:02 315392 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-2e4cf758-n\jogl.dll 2009-04-07 12:02 . 2009-04-07 12:02 20480 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-2e4cf758-n\jogl_awt.dll 2009-04-07 12:02 . 2009-04-07 12:02 114688 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-2e4cf758-n\jogl_cg.dll 2009-04-07 12:02 . 2009-04-07 12:02 20480 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\Deployment\cache\6.0\45\4f710eed-2e457e16-n\gluegen-rt.dll 2009-04-07 12:02 . 2009-04-07 12:02 499712 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\Deployment\cache\6.0\33\258cea61-7b7e30e2-n\msvcp71.dll 2009-04-07 12:02 . 2009-04-07 12:02 499712 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\Deployment\cache\6.0\33\258cea61-7b7e30e2-n\jmc.dll 2009-04-07 12:02 . 2009-04-07 12:02 348160 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\Deployment\cache\6.0\33\258cea61-7b7e30e2-n\msvcr71.dll 2009-04-07 12:01 . 2006-12-22 03:41 -------- d-----w c:\program files\Java 2009-04-07 12:00 . 2009-04-07 12:00 152576 ----a-w c:\documents and settings\Claudius\Application Data\Sun\Java\jre1.6.0_13\lzma.dll 2009-03-28 12:57 . 2009-03-28 12:57 -------- d-----w c:\program files\BoontyGames 2009-03-28 12:57 . 2009-03-28 12:57 -------- d-----w c:\program files\Boonty 2009-03-10 11:12 . 2009-03-10 11:12 2876719 ----a-w c:\documents and settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe 2009-03-09 03:19 . 2008-12-29 17:44 410984 ----a-w c:\windows\system32\deploytk.dll 2009-03-06 14:00 . 2005-09-01 05:53 286720 ----a-w c:\windows\system32\pdh.dll 2009-03-03 00:13 . 2005-09-01 05:53 826368 ----a-w c:\windows\system32\wininet.dll 2008-12-31 15:00 . 2007-01-04 15:44 168 --sh--r c:\windows\system32\0EF28D81E9.sys 2008-12-31 15:00 . 2007-01-04 15:44 5174 --sha-w c:\windows\system32\KGyGaAvL.sys . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-10 15360] "LDM"="c:\program files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe" [2007-01-22 20480] "VeohPlugin"="c:\program files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe" [2008-12-16 3528440] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-13 68856] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ehTray"="c:\windows\ehome\ehtray.exe" [2005-09-29 67584] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-06-16 7323648] "DLA"="c:\windows\System32\DLA\DLACTRLW.EXE" [2005-09-08 122940] "ISUSPM Startup"="c:\progra~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 221184] "ISUSScheduler"="c:\program files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2004-07-27 81920] "Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2006-12-22 169984] "Sony Ericsson PC Suite"="c:\program files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2005-10-26 159744] "LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2004-10-08 221184] "LogitechVideoRepair"="c:\program files\Logitech\Video\ISStart.exe" [2004-10-08 458752] "LogitechVideoTray"="c:\program files\Logitech\Video\LogiTray.exe" [2004-10-08 217088] "McAfeeUpdaterUI"="c:\program files\McAfee\Common Framework\UdaterUI.exe" [2006-12-19 136768] "AzAgent"="c:\program files\Companion Photo\AzAgent.exe" [2006-03-16 733184] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2007-01-19 155648] "SigmatelSysTrayApp"="stsystra.exe" - c:\windows\stsystra.exe [2006-08-15 282624] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-10 15360] c:\documents and settings\Claudius\Menu D‚marrer\Programmes\D‚marrage\ BOINC Manager.lnk - c:\program files\BOINC\boincmgr.exe [2008-3-4 4150016] OpenOffice.org 2.1.lnk - c:\program files\OpenOffice.org 2.1\program\quickstart.exe [2006-11-27 393216] c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ Dell Network Assistant.lnk - c:\windows\Installer\{0240BDFB-2995-4A3F-8C96-18D41282B716}\Icon0240BDFB3.exe [2006-12-22 7168] hp psc 1000 series.lnk - c:\program files\HP\Digital Imaging\bin\hpohmr08.exe [2003-4-6 147456] hpoddt01.exe.lnk - c:\program files\HP\Digital Imaging\bin\hpotdd01.exe [2003-4-6 28672] Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe [2007-1-22 450560] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "MsnMsgr"="c:\program files\MSN Messenger\MsnMsgr.Exe" /background "EA Core"=c:\program files\Electronic Arts\EADM\Core.exe -silent "CTSyncU.exe"="c:\program files\Creative\Sync Manager Unicode\CTSyncU.exe" "WhenUSave"="c:\program files\Save\Save.exe" "swg"=c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe "LogitechSoftwareUpdate"="c:\program files\Logitech\Video\ManifestEngine.exe" boot [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe" "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" "Corel Photo Downloader"=c:\program files\Corel\Corel Snapfire Plus\Corel Photo Downloader.exe "DMXLauncher"=c:\program files\Dell\Media Experience\DMXLauncher.exe "HP Component Manager"="c:\program files\HP\hpcoretech\hpcmpmgr.exe" "QuickTime Task"="c:\program files\QuickTime\qttask.exe" -atboottime [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusDisableNotify"=dword:00000001 "UpdatesDisableNotify"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\eMule\\emule.exe"= "c:\\Program Files\\Messenger\\msmsgs.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\backWeb-8876480.exe"= "c:\\Program Files\\Cossacks - Back To War\\DMCR.EXE"= "c:\\WINDOWS\\system32\\dplaysvr.exe"= "c:\\Program Files\\Activision\\Call To Power 2\\ctp2_program\\ctp\\ctp2.exe"= "c:\\Program Files\\BitTorrent\\bittorrent.exe"= "c:\\Program Files\\McAfee\\Common Framework\\FrameworkService.exe"= "c:\\Program Files\\Electronic Arts\\EADM\\Core.exe"= "c:\\Program Files\\Black Isle\\Baldur's Gate\\BGMain.exe"= "c:\\Program Files\\Black Isle\\Baldur's Gate\\BGMain2.exe"= "c:\\Program Files\\Black Isle\\BGII - SoA\\BGMain.exe"= "c:\\Program Files\\Veoh Networks\\VeohWebPlayer\\veohwebplayer.exe"= "c:\\Program Files\\Winamp Remote\\bin\\Orb.exe"= "c:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"= "c:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"= "c:\\Program Files\\Dell Network Assistant\\ezi_hnm2.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= "c:\\WINDOWS\\ehome\\ehtray.exe"= "c:\\WINDOWS\\stsystra.exe"= "c:\\WINDOWS\\system32\\DLA\\DLACTRLW.EXE"= "c:\\Documents and Settings\\All Users\\Application Data\\Kaspersky Lab Setup Files\\Kaspersky Internet Security 2009\\french\\setup.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "10421:UDP"= 10421:UDP:SingleClick Discovery Protocol "10426:UDP"= 10426:UDP:SingleClick ICC R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [29.01.2008 17:29 32784] R3 KLFLTDEV;Kaspersky Lab KLFltDev;c:\windows\system32\drivers\klfltdev.sys [13.03.2008 18:02 26640] R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [30.04.2008 17:06 24592] S2 amd64si;amd64si;\??\c:\windows\system32\drivers\amd64si.sys --> c:\windows\system32\drivers\amd64si.sys [?] S3 k510bus;Sony Ericsson K510 Driver driver (WDM);c:\windows\system32\drivers\k510bus.sys [19.01.2007 15:36 58288] S3 k510mdfl;Sony Ericsson K510 USB WMC Modem Filter;c:\windows\system32\drivers\k510mdfl.sys [19.01.2007 15:36 8336] S3 k510mdm;Sony Ericsson K510 USB WMC Modem Driver;c:\windows\system32\drivers\k510mdm.sys [19.01.2007 15:36 94064] S3 k510mgmt;Sony Ericsson K510 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\k510mgmt.sys [19.01.2007 15:36 85408] S3 k510obex;Sony Ericsson K510 USB WMC OBEX Interface;c:\windows\system32\drivers\k510obex.sys [19.01.2007 15:36 83344] --- Autres Services/Pilotes en mémoire --- *NewlyCreated* - AVP *NewlyCreated* - KL1 *NewlyCreated* - KLBG . Contenu du dossier 'Tâches planifiées' 2009-04-26 c:\windows\Tasks\FRU Task 2003-04-06 08:52ewlett-Packard2003-04-06 08:52p psc 1200 series5E771253C1676EBED677BF361FDFC537825E15B8233010071.job - c:\program files\HP\Digital Imaging\Bin\hpqfrucl.exe [2003-04-05 23:52] 2009-05-24 c:\windows\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job - c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 10:20] . - - - - ORPHELINS SUPPRIMES - - - - HKCU-Run-BitTorrent DNA - c:\program files\DNA\btdna.exe HKCU-Run-Claudius - c:\documents and settings\Claudius\Claudius.exe SafeBoot-procexp90.Sys . ------- Examen supplémentaire ------- . uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 uInternet Connection Wizard,ShellNext = iexplore uInternet Settings,ProxyOverride = localhost uSearchURL,(Default) = hxxp://g.fr.msn.ch/0SEFRCH/SAOS01?FORM=TOOLBR IE: &Windows Live Search - c:\program files\Windows Live Toolbar\msntb.dll/search.htm IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 IE: Ouvrir dans un nouvel onglet d'arrière-plan - c:\program files\Windows Live Toolbar\Components\fr-ch\msntabres.dll.mui/229?516062d33775479e8188a869eb7a836f IE: Ouvrir dans un nouvel onglet de premier plan - c:\program files\Windows Live Toolbar\Components\fr-ch\msntabres.dll.mui/230?516062d33775479e8188a869eb7a836f Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\program files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} - hxxp://activex.camfrogweb.com/advanced/2.0.2.3/cfweb_activex.camfrogweb.com-advanced-2.0.2.3_instmodule.exe DPF: {3743E8B0-BE34-4652-9F11-7C4EB22F39B9} - hxxp://online6.edqm.eu.ezproxy.ulb.ac.be/ep604/NetisUtils/install/safeview.cab FF - ProfilePath - c:\documents and settings\Claudius\Application Data\Mozilla\Firefox\Profiles\bjx475cm.default\ FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q= FF - component: c:\documents and settings\Claudius\Application Data\Mozilla\Firefox\Profiles\bjx475cm.default\extensions\piclens@cooliris.com\components\coolirisstub.dll FF - component: c:\program files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll FF - plugin: c:\documents and settings\Claudius\Application Data\Mozilla\Firefox\Profiles\bjx475cm.default\extensions\safeview@cdisys.com\platform\WINNT_x86-msvc\plugins\npSafeview3.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npbittorrent.dll FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\NPVeohTVPlugin.dll FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\npWebPlayerVideoPluginATL.dll ---- PARAMETRES FIREFOX ---- FF - user.js: dom.disable_open_during_load - false // Popupblocker control handled by McAfee Privacy Service FF - user.js: general.useragent.extra.zencast - Creative ZENcast v2.00.08. ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-05-24 21:27 Windows 5.1.2600 Service Pack 2 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . --------------------- CLES DE REGISTRE BLOQUEES --------------------- [HKEY_USERS\S-1-5-21-1363129366-1328066173-2993044551-1005\Software\SecuROM\License information*] "datasecu"=hex:09,bb,71,1d,7d,d1,13,5d,a0,f2,4a,78,0b,08,97,21,8d,66,1e,1a,64, 0f,66,aa,fa,72,87,35,ba,4a,d7,aa,3b,44,41,1d,1c,5f,32,3c,ea,b7,5b,44,fe,d7,\ "rkeysecu"=hex:3e,80,9e,c4,40,b4,90,83,87,8e,33,49,64,ac,f8,d9 [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•9~*] "C040110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL" . ------------------------ Autres processus actifs ------------------------ . c:\program files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe c:\windows\system32\CTSVCCDA.EXE c:\windows\ehome\ehrecvr.exe c:\windows\ehome\ehSched.exe c:\program files\Dell Network Assistant\hnm_svc.exe c:\program files\Java\jre6\bin\jqs.exe c:\program files\McAfee\Common Framework\FrameworkService.exe c:\windows\system32\nvsvc32.exe c:\windows\system32\wdfmgr.exe c:\program files\McAfee\Common Framework\naPrdMgr.exe c:\program files\Fichiers communs\Teleca Shared\CapabilityManager.exe c:\program files\Google\Google Desktop Search\GoogleDesktopIndex.exe c:\program files\McAfee\Common Framework\Mctray.exe c:\program files\Google\Google Desktop Search\GoogleDesktopDisplay.exe c:\program files\Logitech\Video\FxSvr2.exe c:\windows\ehome\mcrdsvc.exe c:\program files\Dell Network Assistant\ezi_hnm2.exe c:\program files\HP\Digital Imaging\bin\hpoevm08.exe c:\program files\Fichiers communs\Teleca Shared\Generic.exe c:\program files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe c:\program files\OpenOffice.org 2.1\program\soffice.exe c:\program files\BOINC\boinc.exe c:\program files\OpenOffice.org 2.1\program\soffice.bin c:\windows\system32\dllhost.exe c:\program files\HP\Digital Imaging\bin\hposts08.exe c:\windows\system32\wbem\wmiapsrv.exe c:\windows\ehome\ehmsas.exe c:\windows\system32\wscntfy.exe . ************************************************************************** . Heure de fin: 2009-05-24 21:33 - La machine a redémarré ComboFix-quarantined-files.txt 2009-05-24 19:33 Avant-CF: 102'718'337'024 octets libres Après-CF: 102'865'281'024 octets libres WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Windows XP Media Center Edition" /noexecute=optin /fastdetect 297 --- E O F --- 2009-05-15 01:02

Voilà! L'outil à généré son rapport .txt, le fichier SUSPECT.zip a été crée, mais je n'arrive pas à l'envoyer, il est probablement trop volumineux (17.2 Mo) comme tu le disais. Et sinon rien d'autre... Merci encore!

Bonjour Gof, Merci pour ta réponse très rapide! Donc voilà le rapport de Malwarebytes' Anti-Malware: Malwarebytes' Anti-Malware 1.34 Version de la base de données: 1831 Windows 5.1.2600 Service Pack 2 24.05.2009 17:09:34 mbam-log-2009-05-24 (17-09-34).txt Type de recherche: Examen complet (C:\|) Eléments examinés: 228473 Temps écoulé: 1 hour(s), 19 minute(s), 19 second(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 54 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 1 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\ws2_32sik (Trojan.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\ws2_32sik (Trojan.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ws2_32sik (Trojan.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCONSOL.EXE (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVP32.EXE (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KAV32.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KAVPFW.EXE (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Navapsvc.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Navapw32.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\NAVNT.EXE (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\navw32.EXE (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\NAVWNT.EXE (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SCAN32.EXE (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ZONEALARM.EXE (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\filemon.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\outpost.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regmon.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapro.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\autoruns.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgrssvc.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AvMonitor.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\CCenter.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\HijackThis.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KASMain.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KASTask.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KAVDX.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KAVStart.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KPFW32.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KPFW32X.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nod32krn.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KAVPF.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\OllyDBG.EXE (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\procexp.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regtool.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\niu.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\A2SERVICE.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVGNT.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVGUARD.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVSCAN.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bdagent.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\CASECURITYCENTER.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\EKRN.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FAMEH32.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FPAVSERVER.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FPWIN.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FSAV32.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FSGK32ST.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FSMA32.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vsserv.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\drwadins.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\drwebupw.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GFRing3.exe (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\acpi32 (Rootkit.Spamtool) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\i386si (Rootkit.Spamtool) -> Quarantined and deleted successfully. Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): C:\WINDOWS\system32\drivers\ws2_32sik.sys (Trojan.Agent) -> Quarantined and deleted successfully. Voilà le rapport log.txt: Logfile of random's system information tool 1.06 (written by random/random) Run by Claudius at 2009-05-24 19:21:56 Microsoft Windows XP Professionnel Service Pack 2 System drive C: has 98 GB (42%) free of 234 GB Total RAM: 1022 MB (28% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:22, on 24.05.2009 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16827) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\ehome\ehtray.exe C:\WINDOWS\stsystra.exe C:\WINDOWS\System32\DLA\DLACTRLW.EXE C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe C:\WINDOWS\system32\LVCOMSX.EXE C:\Program Files\Logitech\Video\LogiTray.exe C:\Program Files\McAfee\Common Framework\UdaterUI.exe C:\Program Files\Companion Photo\AzAgent.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\McAfee\Common Framework\McTray.exe C:\Program Files\Fichiers communs\Teleca Shared\CapabilityManager.exe C:\Program Files\Logitech\Video\FxSvr2.exe C:\Program Files\Dell Network Assistant\ezi_hnm2.exe C:\Program Files\HP\Digital Imaging\bin\hpohmr08.exe C:\Program Files\HP\Digital Imaging\bin\hpotdd01.exe C:\Program Files\BOINC\boincmgr.exe C:\Program Files\OpenOffice.org 2.1\program\soffice.exe C:\Program Files\OpenOffice.org 2.1\program\soffice.BIN C:\Program Files\HP\Digital Imaging\bin\hpoevm08.exe C:\Program Files\BOINC\boinc.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\cisvc.exe C:\WINDOWS\system32\CTsvcCDA.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\Dell Network Assistant\hnm_svc.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\McAfee\Common Framework\FrameworkService.exe C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\Documents and Settings\Claudius\Claudius.exe C:\WINDOWS\system32\dllhost.exe C:\Program Files\HP\Digital Imaging\Bin\hpoSTS08.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\WINDOWS\eHome\ehmsas.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe C:\WINDOWS\system32\cidaemon.exe C:\Program Files\Windows Media Player\wmplayer.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\Documents and Settings\Claudius\Bureau\RSIT.exe C:\Program Files\trend micro\Claudius.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.ch/ig/dell?hl=fr&client=dell-row&channel=ch&ibd=0061222 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.ch/ig/dell?hl=fr&client=dell-row&channel=ch&ibd=0061222 R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.fr.msn.ch/0SEFRCH/SAOS01?FORM=TOOLBR R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL O2 - BHO: (no name) - {8B93A89B-7332-4B4B-830C-72EB6323D0DB} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file) O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [sigmatelSysTrayApp] stsystra.exe O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\McAfee\Common Framework\UdaterUI.exe" /StartedFromRunKey O4 - HKLM\..\Run: [AzAgent] "C:\Program Files\Companion Photo\AzAgent.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe O4 - HKCU\..\Run: [bitTorrent DNA] "C:\Program Files\DNA\btdna.exe" O4 - HKCU\..\Run: [VeohPlugin] "C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe" O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [Claudius] C:\Documents and Settings\Claudius\Claudius.exe /i O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: BOINC Manager.lnk = C:\Program Files\BOINC\boincmgr.exe O4 - Startup: OpenOffice.org 2.1.lnk = C:\Program Files\OpenOffice.org 2.1\program\quickstart.exe O4 - Global Startup: Dell Network Assistant.lnk = ? O4 - Global Startup: hp psc 1000 series.lnk = ? O4 - Global Startup: hpoddt01.exe.lnk = ? O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-ch\msntabres.dll.mui/229?516062d33775479e8188a869eb7a836f O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-ch\msntabres.dll.mui/230?516062d33775479e8188a869eb7a836f O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} (CamfrogWEB Advanced Unicode Control) - http://activex.camfrogweb.com/advanced/2.0..._instmodule.exe O16 - DPF: {3743E8B0-BE34-4652-9F11-7C4EB22F39B9} (HtmlCtl2 Class) - http://online6.edqm.eu.ezproxy.ulb.ac.be/e...ll/safeview.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe O23 - Service: Service de transfert intelligent en arrière-plan BITSAntiVirService (BITSAntiVirService) - Unknown owner - C:\WINDOWS\system32\1041d.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Advanced Networking Service (hnmsvc) - SingleClick Systems - C:\Program Files\Dell Network Assistant\hnm_svc.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: McAfee Framework Service (McAfeeFramework) - McAfee, Inc. - C:\Program Files\McAfee\Common Framework\FrameworkService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe -- End of file - 12413 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp psc 1200 series#1233010071.job C:\WINDOWS\tasks\Spybot - Search & Destroy - Scheduled Task.job C:\WINDOWS\tasks\Vérifier les mises à jour de Windows Live Toolbar.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}] Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}] IEVkbdBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll [2008-11-11 62728] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5CA3D70E-1895-11CF-8E15-001234567890}] DriveLetterAccess - C:\WINDOWS\System32\DLA\DLASHX_W.DLL [2005-09-08 110652] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8B93A89B-7332-4B4B-830C-72EB6323D0DB}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-05-07 259696] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}] Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll [2009-04-17 668656] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}] Windows Live Toolbar Helper - C:\Program Files\Windows Live Toolbar\msntb.dll [2007-10-19 546320] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}] Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll [2009-05-07 470512] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CA6319C0-31B7-401E-A518-A07C3DB8F777}] CBrowserHelperObject Object - C:\Program Files\BAE\BAE.dll [2006-11-17 98304] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {0BF43445-2F28-4351-9252-17FE6E806AA0} {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - Windows Live Toolbar - C:\Program Files\Windows Live Toolbar\msntb.dll [2007-10-19 546320] {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - Veoh Web Player Video Finder - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll [2008-12-16 429816] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-05-07 259696] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "ehTray"=C:\WINDOWS\ehome\ehtray.exe [2005-09-29 67584] "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2006-06-16 7323648] "SigmatelSysTrayApp"=C:\WINDOWS\stsystra.exe [2006-08-15 282624] "DLA"=C:\WINDOWS\System32\DLA\DLACTRLW.EXE [2005-09-08 122940] "ISUSPM Startup"=C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2004-07-27 221184] "ISUSScheduler"=C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe [2004-07-27 81920] "Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2006-12-22 169984] "Sony Ericsson PC Suite"=C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe [2005-10-26 159744] "LVCOMSX"=C:\WINDOWS\system32\LVCOMSX.EXE [2004-10-08 221184] "LogitechVideoRepair"=C:\Program Files\Logitech\Video\ISStart.exe [2004-10-08 458752] "LogitechVideoTray"=C:\Program Files\Logitech\Video\LogiTray.exe [2004-10-08 217088] "McAfeeUpdaterUI"=C:\Program Files\McAfee\Common Framework\UdaterUI.exe [2006-12-19 136768] "AzAgent"=C:\Program Files\Companion Photo\AzAgent.exe [2006-03-16 733184] "QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2007-01-19 155648] "AVP"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe [2008-11-11 206088] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-10 15360] "LDM"=C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe [2007-01-22 20480] "BitTorrent DNA"=C:\Program Files\DNA\btdna.exe [] "VeohPlugin"=C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe [2008-12-16 3528440] "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-06-13 68856] "Claudius"=C:\Documents and Settings\Claudius\Claudius.exe [2009-05-24 20758] C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage Dell Network Assistant.lnk - C:\WINDOWS\Installer\{0240BDFB-2995-4A3F-8C96-18D41282B716}\Icon0240BDFB3.exe hp psc 1000 series.lnk - C:\Program Files\HP\Digital Imaging\bin\hpohmr08.exe hpoddt01.exe.lnk - C:\Program Files\HP\Digital Imaging\bin\hpotdd01.exe Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe C:\Documents and Settings\Claudius\Menu Démarrer\Programmes\Démarrage BOINC Manager.lnk - C:\Program Files\BOINC\boincmgr.exe OpenOffice.org 2.1.lnk - C:\Program Files\OpenOffice.org 2.1\program\quickstart.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLS"="C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon] C:\WINDOWS\system32\klogon.dll [2008-11-11 218376] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, digiwet.dll [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles "InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 "NoDrives"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "HonorAutoRunSetting"= [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule" "C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe:*:Enabled:Logitech Desktop Messenger" "C:\Program Files\Cossacks - Back To War\DMCR.EXE"="C:\Program Files\Cossacks - Back To War\DMCR.EXE:*:Enabled:dmcr" "C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper" "C:\Program Files\Activision\Call To Power 2\ctp2_program\ctp\ctp2.exe"="C:\Program Files\Activision\Call To Power 2\ctp2_program\ctp\ctp2.exe:*:Enabled:Call to Power 2" "C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:Enabled:DNA" "C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent" "C:\Program Files\McAfee\Common Framework\FrameworkService.exe"="C:\Program Files\McAfee\Common Framework\FrameworkService.exe:*:Enabled:McAfee Framework Service" "C:\Program Files\Electronic Arts\EADM\Core.exe"="C:\Program Files\Electronic Arts\EADM\Core.exe:*:Disabled:EA Download Manager" "C:\Program Files\Black Isle\Baldur's Gate\BGMain.exe"="C:\Program Files\Black Isle\Baldur's Gate\BGMain.exe:*:Disabled:Baldur's Gate, the Game" "C:\Program Files\Black Isle\Baldur's Gate\BGMain2.exe"="C:\Program Files\Black Isle\Baldur's Gate\BGMain2.exe:*:Enabled:Tales of the Sword Coast" "C:\Program Files\Black Isle\BGII - SoA\BGMain.exe"="C:\Program Files\Black Isle\BGII - SoA\BGMain.exe:*:Disabled:Baldur's Gate II - Shadows of Amn - Throne of Bhaal" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)" "C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe"="C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe:*:Enabled:Veoh Web Player " "C:\Program Files\Winamp Remote\bin\Orb.exe"="C:\Program Files\Winamp Remote\bin\Orb.exe:*:Enabled:Orb" "C:\Program Files\Winamp Remote\bin\OrbTray.exe"="C:\Program Files\Winamp Remote\bin\OrbTray.exe:*:Enabled:OrbTray" "C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe"="C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:*:Enabled:Orb Stream Client" "C:\Program Files\Dell Network Assistant\ezi_hnm2.exe"="C:\Program Files\Dell Network Assistant\ezi_hnm2.exe:*:Enabled:Dell Network Assistant" "C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype" "C:\WINDOWS\ehome\ehtray.exe"="C:\WINDOWS\ehome\ehtray.exe:*:Enabled:ENABLE" "C:\WINDOWS\stsystra.exe"="C:\WINDOWS\stsystra.exe:*:Enabled:ENABLE" "C:\WINDOWS\system32\DLA\DLACTRLW.EXE"="C:\WINDOWS\system32\DLA\DLACTRLW.EXE:*:Enabled:ENABLE" "C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Internet Security 2009\french\setup.exe"="C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Internet Security 2009\french\setup.exe:*:Enabled:Programme d'installation de Kaspersky Internet Security 2009" "C:\WINDOWS\system32\userinit.exe"="C:\WINDOWS\system32\userinit.exe:*:Enabled:ENABLE" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1df9e70e-5965-11dd-8dbf-00188b7e327e}] shell\AutoRun\command - 2.cmd shell\explore\command - 2.cmd shell\open\command - 2.cmd [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2adeb43d-bf6e-11db-8ca5-00188b7e327e}] shell\AutoRun\command - 2.cmd shell\explore\command - 2.cmd shell\open\command - 2.cmd [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{58c33ca8-a713-11db-8c95-00188b7e327e}] shell\AutoRun\command - 2.cmd shell\explore\command - 2.cmd shell\open\command - 2.cmd ======List of files/folders created in the last 1 months====== 2009-12-11 15:58:09 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$ 2009-05-24 19:21:58 ----D---- C:\Program Files\trend micro 2009-05-24 19:21:56 ----D---- C:\rsit 2009-05-24 18:31:10 ----D---- C:\Program Files\Kaspersky Lab 2009-05-24 18:31:10 ----D---- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab 2009-05-24 18:31:00 ----D---- C:\WINDOWS\LastGood 2009-05-24 18:08:40 ----D---- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files 2009-05-24 13:56:30 ----RSH---- C:\WINDOWS\system32\1041d.exe 2009-05-24 13:55:56 ----A---- C:\WINDOWS\system32\digiwet.dll 2009-05-19 21:01:16 ----D---- C:\Program Files\freshney.org 2009-05-15 18:16:03 ----D---- C:\Documents and Settings\Claudius\Application Data\QuosaDDM 2009-05-13 17:39:32 ----D---- C:\Program Files\foldit 2009-05-13 17:39:32 ----D---- C:\Documents and Settings\All Users\Application Data\foldit 2009-05-13 15:14:26 ----D---- C:\Program Files\BOINC 2009-05-13 14:59:29 ----D---- C:\Documents and Settings\Claudius\Application Data\SoftwareDownload 2009-05-13 14:59:28 ----D---- C:\Program Files\Computer Screen Saver 2009-05-08 14:17:40 ----D---- C:\Program Files\URUSoft 2009-04-27 21:46:43 ----D---- C:\Program Files\Enlight ======List of files/folders modified in the last 1 months====== 2009-05-24 19:22:03 ----D---- C:\WINDOWS\Prefetch 2009-05-24 19:21:58 ----RD---- C:\Program Files 2009-05-24 18:33:19 ----D---- C:\Program Files\Mozilla Firefox 2009-05-24 18:32:27 ----SHD---- C:\WINDOWS\Installer 2009-05-24 18:32:27 ----D---- C:\Program Files\Mozilla Thunderbird 2009-05-24 18:32:17 ----D---- C:\WINDOWS\system32\drivers 2009-05-24 18:31:55 ----HD---- C:\WINDOWS\inf 2009-05-24 18:31:41 ----D---- C:\WINDOWS\system32 2009-05-24 18:31:26 ----D---- C:\WINDOWS\Temp 2009-05-24 18:31:00 ----D---- C:\WINDOWS 2009-05-24 18:30:57 ----D---- C:\WINDOWS\system32\CatRoot2 2009-05-24 18:28:24 ----D---- C:\WINDOWS\Registration 2009-05-24 18:27:56 ----D---- C:\Documents and Settings\Claudius\Application Data\OpenOffice.org2 2009-05-24 18:27:56 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP 2009-05-24 18:27:44 ----D---- C:\Program Files\Spybot - Search & Destroy 2009-05-24 18:26:47 ----A---- C:\WINDOWS\SchedLgU.Txt 2009-05-24 18:25:49 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2009-05-24 18:16:02 ----D---- C:\Program Files\McAfee 2009-05-24 17:30:31 ----A---- C:\WINDOWS\ntbtlog.txt 2009-05-20 18:17:16 ----D---- C:\Documents and Settings\Claudius\Application Data\BitTorrent 2009-05-13 22:30:48 ----HD---- C:\Program Files\InstallShield Installation Information 2009-05-13 15:13:06 ----D---- C:\WINDOWS\Downloaded Installations 2009-05-12 14:53:10 ----D---- C:\Documents and Settings\Claudius\Application Data\Skype 2009-05-11 08:06:48 ----D---- C:\Documents and Settings\Claudius\Application Data\skypePM 2009-05-09 15:56:51 ----A---- C:\WINDOWS\win.ini 2009-05-09 14:24:22 ----A---- C:\WINDOWS\ISISAIM.INI 2009-05-07 13:29:40 ----SD---- C:\WINDOWS\Downloaded Program Files 2009-05-07 09:16:29 ----A---- C:\WINDOWS\system32\MRT.exe 2009-04-30 11:50:08 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2009-04-26 23:49:21 ----SD---- C:\WINDOWS\Tasks ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 AFS2K;AFS2k; C:\WINDOWS\system32\drivers\AFS2K.sys [2009-01-27 82380] R1 AmdK8;Pilote de processeur AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-06-19 43520] R1 DLACDBHM;DLACDBHM; C:\WINDOWS\System32\Drivers\DLACDBHM.SYS [2005-08-25 5628] R1 DLARTL_N;DLARTL_N; C:\WINDOWS\System32\Drivers\DLARTL_N.SYS [2005-08-25 22684] R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-04 14848] R1 KLIF;Kaspersky Lab Driver; C:\WINDOWS\system32\DRIVERS\klif.sys [2009-05-24 227344] R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-03-09 77184] R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2008-08-03 271360] R2 DLABOIOM;DLABOIOM; C:\WINDOWS\System32\DLA\DLABOIOM.SYS [2005-09-08 25628] R2 DLADResN;DLADResN; C:\WINDOWS\System32\DLA\DLADResN.SYS [2005-09-08 2496] R2 DLAIFS_M;DLAIFS_M; C:\WINDOWS\System32\DLA\DLAIFS_M.SYS [2005-09-08 86524] R2 DLAOPIOM;DLAOPIOM; C:\WINDOWS\System32\DLA\DLAOPIOM.SYS [2005-09-08 14684] R2 DLAPoolM;DLAPoolM; C:\WINDOWS\System32\DLA\DLAPoolM.SYS [2005-09-08 6364] R2 DLAUDF_M;DLAUDF_M; C:\WINDOWS\System32\DLA\DLAUDF_M.SYS [2005-09-08 87036] R2 DLAUDFAM;DLAUDFAM; C:\WINDOWS\System32\DLA\DLAUDFAM.SYS [2005-09-08 94332] R2 DRVNDDM;DRVNDDM; C:\WINDOWS\System32\Drivers\DRVNDDM.SYS [2005-08-12 40544] R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2008-08-03 18048] R2 Packet;Auto Internet Protocol; C:\WINDOWS\system32\DRIVERS\packet.sys [2006-12-18 12672] R3 bcm4sbxp;Broadcom 440x 10/100 Integrated Controller XP Driver; C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys [2006-08-14 44544] R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2004-08-12 137728] R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-18 9600] R3 klim5;Kaspersky Anti-Virus NDIS Filter; C:\WINDOWS\system32\DRIVERS\klim5.sys [2008-04-30 24592] R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288] R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2006-06-16 3581888] R3 STHDA;SigmaTel High Definition Audio CODEC; C:\WINDOWS\system32\drivers\sthda.sys [2006-08-15 1171464] R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2005-10-26 27264] R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-10 57600] R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2004-08-04 17024] S1 mferkdk;VSCore mferkdk; \??\C:\Program Files\McAfee\VirusScan Enterprise\mferkdk.sys [] S2 amd64si;amd64si; \??\C:\WINDOWS\system32\drivers\amd64si.sys [] S2 ksi32sk;ksi32sk; \??\C:\WINDOWS\system32\drivers\ksi32sk.sys [] S2 netsik;netsik; \??\C:\WINDOWS\system32\drivers\netsik.sys [] S2 nicsk32;nicsk32; \??\C:\WINDOWS\system32\drivers\nicsk32.sys [] S2 port135sik;port135sik; \??\C:\WINDOWS\system32\drivers\port135sik.sys [] S3 CamDrL;Logitech QuickCam Pro 3000(CamDrl); C:\WINDOWS\system32\DRIVERS\Camdrl.sys [2004-10-08 326656] S3 catchme;catchme; \??\C:\DOCUME~1\Claudius\LOCALS~1\Temp\catchme.sys [] S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-04 17024] S3 DSproct;DSproct; \??\C:\Program Files\Dell Support\GTAction\triggers\DSproct.sys [] S3 E100B;Pilote de carte Intel ® PRO; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2001-08-23 117760] S3 GTNDIS5;GTNDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\GTNDIS5.SYS [] S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2003-09-19 51056] S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2003-09-19 16496] S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2003-09-19 21488] S3 k510bus;Sony Ericsson K510 Driver driver (WDM); C:\WINDOWS\system32\DRIVERS\k510bus.sys [2007-01-19 58288] S3 k510mdfl;Sony Ericsson K510 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\k510mdfl.sys [2007-01-19 8336] S3 k510mdm;Sony Ericsson K510 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\k510mdm.sys [2007-01-19 94064] S3 k510mgmt;Sony Ericsson K510 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\k510mgmt.sys [2007-01-19 85408] S3 k510obex;Sony Ericsson K510 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\k510obex.sys [2007-01-19 83344] S3 KLFLTDEV;Kaspersky Lab KLFltDev; C:\WINDOWS\system32\DRIVERS\klfltdev.sys [2008-03-13 26640] S3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys [2004-10-08 22016] S3 MHNDRV;Pilote MHN; C:\WINDOWS\system32\DRIVERS\mhndrv.sys [2004-08-10 11008] S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504] S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-04 85376] S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-04 10880] S3 RT61;Linksys Wireless-G PCI Adapter Driver(RT61); C:\WINDOWS\system32\DRIVERS\RT61.sys [2005-10-27 356096] S3 RT73;Sweex Wireless Lan USB2.0 Adapter 54Mbps; C:\WINDOWS\system32\DRIVERS\rt73.sys [2007-03-13 252928] S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-04 11136] S3 SONYPVU1;Pilote de filtrage Sony USB (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552] S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-04 15360] S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-04 59264] S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-04 31616] S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-04 25856] S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104] S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 26496] S3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-10 20480] S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-03-03 18944] S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-04 19328] S4 agp440;Filtre de bus AGP Intel; C:\WINDOWS\system32\DRIVERS\agp440.sys [2004-08-04 42368] S4 agpCPQ;Filtre de bus AGP Compaq; C:\WINDOWS\system32\DRIVERS\agpCPQ.sys [2004-08-04 44928] S4 alim1541;Filtre de bus AGP ALI; C:\WINDOWS\system32\DRIVERS\alim1541.sys [2004-08-04 42752] S4 amdagp;Pilote de filtre du bus AMD AGP; C:\WINDOWS\system32\DRIVERS\amdagp.sys [2004-08-04 43008] S4 cbidf;cbidf; C:\WINDOWS\system32\DRIVERS\cbidf2k.sys [2001-08-17 13952] S4 IntelIde;IntelIde; C:\WINDOWS\system32\DRIVERS\intelide.sys [2004-08-04 5504] S4 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-10 40320] S4 sisagp;Filtre de bus AGP SIS; C:\WINDOWS\system32\DRIVERS\sisagp.sys [2004-08-04 41088] S4 viaagp;Filtre de bus AGP VIA; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2004-08-04 42240] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 Creative Service for CDROM Access;Creative Service for CDROM Access; C:\WINDOWS\system32\CTsvcCDA.exe [1999-12-13 44032] R2 ehRecvr;Media Center Receiver Service; C:\WINDOWS\eHome\ehRecvr.exe [2005-12-15 237568] R2 ehSched;Service de planification Media Center; C:\WINDOWS\eHome\ehSched.exe [2005-08-05 103424] R2 hnmsvc;Advanced Networking Service; C:\Program Files\Dell Network Assistant\hnm_svc.exe [2007-08-27 111912] R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-03-09 152984] R2 McAfeeFramework;McAfee Framework Service; C:\Program Files\McAfee\Common Framework\FrameworkService.exe [2006-12-19 104000] R2 McrdSvc;Media Center Extender Service; C:\WINDOWS\ehome\mcrdsvc.exe [2005-08-05 99328] R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2006-06-16 143427] R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-08-04 38912] S2 AVP;Kaspersky Internet Security; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe [2008-11-11 206088] S2 BITSAntiVirService;Service de transfert intelligent en arrière-plan BITSAntiVirService; C:\WINDOWS\system32\1041d.exe [2009-05-24 49664] S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2004-08-10 268800] S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240] S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-05-07 182768] S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632] S3 MHN;MHN; C:\WINDOWS\System32\svchost.exe [2004-08-10 14336] S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136] S3 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2003-09-19 65795] S3 SerialKeys;SerialKeys; C:\WINDOWS\system32\skeys.exe [2004-08-10 26112] S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240] -----------------EOF----------------- Et enfin voilà le rapport info.txt: info.txt logfile of random's system information tool 1.06 2009-05-24 19:22:27 ======Uninstall list====== ?????? - ????? ?????-->C:\WINDOWS\una2setup.exe -->"C:\Program Files\Creative Installation Information\CD_RIPPER_UNICODE_2\Setup.exe" /remove /l0x040c -->"C:\Program Files\Creative Installation Information\CREATIVE_MEDIASOURCE_U\Setup.exe" /remove /l0x040c -->"C:\Program Files\Creative Installation Information\CREATIVE_SMARTFILL\Setup.exe" /remove /l0x040c -->"C:\Program Files\Creative Installation Information\CREATIVE_SYNC_MANAGER_U\Setup.exe" /remove /l0x040c -->"C:\Program Files\Creative Installation Information\CREATIVE_VIDEO_CONVERTER\Setup.exe" /remove /l0x040c -->"C:\Program Files\Creative Installation Information\E-CENTER_NET_CONTENT_U\Setup.exe" /remove /l0x040c -->"C:\Program Files\Creative Installation Information\E-CENTER_PLUGIN_CDBURNER_U\Setup.exe" /remove /l0x040c -->"C:\Program Files\Creative Installation Information\E-CENTER_PLUGIN_MTP_U\Setup.exe" /remove /l0x040c -->"C:\Program Files\Creative Installation Information\E-CENTER_PLUGIN_NOMADJUKEBOXTYPE2_U\Setup.exe" /remove /l0x040c -->"C:\Program Files\Creative Installation Information\E-CENTER_PLUGIN_ONLINESTORE_U\Setup.exe" /remove /l0x040c -->"C:\Program Files\Creative Installation Information\MEDIASOURCE_PLAYER_SKINPACK_U\Setup.exe" /remove /l0x040c -->"C:\Program Files\Creative Installation Information\ZEN_V_SERIES_MEDIA_EXPLORER\Setup.exe" /remove /l0x040c -->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER -->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0 -->C:\WINDOWS\system32\\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205} -->C:\WINDOWS\system32\\MSIEXEC.EXE /x {1206EF92-2E83-4859-ACCB-2048C3CB7DA6} -->C:\WINDOWS\system32\\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382} -->C:\WINDOWS\system32\\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629} -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{57FA4E0F-82C9-417D-87BC-0186D6CB7A44}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{63A317D0-60A6-43FC-848A-9FE4A53B29CE}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{700932B3-A964-4878-82A2-96054622A1F7}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{700932B3-A964-4878-82A2-96054622A1F7}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{88B1984E-36F0-47B8-B8DC-728966807A9C}\SETUP.EXE" -l0x40c -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf ACD/Labs Software in C:\Program Files\ACDFREE12\-->C:\Program Files\ACDFREE12\setup\setup.exe -uninstall Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe Adobe Flash Player 9 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\FlashUtil9b.exe -uninstallDelete Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe Adobe Reader 8.1.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81000000003} Adobe® Photoshop® Album Edition Découverte 3.0-->MsiExec.exe /I{4BDFD2CE-6329-42E4-9801-9B3D1F10D79B} Âèêòîðèÿ-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Snowball Interactive\Victoria\DeIsL2.isu" Amapi 3D-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\EOVIA\Amapi 3D\Uninst.isu" Applian FLV Player-->"C:\WINDOWS\Applian FLV Player\uninstall.exe" "/U:C:\Program Files\FLV Player\Uninstall\uninstall.xml" Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2} AudibleManager-->C:\Program Files\Audible\Bin\Upgrade.exe /Uninstall Baldur's Gate II - Throne of Bhaal -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{43D4C77E-4339-11D5-96E7-0050BA84F5F7}\Setup.exe" Baldur's Gate-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Black Isle\Baldur's Gate\Uninst.isu" Beer Tycoon-->C:\WINDOWS\Beer Tycoon Uninstaller.exe BOINC-->MsiExec.exe /I{ADF69C76-13FF-49F0-A078-922725A8B1B6} Broadcom Management Programs-->MsiExec.exe /I{FB64BF25-3593-4E4E-AA85-84AEF1D1475F} BS.Player FREE-->"C:\Program Files\Webteh\BSplayer\uninstall.exe" Call To Power 2-->C:\PROGRA~1\ACTIVI~1\CALLTO~1\UNINST~1\UNINST~1.EXE C:\Program Files\Activision\Call To Power 2\uninstall\Call To Power 2.log CamfrogWEB Advanced ActiveX Plugin (remove only)-->"C:\Program Files\CFWebAdvancedU\Uninstall.exe" CamStudio 2.0 Fr-->"C:\Program Files\CamStudio\unins000.exe" Celestia 1.5.1-->"C:\Program Files\Celestia\unins000.exe" Companion Photo-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E2210114-4158-4D41-ACCC-24176191E760}\Setup.exe" -l0x40c -removeonly Compatibility Pack for the 2007 Office system-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE} Corel Paint Shop Pro Photo XI-->MsiExec.exe /I{93A1B09E-BAFA-4628-A5B6-921CB026955A} Corel Snapfire Plus-->MsiExec.exe /I{7ADE3A47-B425-45E9-8FF6-11BE2B775645} Correctif Lecteur Windows Media 10 - KB895316-->"C:\WINDOWS\$NtUninstallKB895316$\spuninst\spuninst.exe" Correctif n° 2 pour Windows XP Édition Media Center 2005-->C:\WINDOWS\$NtUninstallKB900325$\spuninst\spuninst.exe Correctif pour Windows XP (KB888795)-->"C:\WINDOWS\$NtUninstallKB888795$\spuninst\spuninst.exe" Correctif pour Windows XP (KB891593)-->"C:\WINDOWS\$NtUninstallKB891593$\spuninst\spuninst.exe" Correctif pour Windows XP (KB899337)-->"C:\WINDOWS\$NtUninstallKB899337$\spuninst\spuninst.exe" Correctif pour Windows XP (KB899510)-->"C:\WINDOWS\$NtUninstallKB899510$\spuninst\spuninst.exe" Correctif pour Windows XP (KB902841)-->"C:\WINDOWS\$NtUninstallKB902841$\spuninst\spuninst.exe" Correctif pour Windows XP (KB914440)-->"C:\WINDOWS\$NtUninstallKB914440$\spuninst\spuninst.exe" Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe" Correctif Windows XP - KB885836-->C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe Correctif Windows XP - KB886185-->C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe Correctif Windows XP - KB888302-->C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe Correctif Windows XP - KB890859-->"C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe" Correctif Windows XP - KB895961-->"C:\WINDOWS\$NtUninstallKB895961$\spuninst\spuninst.exe" Creative MediaSource 5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}\setup.exe" -l0x40c /remove Creative Software AutoUpdate-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{88B1984E-36F0-47B8-B8DC-728966807A9C}\SETUP.EXE" -l0x40c /remove Creative System Information-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{63A317D0-60A6-43FC-848A-9FE4A53B29CE}\setup.exe" -l0x40c /remove Creative ZEN V Series (R2)-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E7F56612-69F7-4F85-AD0B-B04B1C5BC3BD}\SETUP.EXE" -l0x40c /remove Dell CinePlayer-->MsiExec.exe /I{43CAC9A1-1993-4F65-9096-7C9AFC2BBF54} Dell Network Assistant-->MsiExec.exe /I{0240BDFB-2995-4A3F-8C96-18D41282B716} Dell Support 3.2.1-->MsiExec.exe /X{CEE2252C-4035-4B27-8EC6-0B085DD3A413} Détecteur de flux Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{EFFCB0F1-CFEC-48D4-B793-EBFCAE852976} Disc2Phone-->MsiExec.exe /I{6E65247F-58F9-41CA-BE69-0316F7907170} Disque de souvenirs HP-->MsiExec.exe /X{B376402D-58EA-45EA-BD50-DD924EB67A70} DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN EA Download Manager-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{EF7E931D-DC84-471B-8DB6-A83358095474} /l1036 eMule-->"C:\Program Files\eMule\Uninstall.exe" Extension de Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{0CA6047C-D28B-4295-834A-07C52BA20C2D} foldit-->"C:\Program Files\foldit\uninstall.exe" Free Mp3 Wma Converter V 1.8.0-->"C:\Program Files\Free Audio Pack\unins000.exe" FreeRIP v2.951-->"C:\Program Files\FreeRIP2\unins000.exe" GemMaster Mystic-->"C:\Program Files\GemMasterFrench\uninstallgemmaster.exe" GeoLabo v1.25-->"C:\Program Files\GeoLabo\unins000.exe" Gestionnaire de disques amovible Creative-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{57FA4E0F-82C9-417D-87BC-0186D6CB7A44}\setup.exe" -l0x40c /remove Google Desktop-->C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall Google Earth-->MsiExec.exe /I{1D14373E-7970-4F2F-A467-ACA4F0EA21E3} Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_BDA1448D3D255554.exe" /uninstall Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C} Grim Fandango de LucasArts-->C:\WINDOWS\unin040c.exe -f"C:\Program Files\LucasArts\Grim\DeIsL1.isu" Guitar Pro 5.2-->"C:\Program Files\Guitar Pro 5\unins000.exe" High Definition Audio Driver Package - KB835221-->C:\WINDOWS\$NtUninstallKB835221WXP$\spuninst\spuninst.exe HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall Hotfix for Windows Media Player 10 (KB903157)-->"C:\WINDOWS\$NtUninstallKB903157$\spuninst\spuninst.exe" Hotfix for Windows XP (KB915865)-->"C:\WINDOWS\$NtUninstallKB915865$\spuninst\spuninst.exe" hp psc 1200 series-->MsiExec.exe /X{C900EF06-2E76-49C7-8DB0-41F629B21DC5} ImageJ 1.39u-->"C:\Program Files\ImageJ\unins000.exe" ISIS Draw 2.3 Standalone-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\ISIS Draw 2.3\uninst.isu" J2SE Runtime Environment 5.0 Update 10-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150100} J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060} Java 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF} Java 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070} Java SE Runtime Environment 6 Update 1-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010} Kaspersky Internet Security 2009-->MsiExec.exe /I{8CB14A64-CEF4-4C8F-B1C8-1C3B8752CB55} Kaspersky Internet Security 2009-->MsiExec.exe /I{8CB14A64-CEF4-4C8F-B1C8-1C3B8752CB55} La carte du ciel-->"C:\Program Files\GEOGRAPHIE\CarteCiel\uninstall.exe" La Version 0101-->"C:\Program Files\ATELIERS\geom3D\unins000.exe" LeTraducteur-->C:\WINDOWS\ST4UNST.EXE -n "C:\Language\Fran-Ang.4-9\ST4UNST.LOG" LG GSM PC Components-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CB8251EE-C86B-410D-83B2-1E28E9DE2C2B}\setup.exe" -l0x9 LG USB Modem Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C3ABE126-2BB2-4246-BFE1-6797679B3579}\setup.exe" -l0x40c -removeonly Logiciel QuickCam de Logitech-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C43048A9-742C-4DAD-90D2-E3B53C9DB825}\setup.exe" -l0x40c Logitech Desktop Messenger-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}\Setup.exe" -l0x40c UNINSTALL Logitech Print Service-->C:\PROGRA~1\Logitech\PRINTS~1\UNWISE.EXE C:\PROGRA~1\Logitech\PRINTS~1\INSTALL.LOG Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe" Marine Park Empire-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1150\INTEL3~1\IDriver.exe /M{977CD9E4-2CE7-46AC-BBEC-FC2B9696464B} /l1036 MCU-->MsiExec.exe /I{D2988E9B-C73F-422C-AD4B-A66EBE257120} Menus intelligents (Windows Live Toolbar)-->MsiExec.exe /X{0CC70FEF-5068-4CD5-B4DE-86FFD98EC929} MiCôSystème-->MsiExec.exe /I{31427074-9E86-4B13-AAC3-AE5AA3E7417F} Microsoft .NET Framework 1.0 Hotfix (KB887998)-->"C:\WINDOWS\$NtUninstallKB887998$\spuninst\spuninst.exe" Microsoft .NET Framework 1.0 Hotfix (KB930494)-->"C:\WINDOWS\$NtUninstallKB930494$\spuninst\spuninst.exe" Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700} Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp" Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe" Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe" Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9} Microsoft Works-->MsiExec.exe /I{6B1CB38D-E2E4-4A30-933D-EFDEBA76AD9C} Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media 10 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398)-->"C:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB928090)-->"C:\WINDOWS\ie7updates\KB928090-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB929969)-->"C:\WINDOWS\ie7updates\KB929969\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB931768)-->"C:\WINDOWS\ie7updates\KB931768-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB933566)-->"C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB893756)-->"C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB896428)-->"C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB899587)-->"C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB900725)-->"C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB901017)-->"C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB902400)-->"C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB905414)-->"C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB905749)-->"C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB911927)-->"C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB913580)-->"C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB914389)-->"C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB917953)-->"C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB918118)-->"C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB920213)-->"C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB921503)-->"C:\WINDOWS\$NtUninstallKB921503$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB922819)-->"C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB923689)-->"C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB923694)-->"C:\WINDOWS\$NtUninstallKB923694$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB923980)-->"C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB924270)-->"C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB924667)-->"C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB925454)-->"C:\WINDOWS\$NtUninstallKB925454$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB925902)-->"C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB926255)-->"C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB926436)-->"C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB927779)-->"C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB927802)-->"C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB928255)-->"C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB928843)-->"C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB929123)-->"C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB930178)-->"C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB931261)-->"C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB931784)-->"C:\WINDOWS\$NtUninstallKB931784$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB932168)-->"C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB933729)-->"C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB935839)-->"C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB935840)-->"C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB936021)-->"C:\WINDOWS\$NtUninstallKB936021$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB937894)-->"C:\WINDOWS\$NtUninstallKB937894$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB938829)-->"C:\WINDOWS\$NtUninstallKB938829$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB941202)-->"C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB941568)-->"C:\WINDOWS\$NtUninstallKB941568$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB941644)-->"C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB941693)-->"C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB943055)-->"C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB943460)-->"C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB943485)-->"C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB944653)-->"C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB945553)-->"C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB946026)-->"C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB948590)-->"C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950749)-->"C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe" Mise à jour pour Lecteur Windows Media 10 (KB913800)-->"C:\WINDOWS\$NtUninstallKB913800$\spuninst\spuninst.exe" Mise à jour pour Lecteur Windows Media 10 (KB926251)-->"C:\WINDOWS\$NtUninstallKB926251$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB894391)-->"C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB900485)-->"C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB904942)-->"C:\WINDOWS\$NtUninstallKB904942$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB910437)-->"C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB911280)-->"C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB916595)-->"C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB920872)-->"C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB922582)-->"C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB927891)-->"C:\WINDOWS\$NtUninstallKB927891$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB929338)-->"C:\WINDOWS\$NtUninstallKB929338$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB930916)-->"C:\WINDOWS\$NtUninstallKB930916$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB931836)-->"C:\WINDOWS\$NtUninstallKB931836$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB932823-v3)-->"C:\WINDOWS\$NtUninstallKB932823-v3$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB938828)-->"C:\WINDOWS\$NtUninstallKB938828$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB942763)-->"C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe" Mozilla Firefox (3.0.5)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe Mozilla Thunderbird (2.0.0.21)-->C:\Program Files\Mozilla Thunderbird\uninstall\helper.exe MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F} MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF} MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} Navigation par onglets (Windows Live Toolbar)-->MsiExec.exe /X{E916E61F-DE9D-4EAF-91E1-CEB50016326A} NVIDIA Drivers-->C:\WINDOWS\system32\nvudisp.exe UninstallGUI OpenOffice.org 2.1-->MsiExec.exe /I{E5430A11-6799-41E0-A9D5-F68BDC67AAD8} Orbit 2.0-->C:\Program Files\Orbit 2.0\uninstall.exe Orbit Xplorer-->C:\WINDOWS\uninst.exe -f"C:\Program Files\Orbit Xplorer\DeIsL1.isu" -c"C:\Program Files\Orbit Xplorer\_ISREG32.DLL" Otto-->"C:\Program Files\FrenchOtto\uninstallotto.exe" PDFCreator-->C:\Program Files\PDFCreator\unins000.exe Photo et imagerie HP 2.0 - All-in-One Pilote-->MsiExec.exe /X{6ECB39BD-73C2-44DD-B1A0-898207C58D8B} Photo et imagerie HP 2.0 - All-in-One-->MsiExec.exe /X{9867A917-5D17-40DE-83BA-BEA5293194B1} Photo et imagerie HP 2.0 - hp psc 1200 series-->C:\Program Files\HP\Digital Imaging\{7C8BB31C-E09E-4c7d-BBF1-45E33B467FE1}\Setup\hpzscr01.exe -datfile hposcr02.dat -forcereboot Programme de désinstallation de McAfee-->C:\PROGRA~1\McAfee.com\Shared\mcappins.exe /v=3 /uninstall=1 /interact=1 /script_proactive=0 /start=c:\PROGRA~1\mcafee.com\agent\uninst\comrem.dll::uninstall.htm Programme de gestion Camera de Logitech®-->"C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\SETUP.EXE" UNINSTALL REMOVEPROMPT QuickTime-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{4E5E22C2-1386-47AE-8EDE-32DDCDCD6653} /l1036 RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0 Roxio DLA-->MsiExec.exe /I{1206EF92-2E83-4859-ACCB-2048C3CB7DA6} Roxio MyDVD LE-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29} Roxio RecordNow Audio-->MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382} Roxio RecordNow Copy-->MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629} Roxio RecordNow Data-->MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205} SearchAssist-->C:\DELL\SearchAssist\UninstSA.bat Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} Skype™ 3.8-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82} Sonic Activation Module-->MsiExec.exe /I{5B6BE547-21E2-49CA-B2E2-6A5F470593B1} Sonic Encoders-->MsiExec.exe /I{9941F0AA-B903-4AF4-A055-83A9815CC011} Sonic Update Manager-->MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E} Sony Ericsson PC Suite 1.20.173-->MsiExec.exe /I{C5ADA65A-7828-4D85-B071-ECC52B51F794} SPORE™-->"C:\Program Files\InstallShield Installation Information\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}\setup.exe" -runfromtemp -l0x040c -removeonly Subtitle Workshop 2.51-->"C:\Program Files\URUSoft\Subtitle Workshop\uninstall.exe" URL Assistant-->regsvr32 /u /s "C:\Program Files\BAE\BAE.dll" Veoh Web Player Beta-->"C:\Program Files\Veoh Networks\VeohWebPlayer\uninst.exe" VideoLAN VLC media player 0.8.6f-->C:\Program Files\VideoLAN\VLC\uninstall.exe Winamp Remote-->"C:\Program Files\Winamp Remote\uninstall.exe" Winamp-->"C:\Program Files\Winamp\UninstWA.exe" Windows Internet Explorer 7-->"C:\WINDOWS\ie7\spuninst\spuninst.exe" Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390} Windows Live Toolbar-->"C:\Program Files\Windows Live Toolbar\UnInstall.exe" {0A8C97AD-DEED-4894-B446-3ABA95A77D0D} Windows Live Toolbar-->MsiExec.exe /X{0A8C97AD-DEED-4894-B446-3ABA95A77D0D} Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} Windows XP Hotfix - KB890927-->C:\WINDOWS\$NtUninstallKB890927$\spuninst\spuninst.exe Windows XP Media Center Edition 2005 KB908246-->"C:\WINDOWS\$NtUninstallKB908246$\spuninst\spuninst.exe" WinStars 2.0-->"C:\Program Files\WinStars2\unins000.exe" Worms2-->C:\WINDOWS\IsUninst.exe -f"c:\program files\worms\Uninst.isu" ZENcast Organizer-->"C:\Program Files\Creative Installation Information\ZENCAST_ORGANIZER\Setup.exe" /remove /l0x040c Zoo Empire-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1150\INTEL3~1\IDriver.exe /M{242BCCDC-B37B-4792-A52C-BCDDB1030AF9} /l1036 ======Hosts File====== 127.0.0.1 localhost ======System event log====== Computer Name: ORDICLOCLO Event Code: 1000 Message: Votre ordinateur a perdu le bail de son adresse IP 88.147.13.210 sur la carte réseau d'adresse réseau 00188B7E327E. Record Number: 28127 Source Name: Dhcp Time Written: 20091211145457.000000+060 Event Type: erreur User: Computer Name: ORDICLOCLO Event Code: 1003 Message: Votre ordinateur n'a pas pu renouveler son adresse à partir du réseau (à partir du serveur DHCP) pour la carte réseau dont l'adresse réseau est 00188B7E327E. Il s'est produit l'erreur suivante : Le délai de temporisation de sémaphore a expiré. . Votre ordinateur va continuer à essayer d'obtenir sa propre adresse auprès du serveur d'adresse réseau (DHCP). Record Number: 28126 Source Name: Dhcp Time Written: 20091211145457.000000+060 Event Type: Avertissement User: Computer Name: ORDICLOCLO Event Code: 7035 Message: Un contrôle Démarrer a correctement été envoyé au service GTNDIS5 NDIS Protocol Driver. Record Number: 28125 Source Name: Service Control Manager Time Written: 20091211145307.000000+060 Event Type: Informations User: AUTORITE NT\SYSTEM Computer Name: ORDICLOCLO Event Code: 7035 Message: Un contrôle Démarrer a correctement été envoyé au service GTNDIS5 NDIS Protocol Driver. Record Number: 28124 Source Name: Service Control Manager Time Written: 20091211145244.000000+060 Event Type: Informations User: AUTORITE NT\SYSTEM Computer Name: ORDICLOCLO Event Code: 17 Message: Prêt pour l'installation : les mises à jour suivantes ont été téléchargées et sont prêtes pour l'installation. Pour les installer, un administrateur doit ouvrir une session sur cet ordinateur et suivre les instructions qui seront affichées par Windows : - Outil de suppression des virus Windows - janvier 2009 (KB890830) - Mise à jour de sécurité pour Windows XP (KB958687) - Mise à jour pour le filtre de courrier indésirable de Microsoft Office Outlook 2003 (KB959140) Record Number: 28123 Source Name: Windows Update Agent Time Written: 20091211142528.000000+060 Event Type: Informations User: =====Application event log===== Computer Name: ORDICLOCLO Event Code: 1022 Message: Produit : Microsoft Office Professional Edition 2003 - La mise à jour 'Update for Outlook 2003: Junk E-mail Filter (KB959140): OUTLFLTR' a été installée. Record Number: 9581 Source Name: MsiInstaller Time Written: 20091211145941.000000+060 Event Type: Informations User: AUTORITE NT\SYSTEM Computer Name: ORDICLOCLO Event Code: 1517 Message: Windows a sauvegardé le Registre utilisateur ORDICLOCLO\Claudius alors qu'une application ou un service utilisait toujours le Registre pendant la fermeture de la session. La mémoire utilisée par le Registre de l'utilisateur n'a pas été libérée. le Registre sera déchargé lorsqu'il ne sera plus utilisé. Cela est souvent causé par des services s'exécutant en tant que compte d'utilisateur, essayez de configurer les services pour s'exécuter dans le compte service réseau ou service local. Record Number: 9580 Source Name: Userenv Time Written: 20091211145242.000000+060 Event Type: Avertissement User: AUTORITE NT\SYSTEM Computer Name: ORDICLOCLO Event Code: 1002 Message: Application bloquée wmplayer.exe, version 10.0.0.3931, module bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000. Record Number: 9579 Source Name: Application Hang Time Written: 20091211144412.000000+060 Event Type: erreur User: Computer Name: ORDICLOCLO Event Code: 1002 Message: Application bloquée wmplayer.exe, version 10.0.0.3931, module bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000. Record Number: 9578 Source Name: Application Hang Time Written: 20091211144412.000000+060 Event Type: erreur User: Computer Name: ORDICLOCLO Event Code: 257 Message: Record Number: 9577 Source Name: McLogEvent Time Written: 20091211142728.000000+060 Event Type: Informations User: AUTORITE NT\SYSTEM ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Fichiers communs\Roxio Shared\DLLShared\;C:\Program Files\Fichiers communs\Teleca Shared;C:\Program Files\QuickTime\QTSystem\;C:\Program Files\Fichiers communs\MDL Shared\ISIS "windir"=%SystemRoot% "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "PROCESSOR_ARCHITECTURE"=x86 "PROCESSOR_LEVEL"=15 "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 75 Stepping 2, AuthenticAMD "PROCESSOR_REVISION"=4b02 "NUMBER_OF_PROCESSORS"=2 "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "SonicCentral"=C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\ "CLASSPATH"=C:\Program Files\Java\jre1.5.0_10\lib\ext\QTJava.zip "QTJAVA"=C:\Program Files\Java\jre1.5.0_10\lib\ext\QTJava.zip -----------------EOF----------------- Et voilà le travail... A bientôt.

Bonjour, J'ai un petit problème sur mon PC. Aujourd'hui une fenêtre de McAffe s'est ouverte pour m'annoncer un VirusScanAlerte sur un fichier que je ne peux pas effacer. J'ai alors voulu faire un scan antivirus complet, mais ni Antivir, ni McAffe ne peuvent s'ouvrir (même en mode sans échec). J'ai par contre pu utiliser Spybot et Malwarebytes' Anti-Malware qui m'ont trouvé quelques éléments infectés que j'ai pu effacer. Par contre Antivir ne fonctionne toujours pas (même en le réinstallant). J'ai donc supprimé tous les Antivirus pour installer Kaspersky, mais celui-ci ne fonctionne pas non plus... Quelqu'un pourrait-il m'aider svp. Merci beaucoup d'avance. Théo.

Salut, Voilà le rapport : [ Rapport ToolsCleaner version 2.2.3 (par A.Rothstein & dj QUIOU) ] -->- Recherche: C:\_OtMoveIt: trouvé ! C:\Documents and Settings\Claudius\Bureau\SdFix.exe: trouvé ! C:\Documents and Settings\Claudius\Bureau\SDFIX: trouvé ! C:\Documents and Settings\Claudius\Local Settings\Temp\Rar$EX00.172\KillBox.exe: trouvé ! C:\Documents and Settings\Claudius\Recent\HijackThis.lnk: trouvé ! C:\Program Files\HijackThis: trouvé ! C:\Program Files\HiJackThis\HijackThis.exe: trouvé ! C:\Program Files\HiJackThis\hijackthis.log: trouvé ! --------------------------------- -->- Suppression: C:\Documents and Settings\Claudius\Bureau\SdFix.exe: supprimé ! C:\Documents and Settings\Claudius\Local Settings\Temp\Rar$EX00.172\KillBox.exe: supprimé ! C:\Documents and Settings\Claudius\Recent\HijackThis.lnk: supprimé ! C:\Program Files\HiJackThis\HijackThis.exe: supprimé ! C:\Program Files\HiJackThis\hijackthis.log: supprimé ! C:\_OtMoveIt: supprimé ! C:\Documents and Settings\Claudius\Bureau\SDFIX: supprimé ! C:\Program Files\HijackThis: supprimé ! Point de restauration crée !

C'est tout bon? Wouaw et bien merci beaucoup beaucoup! :P J'ai juste encore une ou deux dernières petites questions: est-ce que je peux effacer tous les programmes que j'ai dû télécharger? Puis-je ré-installer Antivir? J'ai entendu que c'est le meilleur antivirus gratuit, non? Voilà. Merci encore.

Voilà j'ai fait ce que tu m'as dit de faire. Tout s'est passé comme prévu. Et je te poste le rapport HiJack lancé en mode sans échec. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:05, on 05.10.2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16705) Boot mode: Safe mode Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\HiJackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.ch/ig/dell?hl=fr&client=dell-row&channel=ch&ibd=0061222 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.ch/ig/dell?hl=fr&client=dell-row&channel=ch&ibd=0061222 R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.fr.msn.ch/0SEFRCH/SAOS01?FORM=TOOLBR R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.google.ch/ig/dell?hl=fr&cli...amp;ibd=0061222 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan Enterprise\scriptcl.dll O2 - BHO: (no name) - {8B93A89B-7332-4B4B-830C-72EB6323D0DB} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file) O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" O4 - HKLM\..\Run: [sigmatelSysTrayApp] stsystra.exe O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [shStatEXE] "C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\McAfee\Common Framework\UdaterUI.exe" /StartedFromRunKey O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe" O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU\..\Run: [bitTorrent DNA] "C:\Program Files\DNA\btdna.exe" O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: OpenOffice.org 2.1.lnk = C:\Program Files\OpenOffice.org 2.1\program\quickstart.exe O4 - Global Startup: Dell Network Assistant.lnk = ? O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-ch\msntabres.dll.mui/229?516062d33775479e8188a869eb7a836f O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-ch\msntabres.dll.mui/230?516062d33775479e8188a869eb7a836f O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Advanced Networking Service (hnmsvc) - SingleClick Systems - C:\Program Files\Dell Network Assistant\hnm_svc.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: McAfee Framework Service (McAfeeFramework) - McAfee, Inc. - C:\Program Files\McAfee\Common Framework\FrameworkService.exe O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe O23 - Service: McAfee Task Manager (McTaskManager) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: WMP54Gv4SVC - GEMTEKS - C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WLService.exe -- End of file - 9452 bytes

Non je ne le vois pas! Ni en utilisant l'explorateur Windows, ni en lançant une recherche.

Il ne m'indique rien de spécial. Lorsque je clic sur le bouton rouge, il me dit d'abord de patienter quelques secondes, ensuite il me prévient que le pc va redémarrer et enfin le pc redémarre. Rien de plus...

Voilà le rapport HiJack: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 14:12, on 04.10.2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16705) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\cisvc.exe C:\WINDOWS\system32\CTsvcCDA.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\Dell Network Assistant\hnm_svc.exe C:\Program Files\McAfee\Common Framework\FrameworkService.exe C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WLService.exe C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WMP54Gv4.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\ehome\ehtray.exe C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe C:\WINDOWS\stsystra.exe C:\Program Files\Dell\Media Experience\DMXLauncher.exe C:\WINDOWS\System32\DLA\DLACTRLW.EXE C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe C:\Program Files\QuickTime\qttask.exe C:\WINDOWS\system32\LVCOMSX.EXE C:\Program Files\Logitech\Video\LogiTray.exe C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE C:\Program Files\McAfee\Common Framework\UdaterUI.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\eHome\ehmsas.exe C:\Program Files\Fichiers communs\Teleca Shared\CapabilityManager.exe C:\Program Files\Dell Support\DSAgnt.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\McAfee\Common Framework\McTray.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Logitech\Video\FxSvr2.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\DNA\btdna.exe C:\Program Files\Dell Network Assistant\ezi_hnm2.exe C:\Program Files\OpenOffice.org 2.1\program\soffice.exe C:\Program Files\OpenOffice.org 2.1\program\soffice.BIN C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe C:\WINDOWS\system32\cidaemon.exe C:\Program Files\HiJackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.ch/ig/dell?hl=fr&client=dell-row&channel=ch&ibd=0061222 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.ch/ig/dell?hl=fr&client=dell-row&channel=ch&ibd=0061222 R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.fr.msn.ch/0SEFRCH/SAOS01?FORM=TOOLBR R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.google.ch/ig/dell?hl=fr&cli...amp;ibd=0061222 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan Enterprise\scriptcl.dll O2 - BHO: (no name) - {8B93A89B-7332-4B4B-830C-72EB6323D0DB} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file) O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" O4 - HKLM\..\Run: [sigmatelSysTrayApp] stsystra.exe O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [shStatEXE] "C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\McAfee\Common Framework\UdaterUI.exe" /StartedFromRunKey O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe" O4 - HKCU\..\Run: [kamsoft] C:\WINDOWS\system32\ckvo.exe O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU\..\Run: [bitTorrent DNA] "C:\Program Files\DNA\btdna.exe" O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: OpenOffice.org 2.1.lnk = C:\Program Files\OpenOffice.org 2.1\program\quickstart.exe O4 - Global Startup: Dell Network Assistant.lnk = ? O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-ch\msntabres.dll.mui/229?516062d33775479e8188a869eb7a836f O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-ch\msntabres.dll.mui/230?516062d33775479e8188a869eb7a836f O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Advanced Networking Service (hnmsvc) - SingleClick Systems - C:\Program Files\Dell Network Assistant\hnm_svc.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: McAfee Framework Service (McAfeeFramework) - McAfee, Inc. - C:\Program Files\McAfee\Common Framework\FrameworkService.exe O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe O23 - Service: McAfee Task Manager (McTaskManager) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: WMP54Gv4SVC - GEMTEKS - C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WLService.exe -- End of file - 12137 bytes

Et voilà, j'ai fais ce que tu m'as dit de faire et tout s'est passé correctement. Y a-t-il une suite? Merci encore de ton aide.

Et ben non. Ca n'a pas fonctionné! Le programme ne peut pas déplacer ce fichier et il m'indique un message d'erreur dans la zone des résultats: Error: Unable to interpret <C:\WINDOWS\system32\ckvo.exe> in the current context! OTMoveIt3 by OldTimer - Version 1.0.2.2 log created on 09282008_210448 Mais lorsque j'ouvre le programme ce qui est écrit au dessus de la zone dans laquelle je dois coller les fichiers est: "Paste Instructions for Items to be Move" et non "Paste Standard List of Files/Folders to Move" comme tu me le disais... Je dis ça au cas où.

Bonsoir, Et voilà le rapport HiJackThis. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 23:19, on 25.09.2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16705) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\cisvc.exe C:\WINDOWS\system32\CTsvcCDA.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\Dell Network Assistant\hnm_svc.exe C:\Program Files\McAfee\Common Framework\FrameworkService.exe C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WLService.exe C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WMP54Gv4.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\ehome\ehtray.exe C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe C:\WINDOWS\stsystra.exe C:\Program Files\Dell\Media Experience\DMXLauncher.exe C:\WINDOWS\System32\DLA\DLACTRLW.EXE C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe C:\Program Files\QuickTime\qttask.exe C:\WINDOWS\system32\LVCOMSX.EXE C:\Program Files\Logitech\Video\LogiTray.exe C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE C:\Program Files\McAfee\Common Framework\UdaterUI.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Dell Support\DSAgnt.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\McAfee\Common Framework\McTray.exe C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe C:\Program Files\DNA\btdna.exe C:\Program Files\Fichiers communs\Teleca Shared\CapabilityManager.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe C:\Program Files\Logitech\Video\FxSvr2.exe C:\Program Files\Dell Network Assistant\ezi_hnm2.exe C:\Program Files\OpenOffice.org 2.1\program\soffice.exe C:\Program Files\OpenOffice.org 2.1\program\soffice.BIN C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\eHome\ehmsas.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\SoftwareDistribution\Download\44b6174a4a693136d02d4a7ecd7cbd54\update\update.exe C:\Program Files\McAfee\Common Framework\McScript_InUse.exe C:\Program Files\HiJackThis\HijackThis.exe C:\WINDOWS\system32\cidaemon.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.ch/ig/dell?hl=fr&client=dell-row&channel=ch&ibd=0061222 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.ch/ig/dell?hl=fr&client=dell-row&channel=ch&ibd=0061222 R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.fr.msn.ch/0SEFRCH/SAOS01?FORM=TOOLBR R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.google.ch/ig/dell?hl=fr&cli...amp;ibd=0061222 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan Enterprise\scriptcl.dll O2 - BHO: (no name) - {8B93A89B-7332-4B4B-830C-72EB6323D0DB} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file) O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" O4 - HKLM\..\Run: [sigmatelSysTrayApp] stsystra.exe O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [shStatEXE] "C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\McAfee\Common Framework\UdaterUI.exe" /StartedFromRunKey O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe" O4 - HKCU\..\Run: [kamsoft] C:\WINDOWS\system32\ckvo.exe O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU\..\Run: [bitTorrent DNA] "C:\Program Files\DNA\btdna.exe" O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: OpenOffice.org 2.1.lnk = C:\Program Files\OpenOffice.org 2.1\program\quickstart.exe O4 - Global Startup: Dell Network Assistant.lnk = ? O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-ch\msntabres.dll.mui/229?516062d33775479e8188a869eb7a836f O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-ch\msntabres.dll.mui/230?516062d33775479e8188a869eb7a836f O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Advanced Networking Service (hnmsvc) - SingleClick Systems - C:\Program Files\Dell Network Assistant\hnm_svc.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: McAfee Framework Service (McAfeeFramework) - McAfee, Inc. - C:\Program Files\McAfee\Common Framework\FrameworkService.exe O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe O23 - Service: McAfee Task Manager (McTaskManager) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: WMP54Gv4SVC - GEMTEKS - C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WLService.exe -- End of file - 12194 bytes Alors??? Il reste encore quelque chose? De nouveau je te remercie pour ton aide.

C'est tout bon! Et voici le rapport d'analyse: Malwarebytes' Anti-Malware 1.28 Version de la base de données: 1203 Windows 5.1.2600 Service Pack 2 24.09.2008 20:20:59 mbam-log-2008-09-24 (20-20-59).txt Type de recherche: Examen rapide Eléments examinés: 51688 Temps écoulé: 5 minute(s), 21 second(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 8 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 3 Dossier(s) infecté(s): 1 Fichier(s) infecté(s): 7 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): HKEY_CLASSES_ROOT\Interface\{43382522-a846-46f4-ac57-1f71ae6e1086} (Adware.WhenUSave) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{572fb162-c0ba-4edf-8cff-e3846153b9b0} (Adware.WhenUSave) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{72a836d1-bc00-43c0-a941-17960e4fb842} (Adware.WhenUSave) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\MyWay (Adware.MyWay) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\fqbewlna.bemv (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\fqbewlna.toolbar.1 (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\AppID\ACM.DLL (Adware.WhenUSave) -> Quarantined and deleted successfully. Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowHelp (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDrives (Hijack.Drives) -> Bad: (12) Good: (0) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckedValue (Hijack.System.Hidden) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully. Dossier(s) infecté(s): C:\Program Files\Save (Adware.WhenUSave) -> Quarantined and deleted successfully. Fichier(s) infecté(s): C:\WINDOWS\eflx.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\Program Files\Save\ffext.mod (Adware.WhenUSave) -> Quarantined and deleted successfully. C:\Program Files\Save\save.db (Adware.WhenUSave) -> Quarantined and deleted successfully. C:\Program Files\Save\store.db (Adware.WhenUSave) -> Quarantined and deleted successfully. C:\WINDOWS\Temp\TDSSece1.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\WINDOWS\Temp\TDSSf4b1.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\Documents and Settings\Claudius\Local Settings\Temp\TDSSd6d7.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully. Je suis prêt pour la prochaine étape.

Re-bonsoir, J'ai juste oublié de préciser que j'ai à nouveau un accès normal sur les liens internet! Par contre il m'est toujours impossible d'accéder aux documents cachés. Lorsque je coche la case "Afficher les fichiers et dossiers cachés" de l'"Option dossier" de l'explorateur Windows, l'action n'est pas prise en compte! Et mon C: n'est toujours pas ré-apparu. Dans tout les cas, merci de ton aide.

Voilà. Qu'est-ce que je fais maintenant?