Aller au contenu

Rakhnar

Membres
  • Compteur de contenus

    13
  • Inscription

  • Dernière visite

Tout ce qui a été posté par Rakhnar

  1. Et bien je te remercie énormément pour le temps que tu as consacré a mon problème. Tout s'est bien passé et je vais de suite télécharger la nouvelle version de Java. Je tiens également a préciser que ce site est génial PS : pour être bien sur qu'il n'y a plus de problèmes je vais analyser a nouveau mon ordinateur avec Kaspersky. Merci encore.
  2. Adobe Flash Player 10 ActiveX Adobe Flash Player 10 Plugin Adobe Shockwave Player Apple Software Update Archiveur WinRAR Assistant de connexion Windows Live Call of Duty Game of the Year Edition CamStudio 2.0 Fr Choice Guard Code::Blocks Correctif pour Lecteur Windows Media 11 (KB939683) Correctif pour Windows Internet Explorer 7 (KB947864) Correctif pour Windows XP (KB952287) Curse Client Dark Messiah Dealio Toolbar 3.4 DivX Codec DivX Converter DivX Player DivX Web Player Dofus 1.26.0 Fable - The Lost Chapters FINAL FANTASY XI Fraps Free Mp3 Wma Converter V 1.8.0 Frets On Fire Galerie de photos Windows Live GIMP 2.4.6 GTA2 GUILD WARS High Definition Audio Driver Package - KB888111 HijackThis 2.0.2 Hotfix for Windows Media Format 11 SDK (KB929399) HyperCam 2 Installation Windows Live Installation Windows Live InterVideo WinDVD 8 Java 6 Update 6 Junk Mail filter update Kaspersky Internet Security 2009 Kaspersky Internet Security 2009 Lecteur Windows Media 11 Les Sims 2 Logitech Audio Echo Cancellation Component Logitech QuickCam Logitech Video Enumerator Malwarebytes' Anti-Malware Messenger Plus! Live & Sponsor (CiD) Microsoft .NET Framework 2.0 Service Pack 1 Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - FRA Microsoft .NET Framework 3.0 Service Pack 1 Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - FRA Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5 Language Pack - fra Microsoft Age of Empires II Microsoft Age of Empires II Trial Version Microsoft Age of Empires II : The Conquerors Expansion Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Games for Windows - LIVE Microsoft Games for Windows - LIVE Redistributable Microsoft Internationalized Domain Names Mitigation APIs Microsoft National Language Support Downlevel APIs Microsoft Search Enhancement Pack Microsoft Silverlight Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft Sync Framework Runtime Native v1.0 (x86) Microsoft Sync Framework Services Native v1.0 (x86) Microsoft User-Mode Driver Framework Feature Pack 1.0 Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 Express Edition - FRA Microsoft Visual C++ 2008 Express - Français Microsoft Windows SDK for Visual Studio 2008 Express Tools for .NET Framework Microsoft Windows SDK for Visual Studio 2008 Express Tools for Win32 Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries Mise à jour critique pour Lecteur Windows Media 11 (KB959772) Mise à jour de sécurité pour Lecteur Windows Media (KB952069) Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782) Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027) Mise à jour de sécurité pour Windows XP (KB923561) Mise à jour de sécurité pour Windows XP (KB938464) Mise à jour de sécurité pour Windows XP (KB938464-v2) Mise à jour de sécurité pour Windows XP (KB941569) Mise à jour de sécurité pour Windows XP (KB946648) Mise à jour de sécurité pour Windows XP (KB950760) Mise à jour de sécurité pour Windows XP (KB950762) Mise à jour de sécurité pour Windows XP (KB950974) Mise à jour de sécurité pour Windows XP (KB951066) Mise à jour de sécurité pour Windows XP (KB951376) Mise à jour de sécurité pour Windows XP (KB951376-v2) Mise à jour de sécurité pour Windows XP (KB951698) Mise à jour de sécurité pour Windows XP (KB951748) Mise à jour de sécurité pour Windows XP (KB952004) Mise à jour de sécurité pour Windows XP (KB952954) Mise à jour de sécurité pour Windows XP (KB953839) Mise à jour de sécurité pour Windows XP (KB954211) Mise à jour de sécurité pour Windows XP (KB954459) Mise à jour de sécurité pour Windows XP (KB954600) Mise à jour de sécurité pour Windows XP (KB955069) Mise à jour de sécurité pour Windows XP (KB956391) Mise à jour de sécurité pour Windows XP (KB956572) Mise à jour de sécurité pour Windows XP (KB956802) Mise à jour de sécurité pour Windows XP (KB956803) Mise à jour de sécurité pour Windows XP (KB956841) Mise à jour de sécurité pour Windows XP (KB957095) Mise à jour de sécurité pour Windows XP (KB957097) Mise à jour de sécurité pour Windows XP (KB958644) Mise à jour de sécurité pour Windows XP (KB958687) Mise à jour de sécurité pour Windows XP (KB958690) Mise à jour de sécurité pour Windows XP (KB959426) Mise à jour de sécurité pour Windows XP (KB960225) Mise à jour de sécurité pour Windows XP (KB960715) Mise à jour de sécurité pour Windows XP (KB960803) Mise à jour de sécurité pour Windows XP (KB961373) Mise à jour pour Windows XP (KB951072-v2) Mise à jour pour Windows XP (KB951978) Mise à jour pour Windows XP (KB955839) Mise à jour pour Windows XP (KB961503) Mise à jour pour Windows XP (KB967715) Module linguistique Microsoft .NET Framework 3.5 - fra Mozilla Firefox (3.0.10) MSVCRT MSXML 4.0 SP2 (KB936181) MSXML 4.0 SP2 (KB954430) MSXML 6.0 Parser (KB925673) MSXML4 Parser MVision Navilog1 3.7.6 NVIDIA Drivers NVIDIA PhysX v8.09.04 OpenOffice.org Installer 1.0 Outil de téléchargement Windows Live PhotoFiltre PlayOnline Viewer and Tetra Master Programme de gestion Camera de Logitech® QuickTime QuickTime 3.0 Rappelz Realtek High Definition Audio Driver RomStation Search Settings 1.2 Segoe UI SimCity™ Sociétés Skype™ 3.8 SpeechRedist TeamSpeak 2 RC2 Unreal Tournament 2004 Utilitaire d'enregistrement du connecteur Wi-Fi USB Nintendo UxTheme Multipatcher Fr VIA Gestionnaire de périphériques de plate-forme VLC media player 0.9.9 Wakfu Windows Imaging Component Windows Live Call Windows Live Communications Platform Windows Live Contrôle parental Windows Live Mail Windows Live Messenger Windows Live OneCare safety scanner Windows Live Sync Windows Live Toolbar Windows Live Writer Windows Media Format 11 runtime Windows Media Format 11 runtime Windows Media Player 11 Windows Presentation Foundation Windows XP Service Pack 3 WinFast® Display Driver World of Warcraft World of Warcraft Public Test Wow Cartographe 1.09 XML Paper Specification Shared Components Language Pack 1.0 Voilà, merci pour tout , par contre tu saurais me dire ou se trouvent les Cracks et softs de P2P ?
  3. Voilà Voilà --------------------\\ Lop S&D 4.2.5-0 XP/Vista Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3 X86-based PC ( Uniprocessor Free : AMD Athlon 64 Processor 3700+ ) BIOS : BIOS Date: 11/20/06 14:56:44 Ver: 08.00.12 USER : user ( Administrator ) BOOT : Normal boot Antivirus : Kaspersky Internet Security 8.0.0.506 (Activated) Firewall : Kaspersky Internet Security 8.0.0.506 (Activated) A:\ (USB) C:\ (Local Disk) - NTFS - Total:232 Go (Free:131 Go) D:\ (CD or DVD) F:\ (CD or DVD) "C:\Lop SD" ( MAJ : 19-12-2008|23:40 ) Option : [1] ( 08/05/2009|17:26 ) --------------------\\ Listing des dossiers dans APPLIC~1 [29/03/2009|01:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer [17/09/2008|14:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus [21/09/2008|00:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Blizzard [03/04/2009|17:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DAEMON Tools Lite [27/04/2009|17:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google [20/06/2008|17:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield [08/05/2009|17:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Lab [18/01/2009|12:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Lab Setup Files [26/01/2008|12:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logishrd [26/01/2008|12:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logitech [08/05/2009|14:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes [09/06/2008|17:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Marginal Team [20/06/2008|17:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus! [12/03/2009|17:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft [16/02/2009|02:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help [03/04/2008|16:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SimCity Societies [26/01/2008|20:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype [29/04/2009|18:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP [14/03/2008|21:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage [25/01/2008|21:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller [22/01/2008|17:27] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft [14/03/2008|21:01] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft [22/01/2008|17:29] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft [03/01/2009|14:31] C:\DOCUME~1\user\APPLIC~1\AccurateRip [11/01/2009|18:15] C:\DOCUME~1\user\APPLIC~1\Acreon [25/01/2008|22:16] C:\DOCUME~1\user\APPLIC~1\Adobe [18/09/2008|16:18] C:\DOCUME~1\user\APPLIC~1\Azureus [18/02/2009|14:44] C:\DOCUME~1\user\APPLIC~1\codeblocks [03/04/2009|17:09] C:\DOCUME~1\user\APPLIC~1\DAEMON Tools [03/04/2009|17:11] C:\DOCUME~1\user\APPLIC~1\DAEMON Tools Lite [03/04/2009|17:09] C:\DOCUME~1\user\APPLIC~1\DAEMON Tools Pro [03/01/2009|14:40] C:\DOCUME~1\user\APPLIC~1\dBpoweramp [23/03/2009|19:40] C:\DOCUME~1\user\APPLIC~1\DeskSoft [17/01/2009|17:27] C:\DOCUME~1\user\APPLIC~1\DivX [08/05/2009|17:22] C:\DOCUME~1\user\APPLIC~1\DNA [02/05/2009|22:32] C:\DOCUME~1\user\APPLIC~1\dvdcss [08/12/2008|20:46] C:\DOCUME~1\user\APPLIC~1\EoRezo [05/04/2009|15:34] C:\DOCUME~1\user\APPLIC~1\Free Download Manager [24/04/2009|21:33] C:\DOCUME~1\user\APPLIC~1\fretsonfire [26/01/2008|21:28] C:\DOCUME~1\user\APPLIC~1\Google [11/08/2008|21:35] C:\DOCUME~1\user\APPLIC~1\gtk-2.0 [22/01/2008|17:46] C:\DOCUME~1\user\APPLIC~1\Identities [17/09/2008|14:14] C:\DOCUME~1\user\APPLIC~1\InstallShield [29/03/2009|01:37] C:\DOCUME~1\user\APPLIC~1\InterVideo [17/09/2008|13:12] C:\DOCUME~1\user\APPLIC~1\ItsLabel [11/06/2008|22:59] C:\DOCUME~1\user\APPLIC~1\Macromedia [08/05/2009|14:29] C:\DOCUME~1\user\APPLIC~1\Malwarebytes [03/04/2009|17:40] C:\DOCUME~1\user\APPLIC~1\Microsoft [19/06/2008|23:11] C:\DOCUME~1\user\APPLIC~1\Mozilla [03/04/2008|16:49] C:\DOCUME~1\user\APPLIC~1\SecuROM [29/03/2009|02:23] C:\DOCUME~1\user\APPLIC~1\Skype [29/03/2009|01:03] C:\DOCUME~1\user\APPLIC~1\skypePM [26/05/2008|18:10] C:\DOCUME~1\user\APPLIC~1\Sun [12/09/2008|20:40] C:\DOCUME~1\user\APPLIC~1\teamspeak2 [25/04/2009|22:42] C:\DOCUME~1\user\APPLIC~1\vlc [12/03/2009|18:22] C:\DOCUME~1\user\APPLIC~1\Windows Live Writer [11/08/2008|19:22] C:\DOCUME~1\user\APPLIC~1\WinRAR --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks [03/05/2009 21:51][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job [06/05/2009 18:00][--a------] C:\WINDOWS\tasks\Norton Security Scan.job [08/05/2009 17:22][--a------] C:\WINDOWS\tasks\Wow Cartographe.job [08/05/2009 17:22][--ah-----] C:\WINDOWS\tasks\SA.DAT [02/03/2006 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini --------------------\\ Listing des dossiers dans C:\Program Files [19/03/2009|03:06] C:\Program Files\3.0.1.8874 EU PTR Installer [22/01/2009|19:57] C:\Program Files\AGEIA Technologies [04/01/2009|18:59] C:\Program Files\Alcohol Soft [29/03/2009|01:33] C:\Program Files\Apple Software Update [08/12/2008|20:45] C:\Program Files\Azureus [27/04/2009|17:46] C:\Program Files\BitTorrent [30/01/2008|20:23] C:\Program Files\Bodom-Child - RaBBi [22/01/2009|22:05] C:\Program Files\Call of Duty Game of the Year Edition [29/04/2009|18:24] C:\Program Files\CamStudio [18/02/2009|03:39] C:\Program Files\CodeBlocks [20/02/2008|18:07] C:\Program Files\Common Files [22/01/2008|17:24] C:\Program Files\ComPlus Applications [29/03/2009|01:27] C:\Program Files\Conduit [28/04/2009|22:11] C:\Program Files\Curse [03/04/2009|17:08] C:\Program Files\DAEMON Tools Lite [23/03/2009|19:40] C:\Program Files\DesktopPlant [24/09/2008|17:17] C:\Program Files\directx [22/01/2009|19:57] C:\Program Files\DivX [08/05/2009|17:22] C:\Program Files\DNA [17/12/2008|12:04] C:\Program Files\Dofus [27/01/2008|16:25] C:\Program Files\EA GAMES [08/12/2008|20:42] C:\Program Files\Electronic Arts [08/12/2008|20:46] C:\Program Files\EoRezo [29/03/2009|01:32] C:\Program Files\Fichiers communs [17/09/2008|14:05] C:\Program Files\Firefly Studios [23/05/2008|21:32] C:\Program Files\Fox [03/01/2009|14:45] C:\Program Files\Free Audio Pack [22/01/2009|19:57] C:\Program Files\Free Download Manager [24/04/2009|22:31] C:\Program Files\Frets on Fire [24/01/2009|14:43] C:\Program Files\GameSpy Arcade [10/08/2008|23:55] C:\Program Files\GIMP-2.0 [27/04/2009|17:49] C:\Program Files\Google [20/02/2008|16:47] C:\Program Files\Gpotato [20/06/2008|17:04] C:\Program Files\Gpotato.eu [07/02/2009|20:42] C:\Program Files\GUILD WARS [29/04/2009|18:39] C:\Program Files\HyCam2 [03/01/2009|14:31] C:\Program Files\Illustrate [29/03/2009|01:32] C:\Program Files\InstallShield Installation Information [23/04/2009|02:15] C:\Program Files\Internet Explorer [29/03/2009|01:31] C:\Program Files\InterVideo [29/03/2009|01:32] C:\Program Files\InterVideo Information Service [26/05/2008|18:08] C:\Program Files\Java [31/08/2008|00:22] C:\Program Files\JoWood [18/01/2009|13:43] C:\Program Files\Kaspersky Lab [24/01/2009|14:37] C:\Program Files\Lavalys [26/01/2008|12:49] C:\Program Files\Logitech [08/12/2008|20:47] C:\Program Files\LRose [08/05/2009|14:29] C:\Program Files\Malwarebytes' Anti-Malware [03/01/2009|00:26] C:\Program Files\Mediafour [22/01/2009|22:06] C:\Program Files\Messenger [22/04/2009|23:04] C:\Program Files\Messenger Plus! Live [12/03/2009|17:44] C:\Program Files\Microsoft [22/01/2008|17:27] C:\Program Files\microsoft frontpage [12/10/2008|18:13] C:\Program Files\Microsoft Games [06/01/2009|22:19] C:\Program Files\Microsoft Games for Windows - LIVE [16/02/2009|02:41] C:\Program Files\Microsoft SDKs [28/02/2009|14:21] C:\Program Files\Microsoft Silverlight [12/03/2009|17:46] C:\Program Files\Microsoft SQL Server Compact Edition [12/03/2009|17:46] C:\Program Files\Microsoft Sync Framework [16/02/2009|02:44] C:\Program Files\Microsoft Visual Studio 9.0 [16/02/2009|02:43] C:\Program Files\Microsoft.NET [06/01/2009|21:57] C:\Program Files\Movie Maker [08/05/2009|17:25] C:\Program Files\Mozilla Firefox [06/01/2009|20:31] C:\Program Files\MSBuild [22/01/2008|17:22] C:\Program Files\MSN [22/01/2008|17:23] C:\Program Files\MSN Gaming Zone [24/03/2008|23:25] C:\Program Files\MSXML 4.0 [08/05/2009|14:20] C:\Program Files\Navilog1 [06/01/2009|21:55] C:\Program Files\NetMeeting [22/01/2008|17:23] C:\Program Files\Online Services [08/12/2008|20:50] C:\Program Files\osu! [06/01/2009|21:55] C:\Program Files\Outlook Express [24/01/2009|14:47] C:\Program Files\Paint.NET [31/01/2008|20:41] C:\Program Files\PhotoFiltre [19/06/2008|23:57] C:\Program Files\PlayOnline [08/05/2009|01:14] C:\Program Files\QuickTime [25/01/2008|20:21] C:\Program Files\Realtek [06/01/2009|20:28] C:\Program Files\Reference Assemblies [24/01/2009|14:48] C:\Program Files\Rockstar Games [08/12/2008|20:48] C:\Program Files\Ruff-Rose [22/01/2008|17:25] C:\Program Files\Services en ligne [26/01/2008|20:59] C:\Program Files\Skype [28/02/2009|14:23] C:\Program Files\Steam [26/05/2008|18:09] C:\Program Files\Sun [12/12/2008|21:35] C:\Program Files\Take2 [24/04/2009|15:23] C:\Program Files\Teamspeak2_RC2(2) [08/05/2009|17:16] C:\Program Files\trend micro [19/06/2008|23:40] C:\Program Files\TryMedia [17/09/2008|14:15] C:\Program Files\Ubisoft [22/01/2008|17:46] C:\Program Files\Uninstall Information [05/11/2008|01:58] C:\Program Files\UxTheme Multipatcher Fr [25/01/2008|20:24] C:\Program Files\VIA [25/04/2009|22:38] C:\Program Files\VideoLAN [01/04/2009|17:58] C:\Program Files\Wakfu [07/05/2009|22:10] C:\Program Files\Warcraft III [15/10/2008|15:00] C:\Program Files\wareuopenbeta [29/08/2008|22:23] C:\Program Files\WiFiConnector [12/03/2009|17:47] C:\Program Files\Windows Live [11/02/2009|11:59] C:\Program Files\Windows Live Safety Center [12/03/2009|17:44] C:\Program Files\Windows Live SkyDrive [22/01/2009|22:06] C:\Program Files\Windows Media Connect 2 [06/01/2009|21:55] C:\Program Files\Windows Media Player [06/01/2009|21:55] C:\Program Files\Windows NT [22/01/2008|17:25] C:\Program Files\WindowsUpdate [11/08/2008|19:22] C:\Program Files\WinRAR [05/05/2009|20:15] C:\Program Files\World of Warcraft [28/03/2009|12:14] C:\Program Files\World of Warcraft Public Test [07/09/2008|16:30] C:\Program Files\WowCartographe [22/01/2008|17:27] C:\Program Files\xerox --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs [19/03/2009|10:01] C:\Program Files\Fichiers communs\Blizzard Entertainment [20/06/2008|17:04] C:\Program Files\Fichiers communs\InstallShield [29/03/2009|01:31] C:\Program Files\Fichiers communs\InterVideo [26/05/2008|18:05] C:\Program Files\Fichiers communs\Java [21/05/2008|19:34] C:\Program Files\Fichiers communs\logishrd [16/02/2009|02:43] C:\Program Files\Fichiers communs\Merge Modules [12/03/2009|17:44] C:\Program Files\Fichiers communs\Microsoft Shared [22/01/2008|17:25] C:\Program Files\Fichiers communs\MSSoap [22/01/2008|17:59] C:\Program Files\Fichiers communs\ODBC [19/06/2008|23:57] C:\Program Files\Fichiers communs\PlayOnline [22/01/2008|17:25] C:\Program Files\Fichiers communs\Services [15/01/2009|17:27] C:\Program Files\Fichiers communs\Skype [22/01/2008|17:59] C:\Program Files\Fichiers communs\SpeechEngines [05/10/2008|18:03] C:\Program Files\Fichiers communs\Symantec Shared [06/01/2009|21:55] C:\Program Files\Fichiers communs\System [29/03/2009|01:32] C:\Program Files\Fichiers communs\Ulead [12/03/2009|17:36] C:\Program Files\Fichiers communs\Windows Live [25/01/2008|22:01] C:\Program Files\Fichiers communs\WindowsLiveInstaller [17/11/2008|19:21] C:\Program Files\Fichiers communs\Wise Installation Wizard --------------------\\ Process ( 37 Processes ) ... OK ! --------------------\\ Recherche avec S_Lop Aucun fichier / dossier Lop trouvé ! --------------------\\ Recherche de Fichiers / Dossiers Lop Aucun fichier / dossier Lop trouvé ! --------------------\\ Verification du Registre ..... OK ! --------------------\\ Verification du fichier Hosts Fichier Hosts PROPRE --------------------\\ Recherche de fichiers avec Catchme catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-05-08 17:28:13 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden files: 5307 --------------------\\ Recherche d'autres infections --------------------\\ Cracks & Keygens .. C:\DOCUME~1\user\Local Settings\Temp\Unreal_Tournament_2004_Crack+Keygen_by_Deviance.rar.torrent C:\DOCUME~1\user\Mes documents\Downloads\Unreal_Tournament_2004_Crack+Keygen_by_Deviance.rar [F:180][D:6]-> C:\DOCUME~1\user\LOCALS~1\Temp [F:14][D:0]-> C:\DOCUME~1\user\Cookies [F:1944][D:9]-> C:\DOCUME~1\user\LOCALS~1\TEMPOR~1\content.IE5 1 - "C:\Lop SD\LopR_1.txt" - 08/05/2009|17:31 - Option : [1] --------------------\\ Fin du rapport a 17:31:06
  4. Alors j'ai fait tout ce que tu m'as dis, voici le RSIT : Logfile of random's system information tool 1.06 (written by random/random) Run by user at 2009-05-08 17:01:24 Microsoft Windows XP Édition familiale Service Pack 3 System drive C: has 131 GB (55%) free of 238 GB Total RAM: 1023 MB (56% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 17:01:25, on 08/05/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16827) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe C:\Program Files\QuickTime\qttask.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\DNA\btdna.exe C:\Program Files\Fichiers communs\InterVideo\RegMgr\iviRegMgr.exe C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\system32\wuauclt.exe C:\Documents and Settings\user\Bureau\RSIT.exe C:\Program Files\trend micro\user.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://worldofwarcraft.judgehype.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Eazel-FR Toolbar - {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - C:\Program Files\Eazel-FR\tbEaz1.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Eazel-FR Toolbar - {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - C:\Program Files\Eazel-FR\tbEaz1.dll O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Eazel-FR Toolbar - {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - C:\Program Files\Eazel-FR\tbEaz1.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" O4 - HKLM\..\Run: [iSUSPM] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe" -scheduler O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [bitTorrent DNA] "C:\Program Files\DNA\btdna.exe" O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKCU\..\Run: [CurseClient] C:\Program Files\Curse\CurseClient.exe -silent O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1201290111875 O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - http://fichiers.touslesdrivers.com/fichier...on_2_0_4_12.cab O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://sdlc-esd.sun.com/ESD42/JSCDL/jre/6u...ows-i586-jc.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwa...ash/swflash.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Fichiers communs\InterVideo\RegMgr\iviRegMgr.exe O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- End of file - 9393 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\AppleSoftwareUpdate.job C:\WINDOWS\tasks\Norton Security Scan.job C:\WINDOWS\tasks\Wow Cartographe.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}] Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2008-11-07 1088296] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}] IEVkbdBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll [2008-11-11 62728] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}] Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2009-01-14 92504] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] SSVHelper Class - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll [2008-03-25 509328] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a8f9752d-e2b8-4e7a-86b5-499f4330e2fe}] Eazel-FR Toolbar - C:\Program Files\Eazel-FR\tbEaz1.dll [2009-04-01 1883672] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CC59E0F9-7E43-44FA-9FAA-8377850BF205}] FDMIECookiesBHO Class - C:\Program Files\Free Download Manager\iefdm2.dll [2008-11-12 94208] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}] Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904] {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - Eazel-FR Toolbar - C:\Program Files\Eazel-FR\tbEaz1.dll [2009-04-01 1883672] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2008-10-07 13574144] "AVP"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe [2009-02-10 206088] "ISUSPM"=C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe [2006-03-20 213936] "QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2006-09-01 282624] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] "Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2009-04-06 1277584] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360] "msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408] "BitTorrent DNA"=C:\Program Files\DNA\btdna.exe [2009-03-25 321344] "DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-12-29 687560] "CurseClient"=C:\Program Files\Curse\CurseClient.exe [2009-04-24 1836032] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr] C:\WINDOWS\ALCMTR.EXE [2005-05-02 69632] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount] C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe [2008-11-23 203720] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVP] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Free Download Manager] C:\Program Files\Free Download Manager\fdm.exe [2008-11-12 2474031] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ItsTV] C:\Program Files\ItsLabel\ItsTV.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechCommunicationsManager] C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe [2007-10-25 563984] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechQuickCamRibbon] C:\Program Files\Logitech\QuickCam\Quickcam.exe [2007-10-25 2178832] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LVCOMSX] C:\Program Files\Fichiers communs\LogiShrd\LComMgr\LVComSX.exe [2007-02-06 252704] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr] C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon] C:\WINDOWS\system32\NvCpl.dll [2008-10-07 13574144] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter] C:\WINDOWS\system32\NvMcTray.dll [2008-10-07 86016] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] nwiz.exe /install [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RGSC] C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL] C:\WINDOWS\RTHDCPL.EXE [2006-09-11 16264192] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] C:\Program Files\Skype\Phone\Skype.exe [2008-11-07 21633320] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel] C:\WINDOWS\SkyTel.EXE [2006-05-15 2879488] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe [2008-03-25 144784] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancer l'utilitaire d'enregistrement.lnk] C:\PROGRA~1\WIFICO~1\NINTEN~1.EXE [2006-11-16 1073152] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "WMPNetworkSvc"=3 "WLSetupSvc"=3 "gusvc"=3 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLS"="C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon] C:\WINDOWS\system32\klogon.dll [2008-11-11 218376] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=FF000000 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "HonorAutoRunSetting"= [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger" "C:\Program Files\World of Warcraft\WoW-1.12.0-frFR-downloader.exe"="C:\Program Files\World of Warcraft\WoW-1.12.0-frFR-downloader.exe:*:Enabled:Blizzard Downloader" "C:\Program Files\World of Warcraft\WoW-2.3.0-frFR-downloader.exe"="C:\Program Files\World of Warcraft\WoW-2.3.0-frFR-downloader.exe:*:Enabled:Blizzard Downloader" "C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test" "C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Exécuter une DLL en tant qu'application" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\Warcraft III\Warcraft III.exe"="C:\Program Files\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III" "C:\Program Files\Team17\Worms 2\Frontend.exe"="C:\Program Files\Team17\Worms 2\Frontend.exe:*:Enabled:Worms 2 Frontend" "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"="C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe:*:Enabled:Kaspersky Anti-Virus" "C:\Program Files\WiFiConnector\NintendoWFCReg.exe"="C:\Program Files\WiFiConnector\NintendoWFCReg.exe:*:Enabled:Connecteur Wi-Fi USB Nintendo" "C:\Program Files\World of Warcraft\BackgroundDownloader.exe"="C:\Program Files\World of Warcraft\BackgroundDownloader.exe:*:Enabled:Blizzard Downloader" "C:\Program Files\Azureus\Azureus.exe"="C:\Program Files\Azureus\Azureus.exe:*:Enabled:Azureus" "C:\Documents and Settings\user\Bureau\WoW-2.4.3.8568-to-3.0.2.8916-frFR-downloader.exe"="C:\Documents and Settings\user\Bureau\WoW-2.4.3.8568-to-3.0.2.8916-frFR-downloader.exe:*:Enabled:Blizzard Downloader" "C:\Program Files\World of Warcraft Public Test\WoW-3.0.2.8916-to-0.0.2.8962-frFR-downloader.exe"="C:\Program Files\World of Warcraft Public Test\WoW-3.0.2.8916-to-0.0.2.8962-frFR-downloader.exe:*:Enabled:Blizzard Downloader" "C:\Program Files\World of Warcraft Public Test\WoW-0.0.2.8970-to-0.0.2.8982-frFR-downloader.exe"="C:\Program Files\World of Warcraft Public Test\WoW-0.0.2.8970-to-0.0.2.8982-frFR-downloader.exe:*:Enabled:Blizzard Downloader" "C:\Program Files\Microsoft Games\Age of Empires II Trial\EMPIRES2.EXE"="C:\Program Files\Microsoft Games\Age of Empires II Trial\EMPIRES2.EXE:*:Enabled:Age of Empires II" "C:\Program Files\World of Warcraft\WoW-2.4.3-to-3.0.2-frFR-Win-Final-downloader.exe"="C:\Program Files\World of Warcraft\WoW-2.4.3-to-3.0.2-frFR-Win-Final-downloader.exe:*:Enabled:Blizzard Downloader" "C:\Program Files\World of Warcraft Public Test\WoW-0.0.8-frFR-downloader.exe"="C:\Program Files\World of Warcraft Public Test\WoW-0.0.8-frFR-downloader.exe:*:Enabled:Blizzard Downloader" "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call" "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:Enabled:DNA" "C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent" "C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype. Take a deep breath " "C:\Program Files\Curse\CurseClient.exe"="C:\Program Files\Curse\CurseClient.exe:*:Enabled:Curse Client" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call" "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" ======List of files/folders created in the last 1 months====== 2009-05-08 16:05:41 ----A---- C:\WINDOWS\system32\dvewddeh.txt 2009-05-08 14:29:28 ----D---- C:\Documents and Settings\user\Application Data\Malwarebytes 2009-05-08 14:29:22 ----D---- C:\Program Files\Malwarebytes' Anti-Malware 2009-05-08 14:29:22 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2009-05-08 14:15:48 ----A---- C:\cleannavi.txt 2009-05-08 13:14:34 ----A---- C:\fixnavi.txt 2009-05-08 13:09:50 ----D---- C:\Program Files\Navilog1 2009-05-08 13:08:21 ----A---- C:\TB.txt 2009-05-08 13:07:50 ----D---- C:\ToolBar SD 2009-05-08 12:52:45 ----D---- C:\rsit 2009-05-08 12:52:45 ----D---- C:\Program Files\trend micro 2009-04-29 22:11:56 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$ 2009-04-29 18:16:08 ----D---- C:\Program Files\CamStudio 2009-04-28 22:11:07 ----D---- C:\Program Files\Curse 2009-04-25 22:42:10 ----D---- C:\Documents and Settings\user\Application Data\dvdcss 2009-04-25 22:41:35 ----D---- C:\Documents and Settings\user\Application Data\vlc 2009-04-25 22:38:19 ----D---- C:\Program Files\VideoLAN 2009-04-24 22:31:23 ----D---- C:\Program Files\Frets on Fire 2009-04-24 21:05:34 ----D---- C:\Documents and Settings\user\Application Data\fretsonfire 2009-04-24 15:22:57 ----D---- C:\Program Files\Teamspeak2_RC2(2) 2009-04-23 02:15:44 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$ 2009-04-23 02:15:39 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$ 2009-04-23 02:13:21 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$ 2009-04-23 02:12:57 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$ 2009-04-23 02:12:50 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$ 2009-04-23 02:12:38 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$ ======List of files/folders modified in the last 1 months====== 2009-05-08 17:01:19 ----D---- C:\WINDOWS\Temp 2009-05-08 17:00:54 ----D---- C:\Documents and Settings\user\Application Data\DNA 2009-05-08 16:58:25 ----D---- C:\Program Files\Mozilla Firefox 2009-05-08 16:05:41 ----D---- C:\WINDOWS\system32\drivers 2009-05-08 16:05:41 ----D---- C:\WINDOWS\system32 2009-05-08 16:01:04 ----D---- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab 2009-05-08 16:00:48 ----D---- C:\Program Files\DNA 2009-05-08 15:59:25 ----RD---- C:\Program Files 2009-05-08 15:58:38 ----A---- C:\WINDOWS\SchedLgU.Txt 2009-05-08 13:48:30 ----D---- C:\WINDOWS\Prefetch 2009-05-08 04:19:43 ----D---- C:\Program Files\Circle Developement 2009-05-08 01:14:54 ----D---- C:\Program Files\QuickTime 2009-05-07 22:10:48 ----D---- C:\Program Files\Warcraft III 2009-05-07 17:05:44 ----D---- C:\WINDOWS\system32\CatRoot2 2009-05-05 20:15:55 ----D---- C:\Program Files\World of Warcraft 2009-05-03 01:36:18 ----D---- C:\WINDOWS\security 2009-05-03 01:23:58 ----HD---- C:\WINDOWS\inf 2009-05-02 12:15:26 ----D---- C:\WINDOWS 2009-04-29 22:11:58 ----RSHDC---- C:\WINDOWS\system32\dllcache 2009-04-29 18:39:55 ----D---- C:\Program Files\HyCam2 2009-04-29 18:12:58 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP 2009-04-29 18:12:32 ----D---- C:\Fraps 2009-04-29 13:37:04 ----D---- C:\WINDOWS\system32\CatRoot 2009-04-29 13:35:07 ----HD---- C:\WINDOWS\$hf_mig$ 2009-04-27 17:49:44 ----SHD---- C:\WINDOWS\Installer 2009-04-27 17:49:43 ----D---- C:\Program Files\Google 2009-04-27 17:49:43 ----D---- C:\Documents and Settings\All Users\Application Data\Google 2009-04-27 17:46:49 ----D---- C:\Program Files\BitTorrent 2009-04-24 15:57:15 ----A---- C:\WINDOWS\system32\java.exe 2009-04-23 11:35:13 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2009-04-23 11:30:09 ----D---- C:\WINDOWS\system32\wbem 2009-04-23 11:30:09 ----D---- C:\WINDOWS\AppPatch 2009-04-23 02:15:46 ----A---- C:\WINDOWS\imsins.BAK 2009-04-23 02:15:30 ----D---- C:\WINDOWS\system32\fr-fr 2009-04-23 02:15:30 ----D---- C:\Program Files\Internet Explorer 2009-04-22 23:04:58 ----D---- C:\Program Files\Messenger Plus! Live ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14720] R1 KLIF;Kaspersky Lab Driver; C:\WINDOWS\system32\DRIVERS\klif.sys [2009-02-12 226832] R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2009-02-06 55152] R3 FETNDIS;Pilote NT de carte VIA PCI 10/100Mo Fast Ethernet; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165] R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384] R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-09-11 4381184] R3 KLFLTDEV;Kaspersky Lab KLFltDev; C:\WINDOWS\system32\DRIVERS\klfltdev.sys [2008-03-13 26640] R3 klim5;Kaspersky Anti-Virus NDIS Filter; C:\WINDOWS\system32\DRIVERS\klim5.sys [2008-04-30 24592] R3 LVcKap;Logitech AEC Driver; C:\WINDOWS\system32\DRIVERS\LVcKap.sys [2007-10-19 2109976] R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys [2007-10-11 25624] R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\LVUSBSta.sys [2007-02-03 41504] R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288] R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2006-09-29 5810] R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-10-07 6133856] R3 pepifilter;Volume Adapter; C:\WINDOWS\system32\DRIVERS\lv302af.sys [2007-02-03 14240] R3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\WINDOWS\system32\DRIVERS\LV302V32.SYS [2007-02-03 938272] R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032] R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128] R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208] R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520] R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608] S3 a6gkyraw;a6gkyraw; C:\WINDOWS\system32\drivers\a6gkyraw.sys [] S3 alg2e597;alg2e597; C:\WINDOWS\system32\drivers\alg2e597.sys [] S3 catchme;catchme; \??\C:\DOCUME~1\user\LOCALS~1\Temp\catchme.sys [] S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024] S3 EagleNT;EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys [] S3 LVMVDrv;Logitech Machine Vision Engine Loader; C:\WINDOWS\system32\DRIVERS\LVMVDrv.sys [2007-10-11 2142488] S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504] S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248] S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880] S3 RT25USBAP;Nintendo Wi-Fi USB Connector Service; C:\WINDOWS\system32\DRIVERS\rt25usbap.sys [2006-04-10 162816] S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136] S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232] S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104] S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200] S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568] S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944] S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AVP;Kaspersky Internet Security; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe [2009-02-10 206088] R2 IviRegMgr;IviRegMgr; C:\Program Files\Fichiers communs\InterVideo\RegMgr\iviRegMgr.exe [2007-01-04 112152] R2 LVCOMSer;LVCOMSer; C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe [2007-10-19 186904] R2 LVPrcSrv;Process Monitor; C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe [2007-10-19 141848] R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2008-10-07 163908] R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656] R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968] S2 LVSrvLauncher;LVSrvLauncher; C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe [2007-10-19 141848] S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144] S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2007-10-09 36864] S3 fsssvc;Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360] S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728] S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2007-10-11 864256] S3 usprserv;User Privilege Service; C:\WINDOWS\System32\svchost.exe [2008-04-13 14336] S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336] S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2007-10-11 122880] S4 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016] -----------------EOF----------------- Par contre que veux-tu dire par le comportement du PC ? Parce que il a l'air d'aller bien, mais je peux relancer une analyse avec Kaspersky antivirus si c'est ce que tu souhaites.
  5. Pour ce qui est de Eazel-FR c'est supprimé, et voilà le rapport : SystemLook v1.0 by jpshortstuff (24.04.09) Log created at 16:36 on 08/05/2009 by user (Administrator - Elevation successful) ========== filefind ========== Searching for "*info.exe*" C:\Program Files\EA GAMES\Les Sims 2\Support\EasyInfo.exe --a--- 323584 bytes [14:27 27/01/2008] [08:33 18/08/2004] 689FB84AAC075F89D775E0E0CA3AFECE C:\Program Files\QuickTime\QTInfo.exe --a--- 598016 bytes [15:46 01/09/2006] [15:46 01/09/2006] BFE008DB1A54D447E20C60DE808B4EA5 C:\WINDOWS\system32\dllcache\mrinfo.exe --a--c 14336 bytes [12:00 02/03/2006] [12:00 02/03/2006] 64F01F0842F951D4E88EAB8015681C20 C:\WINDOWS\system32\mrinfo.exe --a--- 14336 bytes [12:00 02/03/2006] [12:00 02/03/2006] 64F01F0842F951D4E88EAB8015681C20 -=End Of File=-
  6. Je l'avais dit plus haut mais je le répète, j'ai bien changé mon mot de passe de MSN. Passons maintenant au rapport RSIT : Logfile of random's system information tool 1.06 (written by random/random) Run by user at 2009-05-08 16:20:21 Microsoft Windows XP Édition familiale Service Pack 3 System drive C: has 131 GB (55%) free of 238 GB Total RAM: 1023 MB (49% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 16:20:22, on 08/05/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16827) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe C:\Program Files\QuickTime\qttask.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\DNA\btdna.exe C:\Program Files\Curse\CurseClient.exe C:\Program Files\Fichiers communs\InterVideo\RegMgr\iviRegMgr.exe C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\user\Bureau\RSIT.exe C:\Program Files\trend micro\user.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://worldofwarcraft.judgehype.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Eazel-FR Toolbar - {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - C:\Program Files\Eazel-FR\tbEaz1.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Eazel-FR Toolbar - {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - C:\Program Files\Eazel-FR\tbEaz1.dll O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Eazel-FR Toolbar - {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - C:\Program Files\Eazel-FR\tbEaz1.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" O4 - HKLM\..\Run: [iSUSPM] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe" -scheduler O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [bitTorrent DNA] "C:\Program Files\DNA\btdna.exe" O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKCU\..\Run: [CurseClient] C:\Program Files\Curse\CurseClient.exe -silent O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1201290111875 O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - http://fichiers.touslesdrivers.com/fichier...on_2_0_4_12.cab O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://sdlc-esd.sun.com/ESD42/JSCDL/jre/6u...ows-i586-jc.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwa...ash/swflash.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Fichiers communs\InterVideo\RegMgr\iviRegMgr.exe O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- End of file - 9627 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\AppleSoftwareUpdate.job C:\WINDOWS\tasks\Norton Security Scan.job C:\WINDOWS\tasks\Wow Cartographe.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}] Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2008-11-07 1088296] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}] IEVkbdBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll [2008-11-11 62728] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}] EoBho Class - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}] Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2009-01-14 92504] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] SSVHelper Class - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll [2008-03-25 509328] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a8f9752d-e2b8-4e7a-86b5-499f4330e2fe}] Eazel-FR Toolbar - C:\Program Files\Eazel-FR\tbEaz1.dll [2009-04-01 1883672] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CC59E0F9-7E43-44FA-9FAA-8377850BF205}] FDMIECookiesBHO Class - C:\Program Files\Free Download Manager\iefdm2.dll [2008-11-12 94208] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}] Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904] {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - Eazel-FR Toolbar - C:\Program Files\Eazel-FR\tbEaz1.dll [2009-04-01 1883672] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2008-10-07 13574144] "AVP"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe [2009-02-10 206088] "ISUSPM"=C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe [2006-03-20 213936] "QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2006-09-01 282624] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] "Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2009-04-06 1277584] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360] "msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408] "BitTorrent DNA"=C:\Program Files\DNA\btdna.exe [2009-03-25 321344] "DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-12-29 687560] "CurseClient"=C:\Program Files\Curse\CurseClient.exe [2009-04-24 1836032] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr] C:\WINDOWS\ALCMTR.EXE [2005-05-02 69632] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount] C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe [2008-11-23 203720] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\au] C:\Program Files\Dealio\DealioAU.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVP] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EoEngine] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Free Download Manager] C:\Program Files\Free Download Manager\fdm.exe [2008-11-12 2474031] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ItsTV] C:\Program Files\ItsLabel\ItsTV.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck] C:\WINDOWS\system32\dumprep 0 -k [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechCommunicationsManager] C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe [2007-10-25 563984] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechQuickCamRibbon] C:\Program Files\Logitech\QuickCam\Quickcam.exe [2007-10-25 2178832] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LVCOMSX] C:\Program Files\Fichiers communs\LogiShrd\LComMgr\LVComSX.exe [2007-02-06 252704] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr] C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon] C:\WINDOWS\system32\NvCpl.dll [2008-10-07 13574144] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter] C:\WINDOWS\system32\NvMcTray.dll [2008-10-07 86016] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] nwiz.exe /install [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RGSC] C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL] C:\WINDOWS\RTHDCPL.EXE [2006-09-11 16264192] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] C:\Program Files\Skype\Phone\Skype.exe [2008-11-07 21633320] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel] C:\WINDOWS\SkyTel.EXE [2006-05-15 2879488] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spyware-Secure] C:\Program Files\Spyware-Secure\Spyware-Secure_trial.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe [2008-03-25 144784] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancer l'utilitaire d'enregistrement.lnk] C:\PROGRA~1\WIFICO~1\NINTEN~1.EXE [2006-11-16 1073152] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "WMPNetworkSvc"=3 "WLSetupSvc"=3 "gusvc"=3 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLS"="C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon] C:\WINDOWS\system32\klogon.dll [2008-11-11 218376] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=FF000000 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "HonorAutoRunSetting"= [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger" "C:\Program Files\World of Warcraft\WoW-1.12.0-frFR-downloader.exe"="C:\Program Files\World of Warcraft\WoW-1.12.0-frFR-downloader.exe:*:Enabled:Blizzard Downloader" "C:\Program Files\World of Warcraft\WoW-2.3.0-frFR-downloader.exe"="C:\Program Files\World of Warcraft\WoW-2.3.0-frFR-downloader.exe:*:Enabled:Blizzard Downloader" "C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test" "C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Exécuter une DLL en tant qu'application" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\Warcraft III\Warcraft III.exe"="C:\Program Files\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III" "C:\Program Files\Team17\Worms 2\Frontend.exe"="C:\Program Files\Team17\Worms 2\Frontend.exe:*:Enabled:Worms 2 Frontend" "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"="C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe:*:Enabled:Kaspersky Anti-Virus" "C:\Program Files\WiFiConnector\NintendoWFCReg.exe"="C:\Program Files\WiFiConnector\NintendoWFCReg.exe:*:Enabled:Connecteur Wi-Fi USB Nintendo" "C:\Program Files\World of Warcraft\BackgroundDownloader.exe"="C:\Program Files\World of Warcraft\BackgroundDownloader.exe:*:Enabled:Blizzard Downloader" "C:\Program Files\Azureus\Azureus.exe"="C:\Program Files\Azureus\Azureus.exe:*:Enabled:Azureus" "C:\Documents and Settings\user\Bureau\WoW-2.4.3.8568-to-3.0.2.8916-frFR-downloader.exe"="C:\Documents and Settings\user\Bureau\WoW-2.4.3.8568-to-3.0.2.8916-frFR-downloader.exe:*:Enabled:Blizzard Downloader" "C:\Program Files\World of Warcraft Public Test\WoW-3.0.2.8916-to-0.0.2.8962-frFR-downloader.exe"="C:\Program Files\World of Warcraft Public Test\WoW-3.0.2.8916-to-0.0.2.8962-frFR-downloader.exe:*:Enabled:Blizzard Downloader" "C:\Program Files\World of Warcraft Public Test\WoW-0.0.2.8970-to-0.0.2.8982-frFR-downloader.exe"="C:\Program Files\World of Warcraft Public Test\WoW-0.0.2.8970-to-0.0.2.8982-frFR-downloader.exe:*:Enabled:Blizzard Downloader" "C:\Program Files\Microsoft Games\Age of Empires II Trial\EMPIRES2.EXE"="C:\Program Files\Microsoft Games\Age of Empires II Trial\EMPIRES2.EXE:*:Enabled:Age of Empires II" "C:\Program Files\World of Warcraft\WoW-2.4.3-to-3.0.2-frFR-Win-Final-downloader.exe"="C:\Program Files\World of Warcraft\WoW-2.4.3-to-3.0.2-frFR-Win-Final-downloader.exe:*:Enabled:Blizzard Downloader" "C:\Program Files\World of Warcraft Public Test\WoW-0.0.8-frFR-downloader.exe"="C:\Program Files\World of Warcraft Public Test\WoW-0.0.8-frFR-downloader.exe:*:Enabled:Blizzard Downloader" "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call" "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:Enabled:DNA" "C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent" "C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype. Take a deep breath " "C:\Program Files\Curse\CurseClient.exe"="C:\Program Files\Curse\CurseClient.exe:*:Enabled:Curse Client" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call" "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a587062a-2e47-11dd-99fc-001a920f05ea}] shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480 ======List of files/folders created in the last 1 months====== 2009-05-08 16:05:41 ----A---- C:\WINDOWS\system32\dvewddeh.txt 2009-05-08 14:29:28 ----D---- C:\Documents and Settings\user\Application Data\Malwarebytes 2009-05-08 14:29:22 ----D---- C:\Program Files\Malwarebytes' Anti-Malware 2009-05-08 14:29:22 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2009-05-08 14:15:48 ----A---- C:\cleannavi.txt 2009-05-08 13:14:34 ----A---- C:\fixnavi.txt 2009-05-08 13:09:50 ----D---- C:\Program Files\Navilog1 2009-05-08 13:08:21 ----A---- C:\TB.txt 2009-05-08 13:07:50 ----D---- C:\ToolBar SD 2009-05-08 12:52:45 ----D---- C:\rsit 2009-05-08 12:52:45 ----D---- C:\Program Files\trend micro 2009-04-29 22:11:56 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$ 2009-04-29 18:16:08 ----D---- C:\Program Files\CamStudio 2009-04-28 22:11:07 ----D---- C:\Program Files\Curse 2009-04-25 22:42:10 ----D---- C:\Documents and Settings\user\Application Data\dvdcss 2009-04-25 22:41:35 ----D---- C:\Documents and Settings\user\Application Data\vlc 2009-04-25 22:38:19 ----D---- C:\Program Files\VideoLAN 2009-04-24 22:31:23 ----D---- C:\Program Files\Frets on Fire 2009-04-24 21:05:34 ----D---- C:\Documents and Settings\user\Application Data\fretsonfire 2009-04-24 15:22:57 ----D---- C:\Program Files\Teamspeak2_RC2(2) 2009-04-23 02:15:44 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$ 2009-04-23 02:15:39 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$ 2009-04-23 02:13:21 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$ 2009-04-23 02:12:57 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$ 2009-04-23 02:12:50 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$ 2009-04-23 02:12:38 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$ ======List of files/folders modified in the last 1 months====== 2009-05-08 16:18:38 ----D---- C:\WINDOWS\Temp 2009-05-08 16:10:49 ----D---- C:\Documents and Settings\user\Application Data\DNA 2009-05-08 16:05:41 ----D---- C:\WINDOWS\system32\drivers 2009-05-08 16:05:41 ----D---- C:\WINDOWS\system32 2009-05-08 16:02:01 ----D---- C:\Program Files\Mozilla Firefox 2009-05-08 16:01:04 ----D---- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab 2009-05-08 16:00:48 ----D---- C:\Program Files\DNA 2009-05-08 15:59:25 ----RD---- C:\Program Files 2009-05-08 15:58:38 ----A---- C:\WINDOWS\SchedLgU.Txt 2009-05-08 13:48:30 ----D---- C:\WINDOWS\Prefetch 2009-05-08 04:19:43 ----D---- C:\Program Files\Circle Developement 2009-05-08 01:14:54 ----D---- C:\Program Files\QuickTime 2009-05-07 22:10:48 ----D---- C:\Program Files\Warcraft III 2009-05-07 17:05:44 ----D---- C:\WINDOWS\system32\CatRoot2 2009-05-05 20:15:55 ----D---- C:\Program Files\World of Warcraft 2009-05-03 01:36:18 ----D---- C:\WINDOWS\security 2009-05-03 01:23:58 ----HD---- C:\WINDOWS\inf 2009-05-02 12:15:26 ----D---- C:\WINDOWS 2009-04-29 22:11:58 ----RSHDC---- C:\WINDOWS\system32\dllcache 2009-04-29 18:39:55 ----D---- C:\Program Files\HyCam2 2009-04-29 18:12:58 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP 2009-04-29 18:12:32 ----D---- C:\Fraps 2009-04-29 13:37:04 ----D---- C:\WINDOWS\system32\CatRoot 2009-04-29 13:35:07 ----HD---- C:\WINDOWS\$hf_mig$ 2009-04-27 17:49:44 ----SHD---- C:\WINDOWS\Installer 2009-04-27 17:49:43 ----D---- C:\Program Files\Google 2009-04-27 17:49:43 ----D---- C:\Documents and Settings\All Users\Application Data\Google 2009-04-27 17:46:49 ----D---- C:\Program Files\BitTorrent 2009-04-24 15:57:15 ----A---- C:\WINDOWS\system32\java.exe 2009-04-23 11:35:13 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2009-04-23 11:30:09 ----D---- C:\WINDOWS\system32\wbem 2009-04-23 11:30:09 ----D---- C:\WINDOWS\AppPatch 2009-04-23 02:15:46 ----A---- C:\WINDOWS\imsins.BAK 2009-04-23 02:15:30 ----D---- C:\WINDOWS\system32\fr-fr 2009-04-23 02:15:30 ----D---- C:\Program Files\Internet Explorer 2009-04-22 23:04:58 ----D---- C:\Program Files\Messenger Plus! Live ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14720] R1 KLIF;Kaspersky Lab Driver; C:\WINDOWS\system32\DRIVERS\klif.sys [2009-02-12 226832] R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2009-02-06 55152] R3 FETNDIS;Pilote NT de carte VIA PCI 10/100Mo Fast Ethernet; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165] R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384] R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-09-11 4381184] R3 KLFLTDEV;Kaspersky Lab KLFltDev; C:\WINDOWS\system32\DRIVERS\klfltdev.sys [2008-03-13 26640] R3 klim5;Kaspersky Anti-Virus NDIS Filter; C:\WINDOWS\system32\DRIVERS\klim5.sys [2008-04-30 24592] R3 LVcKap;Logitech AEC Driver; C:\WINDOWS\system32\DRIVERS\LVcKap.sys [2007-10-19 2109976] R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys [2007-10-11 25624] R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\LVUSBSta.sys [2007-02-03 41504] R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288] R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2006-09-29 5810] R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-10-07 6133856] R3 pepifilter;Volume Adapter; C:\WINDOWS\system32\DRIVERS\lv302af.sys [2007-02-03 14240] R3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\WINDOWS\system32\DRIVERS\LV302V32.SYS [2007-02-03 938272] R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032] R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128] R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208] R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520] R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608] S3 a6gkyraw;a6gkyraw; C:\WINDOWS\system32\drivers\a6gkyraw.sys [] S3 alg2e597;alg2e597; C:\WINDOWS\system32\drivers\alg2e597.sys [] S3 catchme;catchme; \??\C:\DOCUME~1\user\LOCALS~1\Temp\catchme.sys [] S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024] S3 EagleNT;EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys [] S3 LVMVDrv;Logitech Machine Vision Engine Loader; C:\WINDOWS\system32\DRIVERS\LVMVDrv.sys [2007-10-11 2142488] S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504] S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248] S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880] S3 RT25USBAP;Nintendo Wi-Fi USB Connector Service; C:\WINDOWS\system32\DRIVERS\rt25usbap.sys [2006-04-10 162816] S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136] S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232] S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104] S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200] S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568] S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944] S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AVP;Kaspersky Internet Security; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe [2009-02-10 206088] R2 IviRegMgr;IviRegMgr; C:\Program Files\Fichiers communs\InterVideo\RegMgr\iviRegMgr.exe [2007-01-04 112152] R2 LVCOMSer;LVCOMSer; C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe [2007-10-19 186904] R2 LVPrcSrv;Process Monitor; C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe [2007-10-19 141848] R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2008-10-07 163908] R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656] R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968] S2 LVSrvLauncher;LVSrvLauncher; C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe [2007-10-19 141848] S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144] S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2007-10-09 36864] S3 fsssvc;Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360] S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728] S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2007-10-11 864256] S3 usprserv;User Privilege Service; C:\WINDOWS\System32\svchost.exe [2008-04-13 14336] S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336] S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2007-10-11 122880] S4 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016] -----------------EOF----------------- Par contre c'est bizarre il n'y a que le log.
  7. Enfin ! Après cette longue analyse je te communique le résultat : Malwarebytes' Anti-Malware 1.36 Version de la base de données: 2092 Windows 5.1.2600 Service Pack 3 08/05/2009 15:55:31 mbam-log-2009-05-08 (15-55-31).txt Type de recherche: Examen complet (C:\|E:\|) Eléments examinés: 231838 Temps écoulé: 1 hour(s), 22 minute(s), 29 second(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 4 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 1 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Spyware-Secure (Rogue.Spyware-Secure) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Spyware-Secure (Rogue.Spyware-Secure) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\IGB (Rogue.Residue) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\EoRezo (Rogue.Eorezo) -> Quarantined and deleted successfully. Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): C:\Program Files\EoRezo (Rogue.Eorezo) -> Delete on reboot.
  8. Bon alors le n°1 : Search Navipromo version 3.7.6 commencé le 08/05/2009 à 14:05:27,48 !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!! !!! Postez ce rapport sur le forum pour le faire analyser !!! !!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!! Outil exécuté depuis C:\Program Files\navilog1 Mise à jour le 14.03.2009 à 18h00 par IL-MAFIOSO Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3 X86-based PC ( Uniprocessor Free : AMD Athlon 64 Processor 3700+ ) BIOS : BIOS Date: 11/20/06 14:56:44 Ver: 08.00.12 USER : user ( Administrator ) BOOT : Normal boot Antivirus : Kaspersky Internet Security 8.0.0.506 (Activated) Firewall : Kaspersky Internet Security 8.0.0.506 (Activated) A:\ (USB) C:\ (Local Disk) - NTFS - Total:232 Go (Free:128 Go) D:\ (CD or DVD) F:\ (CD or DVD) Recherche executé en mode normal *** Recherche dossiers dans "C:\WINDOWS" *** *** Recherche dossiers dans "C:\Program Files" *** *** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" *** *** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" *** *** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" *** *** Recherche dossiers dans "C:\Documents and Settings\user\applic~1" *** *** Recherche dossiers dans "C:\Documents and Settings\user\locals~1\applic~1" *** *** Recherche dossiers dans "C:\Documents and Settings\user\menudm~1\progra~1" *** *** Recherche avec Catchme-rootkit/stealth malware detector par gmer *** pour + d'infos : http://www.gmer.net *** Recherche avec GenericNaviSearch *** !!! Tous ces résultats peuvent révéler des fichiers légitimes !!! !!! A vérifier impérativement avant toute suppression manuelle !!! * Recherche dans "C:\WINDOWS\system32" * * Recherche dans "C:\Documents and Settings\user\locals~1\applic~1" * *** Recherche fichiers *** *** Recherche clés spécifiques dans le Registre *** !! Les clés trouvées ne sont pas forcément infectées !! *** Module de Recherche complémentaire *** (Recherche fichiers spécifiques) 1)Recherche nouveaux fichiers Instant Access : 2)Recherche Heuristique : * Dans "C:\WINDOWS\system32" : * Dans "C:\Documents and Settings\user\locals~1\applic~1" : 3)Recherche Certificats : Certificat Egroup absent ! Certificat Electronic-Group absent ! Certificat Montorgueil absent ! Certificat OOO-Favorit absent ! Certificat Sunny-Day-Design-Ltd absent ! 4)Recherche autres dossiers et fichiers connus : *** Analyse terminée le 08/05/2009 à 14:15:09,85 *** Et le N°2 Clean Navipromo version 3.7.6 commencé le 08/05/2009 à 14:15:48,85 Outil exécuté depuis C:\Program Files\navilog1 Mise à jour le 14.03.2009 à 18h00 par IL-MAFIOSO Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3 X86-based PC ( Uniprocessor Free : AMD Athlon 64 Processor 3700+ ) BIOS : BIOS Date: 11/20/06 14:56:44 Ver: 08.00.12 USER : user ( Administrator ) BOOT : Normal boot Antivirus : Kaspersky Internet Security 8.0.0.506 (Activated) Firewall : Kaspersky Internet Security 8.0.0.506 (Activated) A:\ (USB) C:\ (Local Disk) - NTFS - Total:232 Go (Free:128 Go) D:\ (CD or DVD) F:\ (CD or DVD) Mode suppression automatique avec prise en charge résultats Catchme et GNS Nettoyage exécuté au redémarrage de l'ordinateur *** fsbl1.txt non trouvé *** (Assurez-vous que Catchme n'avait rien trouvé lors de la recherche) *** Suppression avec sauvegardes résultats GenericNaviSearch *** * Suppression dans "C:\WINDOWS\System32" * * Suppression dans "C:\Documents and Settings\user\locals~1\applic~1" * *** Suppression dossiers dans "C:\WINDOWS" *** *** Suppression dossiers dans "C:\Program Files" *** *** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" *** *** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1" *** *** Suppression dossiers dans "c:\docume~1\alluse~1\applic~1" *** *** Suppression dossiers dans "C:\Documents and Settings\user\applic~1" *** *** Suppression dossiers dans "C:\Documents and Settings\user\locals~1\applic~1" *** *** Suppression dossiers dans "C:\Documents and Settings\user\menudm~1\progra~1" *** *** Suppression fichiers *** *** Suppression fichiers temporaires *** Nettoyage contenu C:\WINDOWS\Temp effectué ! Nettoyage contenu C:\Documents and Settings\user\locals~1\Temp effectué ! *** Traitement Recherche complémentaire *** (Recherche fichiers spécifiques) 1)Suppression avec sauvegardes nouveaux fichiers Instant Access : 2)Recherche, création sauvegardes et suppression Heuristique : * Dans "C:\WINDOWS\system32" * * Dans "C:\Documents and Settings\user\locals~1\applic~1" * *** Sauvegarde du Registre vers dossier Safebackup *** sauvegarde du Registre réalisée avec succès ! *** Nettoyage Registre *** Nettoyage Registre Ok *** Certificats *** Certificat Egroup absent ! Certificat Electronic-Group absent ! Certificat Montorgueil absent ! Certificat OOO-Favorit absent ! Certificat Sunny-Day-Design-Ltdt absent ! *** Recherche autres dossiers et fichiers connus *** *** Nettoyage terminé le 08/05/2009 à 14:20:03,67 *** C'est bien ce que tu voulais? Ps : le mot de passe de msn est changé
  9. Alors heu, oui je le suis sans doute emmêlé les pinceaux, Alors... TB_1.txt : -----------\\ ToolBar S&D 1.2.8 XP/Vista Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3 X86-based PC ( Uniprocessor Free : AMD Athlon 64 Processor 3700+ ) BIOS : BIOS Date: 11/20/06 14:56:44 Ver: 08.00.12 USER : user ( Administrator ) BOOT : Normal boot Antivirus : Kaspersky Internet Security 8.0.0.506 (Activated) Firewall : Kaspersky Internet Security 8.0.0.506 (Activated) A:\ (USB) C:\ (Local Disk) - NTFS - Total:232 Go (Free:124 Go) D:\ (CD or DVD) F:\ (CD or DVD) "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 ) Option : [2] ( 08/05/2009|13:40 ) -----------\\ SUPPRESSION Supprime! - C:\Program Files\AskSBar\bar Supprime! - C:\DOCUME~1\user\APPLIC~1\Dealio\kb127 Supprime! - C:\Program Files\Dealio\DealioAU.exe Supprime! - C:\Program Files\Dealio\kb127 Supprime! - C:\Program Files\Dealio\SearchSettingsKit.exe Supprime! - C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Dealio Supprime! - C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml Supprime! - C:\DOCUME~1\user\APPLIC~1\Search Settings\kb127 Supprime! - C:\Program Files\Search Settings\kb127 Supprime! - C:\Program Files\Search Settings\SearchSettings.exe Supprime! - C:\Program Files\Mozilla Firefox\plugins\NPAskSBr.dll Supprime! - C:\DOCUME~1\user\LOCALS~1\Temp\nse17.tmp Supprime! - C:\DOCUME~1\user\LOCALS~1\Temp\nsf2A.tmp Supprime! - C:\DOCUME~1\user\LOCALS~1\Temp\nshB.tmp Supprime! - C:\DOCUME~1\user\LOCALS~1\Temp\nskC.tmp Supprime! - C:\DOCUME~1\user\LOCALS~1\Temp\nsm19.tmp Supprime! - C:\DOCUME~1\user\LOCALS~1\Temp\nso1D.tmp Supprime! - C:\DOCUME~1\user\LOCALS~1\Temp\nss68.tmp Supprime! - C:\Program Files\AskSBar Supprime! - C:\DOCUME~1\user\APPLIC~1\Dealio Supprime! - C:\Program Files\Dealio Supprime! - C:\Program Files\DAEMON Tools Toolbar Supprime! - C:\DOCUME~1\user\APPLIC~1\Search Settings Supprime! - C:\Program Files\Search Settings -----------\\ Recherche de Fichiers / Dossiers ... -----------\\ [..\Internet Explorer\Main] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Local Page"="C:\\WINDOWS\\system32\\blank.htm" "Start Page"="http://worldofwarcraft.judgehype.com/" "Search Page"="http://www.google.com" "Search Bar"="http://www.google.com/ie" "SearchMigratedDefaultURL"="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"'>http://go.microsoft.com/fwlink/?LinkId=54896" "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" "Start Page"="http://www.msn.com/" "Search Bar"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm" --------------------\\ Recherche d'autres infections C:\Program Files\InternetGameBox C:\Program Files\InternetGameBox\InternetGameBox.exe C:\Program Files\InternetGameBox\language C:\Program Files\InternetGameBox\ressources C:\Program Files\InternetGameBox\skins C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\InternetGameBox C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\InternetGameBox\Conditions g‚n‚rales.url C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\InternetGameBox\Confidentialit‚.url C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\InternetGameBox\D‚sinstaller.lnk C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\InternetGameBox\InternetGameBox.lnk C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\InternetGameBox\Website.url C:\WINDOWS\System32\nvs2.inf C:\DOCUME~1\user\LOCALS~1\APPLIC~1\muwog.dat C:\DOCUME~1\user\LOCALS~1\APPLIC~1\muwog.exe C:\DOCUME~1\user\LOCALS~1\APPLIC~1\muwog_nav.dat C:\DOCUME~1\user\LOCALS~1\APPLIC~1\muwog_navps.dat ==> EGDACCESS <== Voilà et ensuite Navilog1... heu oula problème, ca me dit que je dois avoir fait une recherche avec le n°1 ... bon ben je suis bon pour refaire tout Quant a mon adresse msn je m'en occupe de suite.
  10. Voici le résultat que j'ai obtenu pour Navilog1 : Search Navipromo version 3.7.6 commencé le 08/05/2009 à 13:14:34,17 !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!! !!! Postez ce rapport sur le forum pour le faire analyser !!! !!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!! Outil exécuté depuis C:\Program Files\navilog1 Mise à jour le 14.03.2009 à 18h00 par IL-MAFIOSO Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3 X86-based PC ( Uniprocessor Free : AMD Athlon 64 Processor 3700+ ) BIOS : BIOS Date: 11/20/06 14:56:44 Ver: 08.00.12 USER : user ( Administrator ) BOOT : Normal boot Antivirus : Kaspersky Internet Security 8.0.0.506 (Activated) Firewall : Kaspersky Internet Security 8.0.0.506 (Activated) A:\ (USB) C:\ (Local Disk) - NTFS - Total:232 Go (Free:124 Go) D:\ (CD or DVD) F:\ (CD or DVD) Recherche executé en mode normal *** Recherche dossiers dans "C:\WINDOWS" *** *** Recherche dossiers dans "C:\Program Files" *** ...\InternetGameBox trouvé ! *** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" *** ...\InternetGameBox trouvé ! *** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" *** *** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" *** *** Recherche dossiers dans "C:\Documents and Settings\user\applic~1" *** *** Recherche dossiers dans "C:\Documents and Settings\user\locals~1\applic~1" *** *** Recherche dossiers dans "C:\Documents and Settings\user\menudm~1\progra~1" *** *** Recherche avec Catchme-rootkit/stealth malware detector par gmer *** pour + d'infos : http://www.gmer.net *** Recherche avec GenericNaviSearch *** !!! Tous ces résultats peuvent révéler des fichiers légitimes !!! !!! A vérifier impérativement avant toute suppression manuelle !!! * Recherche dans "C:\WINDOWS\system32" * * Recherche dans "C:\Documents and Settings\user\locals~1\applic~1" * *** Recherche fichiers *** C:\WINDOWS\system32\nvs2.inf trouvé ! *** Recherche clés spécifiques dans le Registre *** !! Les clés trouvées ne sont pas forcément infectées !! HKEY_CURRENT_USER\Software\Lanconfig *** Module de Recherche complémentaire *** (Recherche fichiers spécifiques) 1)Recherche nouveaux fichiers Instant Access : 2)Recherche Heuristique : * Dans "C:\WINDOWS\system32" : * Dans "C:\Documents and Settings\user\locals~1\applic~1" : muwog.exe trouvé ! muwog.dat trouvé ! muwog_nav.dat trouvé ! muwog_navps.dat trouvé ! 3)Recherche Certificats : Certificat Egroup trouvé ! Certificat Electronic-Group trouvé ! Certificat Montorgueil absent ! Certificat OOO-Favorit trouvé ! Certificat Sunny-Day-Design-Ltd absent ! 4)Recherche autres dossiers et fichiers connus : *** Analyse terminée le 08/05/2009 à 13:27:36,98 *** Quant au ToolbarSD voici le résultat : -----------\\ ToolBar S&D 1.2.8 XP/Vista Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3 X86-based PC ( Uniprocessor Free : AMD Athlon 64 Processor 3700+ ) BIOS : BIOS Date: 11/20/06 14:56:44 Ver: 08.00.12 USER : user ( Administrator ) BOOT : Normal boot Antivirus : Kaspersky Internet Security 8.0.0.506 (Activated) Firewall : Kaspersky Internet Security 8.0.0.506 (Activated) A:\ (USB) C:\ (Local Disk) - NTFS - Total:232 Go (Free:128 Go) D:\ (CD or DVD) F:\ (CD or DVD) "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 ) Option : [2] ( 08/05/2009|13:52 ) -----------\\ Recherche de Fichiers / Dossiers ... -----------\\ [..\Internet Explorer\Main] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Local Page"="C:\\WINDOWS\\system32\\blank.htm" "Start Page"="http://worldofwarcraft.judgehype.com/" "Search Page"="http://www.google.com" "Search Bar"="http://www.google.com/ie" "SearchMigratedDefaultURL"="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"'>http://go.microsoft.com/fwlink/?LinkId=54896" "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" "Start Page"="http://www.msn.com/" "Search Bar"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm" --------------------\\ Recherche d'autres infections --------------------\\ Cracks & Keygens .. C:\DOCUME~1\user\Local Settings\Temp\Unreal_Tournament_2004_Crack+Keygen_by_Deviance.rar.torrent C:\DOCUME~1\user\Mes documents\Downloads\Unreal_Tournament_2004_Crack+Keygen_by_Deviance.rar 1 - "C:\ToolBar SD\TB_1.txt" - 08/05/2009|13:09 - Option : [1] 1 - "C:\ToolBar SD\TB_1.txt" - 08/05/2009|13:42 - Option : [2] 3 - "C:\ToolBar SD\TB_3.txt" - 08/05/2009|13:53 - Option : [2] -----------\\ Fin du rapport a 13:53:50,23
  11. Bon alors, l'un de mes contact m'a dit avoir recu ce message : mate you wont believe, ever thought you could make money from Google guys? i just made 13$ so far loll in a damn few hours (A) doing searches and filling out forms i love now hehe http://my-google-money.com/ Voici le resultat de la recherche : -----------\\ ToolBar S&D 1.2.8 XP/Vista Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3 X86-based PC ( Uniprocessor Free : AMD Athlon 64 Processor 3700+ ) BIOS : BIOS Date: 11/20/06 14:56:44 Ver: 08.00.12 USER : user ( Administrator ) BOOT : Normal boot Antivirus : Kaspersky Internet Security 8.0.0.506 (Activated) Firewall : Kaspersky Internet Security 8.0.0.506 (Activated) A:\ (USB) C:\ (Local Disk) - NTFS - Total:232 Go (Free:124 Go) D:\ (CD or DVD) F:\ (CD or DVD) "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 ) Option : [1] ( 08/05/2009|13:08 ) -----------\\ Recherche de Fichiers / Dossiers ... C:\Program Files\AskSBar C:\Program Files\AskSBar\bar C:\Program Files\AskSBar\bar\1.bin C:\Program Files\AskSBar\bar\Cache C:\Program Files\AskSBar\bar\History C:\Program Files\AskSBar\bar\Settings C:\Program Files\AskSBar\bar\1.bin\A2FFXTBR.JAR C:\Program Files\AskSBar\bar\1.bin\A2FFXTBR.MANIFEST C:\Program Files\AskSBar\bar\1.bin\A2HIGHIN.EXE C:\Program Files\AskSBar\bar\1.bin\A2NTSTBR.JAR C:\Program Files\AskSBar\bar\1.bin\A2NTSTBR.MANIFEST C:\Program Files\AskSBar\bar\1.bin\A2PLUGIN.DLL C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL C:\Program Files\AskSBar\bar\1.bin\NPASKSBR.DLL C:\Program Files\AskSBar\bar\1.bin\V2RSSMNU.DLL C:\Program Files\AskSBar\bar\Cache\00074D24.bin C:\Program Files\AskSBar\bar\Cache\00074F08.bin C:\Program Files\AskSBar\bar\Cache\00075050.bin C:\Program Files\AskSBar\bar\Cache\00075169.bin C:\Program Files\AskSBar\bar\Cache\00075292.bin C:\Program Files\AskSBar\bar\Cache\000753BB.bin C:\Program Files\AskSBar\bar\Cache\000BC33B C:\Program Files\AskSBar\bar\Cache\files.ini C:\Program Files\AskSBar\bar\History\search2 C:\Program Files\AskSBar\bar\Settings\prevcfg2.htm C:\DOCUME~1\user\APPLIC~1\Dealio C:\DOCUME~1\user\APPLIC~1\Dealio\kb127 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\temp C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\alerts.gif C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\alerts_over.gif C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\alerts_rec.gif C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\chevron-small.gif C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\DealioSearch.html C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\deal_report.jpg C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\ebay_login.jpg C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\err_mainwindow.html C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\err_toolbar.html C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\global_scripts.js C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\highlight-bg.png C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\logo.gif C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\logo_over.gif C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\man_toolbar.css C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\man_toolbar.html C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\man_toolbar.js C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\man_toolbarl.js C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\post-this-deal.gif C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\scripts.js C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\scroller.js C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\search-chevron.gif C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\separator.gif C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\settings.gif C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\settings_over.gif C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\res\yahoo-search.png C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\index.76.35 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.10.76 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.109.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.110.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.12.52 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.13.58 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.130.58 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.135.50 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.153.44 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.155.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.156.49 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.16.60 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.161.52 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.178.66 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.184.55 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.188.52 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.189.45 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.196.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.198.56 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.199.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.200.53 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.201.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.202.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.203.71 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.205.62 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.213.71 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.214.49 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.215.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.216.67 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.217.67 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.218.52 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.219.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.220.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.221.57 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.222.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.223.68 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.226.68 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.227.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.228.62 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.229.76 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.23.63 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.239.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.24.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.240.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.241.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.242.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.243.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.244.63 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.245.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.247.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.248.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.249.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.250.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.251.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.252.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.253.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.254.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.255.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.256.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.257.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.279.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.28.58 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.282.75 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.283.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.284.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.289.67 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.290.62 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.291.61 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.296.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.297.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.304.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.307.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.308.75 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.31.47 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.310.46 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.311.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.315.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.316.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.317.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.318.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.319.49 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.32.48 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.334.44 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.335.60 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.336.44 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.337.44 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.338.75 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.339.47 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.34.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.340.47 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.341.47 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.349.50 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.35.48 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.350.50 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.351.51 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.352.54 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.353.51 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.354.51 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.357.62 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.358.52 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.359.52 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.360.53 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.361.54 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.362.68 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.363.58 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.364.54 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.365.53 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.367.56 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.368.58 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.369.55 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.370.56 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.371.56 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.372.57 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.373.55 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.375.56 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.376.57 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.377.55 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.378.65 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.384.58 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.386.71 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.387.59 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.388.59 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.389.59 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.390.60 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.391.60 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.392.60 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.393.60 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.394.60 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.396.61 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.397.61 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.398.60 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.399.60 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.403.61 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.404.63 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.405.61 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.406.61 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.407.76 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.408.63 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.409.61 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.412.62 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.413.62 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.414.62 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.415.62 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.416.62 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.417.62 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.418.62 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.419.62 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.420.62 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.421.62 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.423.63 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.424.63 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.425.63 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.426.63 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.427.63 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.428.65 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.429.63 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.430.63 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.432.65 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.433.64 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.434.65 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.435.64 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.436.76 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.437.64 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.438.71 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.439.71 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.440.75 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.442.73 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.443.73 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.444.73 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.445.68 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.446.69 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.450.67 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.451.67 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.452.68 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.453.68 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.454.69 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.456.69 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.457.75 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.458.70 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.459.70 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.460.69 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.462.74 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.463.69 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.464.70 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.465.68 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.468.70 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.469.70 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.470.70 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.471.73 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.472.70 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.478.74 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.479.73 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.480.68 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.481.71 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.482.74 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.49.67 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.50.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.500.71 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.501.74 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.502.71 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.51.69 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.52.72 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.520.76 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.521.76 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.522.76 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.53.51 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.531.76 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.532.75 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.534.75 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.54.47 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.55.45 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.56.69 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.57.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.58.47 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.593.76 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.595.76 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.63.57 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.66.47 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.70.75 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\rules\rules.1.71.43 C:\DOCUME~1\user\APPLIC~1\Dealio\kb127\temp\dod_cache.xml C:\Program Files\Dealio C:\Program Files\Dealio\DealioAU.exe C:\Program Files\Dealio\kb127 C:\Program Files\Dealio\SearchSettingsKit.exe C:\Program Files\Dealio\kb127\Dealio Deskbar.exe C:\Program Files\Dealio\kb127\Dealio.dll C:\Program Files\Dealio\kb127\DealioRes409.dll C:\Program Files\Dealio\kb127\res C:\Program Files\Dealio\kb127\resDN C:\Program Files\Dealio\kb127\rules C:\Program Files\Dealio\kb127\temp C:\Program Files\Dealio\kb127\res\alerts.gif C:\Program Files\Dealio\kb127\res\alerts_over.gif C:\Program Files\Dealio\kb127\res\alerts_rec.gif C:\Program Files\Dealio\kb127\res\alerts_rec_over.gif C:\Program Files\Dealio\kb127\res\chevron-small.gif C:\Program Files\Dealio\kb127\res\DealioSearch.html C:\Program Files\Dealio\kb127\res\deals-leftcap.gif C:\Program Files\Dealio\kb127\res\deal_report.jpg C:\Program Files\Dealio\kb127\res\ebay_login.jpg C:\Program Files\Dealio\kb127\res\err_mainwindow.html C:\Program Files\Dealio\kb127\res\err_toolbar.html C:\Program Files\Dealio\kb127\res\global_scripts.js C:\Program Files\Dealio\kb127\res\headerbgthin.jpg C:\Program Files\Dealio\kb127\res\highlight-bg.png C:\Program Files\Dealio\kb127\res\logo.gif C:\Program Files\Dealio\kb127\res\logo_over.gif C:\Program Files\Dealio\kb127\res\man_toolbar.css C:\Program Files\Dealio\kb127\res\man_toolbar.html C:\Program Files\Dealio\kb127\res\man_toolbar.js C:\Program Files\Dealio\kb127\res\man_toolbarl.js C:\Program Files\Dealio\kb127\res\post-this-deal.gif C:\Program Files\Dealio\kb127\res\post-this-deal_over.gif C:\Program Files\Dealio\kb127\res\scripts.js C:\Program Files\Dealio\kb127\res\scroller.js C:\Program Files\Dealio\kb127\res\search-chevron.gif C:\Program Files\Dealio\kb127\res\search-chevron_over.gif C:\Program Files\Dealio\kb127\res\search_bg_blink.gif C:\Program Files\Dealio\kb127\res\separator.gif C:\Program Files\Dealio\kb127\res\settings.gif C:\Program Files\Dealio\kb127\res\settings_over.gif C:\Program Files\Dealio\kb127\res\yahoo-search.png C:\Program Files\Dealio\kb127\resDN\bottom.gif C:\Program Files\Dealio\kb127\resDN\chevron_down.gif C:\Program Files\Dealio\kb127\resDN\chevron_up.gif C:\Program Files\Dealio\kb127\resDN\close.gif C:\Program Files\Dealio\kb127\resDN\deskbar.css C:\Program Files\Dealio\kb127\resDN\deskbar.js C:\Program Files\Dealio\kb127\resDN\dispatch_helper.js C:\Program Files\Dealio\kb127\resDN\ebay_compatible.jpg C:\Program Files\Dealio\kb127\resDN\logo.gif C:\Program Files\Dealio\kb127\resDN\logo_chevron_bkg.gif C:\Program Files\Dealio\kb127\resDN\losing.gif C:\Program Files\Dealio\kb127\resDN\lost.gif C:\Program Files\Dealio\kb127\resDN\man_deskbar.html C:\Program Files\Dealio\kb127\resDN\menu_arrow.gif C:\Program Files\Dealio\kb127\resDN\menu_check.gif C:\Program Files\Dealio\kb127\resDN\no_image.gif C:\Program Files\Dealio\kb127\resDN\prod_img.gif C:\Program Files\Dealio\kb127\resDN\search_chevron.gif C:\Program Files\Dealio\kb127\resDN\spacer.gif C:\Program Files\Dealio\kb127\resDN\textfield_bkg.gif C:\Program Files\Dealio\kb127\resDN\top.gif C:\Program Files\Dealio\kb127\resDN\unknown.gif C:\Program Files\Dealio\kb127\resDN\winning.gif C:\Program Files\Dealio\kb127\resDN\won.gif C:\Program Files\Dealio\kb127\rules\index.76.35 C:\Program Files\Dealio\kb127\rules\rules.1.10.76 C:\Program Files\Dealio\kb127\rules\rules.1.109.43 C:\Program Files\Dealio\kb127\rules\rules.1.110.43 C:\Program Files\Dealio\kb127\rules\rules.1.12.52 C:\Program Files\Dealio\kb127\rules\rules.1.13.58 C:\Program Files\Dealio\kb127\rules\rules.1.130.58 C:\Program Files\Dealio\kb127\rules\rules.1.135.50 C:\Program Files\Dealio\kb127\rules\rules.1.153.44 C:\Program Files\Dealio\kb127\rules\rules.1.155.43 C:\Program Files\Dealio\kb127\rules\rules.1.156.49 C:\Program Files\Dealio\kb127\rules\rules.1.16.60 C:\Program Files\Dealio\kb127\rules\rules.1.161.52 C:\Program Files\Dealio\kb127\rules\rules.1.178.66 C:\Program Files\Dealio\kb127\rules\rules.1.184.55 C:\Program Files\Dealio\kb127\rules\rules.1.188.52 C:\Program Files\Dealio\kb127\rules\rules.1.189.45 C:\Program Files\Dealio\kb127\rules\rules.1.196.43 C:\Program Files\Dealio\kb127\rules\rules.1.198.56 C:\Program Files\Dealio\kb127\rules\rules.1.199.43 C:\Program Files\Dealio\kb127\rules\rules.1.200.53 C:\Program Files\Dealio\kb127\rules\rules.1.201.43 C:\Program Files\Dealio\kb127\rules\rules.1.202.43 C:\Program Files\Dealio\kb127\rules\rules.1.203.71 C:\Program Files\Dealio\kb127\rules\rules.1.205.62 C:\Program Files\Dealio\kb127\rules\rules.1.213.71 C:\Program Files\Dealio\kb127\rules\rules.1.214.49 C:\Program Files\Dealio\kb127\rules\rules.1.215.43 C:\Program Files\Dealio\kb127\rules\rules.1.216.67 C:\Program Files\Dealio\kb127\rules\rules.1.217.67 C:\Program Files\Dealio\kb127\rules\rules.1.218.52 C:\Program Files\Dealio\kb127\rules\rules.1.219.43 C:\Program Files\Dealio\kb127\rules\rules.1.220.43 C:\Program Files\Dealio\kb127\rules\rules.1.221.57 C:\Program Files\Dealio\kb127\rules\rules.1.222.43 C:\Program Files\Dealio\kb127\rules\rules.1.223.68 C:\Program Files\Dealio\kb127\rules\rules.1.226.68 C:\Program Files\Dealio\kb127\rules\rules.1.227.43 C:\Program Files\Dealio\kb127\rules\rules.1.228.62 C:\Program Files\Dealio\kb127\rules\rules.1.229.76 C:\Program Files\Dealio\kb127\rules\rules.1.23.63 C:\Program Files\Dealio\kb127\rules\rules.1.239.43 C:\Program Files\Dealio\kb127\rules\rules.1.24.43 C:\Program Files\Dealio\kb127\rules\rules.1.240.43 C:\Program Files\Dealio\kb127\rules\rules.1.241.43 C:\Program Files\Dealio\kb127\rules\rules.1.242.43 C:\Program Files\Dealio\kb127\rules\rules.1.243.43 C:\Program Files\Dealio\kb127\rules\rules.1.244.63 C:\Program Files\Dealio\kb127\rules\rules.1.245.43 C:\Program Files\Dealio\kb127\rules\rules.1.247.43 C:\Program Files\Dealio\kb127\rules\rules.1.248.43 C:\Program Files\Dealio\kb127\rules\rules.1.249.43 C:\Program Files\Dealio\kb127\rules\rules.1.250.43 C:\Program Files\Dealio\kb127\rules\rules.1.251.43 C:\Program Files\Dealio\kb127\rules\rules.1.252.43 C:\Program Files\Dealio\kb127\rules\rules.1.253.43 C:\Program Files\Dealio\kb127\rules\rules.1.254.43 C:\Program Files\Dealio\kb127\rules\rules.1.255.43 C:\Program Files\Dealio\kb127\rules\rules.1.256.43 C:\Program Files\Dealio\kb127\rules\rules.1.257.43 C:\Program Files\Dealio\kb127\rules\rules.1.279.43 C:\Program Files\Dealio\kb127\rules\rules.1.28.58 C:\Program Files\Dealio\kb127\rules\rules.1.282.75 C:\Program Files\Dealio\kb127\rules\rules.1.283.43 C:\Program Files\Dealio\kb127\rules\rules.1.284.43 C:\Program Files\Dealio\kb127\rules\rules.1.289.67 C:\Program Files\Dealio\kb127\rules\rules.1.290.62 C:\Program Files\Dealio\kb127\rules\rules.1.291.61 C:\Program Files\Dealio\kb127\rules\rules.1.296.43 C:\Program Files\Dealio\kb127\rules\rules.1.297.43 C:\Program Files\Dealio\kb127\rules\rules.1.304.43 C:\Program Files\Dealio\kb127\rules\rules.1.307.43 C:\Program Files\Dealio\kb127\rules\rules.1.308.75 C:\Program Files\Dealio\kb127\rules\rules.1.31.47 C:\Program Files\Dealio\kb127\rules\rules.1.310.46 C:\Program Files\Dealio\kb127\rules\rules.1.311.43 C:\Program Files\Dealio\kb127\rules\rules.1.315.43 C:\Program Files\Dealio\kb127\rules\rules.1.316.43 C:\Program Files\Dealio\kb127\rules\rules.1.317.43 C:\Program Files\Dealio\kb127\rules\rules.1.318.43 C:\Program Files\Dealio\kb127\rules\rules.1.319.49 C:\Program Files\Dealio\kb127\rules\rules.1.32.48 C:\Program Files\Dealio\kb127\rules\rules.1.334.44 C:\Program Files\Dealio\kb127\rules\rules.1.335.60 C:\Program Files\Dealio\kb127\rules\rules.1.336.44 C:\Program Files\Dealio\kb127\rules\rules.1.337.44 C:\Program Files\Dealio\kb127\rules\rules.1.338.75 C:\Program Files\Dealio\kb127\rules\rules.1.339.47 C:\Program Files\Dealio\kb127\rules\rules.1.34.43 C:\Program Files\Dealio\kb127\rules\rules.1.340.47 C:\Program Files\Dealio\kb127\rules\rules.1.341.47 C:\Program Files\Dealio\kb127\rules\rules.1.349.50 C:\Program Files\Dealio\kb127\rules\rules.1.35.48 C:\Program Files\Dealio\kb127\rules\rules.1.350.50 C:\Program Files\Dealio\kb127\rules\rules.1.351.51 C:\Program Files\Dealio\kb127\rules\rules.1.352.54 C:\Program Files\Dealio\kb127\rules\rules.1.353.51 C:\Program Files\Dealio\kb127\rules\rules.1.354.51 C:\Program Files\Dealio\kb127\rules\rules.1.357.62 C:\Program Files\Dealio\kb127\rules\rules.1.358.52 C:\Program Files\Dealio\kb127\rules\rules.1.359.52 C:\Program Files\Dealio\kb127\rules\rules.1.360.53 C:\Program Files\Dealio\kb127\rules\rules.1.361.54 C:\Program Files\Dealio\kb127\rules\rules.1.362.68 C:\Program Files\Dealio\kb127\rules\rules.1.363.58 C:\Program Files\Dealio\kb127\rules\rules.1.364.54 C:\Program Files\Dealio\kb127\rules\rules.1.365.53 C:\Program Files\Dealio\kb127\rules\rules.1.367.56 C:\Program Files\Dealio\kb127\rules\rules.1.368.58 C:\Program Files\Dealio\kb127\rules\rules.1.369.55 C:\Program Files\Dealio\kb127\rules\rules.1.370.56 C:\Program Files\Dealio\kb127\rules\rules.1.371.56 C:\Program Files\Dealio\kb127\rules\rules.1.372.57 C:\Program Files\Dealio\kb127\rules\rules.1.373.55 C:\Program Files\Dealio\kb127\rules\rules.1.375.56 C:\Program Files\Dealio\kb127\rules\rules.1.376.57 C:\Program Files\Dealio\kb127\rules\rules.1.377.55 C:\Program Files\Dealio\kb127\rules\rules.1.378.65 C:\Program Files\Dealio\kb127\rules\rules.1.384.58 C:\Program Files\Dealio\kb127\rules\rules.1.386.71 C:\Program Files\Dealio\kb127\rules\rules.1.387.59 C:\Program Files\Dealio\kb127\rules\rules.1.388.59 C:\Program Files\Dealio\kb127\rules\rules.1.389.59 C:\Program Files\Dealio\kb127\rules\rules.1.390.60 C:\Program Files\Dealio\kb127\rules\rules.1.391.60 C:\Program Files\Dealio\kb127\rules\rules.1.392.60 C:\Program Files\Dealio\kb127\rules\rules.1.393.60 C:\Program Files\Dealio\kb127\rules\rules.1.394.60 C:\Program Files\Dealio\kb127\rules\rules.1.396.61 C:\Program Files\Dealio\kb127\rules\rules.1.397.61 C:\Program Files\Dealio\kb127\rules\rules.1.398.60 C:\Program Files\Dealio\kb127\rules\rules.1.399.60 C:\Program Files\Dealio\kb127\rules\rules.1.403.61 C:\Program Files\Dealio\kb127\rules\rules.1.404.63 C:\Program Files\Dealio\kb127\rules\rules.1.405.61 C:\Program Files\Dealio\kb127\rules\rules.1.406.61 C:\Program Files\Dealio\kb127\rules\rules.1.407.76 C:\Program Files\Dealio\kb127\rules\rules.1.408.63 C:\Program Files\Dealio\kb127\rules\rules.1.409.61 C:\Program Files\Dealio\kb127\rules\rules.1.412.62 C:\Program Files\Dealio\kb127\rules\rules.1.413.62 C:\Program Files\Dealio\kb127\rules\rules.1.414.62 C:\Program Files\Dealio\kb127\rules\rules.1.415.62 C:\Program Files\Dealio\kb127\rules\rules.1.416.62 C:\Program Files\Dealio\kb127\rules\rules.1.417.62 C:\Program Files\Dealio\kb127\rules\rules.1.418.62 C:\Program Files\Dealio\kb127\rules\rules.1.419.62 C:\Program Files\Dealio\kb127\rules\rules.1.420.62 C:\Program Files\Dealio\kb127\rules\rules.1.421.62 C:\Program Files\Dealio\kb127\rules\rules.1.423.63 C:\Program Files\Dealio\kb127\rules\rules.1.424.63 C:\Program Files\Dealio\kb127\rules\rules.1.425.63 C:\Program Files\Dealio\kb127\rules\rules.1.426.63 C:\Program Files\Dealio\kb127\rules\rules.1.427.63 C:\Program Files\Dealio\kb127\rules\rules.1.428.65 C:\Program Files\Dealio\kb127\rules\rules.1.429.63 C:\Program Files\Dealio\kb127\rules\rules.1.430.63 C:\Program Files\Dealio\kb127\rules\rules.1.432.65 C:\Program Files\Dealio\kb127\rules\rules.1.433.64 C:\Program Files\Dealio\kb127\rules\rules.1.434.65 C:\Program Files\Dealio\kb127\rules\rules.1.435.64 C:\Program Files\Dealio\kb127\rules\rules.1.436.76 C:\Program Files\Dealio\kb127\rules\rules.1.437.64 C:\Program Files\Dealio\kb127\rules\rules.1.438.71 C:\Program Files\Dealio\kb127\rules\rules.1.439.71 C:\Program Files\Dealio\kb127\rules\rules.1.440.75 C:\Program Files\Dealio\kb127\rules\rules.1.442.73 C:\Program Files\Dealio\kb127\rules\rules.1.443.73 C:\Program Files\Dealio\kb127\rules\rules.1.444.73 C:\Program Files\Dealio\kb127\rules\rules.1.445.68 C:\Program Files\Dealio\kb127\rules\rules.1.446.69 C:\Program Files\Dealio\kb127\rules\rules.1.450.67 C:\Program Files\Dealio\kb127\rules\rules.1.451.67 C:\Program Files\Dealio\kb127\rules\rules.1.452.68 C:\Program Files\Dealio\kb127\rules\rules.1.453.68 C:\Program Files\Dealio\kb127\rules\rules.1.454.69 C:\Program Files\Dealio\kb127\rules\rules.1.456.69 C:\Program Files\Dealio\kb127\rules\rules.1.457.75 C:\Program Files\Dealio\kb127\rules\rules.1.458.70 C:\Program Files\Dealio\kb127\rules\rules.1.459.70 C:\Program Files\Dealio\kb127\rules\rules.1.460.69 C:\Program Files\Dealio\kb127\rules\rules.1.462.74 C:\Program Files\Dealio\kb127\rules\rules.1.463.69 C:\Program Files\Dealio\kb127\rules\rules.1.464.70 C:\Program Files\Dealio\kb127\rules\rules.1.465.68 C:\Program Files\Dealio\kb127\rules\rules.1.468.70 C:\Program Files\Dealio\kb127\rules\rules.1.469.70 C:\Program Files\Dealio\kb127\rules\rules.1.470.70 C:\Program Files\Dealio\kb127\rules\rules.1.471.73 C:\Program Files\Dealio\kb127\rules\rules.1.472.70 C:\Program Files\Dealio\kb127\rules\rules.1.478.74 C:\Program Files\Dealio\kb127\rules\rules.1.479.73 C:\Program Files\Dealio\kb127\rules\rules.1.480.68 C:\Program Files\Dealio\kb127\rules\rules.1.481.71 C:\Program Files\Dealio\kb127\rules\rules.1.482.74 C:\Program Files\Dealio\kb127\rules\rules.1.49.67 C:\Program Files\Dealio\kb127\rules\rules.1.50.43 C:\Program Files\Dealio\kb127\rules\rules.1.500.71 C:\Program Files\Dealio\kb127\rules\rules.1.501.74 C:\Program Files\Dealio\kb127\rules\rules.1.502.71 C:\Program Files\Dealio\kb127\rules\rules.1.51.69 C:\Program Files\Dealio\kb127\rules\rules.1.52.72 C:\Program Files\Dealio\kb127\rules\rules.1.520.76 C:\Program Files\Dealio\kb127\rules\rules.1.521.76 C:\Program Files\Dealio\kb127\rules\rules.1.522.76 C:\Program Files\Dealio\kb127\rules\rules.1.53.51 C:\Program Files\Dealio\kb127\rules\rules.1.531.76 C:\Program Files\Dealio\kb127\rules\rules.1.532.75 C:\Program Files\Dealio\kb127\rules\rules.1.534.75 C:\Program Files\Dealio\kb127\rules\rules.1.54.47 C:\Program Files\Dealio\kb127\rules\rules.1.55.45 C:\Program Files\Dealio\kb127\rules\rules.1.56.69 C:\Program Files\Dealio\kb127\rules\rules.1.57.43 C:\Program Files\Dealio\kb127\rules\rules.1.58.47 C:\Program Files\Dealio\kb127\rules\rules.1.593.76 C:\Program Files\Dealio\kb127\rules\rules.1.595.76 C:\Program Files\Dealio\kb127\rules\rules.1.63.57 C:\Program Files\Dealio\kb127\rules\rules.1.66.47 C:\Program Files\Dealio\kb127\rules\rules.1.70.75 C:\Program Files\Dealio\kb127\rules\rules.1.71.43 C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Dealio C:\Program Files\DAEMON Tools Toolbar C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml C:\DOCUME~1\user\APPLIC~1\Search Settings C:\DOCUME~1\user\APPLIC~1\Search Settings\kb127 C:\DOCUME~1\user\APPLIC~1\Search Settings\kb127\res C:\DOCUME~1\user\APPLIC~1\Search Settings\kb127\temp C:\Program Files\Search Settings C:\Program Files\Search Settings\kb127 C:\Program Files\Search Settings\SearchSettings.exe C:\Program Files\Search Settings\kb127\res C:\Program Files\Search Settings\kb127\SearchSettings.dll C:\Program Files\Search Settings\kb127\SearchSettingsRes409.dll C:\Program Files\Search Settings\kb127\temp C:\Program Files\Mozilla Firefox\plugins\NPAskSBr.dll C:\DOCUME~1\user\LOCALS~1\Temp\nse17.tmp C:\DOCUME~1\user\LOCALS~1\Temp\nsf2A.tmp C:\DOCUME~1\user\LOCALS~1\Temp\nshB.tmp C:\DOCUME~1\user\LOCALS~1\Temp\nskC.tmp C:\DOCUME~1\user\LOCALS~1\Temp\nsm19.tmp C:\DOCUME~1\user\LOCALS~1\Temp\nso1D.tmp C:\DOCUME~1\user\LOCALS~1\Temp\nss68.tmp -----------\\ [..\Internet Explorer\Main] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Local Page"="C:\\WINDOWS\\system32\\blank.htm" "Start Page"="http://worldofwarcraft.judgehype.com/" "Search Page"="http://www.google.com" "Search Bar"="http://www.google.com/ie" "SearchMigratedDefaultURL"="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"'>http://go.microsoft.com/fwlink/?LinkId=54896" "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" "Start Page"="http://lo.st" "Search Bar"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm" --------------------\\ Recherche d'autres infections C:\Program Files\InternetGameBox C:\Program Files\InternetGameBox\InternetGameBox.exe C:\Program Files\InternetGameBox\language C:\Program Files\InternetGameBox\ressources C:\Program Files\InternetGameBox\skins C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\InternetGameBox C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\InternetGameBox\Conditions g‚n‚rales.url C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\InternetGameBox\Confidentialit‚.url C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\InternetGameBox\D‚sinstaller.lnk C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\InternetGameBox\InternetGameBox.lnk C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\InternetGameBox\Website.url C:\WINDOWS\System32\nvs2.inf C:\DOCUME~1\user\LOCALS~1\APPLIC~1\muwog.dat C:\DOCUME~1\user\LOCALS~1\APPLIC~1\muwog.exe C:\DOCUME~1\user\LOCALS~1\APPLIC~1\muwog_nav.dat C:\DOCUME~1\user\LOCALS~1\APPLIC~1\muwog_navps.dat ==> EGDACCESS <== --------------------\\ Cracks & Keygens .. C:\DOCUME~1\user\Local Settings\Temp\Unreal_Tournament_2004_Crack+Keygen_by_Deviance.rar.torrent C:\DOCUME~1\user\Mes documents\Downloads\Unreal_Tournament_2004_Crack+Keygen_by_Deviance.rar 1 - "C:\ToolBar SD\TB_1.txt" - 08/05/2009|13:09 - Option : [1] -----------\\ Fin du rapport a 13:09:58,04 Et maintenant le résultat de Navilog1 : Search Navipromo version 3.7.6 commencé le 08/05/2009 à 13:14:34,17 !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!! !!! Postez ce rapport sur le forum pour le faire analyser !!! !!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!! Outil exécuté depuis C:\Program Files\navilog1 Mise à jour le 14.03.2009 à 18h00 par IL-MAFIOSO Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3 X86-based PC ( Uniprocessor Free : AMD Athlon 64 Processor 3700+ ) BIOS : BIOS Date: 11/20/06 14:56:44 Ver: 08.00.12 USER : user ( Administrator ) BOOT : Normal boot Antivirus : Kaspersky Internet Security 8.0.0.506 (Activated) Firewall : Kaspersky Internet Security 8.0.0.506 (Activated) A:\ (USB) C:\ (Local Disk) - NTFS - Total:232 Go (Free:124 Go) D:\ (CD or DVD) F:\ (CD or DVD) Recherche executé en mode normal *** Recherche dossiers dans "C:\WINDOWS" *** *** Recherche dossiers dans "C:\Program Files" *** ...\InternetGameBox trouvé ! *** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" *** ...\InternetGameBox trouvé ! *** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" *** *** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" *** *** Recherche dossiers dans "C:\Documents and Settings\user\applic~1" *** *** Recherche dossiers dans "C:\Documents and Settings\user\locals~1\applic~1" *** *** Recherche dossiers dans "C:\Documents and Settings\user\menudm~1\progra~1" *** *** Recherche avec Catchme-rootkit/stealth malware detector par gmer *** pour + d'infos : http://www.gmer.net *** Recherche avec GenericNaviSearch *** !!! Tous ces résultats peuvent révéler des fichiers légitimes !!! !!! A vérifier impérativement avant toute suppression manuelle !!! * Recherche dans "C:\WINDOWS\system32" * * Recherche dans "C:\Documents and Settings\user\locals~1\applic~1" * *** Recherche fichiers *** C:\WINDOWS\system32\nvs2.inf trouvé ! *** Recherche clés spécifiques dans le Registre *** !! Les clés trouvées ne sont pas forcément infectées !! HKEY_CURRENT_USER\Software\Lanconfig *** Module de Recherche complémentaire *** (Recherche fichiers spécifiques) 1)Recherche nouveaux fichiers Instant Access : 2)Recherche Heuristique : * Dans "C:\WINDOWS\system32" : * Dans "C:\Documents and Settings\user\locals~1\applic~1" : muwog.exe trouvé ! muwog.dat trouvé ! muwog_nav.dat trouvé ! muwog_navps.dat trouvé ! 3)Recherche Certificats : Certificat Egroup trouvé ! Certificat Electronic-Group trouvé ! Certificat Montorgueil absent ! Certificat OOO-Favorit trouvé ! Certificat Sunny-Day-Design-Ltd absent ! 4)Recherche autres dossiers et fichiers connus : *** Analyse terminée le 08/05/2009 à 13:27:36,98 ***
  12. Merci pour ta réponse. J'ai téléchargé RSIT ainsi que HiIjackThis. J'ai donc fait ce que tu m'as dis de faire et voilà, Le contenu du Log : Logfile of random's system information tool 1.06 (written by random/random) Run by user at 2009-05-08 12:52:45 Microsoft Windows XP Édition familiale Service Pack 3 System drive C: has 127 GB (53%) free of 238 GB Total RAM: 1023 MB (46% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:53:08, on 08/05/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16827) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe C:\Program Files\QuickTime\qttask.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\DNA\btdna.exe C:\Program Files\Curse\CurseClient.exe C:\Program Files\Fichiers communs\InterVideo\RegMgr\iviRegMgr.exe C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\user\Bureau\RSIT.exe C:\Program Files\trend micro\user.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://worldofwarcraft.judgehype.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://lo.st R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll R3 - URLSearchHook: Eazel-FR Toolbar - {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - C:\Program Files\Eazel-FR\tbEaz1.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing) O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb127\Dealio.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Eazel-FR Toolbar - {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - C:\Program Files\Eazel-FR\tbEaz1.dll O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll O2 - BHO: Ask Toolbar BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL O3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb127\Dealio.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Eazel-FR Toolbar - {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - C:\Program Files\Eazel-FR\tbEaz1.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [iSUSPM] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe" -scheduler O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [bitTorrent DNA] "C:\Program Files\DNA\btdna.exe" O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKCU\..\Run: [CurseClient] C:\Program Files\Curse\CurseClient.exe -silent O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\user\Application Data\Dealio\kb127\res\DealioSearch.html O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1201290111875 O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - http://fichiers.touslesdrivers.com/fichier...on_2_0_4_12.cab O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://sdlc-esd.sun.com/ESD42/JSCDL/jre/6u...ows-i586-jc.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwa...ash/swflash.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Fichiers communs\InterVideo\RegMgr\iviRegMgr.exe O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- End of file - 10749 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\AppleSoftwareUpdate.job C:\WINDOWS\tasks\Norton Security Scan.job C:\WINDOWS\tasks\Wow Cartographe.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}] Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2008-11-07 1088296] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}] IEVkbdBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll [2008-11-11 62728] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}] EoBho Class - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6A87B991-A31F-4130-AE72-6D0C294BF082}] DealioBHO Class - C:\Program Files\Dealio\kb127\Dealio.dll [2008-05-26 3170144] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}] Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2009-01-14 92504] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] SSVHelper Class - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll [2008-03-25 509328] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a8f9752d-e2b8-4e7a-86b5-499f4330e2fe}] Eazel-FR Toolbar - C:\Program Files\Eazel-FR\tbEaz1.dll [2009-04-01 1883672] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CC59E0F9-7E43-44FA-9FAA-8377850BF205}] FDMIECookiesBHO Class - C:\Program Files\Free Download Manager\iefdm2.dll [2008-11-12 94208] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}] Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}] SearchSettings Class - C:\Program Files\Search Settings\kb127\SearchSettings.dll [2008-06-12 1111904] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA}] Ask Toolbar BHO - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL [2008-09-17 262144] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - Ask Toolbar - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL [2008-09-17 262144] {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - Dealio - C:\Program Files\Dealio\kb127\Dealio.dll [2008-05-26 3170144] {21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904] {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - Eazel-FR Toolbar - C:\Program Files\Eazel-FR\tbEaz1.dll [2009-04-01 1883672] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2008-10-07 13574144] "AVP"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe [2009-02-10 206088] "KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k [] "ISUSPM"=C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe [2006-03-20 213936] "QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2006-09-01 282624] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360] "msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408] "BitTorrent DNA"=C:\Program Files\DNA\btdna.exe [2009-03-25 321344] "DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-12-29 687560] "CurseClient"=C:\Program Files\Curse\CurseClient.exe [2009-04-24 1836032] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr] C:\WINDOWS\ALCMTR.EXE [2005-05-02 69632] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount] C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe [2008-11-23 203720] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\au] C:\Program Files\Dealio\DealioAU.exe [2008-05-26 595296] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVP] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EoEngine] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Free Download Manager] C:\Program Files\Free Download Manager\fdm.exe [2008-11-12 2474031] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ItsTV] C:\Program Files\ItsLabel\ItsTV.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck] C:\WINDOWS\system32\dumprep 0 -k [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechCommunicationsManager] C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe [2007-10-25 563984] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechQuickCamRibbon] C:\Program Files\Logitech\QuickCam\Quickcam.exe [2007-10-25 2178832] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LVCOMSX] C:\Program Files\Fichiers communs\LogiShrd\LComMgr\LVComSX.exe [2007-02-06 252704] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr] C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\muwog] c:\documents and settings\user\local settings\application data\muwog.exe [2009-01-11 216064] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon] C:\WINDOWS\system32\NvCpl.dll [2008-10-07 13574144] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter] C:\WINDOWS\system32\NvMcTray.dll [2008-10-07 86016] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] nwiz.exe /install [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RGSC] C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL] C:\WINDOWS\RTHDCPL.EXE [2006-09-11 16264192] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe [2008-06-12 991584] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] C:\Program Files\Skype\Phone\Skype.exe [2008-11-07 21633320] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel] C:\WINDOWS\SkyTel.EXE [2006-05-15 2879488] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spyware-Secure] C:\Program Files\Spyware-Secure\Spyware-Secure_trial.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe [2008-03-25 144784] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancer l'utilitaire d'enregistrement.lnk] C:\PROGRA~1\WIFICO~1\NINTEN~1.EXE [2006-11-16 1073152] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "WMPNetworkSvc"=3 "WLSetupSvc"=3 "gusvc"=3 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLS"="C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon] C:\WINDOWS\system32\klogon.dll [2008-11-11 218376] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=FF000000 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "HonorAutoRunSetting"= [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger" "C:\Program Files\World of Warcraft\WoW-1.12.0-frFR-downloader.exe"="C:\Program Files\World of Warcraft\WoW-1.12.0-frFR-downloader.exe:*:Enabled:Blizzard Downloader" "C:\Program Files\World of Warcraft\WoW-2.3.0-frFR-downloader.exe"="C:\Program Files\World of Warcraft\WoW-2.3.0-frFR-downloader.exe:*:Enabled:Blizzard Downloader" "C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test" "C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Exécuter une DLL en tant qu'application" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\Warcraft III\Warcraft III.exe"="C:\Program Files\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III" "C:\Program Files\Team17\Worms 2\Frontend.exe"="C:\Program Files\Team17\Worms 2\Frontend.exe:*:Enabled:Worms 2 Frontend" "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"="C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe:*:Enabled:Kaspersky Anti-Virus" "C:\Program Files\WiFiConnector\NintendoWFCReg.exe"="C:\Program Files\WiFiConnector\NintendoWFCReg.exe:*:Enabled:Connecteur Wi-Fi USB Nintendo" "C:\Program Files\World of Warcraft\BackgroundDownloader.exe"="C:\Program Files\World of Warcraft\BackgroundDownloader.exe:*:Enabled:Blizzard Downloader" "C:\Program Files\Azureus\Azureus.exe"="C:\Program Files\Azureus\Azureus.exe:*:Enabled:Azureus" "C:\Documents and Settings\user\Bureau\WoW-2.4.3.8568-to-3.0.2.8916-frFR-downloader.exe"="C:\Documents and Settings\user\Bureau\WoW-2.4.3.8568-to-3.0.2.8916-frFR-downloader.exe:*:Enabled:Blizzard Downloader" "C:\Program Files\World of Warcraft Public Test\WoW-3.0.2.8916-to-0.0.2.8962-frFR-downloader.exe"="C:\Program Files\World of Warcraft Public Test\WoW-3.0.2.8916-to-0.0.2.8962-frFR-downloader.exe:*:Enabled:Blizzard Downloader" "C:\Program Files\World of Warcraft Public Test\WoW-0.0.2.8970-to-0.0.2.8982-frFR-downloader.exe"="C:\Program Files\World of Warcraft Public Test\WoW-0.0.2.8970-to-0.0.2.8982-frFR-downloader.exe:*:Enabled:Blizzard Downloader" "C:\Program Files\Microsoft Games\Age of Empires II Trial\EMPIRES2.EXE"="C:\Program Files\Microsoft Games\Age of Empires II Trial\EMPIRES2.EXE:*:Enabled:Age of Empires II" "C:\Program Files\World of Warcraft\WoW-2.4.3-to-3.0.2-frFR-Win-Final-downloader.exe"="C:\Program Files\World of Warcraft\WoW-2.4.3-to-3.0.2-frFR-Win-Final-downloader.exe:*:Enabled:Blizzard Downloader" "C:\Program Files\World of Warcraft Public Test\WoW-0.0.8-frFR-downloader.exe"="C:\Program Files\World of Warcraft Public Test\WoW-0.0.8-frFR-downloader.exe:*:Enabled:Blizzard Downloader" "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call" "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:Enabled:DNA" "C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent" "C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype. Take a deep breath " "C:\Program Files\Curse\CurseClient.exe"="C:\Program Files\Curse\CurseClient.exe:*:Enabled:Curse Client" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call" "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a587062a-2e47-11dd-99fc-001a920f05ea}] shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480 ======List of files/folders created in the last 1 months====== 2009-05-08 12:52:45 ----D---- C:\rsit 2009-05-08 12:52:45 ----D---- C:\Program Files\trend micro 2009-04-29 22:11:56 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$ 2009-04-29 18:16:08 ----D---- C:\Program Files\CamStudio 2009-04-28 22:11:07 ----D---- C:\Program Files\Curse 2009-04-25 22:42:10 ----D---- C:\Documents and Settings\user\Application Data\dvdcss 2009-04-25 22:41:35 ----D---- C:\Documents and Settings\user\Application Data\vlc 2009-04-25 22:38:19 ----D---- C:\Program Files\VideoLAN 2009-04-24 22:31:23 ----D---- C:\Program Files\Frets on Fire 2009-04-24 21:05:34 ----D---- C:\Documents and Settings\user\Application Data\fretsonfire 2009-04-24 15:22:57 ----D---- C:\Program Files\Teamspeak2_RC2(2) 2009-04-23 02:15:44 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$ 2009-04-23 02:15:39 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$ 2009-04-23 02:13:21 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$ 2009-04-23 02:12:57 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$ 2009-04-23 02:12:50 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$ 2009-04-23 02:12:38 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$ ======List of files/folders modified in the last 1 months====== 2009-05-08 12:52:47 ----D---- C:\WINDOWS\Prefetch 2009-05-08 12:52:45 ----RD---- C:\Program Files 2009-05-08 12:52:45 ----D---- C:\WINDOWS\Temp 2009-05-08 12:52:23 ----D---- C:\Documents and Settings\user\Application Data\DNA 2009-05-08 12:16:28 ----D---- C:\Program Files\Mozilla Firefox 2009-05-08 04:19:43 ----D---- C:\Program Files\Circle Developement 2009-05-08 01:14:54 ----D---- C:\Program Files\QuickTime 2009-05-07 22:10:48 ----D---- C:\Program Files\Warcraft III 2009-05-07 19:22:44 ----D---- C:\WINDOWS\system32\drivers 2009-05-07 17:05:44 ----D---- C:\WINDOWS\system32\CatRoot2 2009-05-07 16:10:33 ----D---- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab 2009-05-07 16:10:19 ----D---- C:\Program Files\DNA 2009-05-06 22:26:17 ----A---- C:\WINDOWS\SchedLgU.Txt 2009-05-05 20:15:55 ----D---- C:\Program Files\World of Warcraft 2009-05-03 01:36:18 ----D---- C:\WINDOWS\security 2009-05-03 01:23:58 ----HD---- C:\WINDOWS\inf 2009-05-02 12:15:26 ----D---- C:\WINDOWS 2009-04-30 16:08:36 ----D---- C:\WINDOWS\system32 2009-04-29 22:11:58 ----RSHDC---- C:\WINDOWS\system32\dllcache 2009-04-29 18:39:55 ----D---- C:\Program Files\HyCam2 2009-04-29 18:12:58 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP 2009-04-29 18:12:32 ----D---- C:\Fraps 2009-04-29 13:37:04 ----D---- C:\WINDOWS\system32\CatRoot 2009-04-29 13:35:07 ----HD---- C:\WINDOWS\$hf_mig$ 2009-04-27 17:49:44 ----SHD---- C:\WINDOWS\Installer 2009-04-27 17:49:43 ----D---- C:\Program Files\Google 2009-04-27 17:49:43 ----D---- C:\Documents and Settings\All Users\Application Data\Google 2009-04-27 17:47:23 ----D---- C:\Program Files\DAEMON Tools Toolbar 2009-04-27 17:46:49 ----D---- C:\Program Files\BitTorrent 2009-04-24 15:57:15 ----A---- C:\WINDOWS\system32\java.exe 2009-04-23 11:35:13 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2009-04-23 11:30:09 ----D---- C:\WINDOWS\system32\wbem 2009-04-23 11:30:09 ----D---- C:\WINDOWS\AppPatch 2009-04-23 02:15:46 ----A---- C:\WINDOWS\imsins.BAK 2009-04-23 02:15:30 ----D---- C:\WINDOWS\system32\fr-fr 2009-04-23 02:15:30 ----D---- C:\Program Files\Internet Explorer 2009-04-22 23:04:58 ----D---- C:\Program Files\Messenger Plus! Live ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14720] R1 KLIF;Kaspersky Lab Driver; C:\WINDOWS\system32\DRIVERS\klif.sys [2009-02-12 226832] R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2009-02-06 55152] R3 FETNDIS;Pilote NT de carte VIA PCI 10/100Mo Fast Ethernet; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165] R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384] R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-09-11 4381184] R3 KLFLTDEV;Kaspersky Lab KLFltDev; C:\WINDOWS\system32\DRIVERS\klfltdev.sys [2008-03-13 26640] R3 klim5;Kaspersky Anti-Virus NDIS Filter; C:\WINDOWS\system32\DRIVERS\klim5.sys [2008-04-30 24592] R3 LVcKap;Logitech AEC Driver; C:\WINDOWS\system32\DRIVERS\LVcKap.sys [2007-10-19 2109976] R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys [2007-10-11 25624] R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\LVUSBSta.sys [2007-02-03 41504] R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288] R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2006-09-29 5810] R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-10-07 6133856] R3 pepifilter;Volume Adapter; C:\WINDOWS\system32\DRIVERS\lv302af.sys [2007-02-03 14240] R3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\WINDOWS\system32\DRIVERS\LV302V32.SYS [2007-02-03 938272] R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032] R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128] R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208] R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520] R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608] S3 a4l1xncx;a4l1xncx; C:\WINDOWS\system32\drivers\a4l1xncx.sys [] S3 ae782vuw;ae782vuw; C:\WINDOWS\system32\drivers\ae782vuw.sys [] S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024] S3 EagleNT;EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys [] S3 LVMVDrv;Logitech Machine Vision Engine Loader; C:\WINDOWS\system32\DRIVERS\LVMVDrv.sys [2007-10-11 2142488] S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504] S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248] S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880] S3 RT25USBAP;Nintendo Wi-Fi USB Connector Service; C:\WINDOWS\system32\DRIVERS\rt25usbap.sys [2006-04-10 162816] S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136] S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232] S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104] S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200] S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568] S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944] S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AVP;Kaspersky Internet Security; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe [2009-02-10 206088] R2 IviRegMgr;IviRegMgr; C:\Program Files\Fichiers communs\InterVideo\RegMgr\iviRegMgr.exe [2007-01-04 112152] R2 LVCOMSer;LVCOMSer; C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe [2007-10-19 186904] R2 LVPrcSrv;Process Monitor; C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe [2007-10-19 141848] R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2008-10-07 163908] R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656] R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968] S2 LVSrvLauncher;LVSrvLauncher; C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe [2007-10-19 141848] S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144] S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2007-10-09 36864] S3 fsssvc;Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360] S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728] S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2007-10-11 864256] S3 usprserv;User Privilege Service; C:\WINDOWS\System32\svchost.exe [2008-04-13 14336] S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336] S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2007-10-11 122880] S4 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016] -----------------EOF----------------- Le contenu du Info : info.txt logfile of random's system information tool 1.06 2009-05-08 12:53:12 ======Uninstall list====== -->"C:\Program Files\InstallShield Installation Information\{F37167DD-4436-4641-90B6-329D60632DDA}\Setup.exe" REMOVEALL --u:{F37167DD-4436-4641-90B6-329D60632DDA} -->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER -->MsiExec /X{A7E07C2B-2220-4415-87E3-784D5814BC93} -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe Adobe Shockwave Player-->C:\WINDOWS\system32\Adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log Apple Software Update-->MsiExec.exe /I{55FA89BD-21D3-42F7-9249-C94C0094A83C} Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe Ask Toolbar-->rundll32 C:\PROGRA~1\AskSBar\bar\1.bin\AskSBar.dll,O Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7} Call of Duty Game of the Year Edition-->C:\PROGRA~1\CALLOF~1\Uninstall\Unwise.exe /u C:\PROGRA~1\CALLOF~1\Uninstall\Install.log CamStudio 2.0 Fr-->"C:\Program Files\CamStudio\unins000.exe" Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E} Code::Blocks-->"C:\Program Files\CodeBlocks\unins000.exe" Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe" Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe" Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe" Curse Client-->C:\Program Files\Curse\uninstall.exe Dark Messiah -->C:\Program Files\InstallShield Installation Information\{A8E2EF8F-73EF-4DD8-BB38-31FCCAF50103}\setup.exe -runfromtemp -l0x040c -removeonly Dealio Toolbar 3.4-->MsiExec.exe /X{6105648C-0C3C-481D-8C11-1F4952D6FB53} DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN Dofus 1.26.0-->C:\Program Files\Dofus\uninstall.exe Eazel-FR Toolbar-->C:\PROGRA~1\Eazel-FR\UNWISE.EXE /U C:\PROGRA~1\Eazel-FR\INSTALL.LOG Fable - The Lost Chapters-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{C3C9EB3D-24FA-4462-B784-0EC6AAFCD2DD} FINAL FANTASY XI-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{45105F2B-0294-4354-A92A-5D1F575E24A5} Fraps-->"C:\Fraps\uninstall.exe" Free Mp3 Wma Converter V 1.8.0-->"C:\Program Files\Free Audio Pack\unins000.exe" Frets On Fire-->"C:\Program Files\Frets on Fire\Uninstall.exe" Galerie de photos Windows Live-->MsiExec.exe /X{44E54A81-9D91-4AA1-9417-80AFF134F5FF} GIMP 2.4.6-->"C:\Program Files\GIMP-2.0\setup\unins000.exe" GTA2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2987EE84-C4EE-4FF5-8160-32DE00D6ABC6}\Setup.exe" -l0x9 GUILD WARS-->"C:\Program Files\GUILD WARS\Gw.exe" -uninstall High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe" HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe" HyperCam 2-->"C:\Program Files\HyCam2\UnHyCam2.exe" Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D} InterVideo WinDVD 8-->C:\Program Files\InstallShield Installation Information\{20471B27-D702-4FE8-8DEC-0702CC8C0A85}\setup.exe -runfromtemp -l0x040c Java 6 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160060} Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3} Kaspersky Internet Security 2009-->MsiExec.exe /I{8CB14A64-CEF4-4C8F-B1C8-1C3B8752CB55} Kaspersky Internet Security 2009-->MsiExec.exe /I{8CB14A64-CEF4-4C8F-B1C8-1C3B8752CB55} Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall Les Sims 2-->C:\Program Files\EA GAMES\Les Sims 2\EAUninstall.exe Logitech Audio Echo Cancellation Component-->MsiExec.exe /X{BEF726DD-4037-4214-8C6A-E625C02D2870} Logitech QuickCam-->MsiExec.exe /X{945AC98B-3DC8-45BE-BAE0-22CEEE37A103} Logitech Video Enumerator-->MsiExec.exe /X{EA516024-D84D-41F1-814F-83175A6188F2} Messenger Plus! Live & Sponsor (CiD)-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe" Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{3F7924B9-D148-3141-87B1-68F36043A940} Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28} Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{511DF669-2930-30C0-8EB6-552887E29EC8} Microsoft .NET Framework 3.0 Service Pack 1-->MsiExec.exe /I{2BA00471-0328-3743-93BD-FA813353A783} Microsoft .NET Framework 3.5 Language Pack - fra-->MsiExec.exe /I{5B76AEA2-D4E5-3B55-B965-ACC36AE0EAFC} Microsoft .NET Framework 3.5-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setup.exe Microsoft .NET Framework 3.5-->MsiExec.exe /I{2FC099BD-AC9B-33EB-809C-D332E1B27C40} Microsoft Age of Empires II Trial Version-->"C:\Program Files\Microsoft Games\Age of Empires II Trial\UNINSTAL.EXE" /runtemp /uninstall Microsoft Age of Empires II : The Conquerors Expansion-->"C:\Program Files\Microsoft Games\Age of Empires II\UNINSTALX.EXE" /runtemp /addremove Microsoft Age of Empires II-->"C:\Program Files\Microsoft Games\Age of Empires II\UNINSTAL.EXE" /runtemp /uninstall Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe" Microsoft Games for Windows - LIVE -->MsiExec.exe /X{4AA3D64E-9EC3-4B0F-AB91-5885AC55641F} Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{FD052FB9-FE90-4438-B355-15EDC89D8FB1} Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe" Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe" Microsoft Search Enhancement Pack-->MsiExec.exe /I{9C9CEB9D-53FD-49A7-85D2-FE674F72F24E} Microsoft Silverlight-->MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8} Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5} Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB} Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe" Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7} Microsoft Visual C++ 2008 Express Edition - FRA-->MsiExec.exe /X{15473D70-D791-3B5E-B174-2FD19EC0D017} Microsoft Visual C++ 2008 Express - Français-->C:\Program Files\Microsoft Visual Studio 9.0\Microsoft Visual C++ 2008 Express Edition - FRA\setup.exe Microsoft Windows SDK for Visual Studio 2008 Express Tools for .NET Framework-->MsiExec.exe /X{AB47EEE8-507B-331F-AA28-B7C7257F014C} Microsoft Windows SDK for Visual Studio 2008 Express Tools for Win32-->MsiExec.exe /X{07FCBED5-94C3-4F94-B9D3-360FA27C7B06} Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries-->MsiExec.exe /X{842FAF7C-50EF-4463-9B8F-6222E1384D7D} Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe" Module linguistique Microsoft .NET Framework 3.5 - fra-->c:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack - fra\setup.exe Mozilla Firefox (3.0.10)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94} MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF} MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} MSXML 6.0 Parser (KB925673)-->MsiExec.exe /I{FE9126DB-5F84-495A-BB46-3C724F1C2D08} MSXML4 Parser-->MsiExec.exe /I{01501EBA-EC35-4F9F-8889-3BE346E5DA13} MVision-->MsiExec.exe /I{35725FBC-A136-4A46-9F29-091759D9BB93} NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI NVIDIA PhysX v8.09.04-->MsiExec.exe /X{A7E07C2B-2220-4415-87E3-784D5814BC93} OpenOffice.org Installer 1.0-->MsiExec.exe /X{3A2AF807-9F9F-43C9-A24A-17B617238B74} Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238} PhotoFiltre-->"C:\Program Files\PhotoFiltre\Uninst.exe" PlayOnline Viewer and Tetra Master-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{A82B049B-14E7-4E0E-946D-024AC4050EF8} Programme de gestion Camera de Logitech®-->"C:\Program Files\Fichiers communs\LogiShrd\QCDRV\BIN\SETUP.EXE" UNINSTALL REMOVEPROMPT QuickTime 3.0-->C:\WINDOWS\uninst.exe -f"C:\Program Files\QuickTime\DeIsL1.isu" -c"C:\WINDOWS\system32\QTUninst.dll QuickTime-->MsiExec.exe /I{F07B861C-72B9-40A4-8B1A-AAED4C06A7E8} Rappelz-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{01A8838A-9469-425F-A5FB-FC14D4CF93B9}\setup.exe" -l0x40c -removeonly Realtek High Definition Audio Driver-->RtlUpd.exe -r -m RomStation-->C:\Program Files\RomStation\Uninstal.exe Search Settings 1.2-->MsiExec.exe /X{D0C73318-7B4A-4D16-A0C4-3B83F075EA88} Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7} SimCity™ Sociétés-->MsiExec.exe /X{0B5154C0-8F00-4616-B0AB-6240AE80D9CE} Skype™ 3.8-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82} SpeechRedist-->MsiExec.exe /X{8795CBED-55E2-4693-9F14-84EC446935BE} TeamSpeak 2 RC2-->"C:\Program Files\Teamspeak2_RC2(2)\unins000.exe" Unreal Tournament 2004-->C:\UT2004\System\Setup.exe uninstall "UT2004" Utilitaire d'enregistrement du connecteur Wi-Fi USB Nintendo-->C:\Program Files\WiFiConnector\SoftAPUninst.exe UxTheme Multipatcher Fr-->C:\Program Files\UxTheme Multipatcher Fr\uninstall.exe VIA Gestionnaire de périphériques de plate-forme-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{20D4A895-748C-4D88-871C-FDB1695B0169} VLC media player 0.9.9-->C:\Program Files\VideoLAN\VLC\uninstall.exe Wakfu-->C:\Program Files\Wakfu\uninstall.exe Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe" Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41} Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52} Windows Live Contrôle parental-->MsiExec.exe /X{D6A2DDE3-9D7C-412C-932A-756580D29919} Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657} Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C} Windows Live OneCare safety scanner-->RunDll32.exe "C:\Program Files\Windows Live Safety Center\wlscCore.dll",UninstallFunction WLSC_SCANNER_PRODUCT Windows Live Sync-->MsiExec.exe /X{9C5EB781-0D37-44B8-9A58-77B3E4BF5F5E} Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353} Windows Live Writer-->MsiExec.exe /X{2231CE39-B963-4B9D-823A-F412ECA637B1} Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe" Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe" Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840} Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe" WinFast® Display Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F69FD33C-8815-46BF-9134-A643DE68F3C0}\setup.exe" -l0x40c -removeonly World of Warcraft Public Test-->C:\Program Files\Fichiers communs\Blizzard Entertainment\Burning Crusade-PTR\Uninstall.exe World of Warcraft-->C:\Program Files\Fichiers communs\Blizzard Entertainment\World of Warcraft Public Test-PTR\Uninstall.exe Wow Cartographe 1.09-->C:\Program Files\WowCartographe\uninst.exe XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe" ======Security center information====== AV: Kaspersky Internet Security FW: Kaspersky Internet Security ======System event log====== Computer Name: USER-04C9A49C5F Event Code: 7035 Message: Un contrôle Démarrer a correctement été envoyé au service Service COM de gravage de CD IMAPI. Record Number: 18374 Source Name: Service Control Manager Time Written: 20090308122937.000000+060 Event Type: Informations User: AUTORITE NT\SYSTEM Computer Name: USER-04C9A49C5F Event Code: 7036 Message: Le service Compatibilité avec le Changement rapide d'utilisateur est entré dans l'état : en cours d'exécution. Record Number: 18373 Source Name: Service Control Manager Time Written: 20090308122928.000000+060 Event Type: Informations User: Computer Name: USER-04C9A49C5F Event Code: 7035 Message: Un contrôle Démarrer a correctement été envoyé au service Logitech LVPr2Mon Driver. Record Number: 18372 Source Name: Service Control Manager Time Written: 20090308122928.000000+060 Event Type: Informations User: AUTORITE NT\SYSTEM Computer Name: USER-04C9A49C5F Event Code: 7035 Message: Un contrôle Démarrer a correctement été envoyé au service Compatibilité avec le Changement rapide d'utilisateur. Record Number: 18371 Source Name: Service Control Manager Time Written: 20090308122928.000000+060 Event Type: Informations User: AUTORITE NT\SYSTEM Computer Name: USER-04C9A49C5F Event Code: 7036 Message: Le service Services Terminal Server est entré dans l'état : en cours d'exécution. Record Number: 18370 Source Name: Service Control Manager Time Written: 20090308122928.000000+060 Event Type: Informations User: =====Application event log===== Computer Name: USER-04C9A49C5F Event Code: 0 Message: Record Number: 11180 Source Name: LVCOMSer Time Written: 20081220120021.000000+060 Event Type: Informations User: Computer Name: USER-04C9A49C5F Event Code: 1001 Message: Échec de détection du produit '{945AC98B-3DC8-45BE-BAE0-22CEEE37A103}', fonctionnalité 'QuickCam' lors de la demande du composant '{62BA7C13-20BB-41F7-A6A4-482632CE53D4}' Record Number: 11179 Source Name: MsiInstaller Time Written: 20081220120018.000000+060 Event Type: Avertissement User: AUTORITE NT\SERVICE RÉSEAU Computer Name: USER-04C9A49C5F Event Code: 1004 Message: Échec de détection du produit '{945AC98B-3DC8-45BE-BAE0-22CEEE37A103}', fonctionnalité 'QuickCam', composant '{B52C7B4D-F46F-438C-ADF2-05A138C57757}. La ressource 'HKEY_CURRENT_USER\Software\Logitech\InstallerKeys\QCDesktopShortcutKey' n'existe pas Record Number: 11178 Source Name: MsiInstaller Time Written: 20081220120018.000000+060 Event Type: Avertissement User: AUTORITE NT\SERVICE RÉSEAU Computer Name: USER-04C9A49C5F Event Code: 1 Message: Mise à jour automatique du certificat racine tierce partie réussie : Objet : <CN=Entrust.net Certification Authority (2048), OU=© 1999 Entrust.net Limited, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), O=Entrust.net> Empreinte digitale Sha1 : <801D62D07B449D5C5C035C98EA61FA443C2A58FE> Record Number: 11177 Source Name: crypt32 Time Written: 20081219170451.000000+060 Event Type: Informations User: Computer Name: USER-04C9A49C5F Event Code: 2 Message: Récupération de la mise à jour automatique du fichier CAB de la liste racine tierce partie réussie à partir de : <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> Record Number: 11176 Source Name: crypt32 Time Written: 20081219170451.000000+060 Event Type: Informations User: ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\QuickTime\QTSystem\ "windir"=%SystemRoot% "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "PROCESSOR_ARCHITECTURE"=x86 "PROCESSOR_LEVEL"=15 "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 39 Stepping 1, AuthenticAMD "PROCESSOR_REVISION"=2701 "NUMBER_OF_PROCESSORS"=1 "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "VS90COMNTOOLS"=C:\Program Files\Microsoft Visual Studio 9.0\Common7\Tools\ "CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_06\lib\ext\QTJava.zip "QTJAVA"=C:\Program Files\Java\jre1.6.0_06\lib\ext\QTJava.zip -----------------EOF----------------- (Désolé si cela est un peu long et si ce n'était pas tout a fait ce que tu attendais.)
  13. Bonjour, le problème que j'ai est que malgré la présence de Kaspersky antivirus sur mon ordinateur, j'ai été infecté par plein de petits logiciels. Et par exemple en étant hors ligne sur MSN, j'envoie des liens a tous mes contacts, ceci est plutôt dérangeant et je souhaiterais me débarrasser de cette infection. Pourriez-vous m'aider s'il vous plaît? Je remercie d'avance ceux qui m'aideront.
×
×
  • Créer...